$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: PPjnx/WbpB9Ux5lFze3rWn+vOtSmzAL/Ti4unU3d+fQ= Subject key identifier: CF:8F:1D:A6:78:D4:5D:46:C7:88:84:A6:DF:3E:9A:18:EC:88:4C:89 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0277 Signing time: Wed 23 Sep 2026 01:58:38 +0000 Manifest this update: Wed 23 Sep 2026 01:58:38 +0000 Manifest next update: Wed 30 Sep 2026 01:58:38 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: tjMYzKGGKVW3vMXx6f4ozXdZrsUOp+M7XjWJhpKxktk=) 2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: S+qe2Z8BjsHUcKBFh91p++nA2XhFbE2SxTa6XiCPG9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Sep 23 01:58:38 2026 GMT Not After : Sep 30 01:58:38 2026 GMT Subject: CN=6ab3324e-07e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:ed:f7:64:2e:fc:7e:b3:a7:cd:22:3e:62: d6:13:c4:30:f0:c3:f8:2a:93:3b:4a:6c:da:0b:bc: 3b:b4:a8:27:fa:33:f4:cb:8f:60:0e:95:39:9c:a6: 73:9d:44:bd:ab:11:b9:31:b8:98:20:2f:52:96:ac: 96:d1:d1:34:c1:28:89:20:7f:4b:09:2a:2a:c1:dd: 0f:2c:49:3e:01:9d:e4:f6:08:0b:fb:dd:02:a8:e6: 7a:f9:1d:9a:a4:03:70:2b:08:61:5c:bb:1b:80:0d: dd:b5:be:4b:69:01:dc:57:df:36:5e:be:46:0b:f8: 43:4d:bf:45:7d:84:75:14:a0:a7:7c:9b:f5:cc:33: b6:bd:84:a0:d7:b2:18:f6:04:52:3e:ea:4e:98:cb: 8b:5c:cf:41:dd:c1:4b:52:6b:22:54:44:84:d8:a2: c7:d0:15:71:59:df:d1:c2:2d:7b:df:d7:42:da:28: 99:ff:99:69:7b:4f:94:de:ac:a8:75:f4:ef:a4:b7: 47:4c:26:74:6d:a7:43:5b:3a:b5:d2:0b:1b:12:3e: 39:42:cf:50:41:67:f8:41:9d:1f:69:e0:34:10:6b: 57:77:cc:45:13:d8:6b:be:1a:ff:a0:48:5c:2a:47: 0d:1f:01:be:98:8c:25:65:58:ee:26:bb:d7:e8:85: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8F:1D:A6:78:D4:5D:46:C7:88:84:A6:DF:3E:9A:18:EC:88:4C:89 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6e:eb:fa:93:19:07:f8:ef:80:55:98:20:30:a0:45:01:c8: 78:ca:5b:69:00:b7:eb:7c:25:33:51:9d:d7:64:8c:3a:12:41: 64:11:a2:71:5d:93:60:ef:9a:bf:d5:7d:97:67:2f:02:d2:13: f7:e6:4e:78:a9:f2:81:16:8e:81:4a:11:77:bf:3e:5a:3b:ae: 92:55:e6:23:20:ce:c2:74:87:d2:0e:81:b5:3a:ae:a0:a4:a8: c7:16:f6:08:c3:1a:41:1a:12:9c:e4:e3:44:c7:24:d6:af:c9: c7:ab:9c:35:83:36:46:a3:cc:b8:9d:c2:cb:dc:79:d0:ea:5c: c7:63:c4:14:96:7e:e7:97:2a:4c:f1:f9:12:65:23:54:0d:40: 61:6e:06:a3:d0:26:e0:b1:ca:ec:42:0d:03:67:d0:a2:e7:0d: 0e:a9:92:67:a9:23:6c:bf:05:0b:e3:94:25:2c:93:bb:99:1f: d1:26:29:1d:65:ed:9c:f2:e5:05:20:2a:f6:c7:93:86:b3:c3: c5:17:ab:ff:75:d3:f0:7c:a9:7d:5a:f7:fa:4d:40:84:31:12: 55:6c:51:e9:20:91:81:28:d7:c4:2b:49:f3:26:d6:8c:01:ad: 51:4f:34:45:24:cf:c7:e0:06:c9:eb:5d:84:01:29:d7:d9:d2: 79:b8:9c:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwOTIzMDE1ODM4WhcNMjYwOTMwMDE1ODM4WjAYMRYwFAYD VQQDEw02YWIzMzI0ZS0wN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Pt92Qu/H6zp80iPmLWE8Qw8MP4KpM7SmzaC7w7tKgn+jP0y49gDpU5nKZz nUS9qxG5MbiYIC9SlqyW0dE0wSiJIH9LCSoqwd0PLEk+AZ3k9ggL+90CqOZ6+R2a pANwKwhhXLsbgA3dtb5LaQHcV982Xr5GC/hDTb9FfYR1FKCnfJv1zDO2vYSg17IY 9gRSPupOmMuLXM9B3cFLUmsiVESE2KLH0BVxWd/Rwi1739dC2iiZ/5lpe0+U3qyo dfTvpLdHTCZ0badDWzq10gsbEj45Qs9QQWf4QZ0faeA0EGtXd8xFE9hrvhr/oEhc KkcNHwG+mIwlZVjuJrvX6IVZUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+PHaZ4 1F1Gx4iEpt8+mhjsiEyJMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmW7r+pMZB/jvgFWYIDCgRQHIeMpbaQC363wlM1Gd12SMOhJBZBGicV2TYO+a v9V9l2cvAtIT9+ZOeKnygRaOgUoRd78+WjuuklXmIyDOwnSH0g6BtTquoKSoxxb2 CMMaQRoSnOTjRMck1q/Jx6ucNYM2RqPMuJ3Cy9x50Opcx2PEFJZ+55cqTPH5EmUj VA1AYW4Go9Am4LHK7EINA2fQoucNDqmSZ6kjbL8FC+OUJSyTu5kf0SYpHWXtnPLl BSAq9seThrPDxRer/3XT8HypfVr3+k1AhDESVWxR6SCRgSjXxCtJ8ybWjAGtUU80 RSTPx+AGyetdhAEp19nSebictw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:43:14 2026 by rpki-client