$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: CGyVv9QjpuXWvJig8QkTJ/ql+bjGqCzWfifcVna2UlM= Subject key identifier: F1:AC:F5:3D:E2:2E:89:85:B4:6B:F3:A3:68:D4:F4:87:6A:29:23:F4 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E76 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0DCB Signing time: Tue 22 Sep 2026 16:43:27 +0000 Manifest this update: Tue 22 Sep 2026 16:43:27 +0000 Manifest next update: Tue 29 Sep 2026 16:43:27 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: U26bcY1CezrkzI8B/nzUC0iYRE2bEeOVtTruH5jZmyM=) 2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: t8LYkfUz7zztTyEeLhGNHxti7o0f+rU03cgjhjpa5h0=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 1z0DBiQnEIz3Dx2+68qVMHYw2A5RwkYWaUuHFrVt564=) 4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 09VvW3k0eoInlQS+H6ZHr0QcmrKaADNzaQ8RUnamjko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3702 (0xe76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Sep 22 16:43:27 2026 GMT Not After : Sep 29 16:43:27 2026 GMT Subject: CN=6ab2b02f-e89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:30:7e:50:2e:5b:1f:4f:45:7c:48:f6:53: 0a:ed:eb:5f:29:c3:87:17:f4:e6:87:ff:32:86:23: 5f:d5:74:98:33:4d:47:8a:92:2b:44:a1:4b:d6:c8: ff:43:8f:ec:81:d7:f9:e7:d8:c9:a4:3a:92:5d:f5: 15:44:b8:ac:49:a6:32:f5:bc:6b:0c:fe:38:e7:08: 8d:95:02:56:80:81:17:71:3d:a4:05:07:6d:3e:dc: 80:5e:8a:cb:98:90:aa:88:03:b4:8f:d4:65:88:79: 99:f3:37:8c:74:f9:9a:10:4b:89:fe:00:5e:1d:d0: 63:36:1c:63:ac:62:c7:c9:00:d1:21:cf:2f:a0:43: 67:f7:dc:9a:c1:12:f9:03:f1:1a:d8:5b:b6:6c:60: 4d:ab:f1:6c:7b:d6:32:40:e1:45:6b:fb:bc:dd:ad: 91:9b:d2:7b:7e:7f:b1:7f:b5:d9:69:4d:00:60:fb: fc:ac:3b:00:31:16:e1:04:26:6e:d8:6c:12:ac:66: ce:34:b1:c4:d0:09:86:aa:6e:a6:37:e5:08:0c:f6: 76:66:b3:52:87:2b:de:06:22:b7:33:f1:92:f0:eb: ea:7d:37:db:67:4e:68:e6:3c:77:66:b8:0d:13:d1: 6a:6c:3e:cd:c1:c1:16:f1:64:44:3f:e0:f5:6b:17: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AC:F5:3D:E2:2E:89:85:B4:6B:F3:A3:68:D4:F4:87:6A:29:23:F4 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:ee:c2:5c:1a:15:32:b4:a1:f1:49:f9:ed:08:1f:f8:63:b8: 33:47:51:e5:2d:f1:9f:ef:95:51:d0:aa:e6:91:a2:a6:f7:30: cd:35:93:36:7b:72:57:a5:7a:fb:8d:f4:82:18:59:7c:f5:2c: b2:97:42:d7:31:85:08:ab:04:75:5d:28:8a:31:9d:39:ac:0b: b9:1b:c7:4f:4b:24:07:e8:bc:e5:7b:fe:6e:28:5b:1e:fd:42: 6f:2c:c1:3d:86:73:2c:75:fd:7a:c3:1e:a5:e5:d1:ed:89:82: ef:ad:01:43:41:e0:49:cb:0a:3c:65:22:27:ef:30:5f:c6:c7: 67:a1:f1:fc:af:ee:dc:fb:0a:5a:6f:e8:c0:03:b5:1a:36:31: f5:f1:64:96:fd:5f:3d:1a:f1:ce:38:54:0d:83:45:9c:52:bb: f4:b9:d7:cd:10:9a:7f:60:cf:59:85:87:0e:2d:0b:77:54:af: 54:a3:48:76:da:3c:de:83:79:a2:cf:7c:6b:55:55:f0:25:ae: 4c:36:43:a0:2f:3b:d4:21:ea:13:89:21:14:cf:ff:e4:2a:be: 2f:a0:62:ac:37:8f:6b:fa:3a:eb:a1:ba:01:92:36:08:dd:20: 7a:0f:f1:7b:6d:68:15:a6:4d:0e:23:39:23:b0:37:6e:07:de: 65:04:ab:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwOTIyMTY0MzI3WhcNMjYwOTI5MTY0MzI3WjAYMRYwFAYD VQQDEw02YWIyYjAyZi1lODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5swflAuWx9PRXxI9lMK7etfKcOHF/Tmh/8yhiNf1XSYM01HipIrRKFL1sj/ Q4/sgdf559jJpDqSXfUVRLisSaYy9bxrDP445wiNlQJWgIEXcT2kBQdtPtyAXorL mJCqiAO0j9RliHmZ8zeMdPmaEEuJ/gBeHdBjNhxjrGLHyQDRIc8voENn99yawRL5 A/Ea2Fu2bGBNq/Fse9YyQOFFa/u83a2Rm9J7fn+xf7XZaU0AYPv8rDsAMRbhBCZu 2GwSrGbONLHE0AmGqm6mN+UIDPZ2ZrNShyveBiK3M/GS8OvqfTfbZ05o5jx3ZrgN E9FqbD7NwcEW8WREP+D1axcFYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGs9T3i LomFtGvzo2jU9IdqKSP0MB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy+7CXBoVMrSh8Un57Qgf+GO4M0dR5S3xn++VUdCq5pGipvcwzTWTNntyV6V6 +430ghhZfPUsspdC1zGFCKsEdV0oijGdOawLuRvHT0skB+i85Xv+bihbHv1CbyzB PYZzLHX9esMepeXR7YmC760BQ0HgScsKPGUiJ+8wX8bHZ6Hx/K/u3PsKWm/owAO1 GjYx9fFklv1fPRrxzjhUDYNFnFK79LnXzRCaf2DPWYWHDi0Ld1SvVKNIdto83oN5 os98a1VV8CWuTDZDoC871CHqE4khFM//5Cq+L6BirDePa/o666G6AZI2CN0geg/x e21oFaZNDiM5I7A3bgfeZQSrlQ== -----END CERTIFICATE-----Generated at Wed Sep 23 10:20:27 2026 by rpki-client