$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft File: RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json) Hash identifier: zwpfKn66/xfARXXqj8xLOnMYNdl/2LxjuUim9iyHnWY= Subject key identifier: 26:3E:6D:F7:62:89:0A:F5:A0:B9:AA:02:91:32:4D:36:FC:F7:D2:8A Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft Manifest number: 01FD Signing time: Sun 20 Sep 2026 14:51:05 +0000 Manifest this update: Sun 20 Sep 2026 14:51:05 +0000 Manifest next update: Sun 27 Sep 2026 14:51:05 +0000 Files and hashes: 1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: KouY/+BnkvsoEvKb+MmPNEFzOo6a8Fda14RHIfHJgR0=) 2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Validity Not Before: Sep 20 14:51:05 2026 GMT Not After : Sep 27 14:51:05 2026 GMT Subject: CN=6aaff2d9-7218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:0e:45:6b:4b:13:c0:e0:6b:fa:62:1a:94: 18:21:8e:d2:a1:b6:b9:b1:e0:ec:2a:ce:32:4e:b2: 7b:5d:7d:85:41:4a:a4:bf:e9:38:47:4b:3d:d6:1c: 71:77:28:61:f2:af:df:65:0c:04:05:66:18:f1:2c: 4f:32:53:0c:2f:38:b4:f3:66:a9:03:35:0e:f8:75: 3e:dc:a6:14:fd:e1:58:f3:47:8f:f9:05:b0:2b:0b: aa:c9:52:44:f5:8a:04:a5:62:c7:fc:9b:c3:f4:da: 9a:d9:c0:c1:f0:37:37:23:b9:63:23:4d:ac:8c:37: 43:e2:cd:a1:56:89:06:dc:c6:8b:8c:b1:5a:0b:35: 39:ec:36:f6:db:de:6e:af:e8:24:91:84:e5:d6:42: ce:6c:47:0a:8c:f5:8a:f4:20:6d:8f:ae:79:ee:ac: c1:0c:7a:9d:d0:51:d8:af:c4:26:25:69:82:a9:b0: 3c:09:18:9c:32:28:0c:84:5e:ac:6c:f0:72:42:87: 24:80:04:a4:21:a7:50:d2:f3:e3:50:5f:5c:f3:d1: 2c:b4:c8:6b:c4:19:97:8e:a2:56:c1:ce:ec:d3:d6: d9:ad:25:f7:01:7a:33:1c:2e:e6:54:39:26:62:db: a3:34:a8:e7:9c:fb:50:47:1c:86:d5:e2:54:78:bf: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3E:6D:F7:62:89:0A:F5:A0:B9:AA:02:91:32:4D:36:FC:F7:D2:8A X509v3 Authority Key Identifier: keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dd:f8:ee:27:bf:0e:81:93:29:48:1c:f2:6a:df:6d:85:38: 27:38:2d:81:81:25:bb:aa:49:d2:28:51:42:9b:49:09:b6:c5: 69:71:b3:3a:64:bc:7b:b7:9d:85:81:ff:1d:be:d0:d4:ae:8d: e0:7d:df:90:a6:37:0e:0f:06:55:9a:8d:2e:22:fc:35:ca:31: 47:24:9a:c9:72:b5:71:10:f7:57:82:8e:44:61:db:59:23:b9: 5d:65:e3:04:82:ef:37:5c:0f:b5:6a:59:21:40:8a:54:33:e8: 52:c2:22:f3:cd:fb:79:54:02:39:fa:b0:8a:e5:30:c4:88:1b: b0:fb:dd:a4:9a:8b:1a:87:98:7a:08:ef:bf:a9:a4:e2:b5:23: 85:50:dc:ae:31:fc:6f:c3:a1:cd:ec:7b:74:d2:1b:f7:34:b1: 24:41:97:51:2b:9a:d2:24:53:c2:e7:94:cf:4f:f3:85:b8:2e: 43:05:57:03:39:42:b9:14:84:2a:fb:f8:67:3a:42:9c:57:7d: 76:4c:93:ef:26:10:66:34:f0:0d:57:9f:be:9d:da:d6:19:1d: 29:6c:1b:f0:d7:88:b2:aa:19:83:ee:f5:fe:43:54:53:c6:14: 15:da:23:8f:2b:ad:61:e3:eb:9d:ee:5f:52:97:d4:65:af:44: 2e:7a:0e:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDQ1OTRGMkVDMTdERjU2QzNEMDY1NDBGMzY2RDJBRjEx OEIzMTdGMUUwHhcNMjYwOTIwMTQ1MTA1WhcNMjYwOTI3MTQ1MTA1WjAYMRYwFAYD VQQDEw02YWFmZjJkOS03MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJUORWtLE8Dga/piGpQYIY7Soba5seDsKs4yTrJ7XX2FQUqkv+k4R0s91hxx dyhh8q/fZQwEBWYY8SxPMlMMLzi082apAzUO+HU+3KYU/eFY80eP+QWwKwuqyVJE 9YoEpWLH/JvD9Nqa2cDB8Dc3I7ljI02sjDdD4s2hVokG3MaLjLFaCzU57Db2295u r+gkkYTl1kLObEcKjPWK9CBtj6557qzBDHqd0FHYr8QmJWmCqbA8CRicMigMhF6s bPByQockgASkIadQ0vPjUF9c89EstMhrxBmXjqJWwc7s09bZrSX3AXozHC7mVDkm YtujNKjnnPtQRxyG1eJUeL9UcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCY+bfdi iQr1oLmqApEyTTb899KKMB8GA1UdIwQYMBaAFEWU8uwX31bD0GVA82bSrxGLMX8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC81REI1NTVBQUI4 REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZzUFFaVUR6WnRLdkVZc3hm eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JaVHk3QmZmVnNQUVpVRHpadEt2RVlzeGZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC81REI1NTVBQUI4REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZz UFFaVUR6WnRLdkVZc3hmeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS9347ie/DoGTKUgc8mrfbYU4JzgtgYElu6pJ0ihRQptJCbbFaXGzOmS8e7ed hYH/Hb7Q1K6N4H3fkKY3Dg8GVZqNLiL8NcoxRySayXK1cRD3V4KORGHbWSO5XWXj BILvN1wPtWpZIUCKVDPoUsIi8837eVQCOfqwiuUwxIgbsPvdpJqLGoeYegjvv6mk 4rUjhVDcrjH8b8Ohzex7dNIb9zSxJEGXUSua0iRTwueUz0/zhbguQwVXAzlCuRSE Kvv4ZzpCnFd9dkyT7yYQZjTwDVefvp3a1hkdKWwb8NeIsqoZg+71/kNUU8YUFdoj jyutYePrne5fUpfUZa9ELnoOYw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:24:52 2026 by rpki-client