$ rpki-client -vvvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: FbQ0iFhjoX0GjSa9GM+p+tfroE/iFtqD09wn8QXaaVw= Subject key identifier: BA:C6:C3:6B:0B:43:03:17:EA:8B:E2:F1:D4:B5:29:79:25:7F:20:EF Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0273 Signing time: Wed 23 Sep 2026 02:51:43 +0000 Manifest this update: Wed 23 Sep 2026 02:51:42 +0000 Manifest next update: Wed 30 Sep 2026 02:51:42 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: F8d9VMDjXUfUkdVK46Waq7tUNHRViq4SnQ4fl/puWNg=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: Jt26OkH5GsZzx3PXVTRWExsHyUAi4WnLglyQDm9L/j8=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: tSLdp80FVd5ixH2uZT2QMYA1+OsbaeZKHwPMzoQDX+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Sep 23 02:51:42 2026 GMT Not After : Sep 30 02:51:42 2026 GMT Subject: CN=6ab33ebf-85fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:cf:ef:4d:4f:e7:c1:54:2e:fd:a9:63:6a: 44:76:a2:83:f6:ee:f0:69:15:52:dd:1f:7e:de:77: 31:bd:58:d5:98:c2:11:7b:cc:4d:93:9a:d8:65:ff: 0e:9d:fb:81:a9:df:22:ef:b4:e0:b5:2e:4b:e5:73: 91:6b:0c:2e:8c:91:c5:47:d5:48:15:92:05:5a:23: 63:96:f0:e4:95:a2:75:9a:92:0d:59:d1:f3:7d:52: 88:67:8f:bf:72:0f:dd:62:34:5f:d3:4e:cb:24:2b: d3:10:3e:d9:75:ab:5d:5f:05:bd:29:ca:e7:98:af: db:fb:42:32:f3:7c:9d:42:bb:ea:5f:8a:3c:1b:58: 1b:23:ff:67:81:86:70:e2:ed:9c:5f:c5:2d:40:86: b2:bd:2f:2f:57:e4:9b:7b:ee:92:4b:40:81:8b:1b: 6a:8c:7c:00:9b:3a:d5:18:ad:f1:23:d1:d6:1a:1a: 0e:9c:70:38:bf:31:8c:96:80:4a:a9:0c:40:d3:0c: 53:d1:66:c1:0b:e9:44:22:c0:c8:12:9c:03:3d:fd: c1:d8:f4:0e:53:b6:81:72:56:6f:3e:7c:b1:d7:6e: b6:ca:d9:f3:80:18:e4:7c:29:86:95:f2:31:af:1b: 2f:3d:1b:75:60:b1:cf:d7:56:51:91:e4:77:ed:e8: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C6:C3:6B:0B:43:03:17:EA:8B:E2:F1:D4:B5:29:79:25:7F:20:EF X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:62:9b:dc:ec:58:93:89:15:4d:04:ef:fe:25:4e:10:95:b9: c5:8d:66:8e:8b:ca:dd:38:58:cf:dd:af:b0:49:63:86:e6:3a: ba:75:8b:72:61:3c:4b:97:1c:9a:80:c6:77:59:04:69:25:5a: 29:b2:3c:61:6d:7a:be:fa:9d:29:69:21:54:2d:3c:08:cf:61: 6b:73:22:67:db:fc:86:82:93:63:cf:07:29:a6:34:59:59:56: e2:59:11:88:59:97:28:e9:98:34:bd:36:7a:09:fd:b8:51:ef: 65:d1:82:02:b4:07:f5:f6:21:d7:e2:14:ee:9d:bf:ef:47:9f: 87:18:6f:e1:7c:b6:ad:4a:10:dc:25:e0:db:21:d7:b1:a9:47: 79:c3:b6:36:2e:9e:a5:ce:85:0a:66:8f:76:61:31:e4:17:fc: de:d4:83:81:d5:da:d4:cb:6b:68:49:08:a0:3b:65:8f:a0:83: b4:52:0a:9c:13:e2:0b:8d:d9:02:4c:57:3a:ee:26:96:44:dd: 56:70:74:64:31:0d:85:e5:62:41:2e:31:4a:02:a0:cf:04:d4: 72:16:c6:2a:dd:fe:ea:b1:71:ca:a9:09:7a:0e:c4:b4:90:17: 6c:88:2f:ea:17:77:35:07:86:d0:b6:1d:fd:bb:bd:53:9f:c1: 2e:64:35:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwOTIzMDI1MTQyWhcNMjYwOTMwMDI1MTQyWjAYMRYwFAYD VQQDEw02YWIzM2ViZi04NWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSTP701P58FULv2pY2pEdqKD9u7waRVS3R9+3ncxvVjVmMIRe8xNk5rYZf8O nfuBqd8i77TgtS5L5XORawwujJHFR9VIFZIFWiNjlvDklaJ1mpINWdHzfVKIZ4+/ cg/dYjRf007LJCvTED7ZdatdXwW9KcrnmK/b+0Iy83ydQrvqX4o8G1gbI/9ngYZw 4u2cX8UtQIayvS8vV+Sbe+6SS0CBixtqjHwAmzrVGK3xI9HWGhoOnHA4vzGMloBK qQxA0wxT0WbBC+lEIsDIEpwDPf3B2PQOU7aBclZvPnyx1262ytnzgBjkfCmGlfIx rxsvPRt1YLHP11ZRkeR37ehvQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrGw2sL QwMX6ovi8dS1KXklfyDvMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASGKb3OxYk4kVTQTv/iVOEJW5xY1mjovK3ThYz92vsEljhuY6unWLcmE8S5cc moDGd1kEaSVaKbI8YW16vvqdKWkhVC08CM9ha3MiZ9v8hoKTY88HKaY0WVlW4lkR iFmXKOmYNL02egn9uFHvZdGCArQH9fYh1+IU7p2/70efhxhv4Xy2rUoQ3CXg2yHX salHecO2Ni6epc6FCmaPdmEx5Bf83tSDgdXa1MtraEkIoDtlj6CDtFIKnBPiC43Z AkxXOu4mlkTdVnB0ZDENheViQS4xSgKgzwTUchbGKt3+6rFxyqkJeg7EtJAXbIgv 6hd3NQeG0LYd/bu9U5/BLmQ1Hw== -----END CERTIFICATE-----Generated at Wed Sep 23 20:56:10 2026 by rpki-client