$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: BR/usSVqKZDOsxRwcSyb3ZbyWboIsFDGkg5zpXV5Y+o= Subject key identifier: FA:79:86:E8:68:F1:5C:2E:B2:F2:41:16:BD:6A:E6:73:8A:7A:91:CA Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 07:03:58 +0000 Manifest this update: Mon 21 Sep 2026 07:03:58 +0000 Manifest next update: Mon 28 Sep 2026 07:03:58 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: 0OM7/77MS9y/pA/nhlTq+yWyFqvGDdVG+tMfIjdn6cA=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: RqCpDoo45BvdNa/Wr+sL6cLBWSatPQ0KKDjOjSMWLg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Sep 21 07:03:58 2026 GMT Not After : Sep 28 07:03:58 2026 GMT Subject: CN=6ab0d6de-9ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:f2:81:59:03:ee:79:04:13:f7:e7:e5:b8: 92:f2:1b:13:89:3c:9f:b9:8d:d1:ff:1c:85:52:2b: c7:56:5c:d3:77:d8:03:d9:e0:39:78:98:73:14:56: 57:ed:30:06:dc:68:a1:3f:62:6b:7d:bc:7d:a3:c3: 85:8d:a8:7b:4d:b9:04:5d:87:72:2f:ea:53:92:65: f3:c2:3b:68:a4:ee:28:1c:29:1f:f8:59:ba:3c:d5: 9f:ab:7e:9e:d7:e0:12:b6:ff:d0:32:5d:33:20:3c: fa:75:a3:1f:1e:eb:d4:18:f5:fc:56:2c:e2:50:a8: 22:b2:c0:b2:0d:04:e4:f9:b2:ce:7e:c3:bd:41:65: 45:01:4e:c9:a0:61:1c:08:79:d7:c8:8d:ab:62:41: 58:dc:84:27:44:b8:d6:4e:12:03:cc:bc:ce:b7:d5: c4:4b:db:ef:8e:06:7e:09:8f:e9:6b:c6:f4:57:b6: 69:b8:77:d4:b2:2d:df:9e:fe:f2:a4:8b:aa:f3:ad: 94:c2:a3:8c:6b:d7:47:c4:1f:3d:ec:0b:22:54:f2: c6:4a:f5:64:fd:84:2b:b5:59:12:78:df:13:6f:4f: df:09:29:94:6b:06:d7:1e:72:a7:84:a3:ee:b8:87: c5:71:12:1c:df:ca:78:c3:c8:1b:01:b6:6b:e7:60: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:79:86:E8:68:F1:5C:2E:B2:F2:41:16:BD:6A:E6:73:8A:7A:91:CA X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:8d:79:f0:f1:7e:68:0d:05:32:34:a8:87:d4:db:09:6e:ff: 77:33:cb:a9:a7:95:63:45:46:2d:e7:8b:b3:36:cd:34:ae:18: 59:41:1a:15:32:3a:c0:e5:ee:9d:51:1d:47:29:e2:dc:67:20: 2e:6d:62:2d:b2:79:8a:6c:d6:c4:7d:47:35:42:b9:6a:e4:c9: e5:92:7e:45:36:b8:b6:09:5a:1c:4c:ef:7b:cd:69:8d:56:c2: 56:93:ea:e2:73:40:09:d0:d8:c0:52:a3:74:43:20:ff:2a:f3: e2:38:7b:f8:ea:d6:04:5f:34:12:9d:0d:44:5a:c9:ae:52:65: c2:dd:e1:2b:4e:25:59:28:7c:f1:a8:0f:61:fe:78:6e:41:e2: dd:d6:9f:95:fc:81:54:95:6e:a8:f8:bd:8f:d1:9a:86:c0:7d: bc:b3:1f:a1:e7:45:bf:2b:28:70:42:17:bc:63:f1:a7:20:d0: 3c:44:3f:38:7c:6e:c5:4c:5b:ec:5a:9a:2c:1e:5c:82:c0:cc: 34:b1:c8:b2:9c:9b:f8:b6:0b:69:e1:c5:e6:9f:64:be:a1:c6: 13:ab:89:6b:fb:3e:d1:d9:5d:04:dc:a2:9f:30:00:fc:cb:9b: 6b:da:a1:b9:b4:97:58:7a:f3:33:d5:82:1f:b5:ea:ca:37:6f: 9d:a7:91:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAwMkQxMTAvBgNVBAUTKDY1NEUwMjAxMjVDMUI3NTA3ODI2RjA1RkREQTkyNEI1 Mjg3NDA4RjkwHhcNMjYwOTIxMDcwMzU4WhcNMjYwOTI4MDcwMzU4WjAYMRYwFAYD VQQDEw02YWIwZDZkZS05YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PzygVkD7nkEE/fn5biS8hsTiTyfuY3R/xyFUivHVlzTd9gD2eA5eJhzFFZX 7TAG3GihP2Jrfbx9o8OFjah7TbkEXYdyL+pTkmXzwjtopO4oHCkf+Fm6PNWfq36e 1+AStv/QMl0zIDz6daMfHuvUGPX8ViziUKgissCyDQTk+bLOfsO9QWVFAU7JoGEc CHnXyI2rYkFY3IQnRLjWThIDzLzOt9XES9vvjgZ+CY/pa8b0V7ZpuHfUsi3fnv7y pIuq862UwqOMa9dHxB897AsiVPLGSvVk/YQrtVkSeN8Tb0/fCSmUawbXHnKnhKPu uIfFcRIc38p4w8gbAbZr52Dd9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPp5huho 8VwusvJBFr1q5nOKepHKMB8GA1UdIwQYMBaAFGVOAgElwbdQeCbwX92pJLUodAj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDAyRC8xNDlENUI1MkFE QTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQxQjRKdkJmM2Fra3RTaDBD UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDAyRC8xNDlENUI1MkFEQTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQx QjRKdkJmM2Fra3RTaDBDUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxI158PF+aA0FMjSoh9TbCW7/dzPLqaeVY0VGLeeLszbNNK4YWUEaFTI6wOXu nVEdRyni3GcgLm1iLbJ5imzWxH1HNUK5auTJ5ZJ+RTa4tglaHEzve81pjVbCVpPq 4nNACdDYwFKjdEMg/yrz4jh7+OrWBF80Ep0NRFrJrlJlwt3hK04lWSh88agPYf54 bkHi3daflfyBVJVuqPi9j9GahsB9vLMfoedFvysocEIXvGPxpyDQPEQ/OHxuxUxb 7FqaLB5cgsDMNLHIspyb+LYLaeHF5p9kvqHGE6uJa/s+0dldBNyinzAA/Muba9qh ubSXWHrzM9WCH7XqyjdvnaeRmw== -----END CERTIFICATE-----Generated at Tue Sep 22 08:39:38 2026 by rpki-client