$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft File: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json) Hash identifier: eYLPu3dJbvRJTNTuptmG0kgek0rCF7FMHpEVjd3Bmgo= Subject key identifier: 4E:72:5D:20:08:F7:E9:63:28:A1:97:AC:9E:44:61:53:91:CF:1E:54 Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 Certificate issuer: /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Certificate serial: 0D94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft Manifest number: 0D85 Signing time: Tue 22 Sep 2026 17:52:34 +0000 Manifest this update: Tue 22 Sep 2026 17:52:33 +0000 Manifest next update: Tue 29 Sep 2026 17:52:33 +0000 Files and hashes: 1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: LojL3LXPHIaA8BclugkuT5l6Dlcun0DL4lrBZRbZMAs=) 2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: 9a0DmjZ9WtrPbMbEmNnoQ2iB4wOKOazyVMvcL5JNv20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Validity Not Before: Sep 22 17:52:33 2026 GMT Not After : Sep 29 17:52:33 2026 GMT Subject: CN=6ab2c062-4f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:33:38:03:e7:3d:62:2c:e9:59:85:e5:a2:1b: e1:6c:c3:e0:77:bf:9b:5c:54:3e:bc:2b:da:9a:61: ec:0b:03:b5:c5:e4:39:a5:57:b7:4d:63:50:4e:e5: ea:c2:2c:38:be:6c:3d:ea:4f:92:3a:b7:c7:22:fd: 59:53:63:f3:12:20:f7:b5:8b:5d:28:cb:77:df:a0: cf:eb:37:b4:21:cd:86:df:63:b5:ed:f5:de:89:30: 5a:e5:34:ef:2c:46:bd:da:8c:b5:c6:7a:e8:a1:16: 75:f2:16:c9:46:80:5b:93:16:f4:ab:c9:e4:ef:34: b6:a9:95:3f:da:02:e1:43:2c:43:10:a2:b5:b8:10: e4:0f:fe:2c:e4:a4:31:e1:1f:4f:1f:6b:1e:9b:68: c0:f9:4e:1a:08:15:97:ca:21:49:f1:b4:ff:76:1f: e1:0a:7e:8a:a6:7d:86:ff:b3:68:46:72:08:bd:be: 76:16:6d:f5:08:d7:86:bd:1f:83:65:ee:a2:b3:20: c3:6f:c7:e5:4f:30:a3:3b:99:7c:52:e2:0e:0a:c1: 28:07:df:62:01:f5:6b:76:1a:e5:e9:c1:f9:29:e4: 5e:78:11:b8:cd:df:3a:ba:9c:4a:98:a6:97:e3:be: bc:67:95:eb:c5:43:0e:24:a4:d2:82:bd:b9:49:5c: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:5D:20:08:F7:E9:63:28:A1:97:AC:9E:44:61:53:91:CF:1E:54 X509v3 Authority Key Identifier: keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e8:55:d9:19:53:f3:db:56:5c:cc:6c:93:84:6f:8e:6d:5c: 6b:88:96:34:f6:11:cf:ce:33:27:d1:d3:40:6e:c9:a5:da:84: ba:03:f2:cc:79:72:83:22:22:2f:db:c2:a0:13:6f:6d:18:a9: f8:12:85:3a:73:81:b0:c5:56:2d:03:e9:0e:2e:dc:a4:71:d5: ea:cc:9c:df:40:80:35:a6:cd:97:60:ea:90:8b:d0:c4:ac:cb: df:3d:88:d0:ea:2b:79:5a:47:ee:e5:b4:4f:1c:41:ec:12:43: 91:16:7b:23:f5:e5:71:8e:cf:f4:7c:27:02:2f:43:27:2b:b0: fc:26:2e:f0:49:03:66:8c:7e:1f:a9:0d:b0:f8:ff:42:b8:41: 4b:e7:7b:ec:9a:90:d1:34:f6:f9:0b:08:1f:41:df:09:63:b2: b7:25:5d:46:44:75:19:c8:14:b1:92:f0:93:b8:5f:c4:1b:10: 40:a6:a2:3c:b9:e6:33:49:b4:cf:d5:44:19:46:b5:06:0c:87: 54:34:b5:d2:49:1f:87:4b:d4:40:4e:6a:67:41:cf:c0:72:06: 2c:33:99:ba:1d:74:eb:53:f9:fd:91:7b:41:b4:85:b6:9b:d9: ab:7f:cb:17:7b:6e:3e:ed:da:a0:2b:90:eb:aa:67:13:00:49: 44:f0:56:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQjAxMTAvBgNVBAUTKENDODUwOUQzMUZCNjNBOERERDZCRjJEM0Q4NEM3QkMw QjJCQTNGQzAwHhcNMjYwOTIyMTc1MjMzWhcNMjYwOTI5MTc1MjMzWjAYMRYwFAYD VQQDEw02YWIyYzA2Mi00ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTM4A+c9YizpWYXlohvhbMPgd7+bXFQ+vCvammHsCwO1xeQ5pVe3TWNQTuXq wiw4vmw96k+SOrfHIv1ZU2PzEiD3tYtdKMt336DP6ze0Ic2G32O17fXeiTBa5TTv LEa92oy1xnrooRZ18hbJRoBbkxb0q8nk7zS2qZU/2gLhQyxDEKK1uBDkD/4s5KQx 4R9PH2sem2jA+U4aCBWXyiFJ8bT/dh/hCn6Kpn2G/7NoRnIIvb52Fm31CNeGvR+D Ze6isyDDb8flTzCjO5l8UuIOCsEoB99iAfVrdhrl6cH5KeReeBG4zd86upxKmKaX 4768Z5XrxUMOJKTSgr25SVzFdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5yXSAI 9+ljKKGXrJ5EYVORzx5UMB8GA1UdIwQYMBaAFMyFCdMftjqN3Wvy09hMe8Cyuj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZCMC9BM0FCNDNCMkY4 N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9vM2RhX0xUMkV4N3dMSzZQ OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJVUoweC0yT28zZGFfTFQyRXg3d0xLNlA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZCMC9BM0FCNDNCMkY4N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9v M2RhX0xUMkV4N3dMSzZQOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOhV2RlT89tWXMxsk4Rvjm1ca4iWNPYRz84zJ9HTQG7JpdqEugPyzHlygyIi L9vCoBNvbRip+BKFOnOBsMVWLQPpDi7cpHHV6syc30CANabNl2DqkIvQxKzL3z2I 0OoreVpH7uW0TxxB7BJDkRZ7I/XlcY7P9HwnAi9DJyuw/CYu8EkDZox+H6kNsPj/ QrhBS+d77JqQ0TT2+QsIH0HfCWOytyVdRkR1GcgUsZLwk7hfxBsQQKaiPLnmM0m0 z9VEGUa1BgyHVDS10kkfh0vUQE5qZ0HPwHIGLDOZuh1061P5/ZF7QbSFtpvZq3/L F3tuPu3aoCuQ66pnEwBJRPBWfQ== -----END CERTIFICATE-----Generated at Wed Sep 23 16:43:45 2026 by rpki-client