$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: U8qCHnMGDO5VXGWyxL9v1Tc6nNFoObfbxddaB7ENFfY= Subject key identifier: 71:21:A6:B8:09:81:2F:8A:D2:05:58:97:8F:A0:A5:5E:81:D9:36:3A Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0AB5 Signing time: Sat 26 Sep 2026 19:33:42 +0000 Manifest this update: Sat 26 Sep 2026 19:33:41 +0000 Manifest next update: Sat 03 Oct 2026 19:33:41 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: sd+90gzSj+9LYxT5OaAKtd0bbShMIouL1E7ImDvdy8E=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Sep 26 19:33:41 2026 GMT Not After : Oct 3 19:33:41 2026 GMT Subject: CN=6ab81e16-6518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:1d:4c:b8:31:9f:17:91:92:2d:f5:ab:fc: 41:b5:e7:3c:2f:8d:31:60:32:ad:12:85:a0:f2:e4: c3:39:91:0f:2b:1c:76:09:bf:ca:99:a8:81:33:c1: 02:6c:4b:b6:78:a8:95:81:ba:d7:0f:ed:9a:ec:6b: 24:2a:35:9f:5f:49:bd:26:77:0d:cc:72:5b:14:91: d7:b4:8b:57:24:0c:d3:b5:bb:ef:bd:c3:88:84:0b: 40:4d:ff:61:e0:a0:8c:71:d0:1e:e2:46:88:5c:b6: e1:da:01:4e:9e:ee:b2:7d:94:fb:91:eb:85:93:3f: 31:2c:5a:35:cf:fd:73:ae:02:91:73:56:90:b0:37: 57:5c:c6:82:f5:64:41:7d:03:c5:f1:61:0c:b3:a4: 2b:e7:9d:e1:1b:04:5e:f5:8a:f3:31:69:a8:6a:b0: 9d:62:9a:30:55:9c:14:3a:ea:d4:d2:e2:86:84:03: 93:71:cd:2e:9d:61:97:24:71:b6:a5:00:4a:2a:91: f2:87:39:c8:0c:9d:60:a1:39:16:7e:9e:96:8f:32: 50:d4:16:f6:cc:1e:42:2b:5e:77:8c:01:78:50:4e: 73:e6:95:b0:99:98:fc:2a:16:4c:64:99:99:7b:4f: e5:58:31:93:47:37:00:df:06:26:07:c6:9d:5d:8e: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:21:A6:B8:09:81:2F:8A:D2:05:58:97:8F:A0:A5:5E:81:D9:36:3A X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5d:c7:3a:a5:49:7b:04:a9:dd:0a:3b:d7:1e:21:6e:d7:c3: 89:e5:0c:6f:d7:1d:57:8a:73:84:04:2a:15:a2:4b:e7:45:88: 17:98:c2:c9:80:d7:32:70:7b:b2:b8:1d:70:e1:6b:dd:75:22: c7:c2:19:22:be:57:02:aa:77:6a:3a:9c:47:cc:2d:2a:1d:45: ac:2d:d9:e4:f0:8c:44:8b:34:9b:c9:45:3c:42:5c:1b:ba:c0: e0:56:e6:ea:89:0a:04:a3:b6:31:40:d0:2a:0a:35:e9:24:ea: 0a:ed:ae:fc:28:26:16:6a:80:45:9f:b7:c3:61:d5:42:9c:2e: 53:0a:bb:08:b0:13:98:73:e6:dd:8b:e1:e8:b7:5e:30:ae:d9: 13:89:56:a9:e2:c2:bc:5d:2c:d9:a8:3c:b7:2a:3b:ed:e2:a3: ed:7b:1c:54:44:41:58:3e:c2:bf:a4:3f:47:13:a5:d7:da:93: 50:89:96:35:0e:34:a6:d6:0b:3d:35:6c:cf:86:30:62:e0:9c: df:66:3d:c1:1f:13:5c:bc:df:0a:97:ef:41:81:21:21:66:db: 55:3e:89:5c:e6:fc:31:30:11:b2:4e:8f:97:8e:ff:a4:1a:d6: 64:82:16:80:43:95:6e:82:f3:31:22:56:10:a7:23:10:42:53: 78:89:a8:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjYwOTI2MTkzMzQxWhcNMjYxMDAzMTkzMzQxWjAYMRYwFAYD VQQDEw02YWI4MWUxNi02NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1EdTLgxnxeRki31q/xBtec8L40xYDKtEoWg8uTDOZEPKxx2Cb/KmaiBM8EC bEu2eKiVgbrXD+2a7GskKjWfX0m9JncNzHJbFJHXtItXJAzTtbvvvcOIhAtATf9h 4KCMcdAe4kaIXLbh2gFOnu6yfZT7keuFkz8xLFo1z/1zrgKRc1aQsDdXXMaC9WRB fQPF8WEMs6Qr553hGwRe9YrzMWmoarCdYpowVZwUOurU0uKGhAOTcc0unWGXJHG2 pQBKKpHyhznIDJ1goTkWfp6WjzJQ1Bb2zB5CK153jAF4UE5z5pWwmZj8KhZMZJmZ e0/lWDGTRzcA3wYmB8adXY7HAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEhprgJ gS+K0gVYl4+gpV6B2TY6MB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZV3HOqVJewSp3Qo71x4hbtfDieUMb9cdV4pzhAQqFaJL50WIF5jCyYDXMnB7 srgdcOFr3XUix8IZIr5XAqp3ajqcR8wtKh1FrC3Z5PCMRIs0m8lFPEJcG7rA4Fbm 6okKBKO2MUDQKgo16STqCu2u/CgmFmqARZ+3w2HVQpwuUwq7CLATmHPm3Yvh6Lde MK7ZE4lWqeLCvF0s2ag8tyo77eKj7XscVERBWD7Cv6Q/RxOl19qTUImWNQ40ptYL PTVsz4YwYuCc32Y9wR8TXLzfCpfvQYEhIWbbVT6JXOb8MTARsk6Pl47/pBrWZIIW gEOVboLzMSJWEKcjEEJTeImoOg== -----END CERTIFICATE-----Generated at Mon Sep 28 18:42:41 2026 by rpki-client