$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft File: RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft (raw, json) Hash identifier: feYF7PFeILtEImUQ1gUk05qiqvLLkx2OsmYAvw6+6uM= Subject key identifier: 61:8E:C9:B5:D3:08:65:E5:25:96:41:B0:56:4C:A9:52:A9:7D:1C:ED Authority key identifier: 44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54 Certificate issuer: /CN=A91CDA42/serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft Manifest number: 05 Signing time: Mon 21 Sep 2026 09:15:35 +0000 Manifest this update: Mon 21 Sep 2026 09:15:34 +0000 Manifest next update: Mon 28 Sep 2026 09:15:34 +0000 Files and hashes: 1: RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl (hash: SlE9gZo+bp3Z6OemB6/lX4+fzY95ecxsDrlMKf7ef0U=) 2: DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa (hash: EQuIyZqz36tlNEX2RXbyf/oGDe/1+hdr6fH5I/bv7Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDA42, serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754 Validity Not Before: Sep 21 09:15:34 2026 GMT Not After : Sep 28 09:15:34 2026 GMT Subject: CN=6ab0f5b7-bfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:14:d9:59:9b:1b:5f:fd:aa:cd:58:3e:f2: 35:95:c7:6e:53:42:2b:01:b4:22:d2:fa:dc:b1:93: f1:de:5f:88:ca:6b:9e:9e:71:3a:e5:ce:03:63:03: 1d:45:0c:27:a3:43:bc:a0:23:df:cd:66:cf:71:d7: ed:38:10:ae:ac:b0:e7:ed:6d:6e:70:10:7d:ad:86: 08:69:07:18:8d:0a:e1:78:d9:bd:07:59:c5:2f:30: f9:85:46:9e:63:e8:bd:cd:ca:40:24:de:b0:10:7e: d4:1e:2c:f8:df:55:ca:27:c9:d6:4e:e0:fc:7a:aa: 92:a0:96:28:24:c9:b5:25:f5:52:ea:f8:71:3b:93: d0:07:55:71:5a:46:81:f6:7b:52:63:1b:60:c7:45: 81:ff:e3:a9:78:f3:f8:a5:58:fc:6b:2f:73:c8:f2: 1e:30:98:46:54:2f:55:42:3a:e4:9b:29:ad:12:24: b0:29:2a:d8:0e:71:19:dd:09:d4:5f:db:e6:31:90: e9:11:31:bc:17:30:7b:81:ad:85:c6:2f:8f:61:f1: 85:1c:1b:30:e0:e6:31:9e:a0:23:dd:04:92:f0:af: b9:b1:b4:ac:25:81:26:7b:9c:28:7a:36:93:b6:c0: f0:30:ce:1d:0a:33:68:ae:2e:7f:14:62:45:b6:64: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:C9:B5:D3:08:65:E5:25:96:41:B0:56:4C:A9:52:A9:7D:1C:ED X509v3 Authority Key Identifier: keyid:44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:fb:5b:93:be:25:a8:5b:75:cd:bf:2b:ba:29:88:2c:0a:73: fc:ec:f7:9c:a7:61:24:82:11:10:e1:b8:81:60:2b:f1:e6:f5: 68:f6:b2:01:1f:c4:d9:e5:3c:94:8b:16:6c:22:de:1f:9a:19: c5:8e:dd:54:7f:e3:9d:68:c0:d9:ed:ee:b9:56:33:79:52:60: f2:b9:69:5a:7d:b3:a9:25:39:8b:f1:2f:50:4a:8c:20:ba:05: 79:d7:99:d2:45:81:22:4f:74:90:45:e5:ab:c2:70:4e:6d:bd: 73:6b:e1:f3:f8:18:40:5d:6f:bd:33:44:84:66:a5:a6:f1:a4: f6:cb:19:af:5b:59:0b:6b:6e:1a:2e:21:bb:09:e6:e1:16:02: b0:d4:00:f2:fc:96:4f:c7:4c:9d:bd:ff:3d:0e:cf:64:79:30: 63:56:7e:88:6f:fa:33:4e:b3:5a:11:d9:a1:0e:c7:4f:37:c6: 8c:da:cf:83:2e:34:a9:71:ed:cd:a8:f8:9f:d1:a1:88:d0:4a: f4:e6:e9:19:11:46:e1:c1:ca:01:b1:f6:4e:28:89:43:06:cd: a2:b6:55:94:82:cb:a7:10:48:fb:a1:e3:3b:ab:a0:60:61:f9: 44:c8:e2:d5:a0:58:70:f9:27:05:a9:13:5c:33:af:0f:d4:4c: 48:8a:08:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REE0MjExMC8GA1UEBRMoNDRGNjRDNDczRTNBNjM4RDU5RTE4QTBBRkEyMzhEQ0Q4 Nzk4Qzc1NDAeFw0yNjA5MjEwOTE1MzRaFw0yNjA5MjgwOTE1MzRaMBgxFjAUBgNV BAMTDTZhYjBmNWI3LWJmZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzORTZWZsbX/2qzVg+8jWVx25TQisBtCLS+tyxk/HeX4jKa56ecTrlzgNjAx1F DCejQ7ygI9/NZs9x1+04EK6ssOftbW5wEH2thghpBxiNCuF42b0HWcUvMPmFRp5j 6L3NykAk3rAQftQeLPjfVconydZO4Px6qpKgligkybUl9VLq+HE7k9AHVXFaRoH2 e1JjG2DHRYH/46l48/ilWPxrL3PI8h4wmEZUL1VCOuSbKa0SJLApKtgOcRndCdRf 2+YxkOkRMbwXMHuBrYXGL49h8YUcGzDg5jGeoCPdBJLwr7mxtKwlgSZ7nCh6NpO2 wPAwzh0KM2iuLn8UYkW2ZI8fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYY7JtdMI ZeUllkGwVkypUql9HO0wHwYDVR0jBBgwFoAURPZMRz46Y41Z4YoK+iONzYeYx1Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQTQyL0NDQUZDQUZFQjFC QTExRjFBNjlFNzE0ODM5MTFGOTcwL1JQWk1SejQ2WTQxWjRZb0staU9OelllWXgx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlBaTVJ6NDZZNDFaNFlvSy1pT056WWVZeDFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QTQyL0NDQUZDQUZFQjFCQTExRjFBNjlFNzE0ODM5MTFGOTcwL1JQWk1SejQ2WTQx WjRZb0staU9OelllWXgxUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCh+1uTviWoW3XNvyu6KYgsCnP87Pecp2EkghEQ4biBYCvx5vVo9rIBH8TZ5TyU ixZsIt4fmhnFjt1Uf+OdaMDZ7e65VjN5UmDyuWlafbOpJTmL8S9QSowgugV515nS RYEiT3SQReWrwnBObb1za+Hz+BhAXW+9M0SEZqWm8aT2yxmvW1kLa24aLiG7Cebh FgKw1ADy/JZPx0ydvf89Ds9keTBjVn6Ib/ozTrNaEdmhDsdPN8aM2s+DLjSpce3N qPif0aGI0Er05ukZEUbhwcoBsfZOKIlDBs2itlWUgsunEEj7oeM7q6BgYflEyOLV oFhw+ScFqRNcM68P1ExIigiE -----END CERTIFICATE-----Generated at Mon Sep 21 17:09:59 2026 by rpki-client