$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: fiXxdEprdXgacovqHtXZUwRdG5SKS2r+cvQkM4gOGnE= Subject key identifier: 8B:D3:54:3F:F4:80:A5:97:C8:86:F1:C2:E7:F8:24:4E:9C:76:32:C8 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A34E Signing time: Mon 12 Oct 2026 14:31:13 +0000 Manifest this update: Mon 12 Oct 2026 14:31:13 +0000 Manifest next update: Mon 19 Oct 2026 14:31:13 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: aWOj+G4tFvQzdRHvE9SVYeHkgllywDGMr656/TvKNW4=) 2: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 3: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 4: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 5: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 6: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) 7: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) 8: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 9: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 10: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 11: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) 12: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 13: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 14:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7167 (0x1bff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Oct 12 14:31:13 2026 GMT Not After : Oct 19 14:31:13 2026 GMT Subject: CN=6accef31-e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:5f:16:fd:e5:54:a8:e6:42:59:cc:f3:82: 98:d8:7d:b8:41:20:cc:b1:0e:f1:3b:38:85:40:10: 8c:20:1c:eb:b4:38:36:63:50:b2:70:0a:17:33:10: 14:40:2c:01:5b:14:f3:53:8f:48:20:52:7d:4b:03: f0:b7:4e:72:57:11:f5:a6:5c:64:a4:5b:9b:02:a0: 6e:bd:19:0e:a8:25:91:f3:bb:05:db:6a:e1:a3:d2: b1:bc:e6:5e:aa:ea:c4:9f:d5:55:14:5c:c4:cd:76: ce:6f:9b:d2:5c:15:6c:7d:0e:41:71:07:cf:d0:1f: 98:46:16:ac:63:d9:27:88:85:1b:6d:11:54:ab:8b: 54:03:cd:e9:49:ae:a7:c6:14:b0:43:04:8d:fb:c2: 69:e5:f7:1d:37:a5:f4:36:8d:1b:bd:1a:a0:96:7c: 40:97:1f:37:b5:2d:6c:32:34:b0:98:a8:0d:56:ab: 8e:24:c4:3b:d6:46:e5:39:f6:1c:39:3e:ce:d0:a8: c5:65:47:49:dd:fe:cf:0b:0a:76:9a:38:38:45:05: b4:89:59:8a:30:ab:f7:9b:25:cf:ca:63:fa:68:bb: 11:4e:5e:60:92:cc:f4:33:93:ba:7e:e6:dd:df:e9: ba:dd:a6:be:16:ac:6e:94:ff:d6:d2:bf:cb:dd:c3: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:54:3F:F4:80:A5:97:C8:86:F1:C2:E7:F8:24:4E:9C:76:32:C8 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ec:74:e7:c2:91:c2:44:59:cb:02:0e:5b:03:7d:2f:2d:2a: 17:01:91:9c:a6:83:5f:e2:c9:79:c4:ef:4c:ec:c9:a8:3e:ee: 3f:3a:63:57:03:f8:bb:94:58:60:a8:a6:4d:13:3d:25:6f:3b: c4:c2:cc:99:e7:da:0f:93:02:25:71:62:fc:b8:38:49:20:05: 7d:98:44:c1:2b:a7:f4:25:56:47:57:f7:98:b5:5a:f9:9d:5e: 40:0c:ad:89:c9:1a:21:9f:ab:5c:67:94:22:97:ca:54:00:5e: 55:16:1c:be:a0:1e:bf:c8:5e:f1:0a:99:94:09:52:bc:c5:bc: 50:d8:09:7f:45:7a:81:c0:59:a7:e2:e4:cc:3a:18:87:b9:55: bd:21:78:79:5f:65:00:25:92:ef:13:19:df:a5:98:e4:d0:1e: 64:99:ef:8d:d2:77:7a:c4:73:74:41:d8:43:70:15:a2:62:ff: e0:e2:27:c2:82:a3:b6:b5:0a:85:eb:9e:ba:8f:7f:92:a0:ed: 90:a3:f6:09:4f:1b:dc:10:79:a1:0d:dc:74:d4:b9:79:a0:91: 13:44:e7:c1:93:72:dd:26:cb:97:99:8c:a6:22:58:49:9b:54: 54:ae:75:81:7c:be:08:9a:c1:25:3b:fb:30:06:1f:4a:03:14: 74:92:d1:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYxMDEyMTQzMTEzWhcNMjYxMDE5MTQzMTEzWjAYMRYwFAYD VQQDEw02YWNjZWYzMS1lMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/BfFv3lVKjmQlnM84KY2H24QSDMsQ7xOziFQBCMIBzrtDg2Y1CycAoXMxAU QCwBWxTzU49IIFJ9SwPwt05yVxH1plxkpFubAqBuvRkOqCWR87sF22rho9KxvOZe qurEn9VVFFzEzXbOb5vSXBVsfQ5BcQfP0B+YRhasY9kniIUbbRFUq4tUA83pSa6n xhSwQwSN+8Jp5fcdN6X0No0bvRqglnxAlx83tS1sMjSwmKgNVquOJMQ71kblOfYc OT7O0KjFZUdJ3f7PCwp2mjg4RQW0iVmKMKv3myXPymP6aLsRTl5gksz0M5O6fubd 3+m63aa+FqxulP/W0r/L3cPCdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvTVD/0 gKWXyIbxwuf4JE6cdjLIMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkex058KRwkRZywIOWwN9Ly0qFwGRnKaDX+LJecTvTOzJqD7uPzpjVwP4u5RY YKimTRM9JW87xMLMmefaD5MCJXFi/Lg4SSAFfZhEwSun9CVWR1f3mLVa+Z1eQAyt ickaIZ+rXGeUIpfKVABeVRYcvqAev8he8QqZlAlSvMW8UNgJf0V6gcBZp+LkzDoY h7lVvSF4eV9lACWS7xMZ36WY5NAeZJnvjdJ3esRzdEHYQ3AVomL/4OInwoKjtrUK heueuo9/kqDtkKP2CU8b3BB5oQ3cdNS5eaCRE0TnwZNy3SbLl5mMpiJYSZtUVK51 gXy+CJrBJTv7MAYfSgMUdJLRig== -----END CERTIFICATE-----Generated at Tue Oct 13 16:14:21 2026 by rpki-client