$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: 6PVdyWiCBH9YKKGIGurGbqJaYneBWyF/I9KP+gU3xls= Subject key identifier: DA:EF:CE:E3:72:C7:A0:53:DC:A6:BE:0C:02:FD:67:AC:27:F1:03:4D Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1B1B Signing time: Mon 28 Sep 2026 16:20:04 +0000 Manifest this update: Mon 28 Sep 2026 16:20:03 +0000 Manifest next update: Mon 05 Oct 2026 16:20:03 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: mlGE6VLllUvPxbvA95uxHVlptIlPGa0Ldrmy3z8tes4=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6973 (0x1b3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Sep 28 16:20:03 2026 GMT Not After : Oct 5 16:20:03 2026 GMT Subject: CN=6aba93b4-0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bb:d6:f7:37:bd:90:ae:85:57:fd:76:ba:01: 4e:62:59:88:d0:78:2e:c0:15:43:17:57:02:f8:1e: 60:7c:32:5c:d0:a7:f4:90:a6:77:62:ab:31:71:a3: 64:01:19:07:ef:3b:f0:d9:75:50:86:43:ef:af:b5: 61:d5:0f:8e:67:9e:6c:c7:a7:d7:82:7d:eb:7d:da: 3e:10:12:f4:03:60:ed:51:66:14:65:62:c8:b5:af: 72:f8:a8:2e:e9:04:cd:ed:82:28:58:d1:63:17:bf: 23:9b:51:52:73:91:04:49:08:4d:7d:c6:26:fc:d7: c3:c5:31:8a:25:81:c0:b7:52:56:ae:3d:6d:79:6a: 3c:99:71:dd:f6:36:49:82:73:19:54:6b:dc:36:33: 52:e5:af:e2:82:ba:aa:46:4a:98:cc:47:8f:dd:e3: 78:df:3d:93:66:99:3c:f5:bc:22:89:40:b8:5b:a4: 25:f0:59:3e:cd:3d:9d:16:0f:74:a0:7d:9c:0f:a6: 43:40:38:96:df:4c:41:0e:38:78:a9:45:39:c7:e0: 2c:37:0d:a2:0e:b9:ed:f8:af:44:cf:56:8c:b2:ce: 19:87:c2:15:4b:f9:d8:e2:3a:89:f2:05:31:bf:58: 0d:ab:2c:c7:2e:b1:30:2e:52:48:d3:d9:54:36:5c: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:CE:E3:72:C7:A0:53:DC:A6:BE:0C:02:FD:67:AC:27:F1:03:4D X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:2c:9e:d5:c9:0c:22:7b:dc:0b:4b:8f:0b:fd:c0:6b:65:96: 8b:53:82:84:43:fa:ac:93:d3:47:2a:92:b7:ae:7c:ac:d5:38: 57:8b:09:65:28:a6:9f:e4:fb:5d:23:ea:64:ca:9f:ef:f2:23: b1:f2:d9:09:9d:a1:6a:fd:ba:f0:dc:f1:28:a7:a7:11:1f:9a: 16:c5:de:d9:c5:bc:9e:1d:ee:04:29:d8:b5:bf:df:1e:d7:c6: 7f:4e:4a:75:1f:36:04:f9:4a:a6:cf:79:af:77:c2:b6:24:b7: 1d:3c:8c:d0:c1:bb:3c:a2:ec:c7:e3:66:c5:aa:eb:6d:a9:13: 74:4a:09:f0:62:22:f2:48:6b:21:ac:68:99:d2:ab:f6:04:9e: 97:9a:62:28:be:19:6e:dc:46:6b:d8:f5:2d:01:b6:b0:db:74: b2:3f:5a:00:b8:b2:3c:0e:4a:99:dc:fc:71:25:3d:44:6b:b2: 11:9b:f4:be:4b:bb:ef:dd:18:23:14:91:b6:c5:9b:eb:29:3e: c0:63:5e:fd:7f:6c:43:7a:c3:10:b6:95:d6:c3:be:a3:ec:31: d2:f9:3b:ab:04:87:0c:aa:a7:21:1f:0d:7f:24:e5:74:f4:c4: 3a:ff:76:f7:fc:80:4a:79:91:64:0f:82:6b:ef:e1:4a:df:24: b2:cd:18:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwOTI4MTYyMDAzWhcNMjYxMDA1MTYyMDAzWjAYMRYwFAYD VQQDEw02YWJhOTNiNC0wZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LvW9ze9kK6FV/12ugFOYlmI0HguwBVDF1cC+B5gfDJc0Kf0kKZ3YqsxcaNk ARkH7zvw2XVQhkPvr7Vh1Q+OZ55sx6fXgn3rfdo+EBL0A2DtUWYUZWLIta9y+Kgu 6QTN7YIoWNFjF78jm1FSc5EESQhNfcYm/NfDxTGKJYHAt1JWrj1teWo8mXHd9jZJ gnMZVGvcNjNS5a/igrqqRkqYzEeP3eN43z2TZpk89bwiiUC4W6Ql8Fk+zT2dFg90 oH2cD6ZDQDiW30xBDjh4qUU5x+AsNw2iDrnt+K9Ez1aMss4Zh8IVS/nY4jqJ8gUx v1gNqyzHLrEwLlJI09lUNlxbeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrvzuNy x6BT3Ka+DAL9Z6wn8QNNMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmSye1ckMInvcC0uPC/3Aa2WWi1OChEP6rJPTRyqSt658rNU4V4sJZSimn+T7 XSPqZMqf7/IjsfLZCZ2hav268NzxKKenER+aFsXe2cW8nh3uBCnYtb/fHtfGf05K dR82BPlKps95r3fCtiS3HTyM0MG7PKLsx+NmxarrbakTdEoJ8GIi8khrIaxomdKr 9gSel5piKL4ZbtxGa9j1LQG2sNt0sj9aALiyPA5Kmdz8cSU9RGuyEZv0vku7790Y IxSRtsWb6yk+wGNe/X9sQ3rDELaV1sO+o+wx0vk7qwSHDKqnIR8NfyTldPTEOv92 9/yASnmRZA+Ca+/hSt8kss0YQw== -----END CERTIFICATE-----Generated at Tue Sep 29 04:49:08 2026 by rpki-client