$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: wmwQ2jB/I3EkSbrb0xBaD1Ehs5zR/E+U7DKOTCI9bCc= Subject key identifier: 11:EC:1F:CB:B8:53:B4:5F:9B:3B:02:52:BF:0B:12:00:DF:C0:BC:4E Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 0129 Signing time: Thu 05 Nov 2026 06:37:00 +0000 Manifest this update: Thu 05 Nov 2026 06:37:00 +0000 Manifest next update: Thu 12 Nov 2026 06:37:00 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: p+aAa9h/LkHEbDRQ656ptEaN4272w+94KUKmIlx1By0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 06:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Nov 5 06:37:00 2026 GMT Not After : Nov 12 06:37:00 2026 GMT Subject: CN=6aec240c-0f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:4e:22:81:3c:1e:5a:00:01:7e:8d:14:73: ef:a9:46:46:90:cb:8b:0f:92:99:e6:1d:06:4a:54: 62:7a:72:da:38:37:ff:53:ca:d8:70:c1:0d:b0:0d: 6b:79:a4:ac:31:85:ef:f0:f0:f8:b7:bd:14:7c:71: 86:54:97:f2:f3:78:8e:27:b8:68:d6:d5:f3:4f:4d: 16:2d:67:6d:65:a5:51:af:e1:73:96:08:8b:3b:10: 86:f5:41:71:1f:a3:63:18:98:67:54:27:1f:1a:e7: 66:52:64:ce:51:8e:01:87:6b:ee:da:08:5a:84:ad: 44:b4:f3:16:62:94:61:e9:60:9e:c5:94:cc:8c:30: 02:4d:c5:90:dc:d0:e5:fa:c8:1f:09:56:da:b1:a1: be:bb:7c:4e:db:21:c1:23:c7:af:87:34:54:d5:b2: 80:0f:a0:56:08:14:1d:c1:ab:43:81:be:10:21:e1: e6:dc:7e:63:9d:1e:72:aa:4a:57:5e:e7:53:e6:e8: e6:b7:31:61:bb:8d:13:c0:bc:22:2f:41:33:ca:c6: 84:2c:1c:5a:3c:9f:ed:61:a3:fe:6b:ac:45:2c:fd: 8c:fc:29:d4:70:5d:b8:eb:e7:a2:85:e3:30:f7:3c: 83:7e:8f:82:5d:b0:51:bd:38:13:33:81:c4:06:5c: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EC:1F:CB:B8:53:B4:5F:9B:3B:02:52:BF:0B:12:00:DF:C0:BC:4E X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:00:a0:7d:97:8d:41:81:5e:a2:ad:78:a4:66:07:4a:39:4a: 28:1f:ea:a9:fd:6c:fb:bb:33:d7:27:ea:69:42:10:0c:16:f0: 86:ba:e1:d7:e3:35:16:73:41:2b:85:49:86:17:f0:47:1d:c4: 0e:a0:d9:0e:29:88:a9:3f:5d:40:36:e6:b1:43:20:b3:93:7e: df:e2:ce:dd:f0:5f:41:43:2f:e9:49:be:41:84:8d:20:9e:2d: fb:89:89:9a:54:6b:57:a7:e1:b0:20:00:b1:53:61:09:00:26: 95:7d:01:af:bd:94:05:bd:98:6d:fb:36:09:e2:d7:93:25:d9: 2b:d4:95:64:82:4a:e3:ee:27:9a:f5:a5:60:05:66:b3:e8:59: 77:41:c8:be:91:af:72:62:90:09:5b:c5:e0:82:22:c4:c8:b9: de:f0:d4:52:42:07:08:f7:f4:ef:e6:9d:c3:e3:8a:54:ab:be: 52:7c:e1:e1:bd:36:d2:09:e1:56:59:d5:65:27:f4:14:d6:84: e3:32:f9:c1:75:a4:30:84:dd:f3:d4:75:62:42:37:14:c1:c5: b1:36:b8:7f:53:ba:6f:b2:b6:e1:aa:c1:49:4d:da:b6:bb:95: f7:97:47:46:fe:20:2b:b8:df:7c:70:d0:9c:45:d4:8b:a5:71: 30:c5:28:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCQ0MxMTAvBgNVBAUTKENFNkU5MkZDQTAwMTdGNzVBNjJERjkyODVFOEQ3QzIx MEI3QUJDMDIwHhcNMjYxMTA1MDYzNzAwWhcNMjYxMTEyMDYzNzAwWjAYMRYwFAYD VQQDEw02YWVjMjQwYy0wZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmROIoE8HloAAX6NFHPvqUZGkMuLD5KZ5h0GSlRienLaODf/U8rYcMENsA1r eaSsMYXv8PD4t70UfHGGVJfy83iOJ7ho1tXzT00WLWdtZaVRr+FzlgiLOxCG9UFx H6NjGJhnVCcfGudmUmTOUY4Bh2vu2ghahK1EtPMWYpRh6WCexZTMjDACTcWQ3NDl +sgfCVbasaG+u3xO2yHBI8evhzRU1bKAD6BWCBQdwatDgb4QIeHm3H5jnR5yqkpX XudT5ujmtzFhu40TwLwiL0EzysaELBxaPJ/tYaP+a6xFLP2M/CnUcF246+eiheMw 9zyDfo+CXbBRvTgTM4HEBlwJ7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHsH8u4 U7RfmzsCUr8LEgDfwLxOMB8GA1UdIwQYMBaAFM5ukvygAX91pi35KF6NfCELerwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJDQy9EOEJFOTJEQzE0 MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYzV21MZmtvWG8xOElRdDZ2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJDQy9EOEJFOTJEQzE0MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYz V21MZmtvWG8xOElRdDZ2QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXQCgfZeNQYFeoq14pGYHSjlKKB/qqf1s+7sz1yfqaUIQDBbwhrrh1+M1FnNB K4VJhhfwRx3EDqDZDimIqT9dQDbmsUMgs5N+3+LO3fBfQUMv6Um+QYSNIJ4t+4mJ mlRrV6fhsCAAsVNhCQAmlX0Br72UBb2Ybfs2CeLXkyXZK9SVZIJK4+4nmvWlYAVm s+hZd0HIvpGvcmKQCVvF4IIixMi53vDUUkIHCPf07+adw+OKVKu+Unzh4b020gnh VlnVZSf0FNaE4zL5wXWkMITd89R1YkI3FMHFsTa4f1O6b7K24arBSU3atruV95dH Rv4gK7jffHDQnEXUi6VxMMUoYw== -----END CERTIFICATE-----Generated at Thu Nov 5 18:55:21 2026 by rpki-client