$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: QRdqF6kCjji7Ae6GULUyBJ9cvTriUN/Wnkj+7EiKqgw= Subject key identifier: 83:88:7C:64:CD:B8:F5:8E:FC:82:B3:0C:4F:4E:98:05:9D:5E:3D:CE Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 02AE Signing time: Mon 21 Sep 2026 01:32:45 +0000 Manifest this update: Mon 21 Sep 2026 01:32:44 +0000 Manifest next update: Mon 28 Sep 2026 01:32:44 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: JSeI2UVN2p24ygzuUXa9FdQBBIOCEDvsN0OqJX/lgV8=) 2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) 3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Sep 21 01:32:44 2026 GMT Not After : Sep 28 01:32:44 2026 GMT Subject: CN=6ab0893c-42d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:a3:05:d9:8e:8f:51:f5:02:53:6c:ff:92: 1f:6b:a3:0e:9d:c8:d5:a1:fd:b5:b4:aa:8b:c9:21: 56:7e:b1:36:09:72:74:a7:7a:85:fe:3b:57:94:94: 7a:4e:71:a8:01:e4:4a:99:bc:e2:59:5b:8c:36:2b: 06:a4:95:58:01:c2:05:68:3f:cf:84:1d:0a:cd:a7: 1f:18:36:dd:c9:15:a1:72:49:9e:92:73:34:a1:08: 56:31:5b:70:7f:4e:f0:d4:6e:37:e3:1b:01:98:b8: 3f:a4:33:89:b9:77:7d:bd:b4:27:de:2e:dd:e2:b2: 1f:35:32:98:65:eb:3d:0c:b7:3d:58:44:61:7c:04: 77:e3:0c:5a:b2:50:09:11:a3:e2:c2:cc:bc:79:c8: aa:a6:60:6e:66:5a:d1:82:67:b6:02:50:e8:18:d0: de:b8:b7:43:a1:95:12:fb:25:77:c2:ea:52:e2:38: b7:c9:ed:b5:40:b8:64:52:65:44:d4:60:55:95:c5: d7:04:60:3d:a7:7b:31:9a:1c:eb:e4:6b:4d:39:67: e6:f8:43:1d:e5:0c:7f:a7:67:4b:6f:92:3b:7a:02: 05:83:45:2e:25:0a:a9:4d:0b:c5:9c:1b:e8:3f:61: d6:5d:78:43:72:e6:4c:8f:66:11:ac:cb:92:5b:4c: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:7C:64:CD:B8:F5:8E:FC:82:B3:0C:4F:4E:98:05:9D:5E:3D:CE X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d7:bf:23:36:8a:80:46:79:aa:f2:d0:82:81:cc:56:73:f5: b5:f6:ac:2a:b8:b0:b7:22:28:4a:6e:51:d2:e0:27:34:ab:2f: 7f:f3:ae:b1:2d:e0:21:94:15:a2:5e:13:18:b5:19:83:37:ba: b0:19:a9:18:32:3d:de:ee:a1:60:1b:df:36:19:e9:fd:49:35: 94:24:d8:e0:ec:56:60:5e:af:ee:62:52:49:a4:33:e2:b4:7b: 32:64:d6:03:71:8b:88:df:56:66:62:e6:c8:32:67:a5:7f:d6: 6c:78:a9:f2:43:61:48:36:eb:57:a2:f9:c4:ee:07:9d:3e:a1: 6d:38:c0:f0:3c:58:15:8d:99:49:d2:79:a0:13:09:06:68:10: b2:cf:49:7c:fd:6c:31:ee:80:90:39:42:0e:4e:75:cb:3b:c4: 00:10:1e:07:29:c7:53:b1:f0:6d:86:2d:55:55:26:a4:af:69: 86:91:3f:b1:1b:e2:16:90:ba:ea:fc:ee:ca:e7:d1:06:a3:4a: 77:f6:87:01:b5:d8:d0:58:ef:dd:3a:7a:d8:63:28:d8:df:98: 66:c2:aa:c9:4e:b8:fc:35:66:0d:4d:fb:f1:e0:d5:fc:6a:36: 8c:63:57:57:5b:b9:53:d4:bb:bc:e8:1e:92:cf:cc:49:0e:e0: 51:54:03:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwOTIxMDEzMjQ0WhcNMjYwOTI4MDEzMjQ0WjAYMRYwFAYD VQQDEw02YWIwODkzYy00MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpKjBdmOj1H1AlNs/5Ifa6MOncjVof21tKqLySFWfrE2CXJ0p3qF/jtXlJR6 TnGoAeRKmbziWVuMNisGpJVYAcIFaD/PhB0KzacfGDbdyRWhckmeknM0oQhWMVtw f07w1G434xsBmLg/pDOJuXd9vbQn3i7d4rIfNTKYZes9DLc9WERhfAR34wxaslAJ EaPiwsy8eciqpmBuZlrRgme2AlDoGNDeuLdDoZUS+yV3wupS4ji3ye21QLhkUmVE 1GBVlcXXBGA9p3sxmhzr5GtNOWfm+EMd5Qx/p2dLb5I7egIFg0UuJQqpTQvFnBvo P2HWXXhDcuZMj2YRrMuSW0zxZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOIfGTN uPWO/IKzDE9OmAWdXj3OMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABNe/IzaKgEZ5qvLQgoHMVnP1tfasKriwtyIoSm5R0uAnNKsvf/OusS3gIZQV ol4TGLUZgze6sBmpGDI93u6hYBvfNhnp/Uk1lCTY4OxWYF6v7mJSSaQz4rR7MmTW A3GLiN9WZmLmyDJnpX/WbHip8kNhSDbrV6L5xO4HnT6hbTjA8DxYFY2ZSdJ5oBMJ BmgQss9JfP1sMe6AkDlCDk51yzvEABAeBynHU7HwbYYtVVUmpK9phpE/sRviFpC6 6vzuyufRBqNKd/aHAbXY0Fjv3Tp62GMo2N+YZsKqyU64/DVmDU378eDV/Go2jGNX V1u5U9S7vOgeks/MSQ7gUVQDqQ== -----END CERTIFICATE-----Generated at Tue Sep 22 01:10:32 2026 by rpki-client