$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: EJmnrpuvHAW/3jR7u/uj0KPxSwxAniwtIX/6KxfO2mA= Subject key identifier: 84:E5:AF:D6:70:F6:07:53:85:E5:F5:99:2B:9B:7C:20:C5:25:8A:B9 Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 02F1 Signing time: Thu 05 Nov 2026 01:33:58 +0000 Manifest this update: Thu 05 Nov 2026 01:33:57 +0000 Manifest next update: Thu 12 Nov 2026 01:33:57 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: w99BPdYrgwYmlGF9EM/R9hw8nqWet/zc3FdKrRH+LKM=) 2: cFoKUf-OO1L3vErxalG36BKQ_yk.asa (hash: 2RnFp4E1jY7peJxVlhY6oTzUK8l34sdFomXOSS5auc0=) 3: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: 3aiLyzUUZX+G9arlbKmPRJwslFy0TWYcLe4pJnBYkCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 01:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Nov 5 01:33:57 2026 GMT Not After : Nov 12 01:33:57 2026 GMT Subject: CN=6aebdd06-f19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:df:68:f5:2a:4a:ad:d9:fe:b5:59:59:61: 08:ac:31:c5:26:fc:80:a2:b8:0f:67:2f:bb:fa:c2: fc:ba:27:7e:f7:0e:94:d1:a2:ad:66:a8:44:a1:a8: 9c:25:ca:7b:ea:92:cc:20:fb:4f:9f:9b:a0:71:62: 8e:72:d5:ca:a4:b7:23:9e:c1:bb:09:9c:61:cf:55: e2:8b:be:73:53:83:b1:eb:d8:6d:52:65:88:c4:21: 3f:b7:5c:69:08:89:4f:a4:c5:a5:bd:8e:19:52:d6: 1c:81:89:23:27:f9:10:5f:2b:03:ba:5d:3f:8c:e9: 81:33:59:53:86:61:8c:67:f0:cb:d3:4b:51:45:39: cc:44:be:29:7d:c8:34:d6:b3:2c:d2:c8:54:90:26: d1:47:97:dd:c9:4c:b3:03:3b:29:52:5c:c7:ec:af: 94:7c:24:00:5d:e4:7d:5e:f7:f1:fa:89:ac:71:a2: 34:55:66:01:7f:a6:17:00:ee:e9:39:52:71:7d:b6: 9b:cb:18:25:22:61:82:db:63:b0:e6:c6:c1:ea:c6: f6:9e:7f:40:e7:88:f6:9d:24:36:4f:3b:23:a7:0c: a7:2b:52:2e:d6:6c:32:4e:54:04:58:13:6f:9f:8f: 44:0c:6f:8d:e0:35:1b:1f:5f:90:5c:8a:29:9e:94: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:AF:D6:70:F6:07:53:85:E5:F5:99:2B:9B:7C:20:C5:25:8A:B9 X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f0:3f:f1:6a:55:e0:d7:2e:fa:d6:f7:8b:21:be:f3:82:58: c2:6d:63:bb:15:4e:09:5d:e8:c8:f0:db:07:91:b5:f8:ca:92: 37:78:e5:50:d2:07:4c:20:3a:42:97:c5:5f:6e:36:57:01:d2: 39:c0:f9:af:2c:f1:f6:a7:30:84:50:83:cc:b7:17:86:1e:f2: 30:19:48:e2:53:25:a1:dd:ac:f8:2f:4a:cc:65:c6:17:b6:a4: df:8c:9f:cb:b9:f5:82:f2:4b:09:ce:68:97:3e:d1:00:0e:bd: 73:0c:8a:19:32:05:f2:e8:7a:87:41:ec:f2:00:0a:a0:4a:d6: 8a:d5:74:fb:a4:de:3d:03:90:1c:e3:13:f4:9e:fd:79:77:c3: c9:86:16:33:f2:77:61:89:0f:79:52:70:82:3b:d7:80:43:07: 6e:04:a0:92:58:6a:4f:9c:f8:74:33:9a:91:08:ef:e3:f1:46: 6b:80:3c:1f:7f:11:13:af:33:ec:33:31:ba:9f:d5:25:43:dd: a9:eb:f8:66:f8:78:dc:7b:99:56:69:2c:7c:41:b2:6e:ff:2a: 00:30:0b:94:4a:fe:04:98:0e:11:8a:4f:b2:bb:1b:dc:50:99: 1b:ef:79:70:af:7f:fb:09:5d:00:92:7d:73:1e:ff:62:05:11: 82:8f:f3:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjYxMTA1MDEzMzU3WhcNMjYxMTEyMDEzMzU3WjAYMRYwFAYD VQQDEw02YWViZGQwNi1mMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5rfaPUqSq3Z/rVZWWEIrDHFJvyAorgPZy+7+sL8uid+9w6U0aKtZqhEoaic Jcp76pLMIPtPn5ugcWKOctXKpLcjnsG7CZxhz1Xii75zU4Ox69htUmWIxCE/t1xp CIlPpMWlvY4ZUtYcgYkjJ/kQXysDul0/jOmBM1lThmGMZ/DL00tRRTnMRL4pfcg0 1rMs0shUkCbRR5fdyUyzAzspUlzH7K+UfCQAXeR9Xvfx+omscaI0VWYBf6YXAO7p OVJxfbabyxglImGC22Ow5sbB6sb2nn9A54j2nSQ2TzsjpwynK1Iu1mwyTlQEWBNv n49EDG+N4DUbH1+QXIopnpQ1mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITlr9Zw 9gdTheX1mSubfCDFJYq5MB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfA/8WpV4Ncu+tb3iyG+84JYwm1juxVOCV3oyPDbB5G1+MqSN3jlUNIHTCA6 QpfFX242VwHSOcD5ryzx9qcwhFCDzLcXhh7yMBlI4lMlod2s+C9KzGXGF7ak34yf y7n1gvJLCc5olz7RAA69cwyKGTIF8uh6h0Hs8gAKoErWitV0+6TePQOQHOMT9J79 eXfDyYYWM/J3YYkPeVJwgjvXgEMHbgSgklhqT5z4dDOakQjv4/FGa4A8H38RE68z 7DMxup/VJUPdqev4Zvh43HuZVmksfEGybv8qADALlEr+BJgOEYpPsrsb3FCZG+95 cK9/+wldAJJ9cx7/YgURgo/zBA== -----END CERTIFICATE-----Generated at Thu Nov 5 16:29:56 2026 by rpki-client