$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: OIFikP1oiizk8EOUr7CzAGQ6WC+NI0GcusKsxa2ZElE= Subject key identifier: A8:45:A7:61:22:EE:F2:78:C9:23:B2:84:29:F4:20:6C:F1:2B:6F:D0 Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 0499 Signing time: Tue 22 Sep 2026 23:35:32 +0000 Manifest this update: Tue 22 Sep 2026 23:35:31 +0000 Manifest next update: Tue 29 Sep 2026 23:35:31 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: R2hCMEetWhBnhxBPdnIKSymI0jWYDGSgyzATvnjXFxA=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: Sep 22 23:35:31 2026 GMT Not After : Sep 29 23:35:31 2026 GMT Subject: CN=6ab310c4-568c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:91:cf:8d:1f:5d:b0:5e:8b:67:b5:5f:92: 94:67:df:e5:37:5e:8a:75:b7:07:12:ab:a8:25:04: 19:77:c3:51:07:02:e7:11:b0:7c:67:09:c5:28:18: 89:07:b8:3d:ed:2d:cb:be:0a:a2:0c:95:79:7d:1e: 77:82:54:32:fc:71:d2:45:5e:5a:c9:e1:91:81:1f: 04:23:1c:29:4f:5b:f9:ab:06:63:fa:0f:f2:f0:5f: 61:84:dd:c2:23:cb:ae:ea:a2:70:83:45:47:69:ce: bd:87:45:45:4e:c2:df:be:54:be:41:ee:a6:0e:d5: a9:69:ea:76:21:25:06:91:b2:40:e3:33:c7:6b:a3: 3c:62:e6:65:e2:26:31:8d:ca:e5:ba:52:1e:b5:cf: 5f:46:23:41:e7:68:0e:23:f9:76:6b:43:b6:f2:ca: e0:d3:fc:e7:1e:5f:48:5f:ea:aa:a1:e0:3f:b3:9e: 86:1d:5e:8f:ce:9f:aa:8b:8c:f8:9e:96:88:55:35: 4d:7e:6d:b8:99:68:48:70:bc:4f:93:57:90:9f:ed: 1a:5b:70:6e:85:a6:0e:d1:ad:5f:a6:5c:0b:30:73: ac:b2:13:26:2d:80:39:eb:6d:82:dd:ec:9c:86:de: ca:bd:d1:21:b9:94:aa:5e:34:7f:f2:b2:4d:b9:d0: e2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:A7:61:22:EE:F2:78:C9:23:B2:84:29:F4:20:6C:F1:2B:6F:D0 X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4a:c0:21:e5:90:e9:7a:ad:08:f1:70:97:51:41:44:0b:46: b7:f7:d4:b2:41:1f:8b:19:3e:7a:2f:39:a1:82:22:e0:8b:33: 87:e5:bb:ec:7d:c9:cf:f5:85:27:07:fa:46:a2:86:36:dc:5f: be:59:91:31:2e:82:b4:1c:c3:0f:22:fe:ab:3d:34:19:70:ef: a7:5a:3e:b9:b2:e9:c2:da:55:00:8d:16:4a:78:1e:0f:4b:32: 06:b4:a0:87:1e:a7:e4:56:7f:19:50:51:0e:97:4d:b8:d5:9e: be:9f:ec:b5:a5:aa:e6:0c:8a:d6:cf:42:98:7f:6a:e2:24:3e: f5:9c:7a:15:41:f9:25:4d:fb:e7:2c:eb:94:0a:71:66:c4:b4: 8a:b6:a7:92:db:37:f5:0b:07:34:84:03:d3:eb:1c:28:ed:c4: db:13:c7:f8:48:36:be:4b:51:18:a3:b6:8e:a1:fb:55:36:8a: 81:04:11:a6:00:f6:ea:3f:8b:eb:c2:b8:06:c0:72:e0:ca:87: db:06:a7:eb:a3:0b:5c:1c:df:53:dc:1c:05:2d:d6:92:26:fd: c0:71:5e:d8:a9:91:a7:04:2c:71:be:eb:59:10:c8:3b:68:e1: 5d:42:d5:73:8c:8b:62:6b:06:7b:8a:16:52:85:b7:71:5f:7a: d2:06:50:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjYwOTIyMjMzNTMxWhcNMjYwOTI5MjMzNTMxWjAYMRYwFAYD VQQDEw02YWIzMTBjNC01NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWiRz40fXbBei2e1X5KUZ9/lN16KdbcHEquoJQQZd8NRBwLnEbB8ZwnFKBiJ B7g97S3LvgqiDJV5fR53glQy/HHSRV5ayeGRgR8EIxwpT1v5qwZj+g/y8F9hhN3C I8uu6qJwg0VHac69h0VFTsLfvlS+Qe6mDtWpaep2ISUGkbJA4zPHa6M8YuZl4iYx jcrlulIetc9fRiNB52gOI/l2a0O28srg0/znHl9IX+qqoeA/s56GHV6Pzp+qi4z4 npaIVTVNfm24mWhIcLxPk1eQn+0aW3BuhaYO0a1fplwLMHOsshMmLYA5622C3eyc ht7KvdEhuZSqXjR/8rJNudDizQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhFp2Ei 7vJ4ySOyhCn0IGzxK2/QMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArUrAIeWQ6XqtCPFwl1FBRAtGt/fUskEfixk+ei85oYIi4Iszh+W77H3Jz/WF Jwf6RqKGNtxfvlmRMS6CtBzDDyL+qz00GXDvp1o+ubLpwtpVAI0WSngeD0syBrSg hx6n5FZ/GVBRDpdNuNWevp/staWq5gyK1s9CmH9q4iQ+9Zx6FUH5JU375yzrlApx ZsS0irankts39QsHNIQD0+scKO3E2xPH+Eg2vktRGKO2jqH7VTaKgQQRpgD26j+L 68K4BsBy4MqH2wan66MLXBzfU9wcBS3Wkib9wHFe2KmRpwQscb7rWRDIO2jhXULV c4yLYmsGe4oWUoW3cV960gZQkA== -----END CERTIFICATE-----Generated at Thu Sep 24 06:33:04 2026 by rpki-client