$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: QXEma/LKl+O6lrwK4943+UKIEV5QkbXKMe3M0oQCAik= Subject key identifier: 86:96:13:71:7B:62:B6:C7:D3:8B:91:81:F7:E9:AA:FD:6F:ED:5D:41 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 09D8 Signing time: Mon 28 Sep 2026 20:00:05 +0000 Manifest this update: Mon 28 Sep 2026 20:00:05 +0000 Manifest next update: Mon 05 Oct 2026 20:00:05 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: p9GF/A8JpqCopXWn2dQK9RxkxegCmhqa4HspBNRVzmU=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Sep 28 20:00:05 2026 GMT Not After : Oct 5 20:00:05 2026 GMT Subject: CN=6abac745-d23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:c4:98:c9:ab:a3:51:43:7a:23:1e:71:22: 59:44:bb:96:23:7a:77:65:32:4c:8b:9d:8a:61:c3: 66:24:f7:c4:d6:74:92:60:51:fb:db:fe:83:05:1c: 81:51:1e:1e:6b:aa:ab:d8:15:51:24:59:bb:dc:72: e8:4f:4d:5e:7f:85:86:85:df:a3:b9:26:c1:00:9a: 30:f4:94:da:24:0b:cd:06:a2:9e:39:cb:f2:28:a5: ad:0a:28:69:2a:06:1a:41:0a:9f:ae:3e:07:d8:6d: 07:bd:34:11:8c:56:d4:cf:00:00:d9:da:fd:e9:b6: ee:f6:88:99:1c:c7:14:0a:ff:c5:7d:bb:f8:67:7d: 44:c2:c2:91:65:91:49:56:89:dc:8d:ad:6a:8c:3c: 82:c1:ea:49:4d:28:4f:c3:92:95:6f:37:ae:f6:2e: e4:6a:84:69:2d:0c:37:ce:e5:09:1c:f9:ad:5b:d2: 9f:d0:59:4c:ef:ab:fa:f5:00:2b:d8:bf:44:bc:5e: 07:b0:16:c9:68:13:69:45:b8:8c:89:09:c0:42:4f: 0f:c0:23:0b:83:9c:4a:f8:4d:0d:38:9a:61:de:9b: a8:a0:fe:8c:06:a3:5d:ed:fe:06:f5:f5:97:80:ea: a3:06:84:0c:54:f3:82:37:e0:23:20:e5:f3:bc:fa: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:13:71:7B:62:B6:C7:D3:8B:91:81:F7:E9:AA:FD:6F:ED:5D:41 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d5:97:f6:d6:0f:bb:87:26:86:16:fa:ec:14:6f:f8:cb:8e: 79:bb:d6:b8:8a:6c:7d:69:51:35:81:85:bd:cd:eb:78:fc:45: 5b:f5:db:27:fb:55:47:24:40:e6:9f:df:97:a1:66:0c:cc:ca: ab:9f:1e:a5:c7:9f:d6:bf:02:da:18:a0:34:49:90:e8:59:b6: e5:fe:ef:d3:9e:29:22:80:dc:37:6a:05:bf:2e:01:1f:65:d7: 07:f5:a5:40:99:bd:81:9e:b9:4a:72:05:dc:53:58:47:80:0b: 21:b0:de:56:c9:29:62:b0:f2:81:eb:a6:bf:23:e4:e2:75:76: 0e:d3:3b:62:1f:da:4d:40:1e:52:32:b6:29:6a:0a:c3:38:01: ba:2b:db:df:db:aa:52:5f:93:c1:1c:ce:63:8f:dd:ca:5e:36: d4:ed:b0:10:01:b0:f8:bf:7d:b8:33:c7:8c:66:9f:25:0b:ba: ae:18:07:c4:ee:46:56:75:54:1b:11:81:da:16:91:b6:f2:a8: 7f:dd:ee:2c:c9:d3:9d:29:da:4a:49:f4:b9:fd:4a:f6:b1:84: ea:94:f0:dd:a7:24:db:8c:05:c1:13:f0:c2:2b:f9:fc:97:56: c6:73:31:34:93:be:cd:f7:34:ea:92:e5:ed:3d:62:2d:53:52: 74:87:b5:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwOTI4MjAwMDA1WhcNMjYxMDA1MjAwMDA1WjAYMRYwFAYD VQQDEw02YWJhYzc0NS1kMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6w7EmMmro1FDeiMecSJZRLuWI3p3ZTJMi52KYcNmJPfE1nSSYFH72/6DBRyB UR4ea6qr2BVRJFm73HLoT01ef4WGhd+juSbBAJow9JTaJAvNBqKeOcvyKKWtCihp KgYaQQqfrj4H2G0HvTQRjFbUzwAA2dr96bbu9oiZHMcUCv/Ffbv4Z31EwsKRZZFJ Voncja1qjDyCwepJTShPw5KVbzeu9i7kaoRpLQw3zuUJHPmtW9Kf0FlM76v69QAr 2L9EvF4HsBbJaBNpRbiMiQnAQk8PwCMLg5xK+E0NOJph3puooP6MBqNd7f4G9fWX gOqjBoQMVPOCN+AjIOXzvPohBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaWE3F7 YrbH04uRgffpqv1v7V1BMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdWX9tYPu4cmhhb67BRv+MuOebvWuIpsfWlRNYGFvc3rePxFW/XbJ/tVRyRA 5p/fl6FmDMzKq58epcef1r8C2higNEmQ6Fm25f7v054pIoDcN2oFvy4BH2XXB/Wl QJm9gZ65SnIF3FNYR4ALIbDeVskpYrDygeumvyPk4nV2DtM7Yh/aTUAeUjK2KWoK wzgBuivb39uqUl+TwRzOY4/dyl421O2wEAGw+L99uDPHjGafJQu6rhgHxO5GVnVU GxGB2haRtvKof93uLMnTnSnaSkn0uf1K9rGE6pTw3ack24wFwRPwwiv5/JdWxnMx NJO+zfc06pLl7T1iLVNSdIe1Qw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:53:46 2026 by rpki-client