$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: We94XiDGKlYOHigy+Terup44kbDbDQYDSfEXaQxzabs= Subject key identifier: 1A:35:65:ED:99:1B:86:24:04:40:39:62:9D:0A:A6:75:0C:09:5C:E3 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 93 Signing time: Mon 21 Sep 2026 07:33:10 +0000 Manifest this update: Mon 21 Sep 2026 07:33:10 +0000 Manifest next update: Mon 28 Sep 2026 07:33:10 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: ayqzbnDmyN3+6fjvCTAx11uyMsiqp8cHzNIjQqdDceM=) 2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: r0nhmRJaSDXSef48LtcxhtRBJQYN9tKah1odz5vET/0=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: z55nxPlhbtL11SvF70H5TAGI4+4Xj3SBtnkVzyIbwx4=) 4: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: 8ItpkqdzM33resyCZEvC0U2BYb/s9fpul/z5VeC5Beg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Sep 21 07:33:10 2026 GMT Not After : Sep 28 07:33:10 2026 GMT Subject: CN=6ab0ddb6-7d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:90:4f:80:73:9f:3f:57:c6:df:9d:cc:35: 83:63:01:ab:d6:7f:c5:ce:20:18:81:ba:7a:af:5f: 0e:f1:59:dd:3c:de:70:42:2a:93:b9:1c:d8:e2:1a: 6c:e3:00:79:06:21:d7:22:00:d4:1a:e4:51:b2:c0: a8:16:a1:eb:b6:aa:10:03:dd:e9:63:1d:40:30:6c: 77:91:e2:38:d9:89:ff:45:e1:92:29:27:f7:dd:f2: 30:8e:80:45:7f:86:3c:5b:c3:54:5b:5c:01:40:91: c8:26:88:a3:f6:5a:6c:d6:60:59:e0:51:e9:3f:70: 06:ff:c5:32:9e:71:2e:4a:59:b8:8d:cb:57:40:36: 50:05:8d:3d:0b:85:db:06:63:f8:f2:ad:82:13:98: fb:91:b9:e2:a7:c7:01:95:16:f3:8c:d4:6a:75:d9: 5c:c8:c2:14:dd:c9:56:c7:8b:f7:a2:36:6e:c3:91: a6:57:a4:ed:4c:8c:4d:48:94:79:d2:fa:eb:8c:75: 30:0e:60:5c:af:45:47:fc:69:d7:b1:16:d1:50:60: ad:b8:dc:1f:2d:0e:69:37:21:8c:e6:d4:1f:67:86: 7f:79:b7:14:12:c1:4b:bd:4d:66:4a:58:89:36:ba: 3b:5d:76:8c:85:fc:3a:69:cc:c9:ac:bb:ec:ae:41: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:65:ED:99:1B:86:24:04:40:39:62:9D:0A:A6:75:0C:09:5C:E3 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bd:32:99:9c:8b:5e:13:76:28:49:78:d4:40:78:99:c3:77: de:4c:02:2f:d1:53:96:69:61:f0:95:b8:f9:5e:76:26:13:db: c9:e2:ba:af:95:b0:13:29:ff:33:d5:c1:0f:24:b9:af:11:ad: b3:b4:a0:8c:67:7a:22:42:8f:96:61:e7:18:1c:af:b0:47:6b: 8b:e5:d6:8f:a8:1e:22:a6:c0:b7:d4:60:b1:c5:0d:af:37:22: a4:b6:17:e7:98:e2:6e:2b:da:23:47:85:94:6e:66:8b:44:14: 38:22:88:db:b2:a2:d9:d6:77:e5:97:9f:d8:74:f7:18:07:09: d5:5a:10:e4:be:fa:b7:f7:d5:dc:5e:78:8d:74:5c:9d:5a:e4: 7c:fd:52:ed:ea:cc:a9:2b:6f:49:6b:36:37:14:22:fc:72:28: 71:16:49:b1:88:0a:4a:71:b5:2c:c6:04:e2:a6:8a:8c:c8:05: cf:5c:8d:b3:00:4e:71:6e:87:fa:3f:bd:38:a8:56:de:c2:8d: 57:2d:20:bc:58:e7:7f:38:05:48:6c:d1:7d:1b:3c:49:0f:7a: bf:ec:a5:de:4f:73:50:68:ae:79:af:16:5c:97:32:64:d4:32: a6:74:fa:3a:8a:33:dc:f9:44:d4:c9:38:36:00:00:35:e0:e8: d4:b4:3a:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDRDQxMTAvBgNVBAUTKENDMzc2QTY4RkNBM0UwOUYwQ0VCNUMyQ0I5MUIzNERC MTRDM0VCQzkwHhcNMjYwOTIxMDczMzEwWhcNMjYwOTI4MDczMzEwWjAYMRYwFAYD VQQDEw02YWIwZGRiNi03ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4WQT4Bznz9Xxt+dzDWDYwGr1n/FziAYgbp6r18O8VndPN5wQiqTuRzY4hps 4wB5BiHXIgDUGuRRssCoFqHrtqoQA93pYx1AMGx3keI42Yn/ReGSKSf33fIwjoBF f4Y8W8NUW1wBQJHIJoij9lps1mBZ4FHpP3AG/8UynnEuSlm4jctXQDZQBY09C4Xb BmP48q2CE5j7kbnip8cBlRbzjNRqddlcyMIU3clWx4v3ojZuw5GmV6TtTIxNSJR5 0vrrjHUwDmBcr0VH/GnXsRbRUGCtuNwfLQ5pNyGM5tQfZ4Z/ebcUEsFLvU1mSliJ Nro7XXaMhfw6aczJrLvsrkHl+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBo1Ze2Z G4YkBEA5Yp0KpnUMCVzjMB8GA1UdIwQYMBaAFMw3amj8o+CfDOtcLLkbNNsUw+vJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RENENC9CMTcxREI1MEUx QUExMUYwQUZDRTg0Qjg0QTZGNTZCQy96RGRxYVB5ajRKOE02MXdzdVJzMDJ4VEQ2 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RENENC9CMTcxREI1MEUxQUExMUYwQUZDRTg0Qjg0QTZGNTZCQy96RGRxYVB5ajRK OE02MXdzdVJzMDJ4VEQ2OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj70ymZyLXhN2KEl41EB4mcN33kwCL9FTlmlh8JW4+V52JhPbyeK6r5WwEyn/ M9XBDyS5rxGts7SgjGd6IkKPlmHnGByvsEdri+XWj6geIqbAt9RgscUNrzcipLYX 55jibivaI0eFlG5mi0QUOCKI27Ki2dZ35Zef2HT3GAcJ1VoQ5L76t/fV3F54jXRc nVrkfP1S7erMqStvSWs2NxQi/HIocRZJsYgKSnG1LMYE4qaKjMgFz1yNswBOcW6H +j+9OKhW3sKNVy0gvFjnfzgFSGzRfRs8SQ96v+yl3k9zUGiuea8WXJcyZNQypnT6 Oooz3PlE1Mk4NgAANeDo1LQ6yQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:54 2026 by rpki-client