$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: av1rVmMQpR4zsTUrzG62owGm9G8dYmOiGA3xxCmtscc= Subject key identifier: FD:83:19:80:0E:0E:84:66:60:2C:77:0E:78:EB:3A:81:8B:6E:A9:8E Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2CA4 Signing time: Tue 22 Sep 2026 16:47:23 +0000 Manifest this update: Tue 22 Sep 2026 16:47:22 +0000 Manifest next update: Tue 29 Sep 2026 16:47:22 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: gSCyNQe+7qm3iefamC1bx59vTg8mZFiFdxOuZcaWttk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3895 (0xf37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Sep 22 16:47:22 2026 GMT Not After : Sep 29 16:47:22 2026 GMT Subject: CN=6ab2b11a-1c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:5b:f9:78:0f:44:d1:ea:45:49:a3:f4:92: 21:12:78:94:d6:b1:cb:ff:af:fa:55:18:4e:29:3f: 80:ac:8b:ad:d7:bf:da:80:48:d4:c6:db:80:85:2b: 4d:ce:2f:2a:09:37:38:ca:cf:9c:bc:ef:ce:be:c9: df:3f:68:94:ea:40:0b:59:0f:72:00:8c:48:6e:e1: fa:c6:d9:be:e4:01:0b:50:4c:93:06:cc:a7:4c:0f: 6f:2c:3f:29:0c:0a:93:b4:f0:9b:f9:1b:c5:ba:ac: 5f:80:92:82:a0:7a:e7:d7:14:a4:d3:fd:fb:69:f4: 1d:25:89:9c:3a:a1:bb:9b:f6:39:be:3a:ed:fc:fd: b9:1b:cd:d3:06:c4:a3:8a:1b:a5:3a:a2:48:4c:a2: 93:d5:32:bd:ae:71:14:98:c4:d9:b4:84:a9:a7:7d: e1:71:7b:a5:61:b7:4d:75:8c:fe:15:38:4b:ba:05: c8:69:72:21:b8:16:54:f6:cf:5b:f0:f7:8e:ad:7e: 92:a7:ce:3b:98:a4:70:b5:ec:3c:cf:57:38:0a:74: ea:79:13:e4:d6:d6:00:49:21:ec:b5:1b:44:df:50: 2b:67:f9:d0:94:26:b1:e6:1e:fa:6a:9e:d4:74:06: ce:f1:a8:25:96:2f:cd:05:46:0c:b2:16:25:2e:a2: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:19:80:0E:0E:84:66:60:2C:77:0E:78:EB:3A:81:8B:6E:A9:8E X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:23:d5:19:fd:37:b2:ce:42:8a:14:3c:2c:3d:0a:5c:43:fb: 8a:02:c8:53:52:d2:8d:39:f0:15:a9:d2:8f:cf:19:25:cf:1b: e5:78:c7:23:f9:b4:ca:3c:d5:da:1e:a7:eb:29:66:ec:26:f0: 58:29:77:de:46:c7:8f:7d:1c:19:ef:0b:9c:1f:89:14:ad:48: fb:61:bb:7e:e9:e8:96:a5:e2:5b:df:9b:27:1d:e8:b1:91:45: 00:4b:c3:9c:70:c0:62:03:c6:27:15:34:b0:54:f3:47:ae:9e: 7c:27:a1:c3:a2:97:a8:53:7f:75:ba:46:1d:b7:34:76:0c:27: cf:7c:52:25:f5:15:2d:ca:3b:74:90:fe:1c:8f:5d:3f:ec:bd: 19:99:f8:7d:89:8c:dd:ae:e6:c8:f7:29:4a:6e:13:c0:4a:c8: 3c:8d:07:a2:80:d6:86:e1:f5:ee:2f:4b:4d:52:36:1e:e2:70: bb:e6:07:55:96:9f:b8:ec:9a:f2:40:c8:a5:d2:87:5b:51:ad: 6d:2f:6d:bb:ed:7d:69:5c:3d:ce:5d:cd:dc:63:8e:e2:b7:0c: dd:05:51:79:2e:24:01:6f:eb:63:7a:8b:20:05:d2:31:29:fa: 45:ad:3d:c8:70:31:c4:18:a6:e0:dd:6f:0f:35:75:1d:9d:31: db:f0:ef:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjYwOTIyMTY0NzIyWhcNMjYwOTI5MTY0NzIyWjAYMRYwFAYD VQQDEw02YWIyYjExYS0xYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8Zb+XgPRNHqRUmj9JIhEniU1rHL/6/6VRhOKT+ArIut17/agEjUxtuAhStN zi8qCTc4ys+cvO/OvsnfP2iU6kALWQ9yAIxIbuH6xtm+5AELUEyTBsynTA9vLD8p DAqTtPCb+RvFuqxfgJKCoHrn1xSk0/37afQdJYmcOqG7m/Y5vjrt/P25G83TBsSj ihulOqJITKKT1TK9rnEUmMTZtISpp33hcXulYbdNdYz+FThLugXIaXIhuBZU9s9b 8PeOrX6Sp847mKRwtew8z1c4CnTqeRPk1tYASSHstRtE31ArZ/nQlCax5h76ap7U dAbO8aglli/NBUYMshYlLqKscQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2DGYAO DoRmYCx3DnjrOoGLbqmOMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSPVGf03ss5CihQ8LD0KXEP7igLIU1LSjTnwFanSj88ZJc8b5XjHI/m0yjzV 2h6n6ylm7CbwWCl33kbHj30cGe8LnB+JFK1I+2G7funolqXiW9+bJx3osZFFAEvD nHDAYgPGJxU0sFTzR66efCehw6KXqFN/dbpGHbc0dgwnz3xSJfUVLco7dJD+HI9d P+y9GZn4fYmM3a7myPcpSm4TwErIPI0HooDWhuH17i9LTVI2HuJwu+YHVZafuOya 8kDIpdKHW1GtbS9tu+19aVw9zl3N3GOO4rcM3QVReS4kAW/rY3qLIAXSMSn6Ra09 yHAxxBim4N1vDzV1HZ0x2/DvSA== -----END CERTIFICATE-----Generated at Wed Sep 23 02:21:57 2026 by rpki-client