$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: bcrF94q4EeB/J+wNNHmyeVguMJDTHKit46rm7XqMI/c= Subject key identifier: 7B:2E:97:B7:C2:19:BB:D7:E0:30:43:AE:2B:28:3D:B3:5A:3F:AC:AF Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D7D Signing time: Thu 24 Sep 2026 17:58:51 +0000 Manifest this update: Thu 24 Sep 2026 17:58:51 +0000 Manifest next update: Thu 01 Oct 2026 17:58:51 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: kM/jEzsusguGDa4g/wcKvdfxYPbu6/sR5OQgBunItVA=) 2: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) 3: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Sep 24 17:58:51 2026 GMT Not After : Oct 1 17:58:51 2026 GMT Subject: CN=6ab564db-48c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:2d:ff:03:64:6c:5b:ae:b2:06:48:cf:95: 35:25:7a:14:8e:e8:d3:02:fb:de:7b:ed:3f:41:44: 59:77:f2:20:66:59:7a:dd:e0:10:af:da:eb:72:9b: cd:fd:87:6c:12:59:8b:85:94:87:ed:1e:ee:f0:81: b9:57:d6:3c:b4:7f:42:1c:36:8b:97:bc:be:0c:1d: 0f:56:ac:bd:06:80:ac:1a:63:ea:dc:66:28:0d:56: 9e:32:38:2c:56:c6:62:3e:4a:9c:ec:bc:9c:bd:65: eb:f3:d6:1c:a1:13:f0:20:19:92:12:c8:21:d6:2b: 65:c8:95:0b:60:49:6e:d0:8f:7f:55:ab:65:70:42: b4:44:ed:c9:6f:97:df:8e:80:ca:bc:8d:54:50:1c: e8:10:fe:22:a9:4d:d5:9e:f2:47:d9:76:13:62:47: d1:a2:01:52:6b:5c:33:8d:5b:5f:d8:54:45:32:a1: 59:d9:2e:d7:9c:3b:0c:d4:3a:bf:78:13:16:38:e0: 07:a1:44:50:ee:bd:7a:68:dd:f2:fe:3a:34:fd:db: 25:31:15:68:36:17:21:dd:ae:dc:35:99:b5:d6:5b: aa:15:3d:e6:fe:69:c1:b4:fe:86:90:17:00:cd:8d: a4:42:14:95:b9:fb:52:7a:70:45:e0:fc:e8:a4:21: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2E:97:B7:C2:19:BB:D7:E0:30:43:AE:2B:28:3D:B3:5A:3F:AC:AF X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a8:2b:35:bc:67:d8:88:26:25:bc:92:72:c7:f0:00:c2:80: 86:9c:bd:3c:4a:6d:d7:79:eb:f0:6d:ff:f3:ae:36:fa:75:b1: e1:45:04:40:79:45:2f:f6:fa:cb:37:85:77:a5:d1:34:1b:11: 33:31:e0:0d:a6:32:bd:44:45:bb:ef:8b:6d:8f:42:fc:93:4c: 65:35:c5:a0:35:1e:84:d5:8f:95:ec:45:6b:13:00:de:5b:3d: 90:a2:f3:ee:24:b6:17:98:06:f8:28:32:87:56:88:a0:47:02: 8a:98:3a:74:99:05:42:38:e0:16:e7:8a:b3:82:7d:67:14:fd: 8e:63:33:a7:ed:a5:56:65:84:ed:9c:e2:fa:71:53:83:b7:7d: 46:63:88:28:d9:05:ee:85:89:d8:75:a0:38:b7:36:69:66:5f: 6e:8a:b3:59:f1:f0:5b:c3:79:70:cf:f1:8e:32:4d:10:fa:7b: 4f:01:b1:cf:ef:2b:e7:3a:59:19:85:7a:6c:fe:74:e9:0b:31: 8d:11:58:aa:a5:b9:b5:fa:dd:27:fa:50:69:f0:a6:5c:92:8d: b9:4d:de:bf:ce:4e:07:f7:fa:40:1b:f5:d4:51:f1:f8:fa:5a: 24:b4:b1:25:8d:4c:56:52:0a:dc:6f:cc:89:2c:25:84:15:c4: 0c:4e:ce:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwOTI0MTc1ODUxWhcNMjYxMDAxMTc1ODUxWjAYMRYwFAYD VQQDEw02YWI1NjRkYi00OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vAt/wNkbFuusgZIz5U1JXoUjujTAvvee+0/QURZd/IgZll63eAQr9rrcpvN /YdsElmLhZSH7R7u8IG5V9Y8tH9CHDaLl7y+DB0PVqy9BoCsGmPq3GYoDVaeMjgs VsZiPkqc7LycvWXr89YcoRPwIBmSEsgh1itlyJULYElu0I9/VatlcEK0RO3Jb5ff joDKvI1UUBzoEP4iqU3VnvJH2XYTYkfRogFSa1wzjVtf2FRFMqFZ2S7XnDsM1Dq/ eBMWOOAHoURQ7r16aN3y/jo0/dslMRVoNhch3a7cNZm11luqFT3m/mnBtP6GkBcA zY2kQhSVuftSenBF4PzopCFzFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsul7fC GbvX4DBDrisoPbNaP6yvMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ6grNbxn2IgmJbyScsfwAMKAhpy9PEpt13nr8G3/8642+nWx4UUEQHlFL/b6 yzeFd6XRNBsRMzHgDaYyvURFu++LbY9C/JNMZTXFoDUehNWPlexFaxMA3ls9kKLz 7iS2F5gG+Cgyh1aIoEcCipg6dJkFQjjgFueKs4J9ZxT9jmMzp+2lVmWE7Zzi+nFT g7d9RmOIKNkF7oWJ2HWgOLc2aWZfboqzWfHwW8N5cM/xjjJNEPp7TwGxz+8r5zpZ GYV6bP506QsxjRFYqqW5tfrdJ/pQafCmXJKNuU3ev85OB/f6QBv11FHx+PpaJLSx JY1MVlIK3G/MiSwlhBXEDE7O2A== -----END CERTIFICATE-----Generated at Fri Sep 25 18:05:56 2026 by rpki-client