$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft File: sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft (raw, json) Hash identifier: PiZwngrOK1ZSU378k0pKO48VQanhD8JU5Xo33Im8+PU= Subject key identifier: 40:7B:AA:61:24:0F:F1:FD:59:90:31:70:B8:41:EA:F6:B8:1A:F7:B7 Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E Certificate issuer: /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft Manifest number: 14 Signing time: Mon 21 Sep 2026 09:03:32 +0000 Manifest this update: Mon 21 Sep 2026 09:03:32 +0000 Manifest next update: Mon 28 Sep 2026 09:03:32 +0000 Files and hashes: 1: sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl (hash: FJ/GUG11kQ7JXs2Z9LSRLzBj6UlLbtgNMa2phkb41zk=) 2: 862E552A9BC911F18D38C8025A11F970.roa (hash: 8na8yVbkSv2r8L3/v2gwJOLTTRp9fQmqAH2HTVZD2cc=) 3: 3F981D2E9BC611F1BF28F2DA5711F970.roa (hash: sKVxProcEOHvrgAV+/slNwjk7EfvxI0MK4OVX+Z8sEw=) 4: 403C1EB09BC611F1BF28F2DA5711F970.roa (hash: j/xjaXbBB1ibKX7WVXJ3Yos+ih/Ydlfy2wHxZhD7qPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E Validity Not Before: Sep 21 09:03:32 2026 GMT Not After : Sep 28 09:03:32 2026 GMT Subject: CN=6ab0f2e4-6aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:a4:b1:01:d6:29:04:69:4f:a5:66:35:8a: 1f:95:ac:af:8e:24:ae:a5:43:46:3e:b9:de:4b:32: 53:d1:ce:5a:b0:a4:86:8b:ed:71:08:78:3e:15:ab: e6:5f:38:30:0b:bc:54:bd:42:bf:42:eb:03:fe:fb: bb:e1:22:e9:f2:8a:ba:05:0c:95:7d:2c:b4:fd:aa: c5:76:b6:39:bf:d1:e6:24:5e:50:03:58:70:77:d6: fa:45:5d:27:2a:55:ca:73:64:65:69:46:e0:96:01: c7:2c:f5:19:a6:07:fc:f1:26:a6:12:77:e1:e1:f4: 7d:78:e2:17:76:f3:51:c6:7d:19:1d:ae:34:be:d9: e8:27:34:b6:d3:55:9f:35:97:45:d7:1c:11:62:32: 23:3f:ff:3e:42:30:b0:2f:a5:6f:04:0a:28:17:b9: f9:83:9b:6f:76:29:dd:1e:9f:e2:bb:1f:2e:cc:d8: 81:01:e6:d7:af:d6:19:2a:53:c1:fd:46:4b:f1:54: a9:5b:63:48:e2:dc:66:93:8d:58:1c:9b:0d:33:cd: 28:5b:76:e3:25:7b:63:db:f5:b8:e9:7d:91:84:21: 0b:e6:94:8b:8c:d7:56:c3:00:a9:5e:02:1a:04:da: c1:e3:80:44:cd:2c:bc:4f:c2:7d:d6:d7:9e:98:c6: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:AA:61:24:0F:F1:FD:59:90:31:70:B8:41:EA:F6:B8:1A:F7:B7 X509v3 Authority Key Identifier: keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:95:fd:ed:14:3e:5a:0f:18:06:6e:f4:3a:37:8e:83:9b:57: a7:53:9a:67:d7:d4:61:73:e6:2a:81:ac:6c:2a:ba:9c:4e:ed: 9f:31:a2:77:bb:d1:d8:64:d4:43:6a:8b:2c:9b:22:f5:5f:79: 27:c9:5e:6e:cd:45:e6:1d:c1:ec:55:b8:c5:d3:2e:34:50:69: f1:e3:f5:69:d8:c0:fe:55:14:ad:aa:61:59:3e:b2:18:72:f1: 71:4d:25:fd:5b:2d:5f:35:70:24:34:2e:9f:4c:d5:cb:1a:84: b1:3b:55:b1:03:ce:3b:e0:35:f3:d3:02:2e:87:64:22:4c:b0: 68:68:da:14:4a:87:39:4a:69:45:75:b8:97:00:60:49:2b:de: 04:6d:5b:a6:5a:57:8c:f4:8d:c1:20:a0:bf:a8:ee:5c:ef:0e: 39:e9:a8:d7:b5:51:41:c1:fd:ac:08:3a:f4:38:62:fe:63:76: 01:3a:99:66:4f:e1:11:fa:57:43:08:e7:9b:f1:e0:04:91:92: 0b:55:03:e1:7c:5d:1b:49:28:92:01:b7:d2:4d:93:60:56:4b: 02:0d:75:b9:0c:ff:25:3b:cc:ec:c4:3a:b6:b3:91:d2:53:13: 8e:4d:a8:ea:68:c6:92:e0:07:aa:35:4d:dc:96:ee:23:3b:7d: be:fe:08:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDhDQjExMC8GA1UEBRMoQjE5QzMyNEM0Njc5RDJFNDU2ODM0Mzg5QUZGQjc1MDRF REYwOTcxRTAeFw0yNjA5MjEwOTAzMzJaFw0yNjA5MjgwOTAzMzJaMBgxFjAUBgNV BAMTDTZhYjBmMmU0LTZhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUr6SxAdYpBGlPpWY1ih+VrK+OJK6lQ0Y+ud5LMlPRzlqwpIaL7XEIeD4Vq+Zf ODALvFS9Qr9C6wP++7vhIunyiroFDJV9LLT9qsV2tjm/0eYkXlADWHB31vpFXScq VcpzZGVpRuCWAccs9RmmB/zxJqYSd+Hh9H144hd281HGfRkdrjS+2egnNLbTVZ81 l0XXHBFiMiM//z5CMLAvpW8ECigXufmDm292Kd0en+K7Hy7M2IEB5tev1hkqU8H9 RkvxVKlbY0ji3GaTjVgcmw0zzShbduMle2Pb9bjpfZGEIQvmlIuM11bDAKleAhoE 2sHjgETNLLxPwn3W156YxqHZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQHuqYSQP 8f1ZkDFwuEHq9rga97cwHwYDVR0jBBgwFoAUsZwyTEZ50uRWg0OJr/t1BO3wlx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0OENCL0RDNTZERUJDOUJD NTExRjE4RkUwMzc2QzU3MTFGOTcwL3Nad3lURVo1MHVSV2cwT0pyX3QxQk8zd2x4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1p3eVRFWjUwdVJXZzBPSnJfdDFCTzN3bHg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 OENCL0RDNTZERUJDOUJDNTExRjE4RkUwMzc2QzU3MTFGOTcwL3Nad3lURVo1MHVS V2cwT0pyX3QxQk8zd2x4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJlf3tFD5aDxgGbvQ6N46Dm1enU5pn19Rhc+YqgaxsKrqcTu2fMaJ3u9HYZNRD aossmyL1X3knyV5uzUXmHcHsVbjF0y40UGnx4/Vp2MD+VRStqmFZPrIYcvFxTSX9 Wy1fNXAkNC6fTNXLGoSxO1WxA8474DXz0wIuh2QiTLBoaNoUSoc5SmlFdbiXAGBJ K94EbVumWleM9I3BIKC/qO5c7w456ajXtVFBwf2sCDr0OGL+Y3YBOplmT+ER+ldD COeb8eAEkZILVQPhfF0bSSiSAbfSTZNgVksCDXW5DP8lO8zsxDq2s5HSUxOOTajq aMaS4AeqNU3clu4jO32+/ghE -----END CERTIFICATE-----Generated at Tue Sep 22 18:27:42 2026 by rpki-client