$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: iz0au4EZ+XsvG5W7qalRzac7CL4V0VuyBa3Z2GFDDRo= Subject key identifier: D2:66:04:E0:57:1B:CD:AB:D2:F9:1A:34:45:9C:FF:18:E8:FA:9F:9D Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1273 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1231 Signing time: Tue 22 Sep 2026 17:02:51 +0000 Manifest this update: Tue 22 Sep 2026 17:02:50 +0000 Manifest next update: Tue 29 Sep 2026 17:02:50 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: RqdLKIHeeeYByDY1swqdHvRjFn7/yRCdgD8/mKsrDNQ=) 2: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) 3: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6LE0lcLwgL3BW95oynVLLd/nxrm4kZLuSBQHxOvu2Gs=) 4: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4723 (0x1273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Sep 22 17:02:50 2026 GMT Not After : Sep 29 17:02:50 2026 GMT Subject: CN=6ab2b4ba-a7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ae:64:fc:5e:c3:d7:6d:42:be:79:a9:da:45: fd:c4:ca:d0:2a:a4:4b:c1:0a:65:c0:b6:2d:cd:4f: d6:71:5a:90:a6:d9:46:f5:32:1d:34:ee:e3:b3:b1: b3:64:57:4f:5b:ed:04:fa:31:19:d1:0e:cd:f3:82: fb:e6:09:86:2b:6f:22:18:d9:69:7a:17:e1:02:a4: 22:57:00:1b:dd:21:2d:b4:f1:0f:58:97:be:d3:0e: 18:81:aa:38:5b:b4:d4:2d:f8:6e:3e:a4:bb:87:1e: 4b:85:8d:27:07:b5:f0:91:40:70:41:ce:6c:25:8f: d0:9b:26:18:74:f0:a3:bf:ad:6a:3b:23:36:60:f4: 31:e8:6e:7b:54:de:2e:93:1d:31:11:4b:5a:6e:10: 54:7f:4d:41:1f:13:3f:c4:c7:7b:3a:95:a6:47:bf: 69:89:d8:8c:d4:ef:3d:98:58:3c:23:67:c6:cc:2d: e6:69:cf:a5:24:cf:d1:71:a0:8e:44:df:4b:82:ff: d6:85:5d:3a:44:a9:33:14:44:32:1f:e0:dd:dd:e3: cf:62:7c:29:07:ba:27:ad:88:20:ae:bb:6f:5e:f2: 5b:56:da:84:42:99:16:9e:9d:d5:6d:60:e4:ae:d3: d8:77:53:93:f3:59:cd:a2:20:ba:50:44:e4:1c:38: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:66:04:E0:57:1B:CD:AB:D2:F9:1A:34:45:9C:FF:18:E8:FA:9F:9D X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:77:ff:e9:c5:57:23:1a:33:66:97:fe:6b:48:49:4f:f9:61: 17:3d:29:73:79:f3:1d:9f:f0:bf:fb:93:98:c0:9c:54:cd:37: 35:d7:f9:56:20:96:17:e7:f5:78:a2:51:4d:d1:22:2e:19:2d: 5d:21:2a:60:d4:42:18:31:49:bf:36:cc:3e:2a:61:76:f3:70: 8e:bc:97:02:cf:40:34:9c:dd:44:c4:08:e8:53:f4:4c:65:0f: 2c:b3:91:a5:16:b3:2d:a7:d3:91:96:00:9e:bd:bf:cc:b6:1f: ad:02:34:52:6c:86:3f:90:06:e6:c5:48:b3:cf:3a:7f:5c:c1: 77:96:06:a9:15:f2:a9:dc:04:e8:e8:e0:a8:31:58:d3:ec:a9: 7e:cd:a4:85:07:ef:e8:41:c8:99:13:42:ee:39:99:92:28:79: b6:73:c1:e5:3e:9b:65:82:97:66:86:a3:ee:ff:3a:48:22:63: 7c:24:33:05:2e:f7:d7:0f:0f:4e:1c:41:85:4e:62:fd:7a:94: 4d:1c:fc:b2:c8:a9:db:66:2e:65:13:79:a3:ca:83:89:b4:c8: 43:1a:62:f7:a1:61:97:10:f2:d1:3c:43:58:90:74:ae:50:82: f9:a1:3d:2f:be:64:86:6b:7e:82:6e:a1:a2:78:65:e6:e3:ed: 41:55:f0:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwOTIyMTcwMjUwWhcNMjYwOTI5MTcwMjUwWjAYMRYwFAYD VQQDEw02YWIyYjRiYS1hN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7q5k/F7D121Cvnmp2kX9xMrQKqRLwQplwLYtzU/WcVqQptlG9TIdNO7js7Gz ZFdPW+0E+jEZ0Q7N84L75gmGK28iGNlpehfhAqQiVwAb3SEttPEPWJe+0w4Ygao4 W7TULfhuPqS7hx5LhY0nB7XwkUBwQc5sJY/QmyYYdPCjv61qOyM2YPQx6G57VN4u kx0xEUtabhBUf01BHxM/xMd7OpWmR79pidiM1O89mFg8I2fGzC3mac+lJM/RcaCO RN9Lgv/WhV06RKkzFEQyH+Dd3ePPYnwpB7onrYggrrtvXvJbVtqEQpkWnp3VbWDk rtPYd1OT81nNoiC6UETkHDh0sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJmBOBX G82r0vkaNEWc/xjo+p+dMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1Xf/6cVXIxozZpf+a0hJT/lhFz0pc3nzHZ/wv/uTmMCcVM03Ndf5ViCWF+f1 eKJRTdEiLhktXSEqYNRCGDFJvzbMPiphdvNwjryXAs9ANJzdRMQI6FP0TGUPLLOR pRazLafTkZYAnr2/zLYfrQI0UmyGP5AG5sVIs886f1zBd5YGqRXyqdwE6OjgqDFY 0+ypfs2khQfv6EHImRNC7jmZkih5tnPB5T6bZYKXZoaj7v86SCJjfCQzBS731w8P ThxBhU5i/XqUTRz8ssip22YuZRN5o8qDibTIQxpi96FhlxDy0TxDWJB0rlCC+aE9 L75khmt+gm6honhl5uPtQVXwzQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:13:58 2026 by rpki-client