$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: MhEMcjcnvS9YyvJdsHn72IRH21GTJFjPLmsbnXSEj+U= Subject key identifier: BC:B3:D8:41:C5:34:3F:AA:22:49:A2:2C:BC:AF:B6:49:3A:F3:53:61 Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 0155 Signing time: Sun 27 Sep 2026 06:02:00 +0000 Manifest this update: Sun 27 Sep 2026 06:01:59 +0000 Manifest next update: Sun 04 Oct 2026 06:01:59 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: g7jbVOvIZyV0XUZUhRrqOYLJEBlupIxvycvs/KSkEsQ=) 2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) 3: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=) 4: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Sep 27 06:01:59 2026 GMT Not After : Oct 4 06:01:59 2026 GMT Subject: CN=6ab8b157-019a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:e3:0c:52:d1:d7:6d:6e:e8:e1:98:df:16: ca:25:ce:53:e0:c4:9f:17:fd:98:42:e0:3c:a0:b1: 6e:9a:87:5a:d5:af:92:c7:8e:88:4a:65:3a:fd:6e: b9:22:99:d8:d4:11:e1:5a:08:a1:cf:92:9a:a0:9c: 67:ff:b4:5b:84:84:ad:d4:b1:82:f1:d2:18:67:af: 89:89:29:e8:75:67:d1:0a:f8:00:43:44:5c:17:48: 2e:52:7e:1b:9f:4d:e3:2d:e7:59:81:e1:15:6a:15: 82:fc:77:17:14:91:5e:5c:95:41:69:2f:ab:14:47: ae:8f:48:6c:d8:b2:e7:84:88:0e:e2:ca:80:15:c7: 81:1b:54:24:86:6a:3f:8a:6b:04:8d:82:50:d4:73: 58:d6:de:68:a5:5c:1e:aa:28:b1:43:25:45:40:e1: c3:2c:a9:de:bf:85:42:66:2f:4f:65:79:c2:5f:36: 65:55:1d:72:f7:e4:19:e7:78:97:ea:60:21:ff:3b: 21:fb:04:1b:16:81:18:46:96:10:4a:3a:77:4e:6e: 79:39:d4:c3:2c:3c:e7:66:c1:be:35:24:ae:37:20: 2b:58:25:2f:d3:fc:89:e2:d3:6e:1a:21:1f:4d:0b: e1:df:d7:81:80:dd:7c:19:99:c9:11:dd:8d:2f:f4: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:D8:41:C5:34:3F:AA:22:49:A2:2C:BC:AF:B6:49:3A:F3:53:61 X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ab:89:b6:6b:e2:a7:98:64:a7:dc:59:af:fa:07:c5:87:10: 4c:f2:d4:ab:26:58:5e:f9:f2:bc:eb:0f:1c:8a:f7:ed:1e:d5: a0:60:96:de:62:68:45:90:49:1e:d2:79:1f:c9:c5:9f:d1:77: c2:68:24:39:1b:4e:6d:93:1a:b7:4f:b6:99:4a:e3:93:fd:10: 16:63:db:b9:29:b0:c7:0f:bd:45:9b:10:51:c9:15:18:dc:75: e1:e6:24:45:e9:8a:29:07:24:f4:f3:89:4f:79:f3:95:c0:f3: 0d:c7:ca:b3:fa:7e:99:7f:1c:3e:a4:28:67:ba:5c:ee:db:f1: e0:7c:49:8d:1a:4c:64:04:5d:bd:33:16:1f:6f:b7:2a:78:ee: 6f:bd:ef:09:95:58:b9:5d:0a:d2:1f:96:05:dd:02:90:1d:e4: 4c:0f:eb:a8:e0:d9:d0:d2:cf:3f:a9:ca:c3:95:ce:bc:85:6b: 40:35:b0:ed:05:79:67:e7:c1:5a:43:17:22:d4:3c:52:a5:1c: 4e:69:b2:16:17:78:36:ef:8e:80:f3:05:e1:db:6b:f0:e9:ad: 3d:9d:cf:58:2e:dc:cb:c9:4a:37:52:fd:ae:ed:7f:c9:d0:1a: 42:49:3a:32:3f:00:5a:20:f4:3d:89:c9:37:10:72:73:3e:e8: bf:17:0e:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwOTI3MDYwMTU5WhcNMjYxMDA0MDYwMTU5WjAYMRYwFAYD VQQDEw02YWI4YjE1Ny0wMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkfjDFLR121u6OGY3xbKJc5T4MSfF/2YQuA8oLFumoda1a+Sx46ISmU6/W65 IpnY1BHhWgihz5KaoJxn/7RbhISt1LGC8dIYZ6+JiSnodWfRCvgAQ0RcF0guUn4b n03jLedZgeEVahWC/HcXFJFeXJVBaS+rFEeuj0hs2LLnhIgO4sqAFceBG1Qkhmo/ imsEjYJQ1HNY1t5opVweqiixQyVFQOHDLKnev4VCZi9PZXnCXzZlVR1y9+QZ53iX 6mAh/zsh+wQbFoEYRpYQSjp3Tm55OdTDLDznZsG+NSSuNyArWCUv0/yJ4tNuGiEf TQvh39eBgN18GZnJEd2NL/R4GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyz2EHF ND+qIkmiLLyvtkk681NhMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAauJtmvip5hkp9xZr/oHxYcQTPLUqyZYXvnyvOsPHIr37R7VoGCW3mJoRZBJ HtJ5H8nFn9F3wmgkORtObZMat0+2mUrjk/0QFmPbuSmwxw+9RZsQUckVGNx14eYk RemKKQck9POJT3nzlcDzDcfKs/p+mX8cPqQoZ7pc7tvx4HxJjRpMZARdvTMWH2+3 Knjub73vCZVYuV0K0h+WBd0CkB3kTA/rqODZ0NLPP6nKw5XOvIVrQDWw7QV5Z+fB WkMXItQ8UqUcTmmyFhd4Nu+OgPMF4dtr8OmtPZ3PWC7cy8lKN1L9ru1/ydAaQkk6 Mj8AWiD0PYnJNxBycz7ovxcO2Q== -----END CERTIFICATE-----Generated at Tue Sep 29 01:21:13 2026 by rpki-client