$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json) Hash identifier: bAJ4QCU6EjNx9j2g2Zg8roa6SyfnTDy6g45g7MM2Fmo= Subject key identifier: 04:EF:EF:9A:C0:5E:3E:08:EB:8A:8B:0C:EE:B0:ED:76:D9:DA:95:08 Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft Manifest number: A2 Signing time: Mon 21 Sep 2026 07:16:17 +0000 Manifest this update: Mon 21 Sep 2026 07:16:17 +0000 Manifest next update: Mon 28 Sep 2026 07:16:17 +0000 Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: 5yYsfi2c92GCMttrZZpyW7BRMwCGzDuAlm9yPey3YZw=) 2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Validity Not Before: Sep 21 07:16:17 2026 GMT Not After : Sep 28 07:16:17 2026 GMT Subject: CN=6ab0d9c1-67d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:8d:bd:72:2c:f1:c3:64:9e:a4:19:43:95: fc:4c:6d:8a:03:88:64:ed:a9:e9:ed:a1:c0:a0:f2: 5e:c2:14:00:89:7e:07:31:90:e9:2b:b7:6b:68:1c: 1c:4c:97:81:56:a4:9d:de:cb:81:7f:cb:28:73:67: 06:cc:6c:ef:1a:7e:08:8c:75:ba:81:fb:98:51:68: 35:76:4e:9a:e7:0b:5b:6e:f8:09:8e:cb:1e:e1:ee: bd:e5:49:e8:d0:86:96:22:4c:1f:9c:52:fc:24:12: 09:a8:da:d1:68:7e:6b:a1:3d:38:e2:29:2a:40:7a: af:7d:78:42:cf:58:96:80:c9:19:a0:5b:8c:8e:99: 44:30:f0:4b:c4:be:33:e1:ab:34:be:51:7e:a0:3b: 06:21:0a:2c:79:66:9a:08:47:7f:28:64:4e:e3:e5: d3:70:1f:da:e9:e8:20:fc:b0:b5:6c:93:5b:76:cc: 26:1b:03:77:b3:12:eb:07:e1:14:dc:03:ac:18:26: ef:14:2b:d4:bd:b3:35:12:0d:82:ed:d1:d1:29:17: 8a:4a:c8:5c:3a:3c:7f:e3:ce:82:30:5a:10:96:f3: 23:69:80:98:27:52:c3:07:58:bd:56:d5:8a:c0:a3: 76:3c:52:45:c9:dc:1f:3f:c5:1d:b9:fb:9f:15:22: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EF:EF:9A:C0:5E:3E:08:EB:8A:8B:0C:EE:B0:ED:76:D9:DA:95:08 X509v3 Authority Key Identifier: keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a4:93:a3:2f:ab:eb:6b:b6:49:24:b8:92:16:b7:65:b6:4e: d2:5b:04:89:e9:f6:d5:fd:3a:19:d7:a5:51:73:c2:1c:85:5a: 5e:97:27:d5:33:9e:3b:c0:6d:ff:87:58:41:90:fe:49:1f:40: 1f:b7:98:6d:23:22:ba:b3:a8:54:c4:17:bc:05:d4:e6:e5:69: af:36:b9:7f:12:7d:57:5d:db:c1:05:83:9d:29:df:73:d9:14: 6a:29:f5:9c:52:03:14:e2:7f:14:98:a8:07:8a:22:49:f5:45: 7c:1b:c6:48:6e:03:96:fc:88:cf:4c:f2:97:db:7c:28:95:65: 63:7b:75:29:5e:fd:ed:d1:bf:e2:f4:cb:a6:ed:c1:0b:e6:1a: f2:05:12:ba:0c:b2:18:ed:fd:23:0a:6c:fa:b8:2b:e5:c8:ab: 19:34:46:75:64:60:c0:7f:be:08:ec:3c:36:5b:09:ff:c2:2b: f7:35:4f:ed:d7:fc:6c:02:13:f7:a8:d9:f1:42:c9:f4:08:46: 38:8b:fa:0f:9c:96:7f:0a:0a:95:da:29:9c:d6:20:2a:fb:da: a1:f1:fe:79:e6:f4:a7:18:6f:fe:c7:f1:aa:4c:ab:2b:ef:a3: 43:c0:c8:2a:14:19:19:13:aa:c1:fb:93:ec:e0:60:b5:9b:f6: d8:55:fa:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyREIxMTAvBgNVBAUTKENGMjE1QUM5MTFDQUE1MjA2NUM3RUM0QUM3OTU3ODM1 MzgyQkUzRUQwHhcNMjYwOTIxMDcxNjE3WhcNMjYwOTI4MDcxNjE3WjAYMRYwFAYD VQQDEw02YWIwZDljMS02N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVuNvXIs8cNknqQZQ5X8TG2KA4hk7anp7aHAoPJewhQAiX4HMZDpK7draBwc TJeBVqSd3suBf8soc2cGzGzvGn4IjHW6gfuYUWg1dk6a5wtbbvgJjsse4e695Uno 0IaWIkwfnFL8JBIJqNrRaH5roT044ikqQHqvfXhCz1iWgMkZoFuMjplEMPBLxL4z 4as0vlF+oDsGIQoseWaaCEd/KGRO4+XTcB/a6egg/LC1bJNbdswmGwN3sxLrB+EU 3AOsGCbvFCvUvbM1Eg2C7dHRKReKSshcOjx/486CMFoQlvMjaYCYJ1LDB1i9VtWK wKN2PFJFydwfP8UdufufFSLJKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATv75rA Xj4I64qLDO6w7XbZ2pUIMB8GA1UdIwQYMBaAFM8hWskRyqUgZcfsSseVeDU4K+Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJEQi8wQ0E3N0ZENkM0 MzUxMUYwODEzOEYwN0RDNEY5QUUwMi96eUZheVJIS3BTQmx4LXhLeDVWNE5UZ3I0 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p5RmF5UkhLcFNCbHgteEt4NVY0TlRncjQtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJEQi8wQ0E3N0ZENkM0MzUxMUYwODEzOEYwN0RDNEY5QUUwMi96eUZheVJIS3BT Qmx4LXhLeDVWNE5UZ3I0LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARaSToy+r62u2SSS4kha3ZbZO0lsEien21f06GdelUXPCHIVaXpcn1TOeO8Bt /4dYQZD+SR9AH7eYbSMiurOoVMQXvAXU5uVprza5fxJ9V13bwQWDnSnfc9kUain1 nFIDFOJ/FJioB4oiSfVFfBvGSG4DlvyIz0zyl9t8KJVlY3t1KV797dG/4vTLpu3B C+Ya8gUSugyyGO39Iwps+rgr5cirGTRGdWRgwH++COw8NlsJ/8Ir9zVP7df8bAIT 96jZ8ULJ9AhGOIv6D5yWfwoKldopnNYgKvvaofH+eeb0pxhv/sfxqkyrK++jQ8DI KhQZGROqwfuT7OBgtZv22FX6yg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:23 2026 by rpki-client