$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: 5D13OedDGbXjmS6T8jxqaw+qOZ2Lg4ykTawheu9MBw0= Subject key identifier: 93:F1:C8:32:3C:E7:89:66:93:2E:40:BB:6E:31:B7:BB:FB:9D:CC:0A Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 094D Signing time: Sun 20 Sep 2026 20:05:53 +0000 Manifest this update: Sun 20 Sep 2026 20:05:52 +0000 Manifest next update: Sun 27 Sep 2026 20:05:52 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: +IVevMCJSkXSZHsBYyAbk5dp+XcuxfVleLU7oyboX/8=) 2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=) 3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Sep 20 20:05:52 2026 GMT Not After : Sep 27 20:05:52 2026 GMT Subject: CN=6ab03ca1-bba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4b:1c:c8:11:f6:c0:cb:f1:25:a6:07:6b:8b: d0:67:38:2b:f4:52:3c:6d:ae:a6:d3:54:d7:29:4a: 95:9e:b5:89:cd:52:85:fc:56:7a:e1:37:c1:88:79: 20:ec:4f:1c:79:3a:e3:e7:0c:e9:65:ea:a0:99:f3: b6:0f:6a:87:ea:89:30:51:77:9e:36:8f:b3:f0:f0: c4:e6:ad:8f:00:00:0c:d9:79:e3:a5:5e:08:d7:89: 54:c3:70:3a:54:ab:09:3a:09:27:06:d7:0a:67:5a: 85:2c:8c:be:7c:1c:c0:09:48:8e:54:e2:36:c3:96: f1:1d:65:b1:b0:4a:87:8a:f9:02:dc:9c:08:a2:b7: 01:ef:a8:e1:b1:f4:43:61:5a:ff:5b:0a:b3:c5:f8: ed:b0:6a:56:78:9d:21:b6:6a:2f:45:b6:79:6f:0f: b0:af:0a:72:fd:be:d0:a5:09:3b:41:be:a9:ca:21: 20:f0:f5:9a:3a:11:81:63:07:68:78:cc:93:56:c1: a2:5b:0b:4a:3a:a9:38:7a:4c:2d:45:b0:9d:33:8b: 4b:bb:1f:e1:1a:78:48:99:60:08:d6:a2:38:d5:39: 3b:0f:72:6f:57:77:e9:fc:59:ed:67:d0:09:41:36: f6:1e:34:49:c6:b7:62:db:5e:d6:c5:2b:65:e4:d5: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:C8:32:3C:E7:89:66:93:2E:40:BB:6E:31:B7:BB:FB:9D:CC:0A X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f0:9a:32:10:35:5a:7f:63:98:0b:a5:80:af:d7:3a:19:ec: a5:fa:d4:96:bc:a3:2d:b9:59:5c:64:68:15:2c:5f:60:bf:19: a9:74:91:2f:da:55:45:1b:85:34:48:2a:97:90:7e:bd:de:81: df:ab:85:33:9c:e8:84:f2:c6:31:99:4f:c3:50:3e:91:a7:f6: 37:f6:89:9e:47:c6:1f:56:47:df:d7:8b:03:4d:9b:81:ca:6f: a2:ec:51:ea:30:81:fd:e8:c5:8d:db:fd:10:f2:25:be:aa:94: a4:9e:5f:d5:d7:f9:05:10:0c:ef:1b:32:54:09:6c:85:4e:5e: 6c:bb:64:c1:e6:12:bb:a1:35:fa:e2:4b:b6:83:a5:9c:41:c4: db:6d:35:e8:ab:4b:f1:93:a4:9f:4b:56:ec:cc:05:b9:ce:56: 23:6e:7a:29:4b:c7:23:55:42:76:d8:2d:eb:dd:fb:bb:b4:5d: dc:a2:7f:da:4d:98:b0:68:d4:c0:0d:39:46:fa:dc:9d:f9:bc: dc:38:4d:69:7d:e7:9e:5f:16:92:66:2d:a4:6b:fb:83:41:2f: 82:61:2d:74:5d:c6:5a:bf:3f:44:7b:91:e8:3b:6d:9e:7b:a6: c5:31:a9:86:fb:2f:9d:1c:ae:1e:0f:b3:a4:d1:21:be:a2:a2: 06:51:ea:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYwOTIwMjAwNTUyWhcNMjYwOTI3MjAwNTUyWjAYMRYwFAYD VQQDEw02YWIwM2NhMS1iYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70scyBH2wMvxJaYHa4vQZzgr9FI8ba6m01TXKUqVnrWJzVKF/FZ64TfBiHkg 7E8ceTrj5wzpZeqgmfO2D2qH6okwUXeeNo+z8PDE5q2PAAAM2XnjpV4I14lUw3A6 VKsJOgknBtcKZ1qFLIy+fBzACUiOVOI2w5bxHWWxsEqHivkC3JwIorcB76jhsfRD YVr/WwqzxfjtsGpWeJ0htmovRbZ5bw+wrwpy/b7QpQk7Qb6pyiEg8PWaOhGBYwdo eMyTVsGiWwtKOqk4ekwtRbCdM4tLux/hGnhImWAI1qI41Tk7D3JvV3fp/FntZ9AJ QTb2HjRJxrdi217WxStl5NXaQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPxyDI8 54lmky5Au24xt7v7ncwKMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsvCaMhA1Wn9jmAulgK/XOhnspfrUlryjLblZXGRoFSxfYL8ZqXSRL9pVRRuF NEgql5B+vd6B36uFM5zohPLGMZlPw1A+kaf2N/aJnkfGH1ZH39eLA02bgcpvouxR 6jCB/ejFjdv9EPIlvqqUpJ5f1df5BRAM7xsyVAlshU5ebLtkweYSu6E1+uJLtoOl nEHE22016KtL8ZOkn0tW7MwFuc5WI256KUvHI1VCdtgt6937u7Rd3KJ/2k2YsGjU wA05Rvrcnfm83DhNaX3nnl8WkmYtpGv7g0EvgmEtdF3GWr8/RHuR6DttnnumxTGp hvsvnRyuHg+zpNEhvqKiBlHqpg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:18:25 2026 by rpki-client