$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: SK1OsEKqMnfJe7l+jJ/FeNwKrIvzIdUBI3sUcSMW2Gg= Subject key identifier: A9:3F:19:9F:14:7A:AC:5C:F4:32:B4:D9:D1:CD:64:E5:01:B7:3B:2D Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 02BA Signing time: Mon 21 Sep 2026 01:25:17 +0000 Manifest this update: Mon 21 Sep 2026 01:25:17 +0000 Manifest next update: Mon 28 Sep 2026 01:25:17 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: iSOtQLngzvEdRqWZzWlAcj7gS/cE0QGuOFGzg3l+VzM=) 2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) 3: SaoGQURflsgAadr5lQ24wGCUmxk.asa (hash: 8k/T8/5jKKmoBwRbcBbi8Q41mGNqzHqtmLn+bq0XWZ8=) 4: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) 5: QK7DtSsjZHkLvCZn-3ari_TaLM4.asa (hash: FV923MSWqLwVY2tJIYtkQ6ydnq4/MNwBnbEihOXKuTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Sep 21 01:25:17 2026 GMT Not After : Sep 28 01:25:17 2026 GMT Subject: CN=6ab0877d-0235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:b0:83:91:4e:d7:f0:5c:59:b6:6f:93:1e: 7e:81:2b:aa:0d:fa:8d:e4:fc:18:2f:7e:39:40:b1: b3:3d:49:89:75:05:8c:5a:19:35:ef:bd:a9:d2:a3: 95:fc:43:8e:ba:3c:78:ad:06:f4:5b:fa:eb:0b:fd: f8:bb:58:37:ec:2b:1c:3d:a2:56:42:bc:3c:f6:32: 8c:97:d9:aa:a8:b4:7b:ab:a3:0f:5e:49:aa:7b:7a: bb:65:67:f9:5c:94:09:7c:9b:fd:cf:2e:e4:f9:0c: c8:e0:5e:e7:f2:eb:69:ee:33:07:eb:c1:b8:97:26: d4:35:f9:c9:b1:45:ef:a8:71:4d:86:18:56:b4:a5: eb:45:77:a9:e9:30:88:57:fb:9d:24:b2:35:61:da: b5:c5:ce:9e:de:d2:c7:2e:94:0b:7a:be:fe:77:5f: 60:28:56:8a:d1:2f:85:71:e1:33:4a:be:f2:b9:80: ce:4b:24:ed:81:2a:5c:79:98:fb:ab:66:7a:2c:bc: 12:78:f3:20:90:af:f6:ab:39:c7:9d:9d:39:e7:bb: 21:10:77:3f:ea:da:e0:2c:12:e4:13:74:d3:4a:c8: 78:6f:eb:3b:f5:5c:f8:99:60:ba:d0:06:ab:18:e9: 55:6f:70:74:6a:db:a8:c7:dc:57:db:a1:5a:14:68: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:19:9F:14:7A:AC:5C:F4:32:B4:D9:D1:CD:64:E5:01:B7:3B:2D X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:26:c4:27:72:91:74:a5:87:88:60:70:d2:f4:40:46:94:70: 8d:fc:de:45:39:f2:ea:cd:41:27:61:40:36:4c:4c:e0:c7:e0: 61:8f:06:a8:b4:1e:86:31:30:1a:b4:27:08:a9:c9:89:49:e4: 81:00:05:3c:01:96:98:f1:bf:d6:7c:32:c3:66:02:61:93:c0: 31:e4:ef:0d:a7:16:13:f9:61:07:b0:e7:de:ec:85:b1:b5:69: 98:d4:9f:85:e2:8c:fc:2d:36:55:44:ff:cd:f8:e6:dc:bb:19: ed:8e:df:ed:18:d3:79:90:b6:96:10:14:6e:3e:15:df:07:20: 44:01:94:fc:af:95:73:c6:ec:68:23:6e:b8:f2:8a:08:77:3a: 07:44:52:e9:53:a4:6e:5b:d3:c0:38:c6:46:78:63:3b:21:2f: 25:7c:fa:84:ab:19:d9:3a:32:ba:ec:81:52:8c:94:73:a7:74: 49:44:da:a6:d6:d8:37:8b:f1:01:fc:54:cc:89:82:ff:35:d4: 67:25:e1:99:d5:90:ed:78:4a:77:13:11:75:58:09:2e:1b:35: 39:d0:73:42:7d:b5:b1:64:fd:30:8e:4d:91:f4:63:3c:e6:bd: 64:42:83:5c:d5:ca:4b:b7:e7:93:bb:3c:21:95:5c:5c:c1:07: f4:33:05:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwOTIxMDEyNTE3WhcNMjYwOTI4MDEyNTE3WjAYMRYwFAYD VQQDEw02YWIwODc3ZC0wMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1ywg5FO1/BcWbZvkx5+gSuqDfqN5PwYL345QLGzPUmJdQWMWhk1772p0qOV /EOOujx4rQb0W/rrC/34u1g37CscPaJWQrw89jKMl9mqqLR7q6MPXkmqe3q7ZWf5 XJQJfJv9zy7k+QzI4F7n8utp7jMH68G4lybUNfnJsUXvqHFNhhhWtKXrRXep6TCI V/udJLI1Ydq1xc6e3tLHLpQLer7+d19gKFaK0S+FceEzSr7yuYDOSyTtgSpceZj7 q2Z6LLwSePMgkK/2qznHnZ0557shEHc/6trgLBLkE3TTSsh4b+s79Vz4mWC60Aar GOlVb3B0atuox9xX26FaFGih/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKk/GZ8U eqxc9DK02dHNZOUBtzstMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSbEJ3KRdKWHiGBw0vRARpRwjfzeRTny6s1BJ2FANkxM4MfgYY8GqLQehjEw GrQnCKnJiUnkgQAFPAGWmPG/1nwyw2YCYZPAMeTvDacWE/lhB7Dn3uyFsbVpmNSf heKM/C02VUT/zfjm3LsZ7Y7f7RjTeZC2lhAUbj4V3wcgRAGU/K+Vc8bsaCNuuPKK CHc6B0RS6VOkblvTwDjGRnhjOyEvJXz6hKsZ2ToyuuyBUoyUc6d0SUTaptbYN4vx AfxUzImC/zXUZyXhmdWQ7XhKdxMRdVgJLhs1OdBzQn21sWT9MI5NkfRjPOa9ZEKD XNXKS7fnk7s8IZVcXMEH9DMFcA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:10:19 2026 by rpki-client