$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: zXlb/OItVetAVcpqizeETSaYzQsgItRM8r1/XgVNroM= Subject key identifier: D8:F7:AF:03:47:8B:F2:67:D0:CD:0E:02:DA:54:95:F7:92:0E:21:EF Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1BB3 Signing time: Mon 28 Sep 2026 16:17:44 +0000 Manifest this update: Mon 28 Sep 2026 16:17:43 +0000 Manifest next update: Mon 05 Oct 2026 16:17:43 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: 9gUvgwxuFx3ZStQ0E8uVZhlv4+o38mO1/9GD5XBOx8Y=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PINyvml/lmMP9n4bWW3ReQfqdMUKwVbzw95W7AWHcZQ=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7148 (0x1bec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Sep 28 16:17:43 2026 GMT Not After : Oct 5 16:17:43 2026 GMT Subject: CN=6aba9327-0a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:8d:38:2e:09:67:71:f2:89:26:24:64:1a: 94:aa:50:62:6f:c6:bd:d5:69:9a:9b:cd:df:bd:48: d7:a1:9d:fe:55:7a:67:56:7c:81:5c:f3:a5:0a:3f: d5:71:cd:15:6b:dc:13:d5:a9:46:a9:27:93:4a:0d: ce:c0:94:22:1c:4b:13:1b:e5:54:75:aa:78:92:d6: 34:26:70:bc:b7:ef:38:e6:3a:32:99:ff:6e:90:fd: a7:71:4d:3c:6a:f9:7d:23:3f:bb:fc:d3:42:0b:f1: cc:dd:1a:c2:de:1e:b2:ea:c5:c2:97:82:6a:94:cc: 18:1f:7e:07:a7:a0:cb:e5:50:1e:09:4b:34:41:96: d0:b8:73:30:27:19:84:60:8d:82:a7:8d:6d:3a:87: e5:bc:0c:b6:0a:f1:2e:2f:fa:6a:a2:ec:8f:d5:31: 2c:ef:bb:77:5b:0c:c1:4e:8f:32:d2:61:72:ce:08: f0:a4:44:a7:bb:11:07:ec:63:39:34:f7:d7:71:84: 0a:76:aa:03:63:1b:6f:7f:01:db:ca:10:bf:c9:a4: f7:92:16:28:62:77:1b:f9:65:f3:03:a9:6f:b1:3f: a2:79:84:88:93:54:00:2b:0e:a2:22:cd:9f:7a:9e: 7e:1c:7a:3b:44:68:c9:32:d4:c2:4f:77:00:5a:69: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F7:AF:03:47:8B:F2:67:D0:CD:0E:02:DA:54:95:F7:92:0E:21:EF X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:53:a0:e2:13:41:2f:88:0f:00:7c:1e:e6:76:6a:f2:c6:da: 5c:fa:9e:7c:68:9e:34:c4:86:c6:7c:57:4f:67:51:37:07:d4: 0a:96:4d:18:2d:1f:c4:08:04:3a:30:fc:ed:70:9d:ad:75:98: 69:8b:f7:39:8c:b9:94:50:71:08:c7:6a:f5:e2:57:bb:3b:80: b5:4a:17:99:15:51:54:63:ce:33:03:54:54:eb:01:65:8e:7d: 48:d1:3c:26:1b:e1:0b:30:37:a7:94:2e:fa:7f:99:84:0a:cd: 73:cb:8b:73:e7:7c:36:24:62:13:ba:9b:c8:12:0a:48:58:ab: ae:90:bf:f6:f0:3a:fb:d3:8b:60:5c:fd:60:e9:11:c4:69:2c: 75:08:09:ab:4e:1f:c7:35:fc:28:8a:70:56:ae:99:b9:2d:48: 76:10:aa:8d:24:5d:07:01:d0:5c:a8:77:61:0f:96:42:af:bd: 6c:e4:ee:04:16:c5:7d:24:b0:33:29:13:b6:9d:42:e4:db:da: 87:a9:01:bf:2a:c8:4d:66:98:20:f8:52:33:12:cb:28:11:8d: 83:70:d3:2c:af:0e:6b:40:f6:6d:d0:2d:3b:8e:b1:d8:6a:0a: 67:b9:7c:9e:49:bf:22:67:68:d6:85:32:a6:c8:2b:93:cb:7e: e4:3c:75:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjYwOTI4MTYxNzQzWhcNMjYxMDA1MTYxNzQzWjAYMRYwFAYD VQQDEw02YWJhOTMyNy0wYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs46NOC4JZ3HyiSYkZBqUqlBib8a91Wmam83fvUjXoZ3+VXpnVnyBXPOlCj/V cc0Va9wT1alGqSeTSg3OwJQiHEsTG+VUdap4ktY0JnC8t+845joymf9ukP2ncU08 avl9Iz+7/NNCC/HM3RrC3h6y6sXCl4JqlMwYH34Hp6DL5VAeCUs0QZbQuHMwJxmE YI2Cp41tOoflvAy2CvEuL/pqouyP1TEs77t3WwzBTo8y0mFyzgjwpESnuxEH7GM5 NPfXcYQKdqoDYxtvfwHbyhC/yaT3khYoYncb+WXzA6lvsT+ieYSIk1QAKw6iIs2f ep5+HHo7RGjJMtTCT3cAWmmGmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNj3rwNH i/Jn0M0OAtpUlfeSDiHvMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr1Og4hNBL4gPAHwe5nZq8sbaXPqefGieNMSGxnxXT2dRNwfUCpZNGC0fxAgE OjD87XCdrXWYaYv3OYy5lFBxCMdq9eJXuzuAtUoXmRVRVGPOMwNUVOsBZY59SNE8 JhvhCzA3p5Qu+n+ZhArNc8uLc+d8NiRiE7qbyBIKSFirrpC/9vA6+9OLYFz9YOkR xGksdQgJq04fxzX8KIpwVq6ZuS1IdhCqjSRdBwHQXKh3YQ+WQq+9bOTuBBbFfSSw MykTtp1C5Nvah6kBvyrITWaYIPhSMxLLKBGNg3DTLK8Oa0D2bdAtO46x2GoKZ7l8 nkm/Imdo1oUypsgrk8t+5Dx1BQ== -----END CERTIFICATE-----Generated at Mon Sep 28 23:25:20 2026 by rpki-client