$ rpki-client -vvvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: vC/t/iRhBIX0nRaqUsLC28zDOKwXXWzUIi/Vl2wwRMo= Subject key identifier: 4D:89:9B:DD:95:81:D9:57:D6:F2:E6:72:26:33:D8:6E:F3:49:78:66 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 8D Signing time: Mon 21 Sep 2026 07:36:04 +0000 Manifest this update: Mon 21 Sep 2026 07:36:04 +0000 Manifest next update: Mon 28 Sep 2026 07:36:04 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: 239+cC1x/yiR/BTbGLS3FedeRjjzd3ka5tlfpHUEBZA=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Sep 21 07:36:04 2026 GMT Not After : Sep 28 07:36:04 2026 GMT Subject: CN=6ab0de64-8f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:1c:0b:c6:75:06:60:b6:61:b5:6e:ef:4b: c5:76:80:c2:5a:df:8c:e1:f1:4a:9a:a8:ba:64:67: a8:fa:27:3e:7b:89:c7:12:40:61:0e:86:42:e2:b8: e9:11:c6:f9:58:3b:f5:9c:5d:c2:48:86:65:b5:9c: 85:7c:4f:03:7d:14:75:35:5e:a6:f2:e3:c0:aa:0d: 1e:96:05:b1:05:bf:9c:06:f2:6b:57:98:f8:a9:15: 59:ae:80:98:c9:1f:5e:c9:2b:49:ff:6e:cc:3c:75: 98:12:fa:19:a2:df:71:15:13:71:32:8b:56:5e:cd: 0c:72:7e:1b:18:0a:35:0c:fd:9c:07:49:42:a5:c7: 24:95:4e:ee:33:ed:00:b5:83:2a:45:ba:36:a8:d9: e3:0c:d5:20:b6:ba:7d:d5:76:81:3b:2a:c8:4e:35: e2:e0:c0:24:58:53:6d:dd:17:ae:d6:68:1b:88:fa: 55:ba:5d:03:71:de:6c:f2:f8:38:a3:80:f6:8f:d8: 1a:58:20:1f:c0:38:c7:8e:b0:cc:b3:6d:68:39:73: e2:b8:c7:e2:af:b4:54:31:38:0b:80:0d:00:ad:28: d8:a5:f1:ec:37:ad:04:f6:44:eb:5f:b4:87:5e:83: 84:26:70:06:3e:70:53:33:33:8b:b2:ca:2d:3e:3f: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:9B:DD:95:81:D9:57:D6:F2:E6:72:26:33:D8:6E:F3:49:78:66 X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:64:c9:cd:fc:8e:34:2d:06:48:90:70:a6:23:52:da:e0: 38:3f:c5:5e:2c:c6:ae:68:55:a0:1b:61:76:1e:b4:9d:a6:0e: 8d:31:3c:57:74:e8:4f:a9:c2:d5:67:96:fb:a6:a8:8e:90:7c: b6:8c:af:e7:bd:4b:b1:fe:8d:5e:3e:ee:4c:5a:ad:ad:36:fa: a0:d4:cc:67:3b:65:61:12:cc:48:8a:9e:b2:fd:9a:f4:6b:41: 67:ec:fb:9b:dc:82:1c:2b:27:91:d6:48:60:94:23:01:a7:f4: c5:25:11:df:12:50:6e:bb:a3:61:2c:75:c9:a2:18:6a:fe:54: 72:41:60:7a:a7:45:b6:b3:e6:48:94:51:39:15:2d:78:79:f9: 7d:6d:76:fe:00:09:c4:4b:d4:c8:d5:fa:2e:78:6f:1e:49:e5: f6:50:4c:8c:39:ed:fd:92:b8:5d:f0:d5:0f:b6:4a:ab:e4:07: 45:d2:80:d7:b9:8e:bf:f1:0e:a8:56:fc:66:67:dd:b7:77:38: 8f:2d:9a:35:61:13:65:65:21:96:cd:47:c6:f2:dd:9f:22:74: 41:49:40:cc:6c:81:3c:02:40:27:e2:f6:1a:60:e9:f7:d5:57: 22:53:8f:75:2a:b0:4a:0d:bc:05:ff:b9:6a:34:6e:df:b2:77: b7:3c:9b:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4QUIxMTAvBgNVBAUTKDY2MkVDOUEyQjdCNkNFNDJEMjNBNTIzODUzNEM2NTc2 MjIzMjUzNzIwHhcNMjYwOTIxMDczNjA0WhcNMjYwOTI4MDczNjA0WjAYMRYwFAYD VQQDEw02YWIwZGU2NC04ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw28cC8Z1BmC2YbVu70vFdoDCWt+M4fFKmqi6ZGeo+ic+e4nHEkBhDoZC4rjp Ecb5WDv1nF3CSIZltZyFfE8DfRR1NV6m8uPAqg0elgWxBb+cBvJrV5j4qRVZroCY yR9eyStJ/27MPHWYEvoZot9xFRNxMotWXs0Mcn4bGAo1DP2cB0lCpccklU7uM+0A tYMqRbo2qNnjDNUgtrp91XaBOyrITjXi4MAkWFNt3Reu1mgbiPpVul0Dcd5s8vg4 o4D2j9gaWCAfwDjHjrDMs21oOXPiuMfir7RUMTgLgA0ArSjYpfHsN60E9kTrX7SH XoOEJnAGPnBTMzOLssotPj8RQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2Jm92V gdlX1vLmciYz2G7zSXhmMB8GA1UdIwQYMBaAFGYuyaK3ts5C0jpSOFNMZXYiMlNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MThBQi84QTU3OTdEQ0U5 NDExMUYwQkZENkNFMzMzQzZGNTZCQy9aaTdKb3JlMnprTFNPbEk0VTB4bGRpSXlV M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MThBQi84QTU3OTdEQ0U5NDExMUYwQkZENkNFMzMzQzZGNTZCQy9aaTdKb3JlMnpr TFNPbEk0VTB4bGRpSXlVM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF89kyc38jjQtBkiQcKYjUtrgOD/FXizGrmhVoBthdh60naYOjTE8V3ToT6nC 1WeW+6aojpB8toyv571Lsf6NXj7uTFqtrTb6oNTMZztlYRLMSIqesv2a9GtBZ+z7 m9yCHCsnkdZIYJQjAaf0xSUR3xJQbrujYSx1yaIYav5UckFgeqdFtrPmSJRRORUt eHn5fW12/gAJxEvUyNX6LnhvHknl9lBMjDnt/ZK4XfDVD7ZKq+QHRdKA17mOv/EO qFb8Zmfdt3c4jy2aNWETZWUhls1HxvLdnyJ0QUlAzGyBPAJAJ+L2GmDp99VXIlOP dSqwSg28Bf+5ajRu37J3tzybkg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:08:38 2026 by rpki-client