$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: Ux0uax63Ik2krMYlyJVmouDE3S4noBqIO1mtO0I/6go= Subject key identifier: DE:D9:23:B8:BF:95:27:A0:3D:EF:27:07:E1:B0:9F:39:6D:14:C3:7B Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 0221 Signing time: Thu 05 Nov 2026 03:58:35 +0000 Manifest this update: Thu 05 Nov 2026 03:58:34 +0000 Manifest next update: Thu 12 Nov 2026 03:58:34 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: McN7oMp68k8JJ8+dt7KRHZ0RtmYXNJoiFZ/dT1VB8k0=) 2: 9C457296810A11F1BDF96ABB6CA30FBC.roa (hash: mfMM1rWOREqg0X2Y0BnQVxJe3RdEDQ0y+IePXzNhgjY=) 3: F0FFDBF6686D11F18ACBCE18A247A888.roa (hash: CAMy7JCqCcMBjMFrQ5fn4gzgU0neIkf9oa/fpbxqTn0=) 4: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=) 5: F-eGmluoQDcJwZvYQm5uqKBVjuM.asa (hash: SPz1HKfVzTdUzy5CGwKPcxQYeh0C/4QtvqZ//tdMDXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Nov 5 03:58:34 2026 GMT Not After : Nov 12 03:58:34 2026 GMT Subject: CN=6aebfeeb-1c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:cc:84:36:af:a2:a5:2c:e0:d1:cb:e3:a1: 7a:e4:b0:d7:e4:14:9e:f2:bc:c5:dc:39:36:df:16: 1c:07:fa:15:84:97:43:f7:c8:f9:51:e2:91:9b:fc: e9:17:9b:df:84:33:03:33:67:52:2b:77:cb:10:2c: ed:5e:9c:e5:17:70:b1:3b:10:2e:5c:4a:02:75:77: c2:9b:38:da:d1:5c:8d:9c:43:9b:cb:10:7e:73:3d: 38:4c:3f:b6:c1:73:c5:4f:bc:22:51:93:16:f9:1a: 55:ec:1c:56:d9:b6:93:95:1c:c8:c9:89:0e:b7:c0: 71:f0:b4:79:ee:1c:a2:d6:13:ef:55:5f:f8:23:27: fe:e9:d8:03:a1:bb:0a:c2:cf:bb:ff:62:36:ad:63: 64:ca:7d:0b:29:90:0f:42:45:00:1b:80:b0:53:f5: 96:34:0a:1a:be:c6:24:c3:cb:8a:01:a3:76:87:88: 14:a0:69:2d:48:fa:51:16:c2:e7:c4:62:a1:2c:ff: cb:fb:94:ce:9d:34:8e:41:ca:6a:bd:83:f0:87:2c: cf:67:0b:c4:ba:35:be:f3:be:58:dc:d7:59:27:5b: da:3a:d9:52:fe:10:e6:1d:ed:96:62:fd:23:31:a4: b2:79:ef:75:c0:c3:d0:bf:44:14:5f:1c:9a:a9:2a: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:23:B8:BF:95:27:A0:3D:EF:27:07:E1:B0:9F:39:6D:14:C3:7B X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:13:ef:c1:4a:8a:04:06:c6:f6:2d:56:0d:4c:1e:37:1b:79: 60:ef:c4:3b:06:a3:18:02:52:2b:22:ac:a8:f4:98:ae:1d:3c: b2:4b:1b:ed:d3:29:74:f6:b7:87:54:2f:56:4d:d1:e5:36:45: fd:f2:dd:e1:2b:ef:80:72:e1:df:d8:15:de:35:ad:57:66:5c: 4f:55:a6:3f:79:d1:60:07:a4:e5:93:8b:7a:ef:3b:d7:16:bd: d6:5f:e9:68:81:62:d6:4a:02:31:e9:74:06:66:11:42:b8:e6: 86:3b:01:82:b9:e7:65:5f:ad:fb:0d:dc:a7:32:df:99:60:b7: 19:e2:4a:8b:bb:f9:ab:cf:ad:b3:40:17:58:17:81:0a:4d:c8: 26:10:88:ad:65:ff:1e:47:a5:d5:a9:26:f1:b1:8e:75:56:86: 21:74:1a:81:32:27:50:3c:0c:81:a5:c8:e4:a5:b2:bb:82:0b: 60:af:ae:7d:83:f4:98:85:a4:3c:37:51:63:4d:60:f8:20:0b: 20:15:bd:69:12:20:ce:d7:d5:24:07:75:6b:6b:f7:bb:ba:32: 36:35:cc:99:7e:f4:1a:2a:ab:3d:5e:53:40:01:46:e2:a9:29: 9c:f3:72:ad:a9:05:a2:5c:86:ee:6f:cf:d3:7c:43:f8:b8:01: a1:23:b5:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjYxMTA1MDM1ODM0WhcNMjYxMTEyMDM1ODM0WjAYMRYwFAYD VQQDEw02YWViZmVlYi0xYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvTMhDavoqUs4NHL46F65LDX5BSe8rzF3Dk23xYcB/oVhJdD98j5UeKRm/zp F5vfhDMDM2dSK3fLECztXpzlF3CxOxAuXEoCdXfCmzja0VyNnEObyxB+cz04TD+2 wXPFT7wiUZMW+RpV7BxW2baTlRzIyYkOt8Bx8LR57hyi1hPvVV/4Iyf+6dgDobsK ws+7/2I2rWNkyn0LKZAPQkUAG4CwU/WWNAoavsYkw8uKAaN2h4gUoGktSPpRFsLn xGKhLP/L+5TOnTSOQcpqvYPwhyzPZwvEujW+875Y3NdZJ1vaOtlS/hDmHe2WYv0j MaSyee91wMPQv0QUXxyaqSqNOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7ZI7i/ lSegPe8nB+GwnzltFMN7MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArRPvwUqKBAbG9i1WDUweNxt5YO/EOwajGAJSKyKsqPSYrh08sksb7dMpdPa3 h1QvVk3R5TZF/fLd4SvvgHLh39gV3jWtV2ZcT1WmP3nRYAek5ZOLeu871xa91l/p aIFi1koCMel0BmYRQrjmhjsBgrnnZV+t+w3cpzLfmWC3GeJKi7v5q8+ts0AXWBeB Ck3IJhCIrWX/Hkel1akm8bGOdVaGIXQagTInUDwMgaXI5KWyu4ILYK+ufYP0mIWk PDdRY01g+CALIBW9aRIgztfVJAd1a2v3u7oyNjXMmX70GiqrPV5TQAFG4qkpnPNy rakFolyG7m/P03xD+LgBoSO1Tg== -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:48 2026 by rpki-client