$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: B27thWKf/sTASI2uZmPTeJFXdHGhpZWkB8vau7iPKP4= Subject key identifier: 7E:A9:FE:6A:01:6D:85:73:00:24:3B:0E:9B:F9:53:A9:87:0E:2B:D6 Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1F0B Signing time: Sat 10 Oct 2026 16:01:34 +0000 Manifest this update: Sat 10 Oct 2026 16:01:33 +0000 Manifest next update: Sat 17 Oct 2026 16:01:33 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: ZXAEmUhXdQYzLf7Uwi+XCDeUSMJiZGEX2HbawPyvn9U=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=) 3: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=) 4: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=) 5: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7999 (0x1f3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Oct 10 16:01:33 2026 GMT Not After : Oct 17 16:01:33 2026 GMT Subject: CN=6aca615e-6a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:95:8a:1f:2f:88:43:35:88:93:75:0a:6e: f4:64:1c:3d:de:3f:90:b0:fb:eb:f2:7c:03:c1:ea: 41:33:11:20:60:6f:54:2c:35:d7:08:f5:0b:60:08: c7:1a:17:14:d0:a9:70:7c:05:e3:d5:22:db:ae:00: 22:f9:4b:43:e7:90:7f:f1:38:4f:0b:56:d2:52:ca: 58:72:cb:00:ae:3d:16:a5:f3:03:2a:8e:86:53:8a: 95:c9:06:d9:09:a6:d0:2c:af:a9:44:ee:79:c2:18: 46:c9:42:0a:7e:9f:4a:03:17:02:4c:fb:9b:e3:86: ea:e2:63:6f:2c:d8:99:6f:f7:33:be:a1:26:46:d3: b1:cb:66:a2:a6:eb:c7:67:2d:64:ce:ce:91:83:37: 2e:c6:ef:cf:2a:16:06:ad:5c:4b:f6:15:63:48:3f: b2:c2:09:a8:b3:48:09:b9:4e:16:02:67:43:a0:fa: 63:25:d7:21:a4:d1:92:60:05:67:45:1a:d5:6d:2e: 6f:f7:43:6b:aa:99:d2:aa:19:87:24:dc:8d:af:61: d4:dc:cd:e9:b8:c6:da:57:0c:63:fa:38:54:0c:50: ec:66:7f:45:f7:ef:03:60:86:c8:bc:1d:14:7c:1f: d8:26:b1:f8:53:9a:64:ad:f0:0f:b2:f9:5c:28:0c: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A9:FE:6A:01:6D:85:73:00:24:3B:0E:9B:F9:53:A9:87:0E:2B:D6 X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:42:ca:b0:2d:99:9d:ba:f0:07:5a:c6:f2:9c:c1:e9:b5: 19:0a:fe:2e:8b:59:cd:22:81:d9:f4:87:13:52:df:9e:2a:ed: 58:4b:34:0e:cf:88:59:15:94:96:0f:2c:be:76:32:fe:1d:fa: bf:a7:2a:ac:cd:4b:99:64:ea:d2:76:71:d7:ba:45:b6:e8:42: 6d:8d:79:fe:5b:59:ec:30:b7:3c:2c:d9:0b:06:8c:9c:38:b6: 4b:93:df:6f:89:39:e8:31:a3:86:76:8f:04:f3:10:df:fb:d1: b6:71:07:e8:ca:cd:7a:73:73:a5:48:7f:1d:f6:cd:fd:d9:29: d2:76:bf:aa:32:b6:27:b4:9b:51:69:95:a5:b4:b2:b3:f0:72: 9b:18:33:62:48:fe:c6:29:5b:9a:02:73:60:81:76:09:c0:ae: eb:d7:ae:e7:24:08:26:0c:32:e9:f3:44:f3:a8:ae:95:1b:65: 13:bd:ba:1f:89:cf:62:16:6a:d6:f2:ad:80:15:3e:7b:28:36: fe:37:65:cf:ed:1d:22:0c:23:71:cd:b4:90:05:2e:42:11:5d: 45:74:a4:70:2f:cb:95:cd:88:bd:08:21:51:d4:e4:a8:16:fa: 3b:5f:28:98:5e:d1:a5:32:8a:73:70:19:d5:04:25:1a:9e:e4: 30:2e:c7:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjYxMDEwMTYwMTMzWhcNMjYxMDE3MTYwMTMzWjAYMRYwFAYD VQQDEw02YWNhNjE1ZS02YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZOVih8viEM1iJN1Cm70ZBw93j+QsPvr8nwDwepBMxEgYG9ULDXXCPULYAjH GhcU0KlwfAXj1SLbrgAi+UtD55B/8ThPC1bSUspYcssArj0WpfMDKo6GU4qVyQbZ CabQLK+pRO55whhGyUIKfp9KAxcCTPub44bq4mNvLNiZb/czvqEmRtOxy2aipuvH Zy1kzs6Rgzcuxu/PKhYGrVxL9hVjSD+ywgmos0gJuU4WAmdDoPpjJdchpNGSYAVn RRrVbS5v90NrqpnSqhmHJNyNr2HU3M3puMbaVwxj+jhUDFDsZn9F9+8DYIbIvB0U fB/YJrH4U5pkrfAPsvlcKAw4LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6p/moB bYVzACQ7Dpv5U6mHDivWMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3VCyrAtmZ268AdaxvKcwem1GQr+LotZzSKB2fSHE1LfnirtWEs0Ds+IWRWU lg8svnYy/h36v6cqrM1LmWTq0nZx17pFtuhCbY15/ltZ7DC3PCzZCwaMnDi2S5Pf b4k56DGjhnaPBPMQ3/vRtnEH6MrNenNzpUh/HfbN/dkp0na/qjK2J7SbUWmVpbSy s/BymxgzYkj+xilbmgJzYIF2CcCu69eu5yQIJgwy6fNE86iulRtlE726H4nPYhZq 1vKtgBU+eyg2/jdlz+0dIgwjcc20kAUuQhFdRXSkcC/Llc2IvQghUdTkqBb6O18o mF7RpTKKc3AZ1QQlGp7kMC7Hgw== -----END CERTIFICATE-----Generated at Mon Oct 12 07:24:02 2026 by rpki-client