$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: Z7+/lJyKem8Vo0BntVSOpi2PQQ8GR01a9qMcfCliXlA= Subject key identifier: B0:80:41:D9:08:1D:BF:62:07:DF:8C:E4:2D:DA:A1:0D:03:08:93:3B Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 25AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 258C Signing time: Thu 08 Oct 2026 15:46:33 +0000 Manifest this update: Thu 08 Oct 2026 15:46:33 +0000 Manifest next update: Thu 15 Oct 2026 15:46:33 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: sMVHeYxNZ0IeMJlM1ADZXmvLxgfVSop11NPX+pFE1J8=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9644 (0x25ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Oct 8 15:46:33 2026 GMT Not After : Oct 15 15:46:33 2026 GMT Subject: CN=6ac7bad9-887d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:f5:37:9a:8f:ef:69:1d:29:1f:75:17:b7: a0:f7:7e:0a:51:a4:5c:d7:08:d9:c0:91:c9:a0:10: 6c:c2:d3:28:fb:0f:c2:4c:13:e1:fa:33:76:60:54: 71:f8:a6:89:3a:1d:a5:5c:70:23:9f:1c:ed:7a:22: 7d:43:96:fb:f5:73:3c:0f:c3:56:9f:17:3e:13:6f: cd:23:99:5f:71:d9:16:50:36:ac:00:f8:6a:86:21: f7:26:f7:ea:2d:46:c4:b3:97:c8:98:99:e0:7c:7d: 83:db:ac:ae:ff:fa:04:a1:21:80:76:f4:b1:5b:fe: 81:5d:68:26:b6:ce:bc:71:0d:19:68:ed:ee:2b:46: d1:d2:a2:b1:fa:c6:5b:bf:6c:4b:7b:f2:61:90:5e: c3:75:f0:5a:39:b9:45:61:fd:65:ac:57:f1:19:68: 83:c3:73:fc:30:1a:7a:bf:e9:ed:b4:c9:a3:7e:dc: 9f:ea:ac:97:8b:43:d5:a3:0b:45:41:17:f0:1b:7b: b9:f6:49:d7:5f:17:75:fd:60:09:7f:86:92:e0:7a: e8:d1:15:eb:b6:79:f5:bd:e0:2e:50:99:36:65:ac: 12:0e:5b:9e:57:4e:9f:d3:3d:ad:4b:27:87:62:a4: 49:51:0d:71:c9:9a:49:6b:d1:e7:2e:0f:be:65:e7: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:80:41:D9:08:1D:BF:62:07:DF:8C:E4:2D:DA:A1:0D:03:08:93:3B X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:01:0e:92:4c:38:8a:92:aa:1d:2d:89:a0:fb:02:4a:59: f6:16:91:0e:d8:7c:87:ce:91:aa:04:c6:7f:ae:27:19:e2:99: 4c:13:92:eb:6c:42:f6:58:c0:13:ef:93:7b:78:e6:9a:42:d3: f6:c9:f4:8d:03:5c:b5:96:40:eb:74:ac:f5:35:f5:93:76:76: 21:e7:9d:87:f2:31:5b:04:9c:e2:95:62:c9:3c:22:3b:58:c3: 83:53:80:e2:9a:25:dd:c8:cb:24:bc:81:7c:50:a2:34:2c:d2: 40:00:95:c8:43:09:a0:08:e6:a8:ab:36:d9:44:b4:b7:5e:e9: c8:79:4d:ae:fb:74:07:f3:01:83:aa:ff:a9:bf:fc:e7:6c:a0: ef:12:c5:23:1c:d0:d4:4c:5d:8d:14:eb:f7:16:0c:53:07:2c: ef:d7:49:df:e7:94:b2:fb:65:48:e7:60:d2:5a:c9:28:d0:da: 8b:4c:d2:09:35:20:83:53:99:fe:95:6e:ac:bc:e5:99:a0:11: 53:a1:5f:72:16:78:23:fe:17:ad:3e:2f:21:6d:ce:34:7e:de: bd:bb:8a:d2:c2:c1:3a:64:0c:a9:28:43:c5:40:8a:d7:fc:d5: aa:4b:d8:8f:c3:88:9f:9a:1d:45:34:3d:82:a8:8d:0e:25:39: 9f:c9:98:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYxMDA4MTU0NjMzWhcNMjYxMDE1MTU0NjMzWjAYMRYwFAYD VQQDEw02YWM3YmFkOS04ODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbf1N5qP72kdKR91F7eg934KUaRc1wjZwJHJoBBswtMo+w/CTBPh+jN2YFRx +KaJOh2lXHAjnxzteiJ9Q5b79XM8D8NWnxc+E2/NI5lfcdkWUDasAPhqhiH3Jvfq LUbEs5fImJngfH2D26yu//oEoSGAdvSxW/6BXWgmts68cQ0ZaO3uK0bR0qKx+sZb v2xLe/JhkF7DdfBaOblFYf1lrFfxGWiDw3P8MBp6v+nttMmjftyf6qyXi0PVowtF QRfwG3u59knXXxd1/WAJf4aS4Hro0RXrtnn1veAuUJk2ZawSDlueV06f0z2tSyeH YqRJUQ1xyZpJa9HnLg++Zec/nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCAQdkI Hb9iB9+M5C3aoQ0DCJM7MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVwIBDpJMOIqSqh0tiaD7AkpZ9haRDth8h86RqgTGf64nGeKZTBOS62xC9ljA E++Te3jmmkLT9sn0jQNctZZA63Ss9TX1k3Z2Ieedh/IxWwSc4pViyTwiO1jDg1OA 4pol3cjLJLyBfFCiNCzSQACVyEMJoAjmqKs22US0t17pyHlNrvt0B/MBg6r/qb/8 52yg7xLFIxzQ1ExdjRTr9xYMUwcs79dJ3+eUsvtlSOdg0lrJKNDai0zSCTUgg1OZ /pVurLzlmaARU6FfchZ4I/4XrT4vIW3ONH7evbuK0sLBOmQMqShDxUCK1/zVqkvY j8OIn5odRTQ9gqiNDiU5n8mYeg== -----END CERTIFICATE-----Generated at Sat Oct 10 16:39:15 2026 by rpki-client