$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: M/69xgtaZ25X7tXBOnhp4ZctFOANK5WTu7uXfq5Ne14= Subject key identifier: BF:D7:C0:0D:01:F3:D7:5A:16:E6:5D:3E:A3:13:38:FE:7F:99:1E:E0 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 0155 Signing time: Sat 03 Oct 2026 05:52:57 +0000 Manifest this update: Sat 03 Oct 2026 05:52:56 +0000 Manifest next update: Sat 10 Oct 2026 05:52:56 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: a0XlwGLav5wSWrA0L/3Qp1KQRoDzYki8Zj3Ljj3b+mY=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Oct 3 05:52:56 2026 GMT Not After : Oct 10 05:52:56 2026 GMT Subject: CN=6ac09839-4765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:25:23:f5:a4:2d:cc:e0:75:79:f9:b7:85: eb:98:22:93:20:d4:1c:1f:24:cf:67:9b:69:d2:dd: dd:42:f6:fc:df:38:f7:06:f9:fe:40:6e:df:eb:2c: 94:b5:e3:09:cf:ce:1a:eb:4e:d3:3d:84:71:56:e8: 92:83:f7:55:07:b3:25:7d:e2:33:b9:d7:07:ee:9b: 83:09:ec:06:52:00:ea:d5:4c:bb:60:f6:a9:9d:7a: cf:ee:8b:07:92:ff:5b:02:e2:a7:c1:af:cb:61:bd: b6:48:8e:30:73:6a:d5:35:72:1a:69:ed:aa:d1:be: 4b:cf:4c:33:bf:3d:5c:99:fc:1c:15:ee:89:39:b7: f7:96:47:78:b8:62:b2:56:92:ca:d4:bf:55:f2:9d: 99:c3:6c:0f:fd:44:1b:50:98:df:08:79:3d:40:11: e3:92:cc:e5:28:90:cc:e6:b2:d0:33:13:9e:9c:dd: f1:6b:81:b3:f8:3b:8e:0d:f5:68:b1:9a:40:45:4a: e1:44:ab:3f:25:97:68:6c:88:4c:13:d8:cd:b1:37: 4d:bd:75:e8:77:bf:fe:c6:e2:e0:51:9f:ad:50:21: f5:6c:57:81:79:95:cf:6e:53:92:44:f8:9d:04:bf: ea:26:34:7d:67:fe:8b:38:e9:d0:7b:17:b0:09:97: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D7:C0:0D:01:F3:D7:5A:16:E6:5D:3E:A3:13:38:FE:7F:99:1E:E0 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bd:66:09:07:d4:f9:3b:a4:5f:60:53:57:aa:b8:fc:af:76: 3a:8a:d1:47:2b:c8:49:d2:3c:ce:01:60:26:dc:f9:0a:20:7e: 03:b8:4e:a6:aa:eb:08:22:21:10:8b:fb:79:00:f4:9b:2b:8b: 0d:91:14:03:c4:55:c2:a8:4e:d7:dc:8f:b2:95:2e:c6:83:34: 47:3c:ac:81:c0:9d:3e:24:9c:eb:82:82:cf:67:66:11:3b:d0: 3e:27:43:ea:37:e8:88:96:68:fd:67:b1:bc:24:d9:e5:ff:a6: 6e:91:25:ff:06:47:90:64:cb:42:c7:91:2a:0d:d4:61:69:9f: e0:d3:79:91:ca:f2:9c:af:81:c8:e9:cb:cd:c8:b4:3f:8c:09: 81:32:55:6d:92:00:f9:ad:a7:23:5a:5c:4c:1b:63:35:23:0d: 9d:2d:f7:ac:0f:39:6c:b9:26:53:8a:d0:57:d8:e9:28:c8:14: e0:69:be:cd:f9:2f:3c:b4:0d:74:aa:d9:7b:7f:66:15:aa:a8: 89:63:62:47:34:1d:97:2d:0a:b3:0a:a4:8f:8b:ef:4d:23:35: d3:b5:1c:fe:88:c4:05:88:55:91:9b:09:99:2c:a7:57:f6:e1: 84:e8:22:85:ea:f6:d0:ac:4e:aa:9c:9c:e9:9e:28:48:3a:a1: 06:cc:47:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjYxMDAzMDU1MjU2WhcNMjYxMDEwMDU1MjU2WjAYMRYwFAYD VQQDEw02YWMwOTgzOS00NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSElI/WkLczgdXn5t4XrmCKTINQcHyTPZ5tp0t3dQvb83zj3Bvn+QG7f6yyU teMJz84a607TPYRxVuiSg/dVB7MlfeIzudcH7puDCewGUgDq1Uy7YPapnXrP7osH kv9bAuKnwa/LYb22SI4wc2rVNXIaae2q0b5Lz0wzvz1cmfwcFe6JObf3lkd4uGKy VpLK1L9V8p2Zw2wP/UQbUJjfCHk9QBHjkszlKJDM5rLQMxOenN3xa4Gz+DuODfVo sZpARUrhRKs/JZdobIhME9jNsTdNvXXod7/+xuLgUZ+tUCH1bFeBeZXPblOSRPid BL/qJjR9Z/6LOOnQexewCZcv8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/XwA0B 89daFuZdPqMTOP5/mR7gMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASr1mCQfU+TukX2BTV6q4/K92OorRRyvISdI8zgFgJtz5CiB+A7hOpqrrCCIh EIv7eQD0myuLDZEUA8RVwqhO19yPspUuxoM0RzysgcCdPiSc64KCz2dmETvQPidD 6jfoiJZo/WexvCTZ5f+mbpEl/wZHkGTLQseRKg3UYWmf4NN5kcrynK+ByOnLzci0 P4wJgTJVbZIA+a2nI1pcTBtjNSMNnS33rA85bLkmU4rQV9jpKMgU4Gm+zfkvPLQN dKrZe39mFaqoiWNiRzQdly0Kswqkj4vvTSM107Uc/ojEBYhVkZsJmSynV/bhhOgi her20KxOqpyc6Z4oSDqhBsxHxA== -----END CERTIFICATE-----Generated at Sun Oct 4 22:39:16 2026 by rpki-client