$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: WP721YJEQ635cxfGtrEN4fr+uIya5r9gY9y2wjdD9QE= Subject key identifier: AD:59:1D:E0:C3:0F:FE:D7:ED:B4:4D:52:5D:3C:28:FA:CE:70:0A:38 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: D6 Signing time: Thu 15 Oct 2026 07:43:02 +0000 Manifest this update: Thu 15 Oct 2026 07:43:01 +0000 Manifest next update: Thu 22 Oct 2026 07:43:01 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: 6ahYIwZ5haKJqkMxg20IMa1zeYe+Gh3+/ezJgPC3oHw=) 2: 995A12922D7911F185835B6B93833773.roa (hash: MmMEahGRPCXh9Mm/eF3pYwkpAK+cwHLCvIqEyEw37C4=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: wYk62Q6Ir+XeXEA2r1rVnPBMrc3HufUoVqQCvgr1iYI=) 4: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: 6KeAoBf8MaS5EjBdSVHExGmJ9a8yiTrCwJ3nhslSfTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 07:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Oct 15 07:43:01 2026 GMT Not After : Oct 22 07:43:01 2026 GMT Subject: CN=6ad08406-39ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:0d:26:cc:c7:6a:dc:44:64:2d:62:9d:9b: 0a:c8:33:c6:6e:92:da:25:cf:d1:02:e2:2c:89:97: d0:01:eb:db:21:41:fb:d8:6d:de:f2:69:8a:8d:94: 28:9d:f3:70:1a:f8:11:ba:45:92:e2:56:b8:32:db: bc:e8:48:3a:87:f5:19:4e:18:34:45:46:f4:61:f4: fd:74:d0:5c:a2:8c:b7:60:6b:44:a8:93:fe:d2:b6: e7:16:f4:a5:03:2f:7a:c5:dc:66:58:5c:bc:8b:35: 8a:f1:cd:19:47:57:4a:ad:22:db:bb:cf:89:a7:fe: d1:18:1e:5c:0d:06:01:13:c5:f3:73:ff:bd:c7:19: b4:77:42:e5:66:cf:ac:b7:66:1c:1a:af:d4:b1:dd: a9:f5:42:99:5b:19:cb:2f:18:0d:20:ea:66:76:25: 26:c3:ef:5b:2c:b6:c6:92:52:4f:04:9e:ba:28:5b: bf:9e:a7:6f:cf:f7:cd:3e:9c:86:53:94:42:b1:a8: 86:40:94:ae:1c:3a:c7:7b:b3:3f:b2:94:d9:6d:0c: 2b:11:e6:45:be:5b:28:3a:85:c7:b9:65:88:3e:11: cc:c3:48:ac:95:51:27:b3:b1:29:dc:8c:56:79:57: 20:30:ec:b4:4e:2b:70:cf:74:8e:07:bb:a8:25:0c: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:1D:E0:C3:0F:FE:D7:ED:B4:4D:52:5D:3C:28:FA:CE:70:0A:38 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9f:19:86:52:cd:57:35:e5:69:31:80:c7:84:2f:bd:77:58: 44:92:c3:d8:a2:1b:27:2d:16:a7:14:43:8f:08:d1:90:59:80: ab:43:ac:91:f6:28:25:62:48:3b:b9:bc:6c:eb:5f:02:33:6b: 65:3c:e7:8f:90:54:52:4c:d7:2c:6f:dc:3e:60:bc:7a:0d:d9: 58:44:bb:cf:76:1c:cb:64:7d:7a:c5:79:84:8b:4b:ed:35:44: 50:85:90:cb:93:90:bd:75:92:ec:59:23:dc:f0:f2:6d:97:34: ed:b3:45:95:07:26:ba:3c:d9:ca:33:18:b4:a3:c0:77:bd:31: 84:3d:71:d4:f1:f6:38:51:d4:f7:a5:b4:90:84:2b:6e:7d:3b: f1:df:2e:01:4c:4e:85:26:8e:5b:d2:7a:20:9d:8e:cd:24:cc: 0b:62:12:a2:66:2c:7d:c5:94:1f:2e:71:a4:00:83:13:18:b4: 60:1a:2e:f2:2e:66:a8:53:5d:30:8b:91:e3:27:13:ad:5f:eb: 71:00:51:d7:b2:34:d9:da:cf:ce:5d:6f:33:f5:3d:b0:13:76: ce:ba:de:7a:00:1a:17:1b:23:5f:ef:50:8b:c0:54:61:51:02: 05:91:8c:4b:1d:7d:8f:2a:28:c5:f2:e2:a3:8a:6a:0e:33:80: 38:d8:ff:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYxMDE1MDc0MzAxWhcNMjYxMDIyMDc0MzAxWjAYMRYwFAYD VQQDEw02YWQwODQwNi0zOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNcNJszHatxEZC1inZsKyDPGbpLaJc/RAuIsiZfQAevbIUH72G3e8mmKjZQo nfNwGvgRukWS4la4Mtu86Eg6h/UZThg0RUb0YfT9dNBcooy3YGtEqJP+0rbnFvSl Ay96xdxmWFy8izWK8c0ZR1dKrSLbu8+Jp/7RGB5cDQYBE8Xzc/+9xxm0d0LlZs+s t2YcGq/Usd2p9UKZWxnLLxgNIOpmdiUmw+9bLLbGklJPBJ66KFu/nqdvz/fNPpyG U5RCsaiGQJSuHDrHe7M/spTZbQwrEeZFvlsoOoXHuWWIPhHMw0islVEns7Ep3IxW eVcgMOy0Titwz3SOB7uoJQzVAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1ZHeDD D/7X7bRNUl08KPrOcAo4MB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJ8ZhlLNVzXlaTGAx4QvvXdYRJLD2KIbJy0WpxRDjwjRkFmAq0OskfYoJWJI O7m8bOtfAjNrZTznj5BUUkzXLG/cPmC8eg3ZWES7z3Ycy2R9esV5hItL7TVEUIWQ y5OQvXWS7Fkj3PDybZc07bNFlQcmujzZyjMYtKPAd70xhD1x1PH2OFHU96W0kIQr bn078d8uAUxOhSaOW9J6IJ2OzSTMC2ISomYsfcWUHy5xpACDExi0YBou8i5mqFNd MIuR4ycTrV/rcQBR17I02drPzl1vM/U9sBN2zrreegAaFxsjX+9Qi8BUYVECBZGM Sx19jyooxfLio4pqDjOAONj/7g== -----END CERTIFICATE-----Generated at Fri Oct 16 03:46:47 2026 by rpki-client