$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: +2kfbmZSouurdltLmK1jkEylKo/6gfklwio1TfLVYPQ= Subject key identifier: C9:B9:03:49:1A:F2:F5:0D:3A:34:C0:C3:87:AC:3E:42:2A:AC:55:01 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 03E4 Signing time: Mon 21 Sep 2026 00:19:27 +0000 Manifest this update: Mon 21 Sep 2026 00:19:27 +0000 Manifest next update: Mon 28 Sep 2026 00:19:27 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: UHnMwwMK3sV1A2aQN0gER3KaXUj3VbZO9t85TNAQDEA=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: SWNOrvn46oDLTg74T4Hbq7v10iWBDBnWv7LSwdGRRPQ=) 3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: cduqgA+zcJPsXKGFgp0PZtzwmtzbUO7Jgg9Jg1V6cLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Sep 21 00:19:27 2026 GMT Not After : Sep 28 00:19:27 2026 GMT Subject: CN=6ab0780f-dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:d2:42:96:5c:31:e5:4c:72:98:31:0b:54: 61:87:a5:c4:4c:12:0d:63:cc:3c:8f:75:fe:1a:bd: 26:6c:f3:64:ff:07:65:54:10:3d:3b:56:d5:2a:e9: 5c:6b:e8:9b:21:3f:6d:d1:58:b2:ef:dd:31:1f:69: 1f:20:84:e4:b1:79:50:a8:4d:21:35:bb:a7:53:1f: 4f:3e:b7:eb:ed:ea:b0:1c:f5:9f:ef:f4:28:f4:02: 1c:b0:b0:03:36:7b:b9:99:d1:9e:35:fc:19:54:1d: db:0d:89:a7:c0:e5:2d:7c:ed:1e:3e:33:95:f7:47: 61:37:0e:9d:84:8d:c1:24:84:c1:88:0a:5a:ca:87: ed:0f:1a:a3:32:2d:f2:fa:35:b1:4d:67:3d:57:a9: 5f:d1:2d:76:63:42:36:a7:fa:f0:4a:9c:f3:33:38: f1:d7:c1:00:a4:79:f2:47:37:40:bf:9a:f4:63:51: de:4e:7c:b6:b4:a2:6d:8e:8a:5d:5f:40:fa:9d:aa: ad:62:7c:f7:98:84:88:3f:5f:68:ce:73:a1:4a:f1: eb:8b:70:b7:d7:03:a7:36:f5:70:88:e4:7d:5e:54: 4e:60:f4:88:dc:64:65:c3:37:17:37:27:ae:de:0a: 95:68:31:54:55:13:6a:a1:49:e8:b7:de:f8:f9:6b: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:03:49:1A:F2:F5:0D:3A:34:C0:C3:87:AC:3E:42:2A:AC:55:01 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0e:9d:de:e7:37:cc:43:0a:c9:73:6e:bd:6b:4f:e5:d6:bd: f0:4b:60:c0:bc:2d:3e:d5:8f:ef:27:98:c1:86:b9:a5:48:ac: 7f:42:f5:af:58:62:e4:27:5f:c2:6c:92:a5:9b:d3:1b:22:e0: 4d:54:a2:13:e1:c1:34:02:77:13:0c:b3:e8:8f:c3:19:a4:c9: 33:22:90:33:62:75:f9:fa:6e:7f:ff:18:ec:69:a0:df:84:aa: 4f:46:33:5e:ad:d9:cb:92:3e:ea:68:5f:9c:5b:59:7c:ef:3a: 47:b1:81:9f:c8:c0:13:25:ae:52:b3:d4:1b:c4:f4:3e:05:98: 39:7d:bb:fb:c9:7d:a6:f4:b6:77:7b:ee:2b:a1:95:df:0e:a4: aa:67:2f:94:72:ba:41:a0:ac:f3:6f:47:70:6c:a2:49:53:34: fc:cd:94:da:8d:f5:8c:25:3b:ba:c9:f5:f5:a0:77:ef:63:a1: 91:66:d1:b0:d0:f2:b0:45:9e:20:26:84:26:3e:88:80:c8:fc: 10:56:f0:87:ca:a8:3a:55:f0:2d:6b:c6:5b:4b:09:96:b6:8f: 03:be:b5:04:2c:30:1a:94:07:01:99:45:a1:99:c9:5b:62:6e: cd:03:ef:ef:8f:1d:94:59:11:26:4a:07:00:8b:2f:a5:6f:31: be:ea:e3:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYwOTIxMDAxOTI3WhcNMjYwOTI4MDAxOTI3WjAYMRYwFAYD VQQDEw02YWIwNzgwZi1kZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw/SQpZcMeVMcpgxC1Rhh6XETBINY8w8j3X+Gr0mbPNk/wdlVBA9O1bVKulc a+ibIT9t0Viy790xH2kfIITksXlQqE0hNbunUx9PPrfr7eqwHPWf7/Qo9AIcsLAD Nnu5mdGeNfwZVB3bDYmnwOUtfO0ePjOV90dhNw6dhI3BJITBiApayoftDxqjMi3y +jWxTWc9V6lf0S12Y0I2p/rwSpzzMzjx18EApHnyRzdAv5r0Y1HeTny2tKJtjopd X0D6naqtYnz3mISIP19oznOhSvHri3C31wOnNvVwiOR9XlROYPSI3GRlwzcXNyeu 3gqVaDFUVRNqoUnot974+Ws97wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMm5A0ka 8vUNOjTAw4esPkIqrFUBMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhw6d3uc3zEMKyXNuvWtP5da98EtgwLwtPtWP7yeYwYa5pUisf0L1r1hi5Cdf wmySpZvTGyLgTVSiE+HBNAJ3Ewyz6I/DGaTJMyKQM2J1+fpuf/8Y7Gmg34SqT0Yz Xq3Zy5I+6mhfnFtZfO86R7GBn8jAEyWuUrPUG8T0PgWYOX27+8l9pvS2d3vuK6GV 3w6kqmcvlHK6QaCs829HcGyiSVM0/M2U2o31jCU7usn19aB372OhkWbRsNDysEWe ICaEJj6IgMj8EFbwh8qoOlXwLWvGW0sJlraPA761BCwwGpQHAZlFoZnJW2JuzQPv 748dlFkRJkoHAIsvpW8xvurjOw== -----END CERTIFICATE-----Generated at Mon Sep 21 16:23:13 2026 by rpki-client