$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: 1uAetyblaI99Y/CtjLbo650d5A/K71WFyfEPumoxOJY= Subject key identifier: 06:ED:67:25:11:16:15:70:F8:8F:8C:56:44:EF:D5:FA:82:3A:6F:4C Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: B8 Signing time: Mon 21 Sep 2026 06:56:02 +0000 Manifest this update: Mon 21 Sep 2026 06:56:01 +0000 Manifest next update: Mon 28 Sep 2026 06:56:01 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: 0JI5EX7FllQExF52SgdnFDtDXyifqk8A5tg4bVC4cXs=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Sep 21 06:56:01 2026 GMT Not After : Sep 28 06:56:01 2026 GMT Subject: CN=6ab0d502-9fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:0f:cd:d6:95:b0:2d:f4:1b:0f:f0:19:8d: aa:70:a9:5d:0c:6d:5f:3f:bf:68:54:82:42:dd:66: 79:02:60:da:20:c9:5c:64:73:c0:08:2f:25:e6:9e: 66:2f:32:0c:c7:e3:10:16:bd:d6:aa:6c:ea:f1:2d: d5:16:9d:52:7e:96:4c:07:28:6f:19:71:50:36:20: f1:dd:1d:4c:e4:ad:b4:ed:00:bf:6c:7c:a3:95:99: 89:b2:41:05:b3:71:60:21:34:ac:74:93:9f:1a:1d: 12:f2:0f:4e:d1:cb:b4:f7:8a:02:b8:2e:3d:89:b3: 13:a3:d3:6a:7e:2d:3d:03:c2:23:1c:2d:a6:02:04: 2a:f0:5f:37:bc:42:db:18:2c:69:e1:50:08:6a:38: d2:d0:a6:c9:33:f5:97:4a:4e:8c:0f:0e:9d:55:9f: c5:f8:05:dc:67:41:5b:28:f7:9f:90:1f:77:51:9f: 93:30:db:74:af:f1:7f:5f:a4:cb:49:15:11:89:4e: a9:e7:c0:e0:9b:80:0a:56:18:bc:47:f9:e2:ef:96: 4f:c4:2c:f0:d7:ba:58:91:3e:48:f4:35:dd:c9:7c: d6:07:f5:93:67:f3:1f:a7:9c:e3:82:8c:d0:e6:92: cb:f0:0b:97:b7:1f:b0:b2:6e:c6:b0:0f:7e:61:e6: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:ED:67:25:11:16:15:70:F8:8F:8C:56:44:EF:D5:FA:82:3A:6F:4C X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9c:a3:ba:ce:36:6d:cb:9e:b1:8d:7f:c9:0f:39:57:3e:ea: 66:51:2b:31:7f:b5:08:a7:70:c5:6b:31:03:1b:d0:d7:23:42: f5:5b:f7:eb:7f:dc:dc:19:e5:cc:b1:5b:2a:f2:55:fb:9b:6f: 9f:af:67:79:7a:ac:2b:10:55:5b:bb:49:de:4c:e4:f5:6c:0f: 5b:f5:22:3d:a5:f3:61:4a:26:90:1b:73:1e:a5:c0:bf:05:66: 14:d0:b5:af:5d:76:69:28:e6:da:4f:2a:00:df:0e:76:1e:3f: 8b:19:e8:f3:ac:1d:a8:1e:13:f6:da:7f:0d:30:df:75:64:fc: 71:b8:f7:ea:44:c9:90:de:14:d1:b8:59:5b:13:91:95:e8:41: 0a:04:b5:88:89:d0:4b:db:6d:f5:f4:0b:e9:ac:16:ef:9b:f9: bc:8e:2e:c1:8f:b0:35:66:a6:5d:2d:f0:b2:a3:7b:f0:c5:b3: e4:57:3b:6b:6e:be:f5:84:df:97:6b:ac:f2:0b:e5:ce:42:92: ea:7a:b0:ff:3b:f3:66:c1:cc:da:23:91:fd:3f:10:24:22:7c: 20:ff:25:3b:c0:83:cc:53:c6:13:9e:71:43:6c:2f:56:10:ed: 7c:56:c8:5b:7a:ff:53:c6:3e:f0:b4:c2:fc:0a:ed:af:63:0c: 30:79:ca:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwMDAxMTAvBgNVBAUTKDY1QUFCRUYxN0NDQzA4MEM5QTM2MkEwODIxNTMwNEIx MUJENTA3RkUwHhcNMjYwOTIxMDY1NjAxWhcNMjYwOTI4MDY1NjAxWjAYMRYwFAYD VQQDEw02YWIwZDUwMi05ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhkPzdaVsC30Gw/wGY2qcKldDG1fP79oVIJC3WZ5AmDaIMlcZHPACC8l5p5m LzIMx+MQFr3Wqmzq8S3VFp1SfpZMByhvGXFQNiDx3R1M5K207QC/bHyjlZmJskEF s3FgITSsdJOfGh0S8g9O0cu094oCuC49ibMTo9Nqfi09A8IjHC2mAgQq8F83vELb GCxp4VAIajjS0KbJM/WXSk6MDw6dVZ/F+AXcZ0FbKPefkB93UZ+TMNt0r/F/X6TL SRURiU6p58Dgm4AKVhi8R/ni75ZPxCzw17pYkT5I9DXdyXzWB/WTZ/Mfp5zjgozQ 5pLL8AuXtx+wsm7GsA9+Yea5GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbtZyUR FhVw+I+MVkTv1fqCOm9MMB8GA1UdIwQYMBaAFGWqvvF8zAgMmjYqCCFTBLEb1Qf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FNUExMzhEMDlE MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNBeWFOaW9JSVZNRXNSdlZC XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjAwMC9FNUExMzhEMDlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNB eWFOaW9JSVZNRXNSdlZCXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsJyjus42bcuesY1/yQ85Vz7qZlErMX+1CKdwxWsxAxvQ1yNC9Vv363/c3Bnl zLFbKvJV+5tvn69neXqsKxBVW7tJ3kzk9WwPW/UiPaXzYUomkBtzHqXAvwVmFNC1 r112aSjm2k8qAN8Odh4/ixno86wdqB4T9tp/DTDfdWT8cbj36kTJkN4U0bhZWxOR lehBCgS1iInQS9tt9fQL6awW75v5vI4uwY+wNWamXS3wsqN78MWz5Fc7a26+9YTf l2us8gvlzkKS6nqw/zvzZsHM2iOR/T8QJCJ8IP8lO8CDzFPGE55xQ2wvVhDtfFbI W3r/U8Y+8LTC/Artr2MMMHnKcw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:28:06 2026 by rpki-client