$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft File: z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json) Hash identifier: hNcBtsDChZKuQ3/cUW557rkWX4rAO1wcFQv/Sq0vKYA= Subject key identifier: C4:D8:12:62:4C:E4:59:BF:F7:6D:F4:A4:17:5C:5E:DE:AC:4D:CC:08 Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83 Certificate issuer: /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft Manifest number: 27 Signing time: Fri 25 Sep 2026 08:57:28 +0000 Manifest this update: Fri 25 Sep 2026 08:57:28 +0000 Manifest next update: Fri 02 Oct 2026 08:57:28 +0000 Files and hashes: 1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: bEwPCG+zJlhfkJT+yM0tuIx62Igp5la4nc3L2d0lyFM=) 2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683 Validity Not Before: Sep 25 08:57:28 2026 GMT Not After : Oct 2 08:57:28 2026 GMT Subject: CN=6ab63778-c996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:ba:30:78:f7:1e:75:87:8b:72:bf:ce:5e: 10:98:83:d7:75:64:77:1f:00:b5:07:32:b6:48:f2: 00:48:c3:8f:65:e1:67:1b:c9:c3:6f:4f:73:4a:5d: df:f3:55:ed:4e:92:af:84:fb:64:f6:ad:97:95:f9: aa:27:ad:45:a4:77:bd:39:c4:61:a0:ac:d0:f9:21: d4:c6:23:fa:ef:75:cb:e4:f5:80:c9:04:29:e7:de: 9b:f9:64:81:6e:53:68:3e:79:32:55:3b:a4:4c:57: 50:fe:00:72:54:9e:7c:e4:d5:68:e2:a4:4a:7b:4e: 98:0a:ac:e7:f3:a5:36:2f:06:f0:83:4d:de:68:e5: 46:d3:c9:17:7e:34:c4:2d:11:9b:6d:cf:8a:19:58: 62:29:35:70:a7:80:9c:9f:a8:6d:9c:51:2c:8d:fe: 6b:56:50:70:38:ac:e1:39:b4:c4:cf:59:5b:6a:cc: ae:11:1a:18:5e:98:ab:43:13:dd:8a:65:e0:1f:cc: 31:0e:d9:85:71:67:bc:33:26:8f:36:8f:cf:11:34: 06:e0:d0:02:98:f4:f6:f8:bc:8b:21:2c:32:2c:86: 6f:bd:58:bb:86:0b:fa:2a:27:ea:25:19:b3:e2:7a: 36:5f:89:e9:0e:8f:22:e6:d0:c1:94:e7:21:fb:19: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:12:62:4C:E4:59:BF:F7:6D:F4:A4:17:5C:5E:DE:AC:4D:CC:08 X509v3 Authority Key Identifier: keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:86:8d:77:1e:9c:e0:88:db:bb:cf:38:7f:bd:b7:21:7a:90: 01:42:7b:4a:b2:48:62:64:35:cd:ad:f1:dd:be:e8:0c:2d:d7: 99:f8:e9:32:4b:04:a9:d5:3f:ff:68:8c:08:58:f7:bf:49:ad: 6e:d7:fc:6a:9f:10:79:6f:f6:ff:49:82:90:4b:f9:ad:cf:80: 1f:91:fd:53:a8:e4:96:b6:ec:7a:38:3d:7e:09:a0:22:2b:6b: 98:92:0f:a1:ac:8e:03:f4:8f:34:aa:2d:dd:16:d7:59:ce:a3: bb:38:c0:39:8a:e0:14:6b:64:d4:cd:7d:b4:17:5a:00:d6:2f: e9:ab:12:24:70:7d:a3:06:17:13:e9:98:a9:81:4c:8f:e0:6e: 5c:e2:34:c3:2a:4c:1f:7e:be:60:19:5f:85:d7:aa:2e:cb:bc: f7:b5:a4:1e:ae:45:02:f9:c6:77:6f:49:36:4d:ec:e2:e5:62: 01:35:b2:2e:c3:a6:93:31:8f:50:43:03:11:7a:21:47:4b:9a: db:dd:de:02:78:42:bb:89:78:08:9b:13:a4:4b:6f:a2:b9:56: 76:ab:50:86:0c:d8:49:b8:8d:8f:77:e3:1a:74:0b:ae:98:46: 6b:30:ee:46:ef:15:04:3c:1c:45:b3:7b:e8:66:7d:e6:34:2a: 18:a3:39:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlENDExMC8GA1UEBRMoQ0ZDMzgxNDU5MDE5ODk2MDFDN0E0MjI2RjJFMDVGQjhD RjkyOTY4MzAeFw0yNjA5MjUwODU3MjhaFw0yNjEwMDIwODU3MjhaMBgxFjAUBgNV BAMTDTZhYjYzNzc4LWM5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/KrowePcedYeLcr/OXhCYg9d1ZHcfALUHMrZI8gBIw49l4WcbycNvT3NKXd/z Ve1Okq+E+2T2rZeV+aonrUWkd705xGGgrND5IdTGI/rvdcvk9YDJBCnn3pv5ZIFu U2g+eTJVO6RMV1D+AHJUnnzk1WjipEp7TpgKrOfzpTYvBvCDTd5o5UbTyRd+NMQt EZttz4oZWGIpNXCngJyfqG2cUSyN/mtWUHA4rOE5tMTPWVtqzK4RGhhemKtDE92K ZeAfzDEO2YVxZ7wzJo82j88RNAbg0AKY9Pb4vIshLDIshm+9WLuGC/oqJ+olGbPi ejZfiekOjyLm0MGU5yH7GeO7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxNgSYkzk Wb/3bfSkF1xe3qxNzAgwHwYDVR0jBBgwFoAUz8OBRZAZiWAcekIm8uBfuM+SloMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUQ0LzAxNzQ1RjMwODQ5 MjExRjFCRUU3NTExQjg1QTMwRkJDL3o4T0JSWkFaaVdBY2VrSW04dUJmdU0tU2xv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejhPQlJaQVppV0FjZWtJbTh1QmZ1TS1TbG9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUQ0LzAxNzQ1RjMwODQ5MjExRjFCRUU3NTExQjg1QTMwRkJDL3o4T0JSWkFaaVdB Y2VrSW04dUJmdU0tU2xvTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFho13HpzgiNu7zzh/vbchepABQntKskhiZDXNrfHdvugMLdeZ+OkySwSp1T// aIwIWPe/Sa1u1/xqnxB5b/b/SYKQS/mtz4Afkf1TqOSWtux6OD1+CaAiK2uYkg+h rI4D9I80qi3dFtdZzqO7OMA5iuAUa2TUzX20F1oA1i/pqxIkcH2jBhcT6ZipgUyP 4G5c4jTDKkwffr5gGV+F16ouy7z3taQerkUC+cZ3b0k2Tezi5WIBNbIuw6aTMY9Q QwMReiFHS5rb3d4CeEK7iXgImxOkS2+iuVZ2q1CGDNhJuI2Pd+MadAuumEZrMO5G 7xUEPBxFs3voZn3mNCoYozlJ -----END CERTIFICATE-----Generated at Fri Sep 25 19:48:50 2026 by rpki-client