$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft File: zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json) Hash identifier: PaR4hbELzlbH6D0vf0ob7Oy0pJtQ8bdY82VK6U9DX4A= Subject key identifier: 2C:BE:82:AB:FC:D3:0D:85:8C:98:73:BA:64:29:18:2E:A3:03:2B:0B Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B Certificate issuer: /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft Manifest number: 9D Signing time: Tue 13 Oct 2026 08:05:20 +0000 Manifest this update: Tue 13 Oct 2026 08:05:20 +0000 Manifest next update: Tue 20 Oct 2026 08:05:20 +0000 Files and hashes: 1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: xl4PiS0GNEXCivZ3Mr1bE43JxnN9KXqgkhmj1c+nvLg=) 2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Validity Not Before: Oct 13 08:05:20 2026 GMT Not After : Oct 20 08:05:20 2026 GMT Subject: CN=6acde640-a3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:bc:08:8e:33:8a:d0:30:a3:5e:23:5f:3a: fc:a5:1c:85:23:50:76:72:05:c8:41:5e:2a:2f:dd: a3:38:c3:97:d4:9f:b3:5d:57:8e:4e:d1:e9:6c:22: e0:ce:46:ec:26:5a:a4:58:7a:fd:57:36:56:ba:e3: 94:c0:2c:64:ea:eb:4f:96:ff:91:14:d6:72:b5:9b: 80:a9:bd:97:52:de:e8:5f:6f:ca:2f:b7:8b:4a:4c: 76:44:3f:fc:c0:15:b5:2d:44:ca:b2:6a:7c:6f:df: c5:b7:0d:35:8e:9d:70:a5:8a:ec:1f:4b:71:26:c8: 92:68:a3:32:a4:7c:01:f6:ff:10:a9:c1:59:94:f2: a5:c6:34:d0:fc:c3:ae:78:2b:dd:85:84:21:f4:50: ea:03:f5:53:e0:f0:fe:7e:ad:24:30:39:c6:da:98: fa:ed:0d:e8:e9:ea:e4:a7:d8:df:66:09:f6:82:2f: c1:1f:2f:45:a1:71:90:79:18:b4:c6:63:b7:64:0c: d5:28:f0:07:ba:8f:ba:91:d3:a3:34:4c:5a:66:fd: ea:f7:44:4b:f9:00:76:05:65:51:c3:57:10:a2:57: 55:e6:ef:a3:ea:cf:98:1b:9f:b4:b0:bb:fb:c7:31: 83:d3:9c:c3:22:c3:ee:39:a2:ff:a5:a5:a8:70:85: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:82:AB:FC:D3:0D:85:8C:98:73:BA:64:29:18:2E:A3:03:2B:0B X509v3 Authority Key Identifier: keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c2:80:20:38:1f:b9:fe:8e:a0:96:64:03:47:36:37:55:23: 33:62:bd:15:78:19:d2:a6:4d:7f:f2:74:ea:0e:3f:d2:ce:91: 07:81:27:7e:3a:4b:32:d2:14:67:15:57:6a:0c:2e:19:6c:77: ab:a3:53:8a:79:d4:85:d5:41:12:4d:08:44:e7:14:43:a6:cf: 69:db:5d:50:05:80:b5:5e:27:b7:28:39:5f:ea:62:45:a5:62: 11:12:ef:aa:0c:ab:59:8c:13:e3:44:f2:25:e1:47:11:44:67: 91:02:b3:6e:4a:5c:aa:e7:6a:8c:74:9a:69:01:80:76:5b:1b: 5f:d0:38:8e:ea:87:6d:55:e8:70:1a:22:a1:8b:af:41:6a:c1: 0e:a3:47:0a:4c:43:04:43:06:b0:2a:27:46:4b:0c:22:c5:11: 88:43:dc:a2:76:2b:39:cc:12:6a:8b:d7:23:af:a7:e2:c0:f2: fa:c9:16:b9:1e:23:1a:a5:e1:be:17:9c:d9:b8:c7:12:81:8c: cf:6e:d8:69:49:4d:c9:a7:45:e6:08:5d:28:ad:0f:c1:ef:f3: f5:ac:be:50:a1:7c:a2:21:e2:cb:bd:cb:5f:40:6d:4d:87:46: f2:b3:0c:f7:e8:1e:08:a6:0d:91:37:61:43:5a:2b:24:8c:65: b0:74:07:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBMjUxMTAvBgNVBAUTKENDNzBEODczNDI4OUQzMDVBNTIzM0E5OUIwOUNENzhC OEZENjY2NEIwHhcNMjYxMDEzMDgwNTIwWhcNMjYxMDIwMDgwNTIwWjAYMRYwFAYD VQQDEw02YWNkZTY0MC1hM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0m8CI4zitAwo14jXzr8pRyFI1B2cgXIQV4qL92jOMOX1J+zXVeOTtHpbCLg zkbsJlqkWHr9VzZWuuOUwCxk6utPlv+RFNZytZuAqb2XUt7oX2/KL7eLSkx2RD/8 wBW1LUTKsmp8b9/Ftw01jp1wpYrsH0txJsiSaKMypHwB9v8QqcFZlPKlxjTQ/MOu eCvdhYQh9FDqA/VT4PD+fq0kMDnG2pj67Q3o6erkp9jfZgn2gi/BHy9FoXGQeRi0 xmO3ZAzVKPAHuo+6kdOjNExaZv3q90RL+QB2BWVRw1cQoldV5u+j6s+YG5+0sLv7 xzGD05zDIsPuOaL/paWocIWTfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCy+gqv8 0w2FjJhzumQpGC6jAysLMB8GA1UdIwQYMBaAFMxw2HNCidMFpSM6mbCc14uP1mZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkEyNS83MEY5NzhGMkUw NzUxMUYwQTU2NDJGMDUzOTZGNTZCQy96SERZYzBLSjB3V2xJenFac0p6WGk0X1da a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIRFljMEtKMHdXbEl6cVpzSnpYaTRfV1prcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkEyNS83MEY5NzhGMkUwNzUxMUYwQTU2NDJGMDUzOTZGNTZCQy96SERZYzBLSjB3 V2xJenFac0p6WGk0X1daa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS8KAIDgfuf6OoJZkA0c2N1UjM2K9FXgZ0qZNf/J06g4/0s6RB4EnfjpLMtIU ZxVXagwuGWx3q6NTinnUhdVBEk0IROcUQ6bPadtdUAWAtV4ntyg5X+piRaViERLv qgyrWYwT40TyJeFHEURnkQKzbkpcqudqjHSaaQGAdlsbX9A4juqHbVXocBoioYuv QWrBDqNHCkxDBEMGsConRksMIsURiEPconYrOcwSaovXI6+n4sDy+skWuR4jGqXh vhec2bjHEoGMz27YaUlNyadF5ghdKK0Pwe/z9ay+UKF8oiHiy73LX0BtTYdG8rMM 9+geCKYNkTdhQ1orJIxlsHQHIQ== -----END CERTIFICATE-----Generated at Wed Oct 14 10:30:24 2026 by rpki-client