$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft File: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft (raw, json) Hash identifier: seB22IjBlyhJQ9fjE1gv1KJHpi5wZ1WYTNwY1N/wyFE= Subject key identifier: A6:CA:0D:73:C5:B1:89:64:5F:F8:5E:11:A6:9B:2F:5B:E5:E7:11:CE Authority key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D Certificate issuer: /CN=A91DC76E/serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft Manifest number: 64 Signing time: Mon 21 Sep 2026 08:02:23 +0000 Manifest this update: Mon 21 Sep 2026 08:02:22 +0000 Manifest next update: Mon 28 Sep 2026 08:02:22 +0000 Files and hashes: 1: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl (hash: jL2oDEElaFIK5ebuZWHAL1L9ty0RkjpZZ48E3bazxmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D Validity Not Before: Sep 21 08:02:22 2026 GMT Not After : Sep 28 08:02:22 2026 GMT Subject: CN=6ab0e48f-3209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:11:4e:fe:c1:fa:9a:33:f2:79:a1:56:5d: 4e:c3:17:c6:bb:ae:ae:bb:d5:e4:e1:10:b8:4b:c7: 9c:66:f6:72:5a:44:5a:0d:4e:9b:2d:45:2d:bf:51: 59:8b:9b:d5:14:39:e8:49:72:a0:1c:af:d7:2a:28: d0:63:19:d1:a2:99:90:12:38:5b:77:7f:8f:35:4f: 5a:bc:f8:08:19:40:4d:99:18:48:07:73:1b:39:63: e1:d0:f5:c0:ef:0e:dd:71:d7:14:31:5d:57:23:2f: cd:45:ca:a7:e7:e5:6f:1e:61:19:86:ff:2b:13:35: 75:d6:b9:be:ae:9d:f7:0e:8a:f2:a6:c4:39:7b:e5: 7f:2c:0b:00:e5:f9:6a:57:8a:94:1f:7b:e5:71:05: 0b:bc:fd:1f:85:b3:2b:7a:92:e4:85:3f:d9:65:91: f5:7e:5b:fd:c3:e4:de:ff:c0:b7:f1:61:99:5b:e4: 44:0c:5b:14:28:72:b8:61:8b:db:df:1b:4e:c8:b1: 3d:98:52:d2:ce:45:89:49:aa:fe:53:66:03:a8:e0: de:9a:86:08:3a:b3:03:3d:10:c8:25:65:c9:fa:18: 53:30:8f:c8:1f:f8:92:77:8f:dc:0b:a0:66:92:60: c6:c1:ba:c4:88:5b:d9:a4:c1:b2:43:38:3a:56:9a: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CA:0D:73:C5:B1:89:64:5F:F8:5E:11:A6:9B:2F:5B:E5:E7:11:CE X509v3 Authority Key Identifier: keyid:65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9f:9d:0f:94:4d:a6:d5:70:b4:cf:10:81:4e:bb:4d:fb:a6: 3d:2c:22:15:73:c4:c2:f5:f7:e3:a3:8c:76:11:06:ef:2b:9b: a8:ac:4b:36:43:cf:1d:eb:29:71:dc:e9:83:9b:d3:49:fb:02: 81:9f:1b:4c:25:37:4d:0d:05:04:56:4a:61:c0:c7:bf:96:57: fe:94:ad:a7:35:a5:3c:cf:e6:b7:c8:17:da:55:b7:b1:ae:11: bd:5f:d1:ac:5f:7f:d1:a4:b2:ef:e2:69:11:71:45:f0:5c:eb: 48:ff:75:75:10:b8:87:e6:ab:77:13:4d:cf:e2:89:27:6c:34: 20:95:88:47:d5:f4:de:48:cc:20:da:76:92:83:96:d7:4c:ca: 56:8f:65:90:4f:df:e5:de:95:0f:3f:f2:4d:87:57:02:8f:53: 9b:48:9f:69:fd:1f:72:8c:d8:11:41:f2:2f:fa:a1:fc:36:1c: a0:0c:1a:25:ac:55:f7:df:2c:3d:46:37:dd:81:49:99:4b:36: 0b:8e:f1:9f:0d:55:79:31:0f:2f:70:26:bf:89:db:70:13:86: ec:6a:05:30:60:cf:9b:8b:03:fa:1d:a0:eb:13:2d:b0:d8:45: d4:72:8f:a9:75:de:c1:c5:c6:fc:3f:fd:98:6b:52:61:ee:32: d2:89:4f:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzc2RTExMC8GA1UEBRMoNjU4QTU5MDEwMjVFMjZCNzE3NkREMkFEQUVBQkI2N0NG MEExRUQxRDAeFw0yNjA5MjEwODAyMjJaFw0yNjA5MjgwODAyMjJaMBgxFjAUBgNV BAMTDTZhYjBlNDhmLTMyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN/RFO/sH6mjPyeaFWXU7DF8a7rq671eThELhLx5xm9nJaRFoNTpstRS2/UVmL m9UUOehJcqAcr9cqKNBjGdGimZASOFt3f481T1q8+AgZQE2ZGEgHcxs5Y+HQ9cDv Dt1x1xQxXVcjL81Fyqfn5W8eYRmG/ysTNXXWub6unfcOivKmxDl75X8sCwDl+WpX ipQfe+VxBQu8/R+Fsyt6kuSFP9llkfV+W/3D5N7/wLfxYZlb5EQMWxQocrhhi9vf G07IsT2YUtLORYlJqv5TZgOo4N6ahgg6swM9EMglZcn6GFMwj8gf+JJ3j9wLoGaS YMbBusSIW9mkwbJDODpWmhbrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpsoNc8Wx iWRf+F4RppsvW+XnEc4wHwYDVR0jBBgwFoAUZYpZAQJeJrcXbdKtrqu2fPCh7R0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNzZFL0Q1QjA0REYyMUNG QzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJjWGJkS3RycXUyZlBDaDdS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWllwWkFRSmVKcmNYYmRLdHJxdTJmUENoN1IwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD NzZFL0Q1QjA0REYyMUNGQzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJj WGJkS3RycXUyZlBDaDdSMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGn50PlE2m1XC0zxCBTrtN+6Y9LCIVc8TC9ffjo4x2EQbvK5uorEs2Q88d6ylx 3OmDm9NJ+wKBnxtMJTdNDQUEVkphwMe/llf+lK2nNaU8z+a3yBfaVbexrhG9X9Gs X3/RpLLv4mkRcUXwXOtI/3V1ELiH5qt3E03P4oknbDQglYhH1fTeSMwg2naSg5bX TMpWj2WQT9/l3pUPP/JNh1cCj1ObSJ9p/R9yjNgRQfIv+qH8NhygDBolrFX33yw9 RjfdgUmZSzYLjvGfDVV5MQ8vcCa/idtwE4bsagUwYM+biwP6HaDrEy2w2EXUco+p dd7Bxcb8P/2Ya1Jh7jLSiU/p -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:57 2026 by rpki-client