$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: b8tyac1agmWCCj0r72TWFyASwJX9FJFW1v5WrALqoHY= Subject key identifier: 7E:59:D9:83:74:02:7B:18:DB:13:AF:55:57:8A:66:91:69:78:BE:64 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 031C Signing time: Mon 21 Sep 2026 01:01:08 +0000 Manifest this update: Mon 21 Sep 2026 01:01:07 +0000 Manifest next update: Mon 28 Sep 2026 01:01:07 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: rPWmRprRzMsS2PDKgXR2bmywRb8FB/CtPneK/1nb1hw=) 2: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: 3ocK4Bfl3SbnaTMCj/lDw0pUXGryAmwBhjWzwEoz6ug=) 3: F84FF96A493911ED805EB686C4F9AE02.roa (hash: w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=) 4: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: ZEuPiUQckZniRx9NOhZ6gYYx61mX4enZZWyGpfGF2y0=) 5: 2D554D1875B911F19160F3B762A30FBC.roa (hash: awvfykrSz6QoQMrBSUpkmUV2t8VsWMbwM0JMYPHRNiE=) 6: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 2sdmpYEclOMLpBPBQMRyf2bR5K+Znn8UXPaVbPG6E8g=) 7: D21111C2190011F187AE9EA5203D8C67.roa (hash: QBY/KlIfl7r0REBMASrW8pgiV36TJqXHiWnzxZNFLi8=) 8: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: kcXC8wBP+o9JuaOs9TbOrSDUWgSogQuiEdXCi6dydEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Sep 21 01:01:07 2026 GMT Not After : Sep 28 01:01:07 2026 GMT Subject: CN=6ab081d4-18c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:df:66:f0:0e:0f:dc:ec:a6:ea:81:ba:b3: fd:a4:cf:e1:0f:b3:33:28:8f:f4:ee:a9:85:83:16: 74:f2:7d:34:b1:11:49:c6:fd:4e:2f:d6:70:3a:0e: aa:b1:5f:46:c9:7d:06:5b:02:64:fc:65:33:32:de: ac:cb:07:8b:a1:b6:3f:17:d3:28:4e:1c:21:15:80: a3:2f:26:3f:1c:f2:ff:db:04:86:ff:02:30:db:c1: fa:f9:69:0e:4c:b7:c0:f8:81:73:23:bc:6c:b0:55: 72:9b:dc:20:1b:25:12:9b:1a:f3:e1:01:7e:f4:d9: 9d:2c:56:2b:ec:e4:40:9d:10:1d:c3:89:30:5f:b8: f4:67:08:e9:f3:b8:c7:98:3a:34:52:ef:d6:42:82: e1:c5:77:b1:c5:7c:02:ff:ff:6f:75:ef:c6:96:bd: e3:d3:1f:2b:86:35:85:f5:b7:fc:85:ae:8f:07:14: 63:38:93:44:66:f7:0e:de:dc:62:8f:c5:23:e0:79: e6:c7:e4:d1:a0:67:a6:aa:79:af:3b:1a:96:3c:4a: a7:20:25:8d:23:ba:1c:93:5f:a7:d8:b3:44:d4:37: 57:c1:34:c8:91:c8:6b:84:6d:42:97:a3:5c:c9:53: e2:b3:64:fe:1b:3a:9e:f7:d3:9d:85:cc:05:a0:8b: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:59:D9:83:74:02:7B:18:DB:13:AF:55:57:8A:66:91:69:78:BE:64 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:70:a2:7f:e9:ba:a4:8d:d5:09:1a:35:a9:ae:a4:64:6d:0c: 07:a0:0c:87:35:85:b2:a6:08:01:00:08:b8:20:8e:f4:0b:4f: fe:df:64:2c:96:9c:4f:c6:83:32:9b:30:f1:3f:13:0c:93:e0: 46:f5:1a:b8:67:a5:79:e9:ee:ba:f1:17:2d:43:df:84:b9:4b: 4f:9c:04:4c:11:1c:97:b1:a6:f6:73:57:b2:d6:26:0a:4f:81: dd:d3:52:24:a1:1f:31:4e:62:08:27:82:d6:f1:9e:0e:78:3b: 7e:37:b6:ff:0c:cf:b9:2d:38:57:d2:09:27:49:63:23:5d:58: fb:cd:84:ae:ae:2f:ae:4e:91:6b:61:9c:74:4d:39:ec:66:73: e7:dc:fb:c8:dd:0e:d2:47:a7:45:a3:3b:58:ff:89:73:b5:05: 15:74:33:17:7a:80:af:23:28:53:48:1f:ca:a7:08:e8:26:f1: 2a:e7:00:a2:f2:8e:58:d8:84:e1:c2:d4:66:13:1b:54:2c:d4: 6e:48:6d:59:5d:76:96:8d:9e:d0:76:78:88:0d:1f:af:c2:4c: 76:23:33:d4:8a:ed:a5:28:72:ec:38:53:aa:64:1f:93:22:3e: 9e:0b:b9:cb:32:ae:3b:f7:7c:dc:e5:f5:a9:16:12:99:46:6f: 20:11:31:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwOTIxMDEwMTA3WhcNMjYwOTI4MDEwMTA3WjAYMRYwFAYD VQQDEw02YWIwODFkNC0xOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgDfZvAOD9zspuqBurP9pM/hD7MzKI/07qmFgxZ08n00sRFJxv1OL9ZwOg6q sV9GyX0GWwJk/GUzMt6syweLobY/F9MoThwhFYCjLyY/HPL/2wSG/wIw28H6+WkO TLfA+IFzI7xssFVym9wgGyUSmxrz4QF+9NmdLFYr7ORAnRAdw4kwX7j0Zwjp87jH mDo0Uu/WQoLhxXexxXwC//9vde/Glr3j0x8rhjWF9bf8ha6PBxRjOJNEZvcO3txi j8Uj4Hnmx+TRoGemqnmvOxqWPEqnICWNI7ock1+n2LNE1DdXwTTIkchrhG1Cl6Nc yVPis2T+Gzqe99OdhcwFoIsxMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5Z2YN0 AnsY2xOvVVeKZpFpeL5kMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnCif+m6pI3VCRo1qa6kZG0MB6AMhzWFsqYIAQAIuCCO9AtP/t9kLJacT8aD Mpsw8T8TDJPgRvUauGeleenuuvEXLUPfhLlLT5wETBEcl7Gm9nNXstYmCk+B3dNS JKEfMU5iCCeC1vGeDng7fje2/wzPuS04V9IJJ0ljI11Y+82Erq4vrk6Ra2GcdE05 7GZz59z7yN0O0kenRaM7WP+Jc7UFFXQzF3qAryMoU0gfyqcI6CbxKucAovKOWNiE 4cLUZhMbVCzUbkhtWV12lo2e0HZ4iA0fr8JMdiMz1IrtpShy7DhTqmQfkyI+ngu5 yzKuO/d83OX1qRYSmUZvIBExLQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:27 2026 by rpki-client