$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: /HYTcopFLsIBSgG7+6pKVIwZjfuFVmMEDgrXWWGrMpk= Subject key identifier: A1:1B:A5:CB:AF:E5:A3:CB:D8:A6:44:C6:8C:52:FB:2A:C3:6D:BB:F7 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 35CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 35A8 Signing time: Sun 20 Sep 2026 14:43:51 +0000 Manifest this update: Sun 20 Sep 2026 14:43:51 +0000 Manifest next update: Sun 27 Sep 2026 14:43:51 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: 7d6kyn2nn171WZkqWSfjXXVeQODwsNaGjA/92S4m1j4=) 2: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho=) 3: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13774 (0x35ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Sep 20 14:43:51 2026 GMT Not After : Sep 27 14:43:51 2026 GMT Subject: CN=6aaff127-3b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:bf:d3:a7:9a:fc:f6:40:2b:37:1b:2b:82: 3c:46:e2:07:98:2a:a7:7d:cc:33:54:aa:f2:68:7b: cc:bf:33:60:8d:a5:28:66:c0:5e:62:1f:52:d2:1d: 5b:f3:c4:a1:87:c4:7a:90:81:50:ab:27:5e:6b:7f: d9:60:b3:48:9e:00:4b:93:1b:95:0d:9a:1d:11:2b: c0:88:7b:82:d4:01:ee:a9:4b:3c:bf:ad:30:de:38: 83:43:8a:7a:13:50:22:c9:ea:da:1b:40:9e:b8:f0: 03:aa:22:a4:cc:55:7b:8b:6a:74:ec:23:e1:7e:a6: d6:16:9a:29:42:a8:45:78:d4:62:1c:e8:ce:c1:ff: 49:2e:2c:8a:04:30:eb:57:e1:06:bd:bc:f5:80:0d: a6:ad:f5:58:6a:20:c6:d7:87:a9:15:ba:68:ee:5c: 67:65:55:b3:a5:57:48:8e:c6:9c:ea:6c:9d:ae:fb: ce:96:d4:2b:2c:e8:6e:cc:15:e9:bf:51:11:df:27: 88:67:64:ad:03:48:d7:2d:64:15:32:95:8d:dd:de: 70:02:f7:ff:00:9e:b7:6e:45:b0:bf:f5:09:d7:85: 4c:45:b0:4f:4b:31:be:91:5c:f0:82:d6:ff:c2:5a: cc:c0:ee:7a:07:63:60:b5:be:8b:17:b8:ea:f0:c6: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1B:A5:CB:AF:E5:A3:CB:D8:A6:44:C6:8C:52:FB:2A:C3:6D:BB:F7 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c1:3b:b2:1a:64:f4:43:88:30:1d:1f:7d:c4:7b:a6:15:da: 81:63:e3:8b:14:cd:19:e4:64:ef:9d:b6:9b:bd:c5:5a:40:4e: 08:f9:fe:de:1e:32:4c:0b:b2:f3:38:2e:d7:f4:57:ec:50:be: 0f:66:13:2c:d9:94:15:23:15:b9:92:cf:9d:84:d0:80:08:b9: 62:bf:08:bf:9e:60:9e:6d:1d:16:0a:bd:40:f7:2a:b1:de:de: 12:21:12:39:35:53:5b:0c:ad:05:f6:ed:be:4a:17:04:32:25: 7e:5e:03:93:06:74:e9:63:95:68:bf:88:0a:30:75:37:cf:d8: 05:57:c9:19:1b:af:f7:2a:5c:ab:28:0e:53:0a:19:4a:e5:b5: 66:e5:50:36:8a:5e:81:cb:89:d7:21:2a:63:fa:1f:a9:51:83: 7c:c5:77:e5:6b:58:01:f5:24:dd:90:05:52:e1:62:35:ca:20: 44:63:c6:91:a0:46:96:d6:d1:72:e4:14:1e:0f:c4:5a:16:8d: 16:50:36:b9:c3:a6:08:96:19:4d:09:eb:c3:09:c9:07:1c:c6: af:ae:8e:20:dc:c9:15:cc:66:72:db:58:73:fa:88:80:5e:e3: 33:88:04:84:f5:91:e9:b8:dd:4c:a4:1f:29:49:de:8e:39:a0: 7c:a0:e4:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjYwOTIwMTQ0MzUxWhcNMjYwOTI3MTQ0MzUxWjAYMRYwFAYD VQQDEw02YWFmZjEyNy0zYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpm/06ea/PZAKzcbK4I8RuIHmCqnfcwzVKryaHvMvzNgjaUoZsBeYh9S0h1b 88Shh8R6kIFQqydea3/ZYLNIngBLkxuVDZodESvAiHuC1AHuqUs8v60w3jiDQ4p6 E1AiyeraG0CeuPADqiKkzFV7i2p07CPhfqbWFpopQqhFeNRiHOjOwf9JLiyKBDDr V+EGvbz1gA2mrfVYaiDG14epFbpo7lxnZVWzpVdIjsac6mydrvvOltQrLOhuzBXp v1ER3yeIZ2StA0jXLWQVMpWN3d5wAvf/AJ63bkWwv/UJ14VMRbBPSzG+kVzwgtb/ wlrMwO56B2Ngtb6LF7jq8MaqjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEbpcuv 5aPL2KZExoxS+yrDbbv3MB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicE7shpk9EOIMB0ffcR7phXagWPjixTNGeRk7522m73FWkBOCPn+3h4yTAuy 8zgu1/RX7FC+D2YTLNmUFSMVuZLPnYTQgAi5Yr8Iv55gnm0dFgq9QPcqsd7eEiES OTVTWwytBfbtvkoXBDIlfl4DkwZ06WOVaL+ICjB1N8/YBVfJGRuv9ypcqygOUwoZ SuW1ZuVQNopegcuJ1yEqY/ofqVGDfMV35WtYAfUk3ZAFUuFiNcogRGPGkaBGltbR cuQUHg/EWhaNFlA2ucOmCJYZTQnrwwnJBxzGr66OINzJFcxmcttYc/qIgF7jM4gE hPWR6bjdTKQfKUnejjmgfKDkeQ== -----END CERTIFICATE-----Generated at Tue Sep 22 15:02:21 2026 by rpki-client