$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: niaytH4IHir8xJW+ilmeT8Qh5Y94SJUy9chGiU5Y8NQ= Subject key identifier: 53:0D:F6:AA:A5:33:49:57:C8:05:72:F2:02:8C:3F:D7:E7:48:D8:72 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 0A2B Signing time: Sun 20 Sep 2026 19:59:27 +0000 Manifest this update: Sun 20 Sep 2026 19:59:27 +0000 Manifest next update: Sun 27 Sep 2026 19:59:27 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: APB4+uCTtxsBppOA9XlKfu0wbKglTr/roEra0bHpvj8=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Sep 20 19:59:27 2026 GMT Not After : Sep 27 19:59:27 2026 GMT Subject: CN=6ab03b1f-fd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:31:2e:52:62:e5:fa:e7:cc:5e:f1:66:35: e3:c7:be:d8:8f:08:71:e1:4f:d7:ce:84:0c:1e:92: bd:a1:04:30:9a:b7:b1:5b:ca:3a:a2:e5:dd:c3:3a: 6f:56:f9:1e:36:56:1e:bb:12:49:cf:65:5d:c8:88: 16:69:0f:1e:78:e0:46:42:0a:94:63:37:fe:45:2a: c4:64:a9:1c:9f:9a:74:a9:b4:b3:fd:3b:74:d3:b1: 36:88:4f:5b:cd:d4:0d:80:87:e2:83:a8:f6:b8:62: ce:c0:6e:ce:d6:7e:ed:40:93:05:7c:d3:56:f7:70: 46:2c:96:d6:c6:44:e6:66:73:97:24:08:a4:b2:5a: 5f:f3:b9:04:c4:19:cb:9d:21:11:5b:68:05:6d:44: 7c:69:7e:f6:b1:09:b2:2b:12:9a:3c:12:a4:4b:b0: 7e:de:7b:50:6f:4c:db:c6:64:d4:70:90:55:d3:84: 29:fd:ce:5d:fd:5b:0d:d3:ca:bf:91:5d:c5:20:97: 52:ca:70:d6:90:f6:5e:82:a0:0f:e9:1d:df:aa:11: 45:6e:ca:c6:08:84:93:b6:b8:02:da:e8:56:8a:8c: 2d:2b:e2:ec:a8:92:84:f8:ab:12:12:b1:a1:6a:31: 82:bd:58:1d:b5:01:26:58:34:d5:64:32:05:77:5b: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0D:F6:AA:A5:33:49:57:C8:05:72:F2:02:8C:3F:D7:E7:48:D8:72 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:47:79:7e:c4:50:d5:00:8f:67:0d:2d:ae:4e:1a:43:4c: b6:e5:f3:dc:48:a8:f8:4f:32:f9:71:bb:d8:40:b6:ee:92:bf: 05:64:8e:05:26:73:c9:ae:33:3e:3c:9e:23:1a:1a:e2:2b:ee: 97:3d:c2:af:39:14:9e:08:6b:78:7a:eb:77:39:1f:e6:33:ec: d0:ca:aa:72:e1:a2:2f:73:d8:d6:db:74:80:d1:0e:6c:a6:f5: 30:63:34:16:42:14:b2:35:c7:e2:f2:77:85:c4:10:a8:bc:25: ce:bc:61:48:71:ae:e7:4e:d2:61:46:dc:a3:9e:64:fc:8e:8e: 69:23:78:1a:48:26:73:2a:83:b2:d8:08:fb:42:a1:6f:54:d9: 0e:ad:30:b0:78:c8:66:39:3a:5e:36:61:23:e9:00:a8:39:a3: ff:de:a7:1c:b4:4f:78:5a:61:b1:e9:d8:d3:25:6e:9a:4d:b3: 28:74:32:46:42:b2:8b:ec:e3:3a:01:f9:ab:62:99:6a:91:12: 89:17:3e:e8:dc:30:f4:3e:cf:d2:e8:93:77:7c:7c:50:47:a8: 02:85:3a:b3:c3:c2:6f:db:6f:6c:93:0b:27:24:28:6e:19:39: 5a:db:ca:43:18:14:b1:68:40:48:04:46:3c:09:07:b3:4c:d8: 08:10:ed:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQxQzkxMTAvBgNVBAUTKDY1NDZGNTEwQzFCOTI0OTFDQTcwOTBCRTc0N0EyNDI4 OTI0MTgzQUEwHhcNMjYwOTIwMTk1OTI3WhcNMjYwOTI3MTk1OTI3WjAYMRYwFAYD VQQDEw02YWIwM2IxZi1mZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaMxLlJi5frnzF7xZjXjx77Yjwhx4U/XzoQMHpK9oQQwmrexW8o6ouXdwzpv VvkeNlYeuxJJz2VdyIgWaQ8eeOBGQgqUYzf+RSrEZKkcn5p0qbSz/Tt007E2iE9b zdQNgIfig6j2uGLOwG7O1n7tQJMFfNNW93BGLJbWxkTmZnOXJAikslpf87kExBnL nSERW2gFbUR8aX72sQmyKxKaPBKkS7B+3ntQb0zbxmTUcJBV04Qp/c5d/VsN08q/ kV3FIJdSynDWkPZegqAP6R3fqhFFbsrGCISTtrgC2uhWiowtK+LsqJKE+KsSErGh ajGCvVgdtQEmWDTVZDIFd1uv/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMN9qql M0lXyAVy8gKMP9fnSNhyMB8GA1UdIwQYMBaAFGVG9RDBuSSRynCQvnR6JCiSQYOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9aVWIxRU1HNUpKSEtjSkMtZEhva0tKSkJn Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9aVWIxRU1HNUpK SEtjSkMtZEhva0tKSkJnNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi8hHeX7EUNUAj2cNLa5OGkNMtuXz3Eio+E8y+XG72EC27pK/BWSOBSZzya4z PjyeIxoa4ivulz3CrzkUnghreHrrdzkf5jPs0MqqcuGiL3PY1tt0gNEObKb1MGM0 FkIUsjXH4vJ3hcQQqLwlzrxhSHGu507SYUbco55k/I6OaSN4GkgmcyqDstgI+0Kh b1TZDq0wsHjIZjk6XjZhI+kAqDmj/96nHLRPeFphsenY0yVumk2zKHQyRkKyi+zj OgH5q2KZapESiRc+6Nww9D7P0uiTd3x8UEeoAoU6s8PCb9tvbJMLJyQobhk5WtvK QxgUsWhASARGPAkHs0zYCBDtAw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:02:37 2026 by rpki-client