$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: iq3VtcEuis4v6uC5VjHYzdKkHp3J0bCopSn4fps5t/4= Subject key identifier: 94:B9:9E:06:29:7D:FD:41:51:17:B5:10:6A:FF:FF:D0:43:B7:EA:B3 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: D7 Signing time: Mon 21 Sep 2026 06:42:27 +0000 Manifest this update: Mon 21 Sep 2026 06:42:27 +0000 Manifest next update: Mon 28 Sep 2026 06:42:27 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: 1vqEFBYVmeucpzzGtFI4/HZRK/fjdXJt14b8Rjo2WGA=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: LK3Fx9ZDOnbQgLdeGCFpJxId6+acwMWw9HvmZv77xfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Sep 21 06:42:27 2026 GMT Not After : Sep 28 06:42:27 2026 GMT Subject: CN=6ab0d1d3-21b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:d9:d7:dd:bc:b7:1e:eb:2d:31:71:3e:f5: cd:a2:9f:76:4c:ba:0c:07:67:30:e2:ca:02:e3:c6: 13:ec:8e:79:86:38:8c:e3:3f:1e:47:8c:3e:2b:70: c9:a5:d5:20:ff:12:a5:a6:f1:c7:db:a8:82:a2:20: 32:96:ee:3c:7b:eb:39:78:0a:a9:db:b8:9c:8e:aa: 9d:5e:b9:d4:35:dd:a2:bd:9a:34:94:93:13:1a:97: 31:a4:19:6a:f7:2a:a0:7b:2c:43:22:07:0f:8b:dc: 1e:e8:3d:a7:78:c8:66:7a:14:8e:40:e2:be:28:c1: 27:12:e2:71:e2:21:c7:dc:30:a6:6a:87:c0:90:f6: 92:95:7a:b1:b5:95:c2:a4:98:c9:fa:ad:d0:93:5e: a1:d8:34:50:a4:2c:40:32:5b:21:da:05:c8:5b:e7: 2b:c9:f5:db:08:60:dd:17:9d:c1:2e:3b:8e:1a:58: 8a:1e:5a:96:0d:a4:55:a7:5c:cb:4a:45:44:6f:f0: dd:02:23:67:af:0c:a8:9b:3b:c2:d6:80:49:2c:c0: 08:65:5d:8e:ea:ca:a7:c7:4d:4c:1c:4f:f5:81:97: d5:30:29:18:6d:9d:60:59:8f:84:6b:05:1e:20:3b: d4:85:42:42:94:81:03:4d:58:2f:18:e0:c3:70:8e: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:9E:06:29:7D:FD:41:51:17:B5:10:6A:FF:FF:D0:43:B7:EA:B3 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:13:34:56:b0:09:52:8e:1f:0f:22:4c:62:c9:39:21:4b:b4: 7e:e3:58:12:c1:59:b2:31:96:49:cb:41:68:6f:80:8a:23:90: 12:41:1c:b3:4f:e0:8e:2f:2a:7b:1e:ac:aa:a5:42:2c:de:79: c6:77:76:bd:51:c3:66:04:89:45:29:a1:aa:1d:f8:55:ee:07: d9:fe:67:26:92:ec:bf:c2:29:f9:c4:ea:5d:42:de:54:c0:b8: a3:ba:60:3e:65:91:ea:2a:4f:50:2b:bc:b3:ba:fc:80:72:1d: 6f:df:cd:36:52:6a:6f:36:fe:eb:6e:8c:64:f8:a1:c4:a2:02: f4:f3:cb:d2:1a:47:2e:22:16:a1:2a:2a:98:d4:f1:d2:82:34: d3:3c:88:91:24:77:c1:a8:79:dc:ff:66:ed:be:11:d7:dd:e9: d3:73:3f:b8:5f:fc:f6:ac:a3:38:2b:0c:5e:09:0f:94:8d:80: 59:3b:7f:1b:12:7b:cc:56:fb:53:f3:94:72:71:c1:93:57:eb: ef:5f:14:38:9d:e9:43:55:fd:84:29:9b:20:0c:7c:db:2e:b2: e9:a2:60:99:bf:52:f9:d8:da:6f:36:d5:15:9a:b0:5e:37:f0: b8:0b:41:96:01:0d:79:89:77:ba:3f:05:df:2c:fa:50:6a:83: 7f:96:c9:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC NDhGQTJFMjEwHhcNMjYwOTIxMDY0MjI3WhcNMjYwOTI4MDY0MjI3WjAYMRYwFAYD VQQDEw02YWIwZDFkMy0yMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRvZ1928tx7rLTFxPvXNop92TLoMB2cw4soC48YT7I55hjiM4z8eR4w+K3DJ pdUg/xKlpvHH26iCoiAylu48e+s5eAqp27icjqqdXrnUNd2ivZo0lJMTGpcxpBlq 9yqgeyxDIgcPi9we6D2neMhmehSOQOK+KMEnEuJx4iHH3DCmaofAkPaSlXqxtZXC pJjJ+q3Qk16h2DRQpCxAMlsh2gXIW+cryfXbCGDdF53BLjuOGliKHlqWDaRVp1zL SkVEb/DdAiNnrwyomzvC1oBJLMAIZV2O6sqnx01MHE/1gZfVMCkYbZ1gWY+EawUe IDvUhUJClIEDTVgvGODDcI51UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJS5ngYp ff1BURe1EGr//9BDt+qzMB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5 Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbxM0VrAJUo4fDyJMYsk5IUu0fuNYEsFZsjGWSctBaG+AiiOQEkEcs0/gji8q ex6sqqVCLN55xnd2vVHDZgSJRSmhqh34Ve4H2f5nJpLsv8Ip+cTqXULeVMC4o7pg PmWR6ipPUCu8s7r8gHIdb9/NNlJqbzb+626MZPihxKIC9PPL0hpHLiIWoSoqmNTx 0oI00zyIkSR3wah53P9m7b4R193p03M/uF/89qyjOCsMXgkPlI2AWTt/GxJ7zFb7 U/OUcnHBk1fr718UOJ3pQ1X9hCmbIAx82y6y6aJgmb9S+djabzbVFZqwXjfwuAtB lgENeYl3uj8F3yz6UGqDf5bJkA== -----END CERTIFICATE-----Generated at Mon Sep 21 16:42:59 2026 by rpki-client