$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: duobnWVI1l3hOKRA2B+t4ZhFisgic/Gygkm0T4UK/lc= Subject key identifier: AF:D3:CB:BD:0C:D6:59:45:BF:B1:53:65:0B:2E:F3:99:B6:11:1A:C7 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 181D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 1810 Signing time: Mon 28 Sep 2026 16:35:26 +0000 Manifest this update: Mon 28 Sep 2026 16:35:25 +0000 Manifest next update: Mon 05 Oct 2026 16:35:25 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: Q0YmReEp1Qyhg/P7VMzQ/NTWhZrvDYq+zgrnm+KT6Ak=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6173 (0x181d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Sep 28 16:35:25 2026 GMT Not After : Oct 5 16:35:25 2026 GMT Subject: CN=6aba974e-7aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:b4:e8:d0:fe:9a:02:47:a0:8d:2c:54:14: 96:db:e9:d2:b7:d6:85:be:8a:92:72:c6:c1:ef:99: a5:dd:32:ba:51:d7:03:5d:f7:bb:6b:12:a9:28:3e: 01:ac:87:af:65:34:f6:3d:c7:c1:1e:4d:0f:b4:ef: fd:fb:11:6a:20:cd:85:91:88:48:ac:10:dc:60:e1: 97:95:08:94:63:f1:87:5b:d7:70:aa:91:27:0c:d8: 76:36:d7:97:03:e5:48:2b:85:4b:c8:2b:74:75:12: 6f:10:d1:40:14:a8:59:ac:98:3e:b3:fc:f3:e5:9f: fb:aa:0f:a5:af:6c:67:7c:1a:e5:7a:95:a8:f4:dc: 31:55:4d:4a:91:29:29:f3:09:32:ad:a2:ee:71:15: e9:61:05:d6:84:e9:1c:f3:d0:f1:5e:a3:0b:a8:b0: 9c:7c:f9:2e:ed:06:e0:b5:f3:62:17:9f:2e:5c:ee: 1c:dd:8a:d3:05:ac:e4:ac:30:87:43:d9:c9:b6:77: 65:d0:0f:37:22:4b:7a:e2:34:90:ef:d7:87:34:65: 07:49:7d:12:e3:85:a5:f0:d1:94:b2:b7:9e:59:ca: ba:f9:87:62:aa:01:9b:e0:11:bd:86:08:06:b1:4d: 8d:88:2a:b8:e8:51:d3:b7:a9:03:8e:1e:e3:8f:40: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D3:CB:BD:0C:D6:59:45:BF:B1:53:65:0B:2E:F3:99:B6:11:1A:C7 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:5d:06:ab:16:19:26:b4:53:32:7c:1c:6b:13:19:cb:1e: f3:a4:e3:83:4d:55:ff:2b:18:19:41:b3:cd:d3:b6:2f:19:0f: 45:b8:75:c4:4f:8b:e6:10:34:0a:82:0b:ce:b3:15:8e:55:02: 9b:35:56:47:44:00:8f:cd:32:1a:63:73:cd:fe:48:63:56:34: 46:ec:e7:bc:ed:a0:22:e6:c5:88:bf:47:79:af:88:8c:f0:6c: 20:bc:fb:56:cf:cf:e0:1b:23:62:e9:5e:0d:e0:eb:25:f9:64: 40:a5:d9:12:d5:1f:e7:d0:51:62:c9:14:53:9f:35:3e:56:ed: b5:6c:0a:fd:60:bc:7f:d3:75:da:e4:b4:41:cc:0a:3f:a9:af: a7:53:85:b4:c1:ee:64:82:51:da:84:8a:26:fb:4d:15:17:bd: e3:7d:58:06:99:67:8c:8d:80:51:e2:84:b2:c3:d7:5f:1b:fa: 96:1e:fa:06:f7:45:3e:67:1a:8b:57:73:e5:2d:7d:c6:a0:f2: 2b:db:a9:44:4a:fb:6c:7d:6e:1e:3f:7d:a2:63:fc:cb:8c:9f: 49:1a:f4:04:2a:a0:50:39:16:5f:4b:c1:ce:28:10:56:d4:6a: 6d:6e:ca:e8:d3:4e:fc:95:80:0c:60:40:bf:2e:f9:2d:ca:bd: 00:79:67:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwOTI4MTYzNTI1WhcNMjYxMDA1MTYzNTI1WjAYMRYwFAYD VQQDEw02YWJhOTc0ZS03YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBm06ND+mgJHoI0sVBSW2+nSt9aFvoqScsbB75ml3TK6UdcDXfe7axKpKD4B rIevZTT2PcfBHk0PtO/9+xFqIM2FkYhIrBDcYOGXlQiUY/GHW9dwqpEnDNh2NteX A+VIK4VLyCt0dRJvENFAFKhZrJg+s/zz5Z/7qg+lr2xnfBrlepWo9NwxVU1KkSkp 8wkyraLucRXpYQXWhOkc89DxXqMLqLCcfPku7QbgtfNiF58uXO4c3YrTBazkrDCH Q9nJtndl0A83Ikt64jSQ79eHNGUHSX0S44Wl8NGUsreeWcq6+YdiqgGb4BG9hggG sU2NiCq46FHTt6kDjh7jj0B9rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/Ty70M 1llFv7FTZQsu85m2ERrHMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAADBdBqsWGSa0UzJ8HGsTGcse86Tjg01V/ysYGUGzzdO2LxkPRbh1xE+L5hA0 CoILzrMVjlUCmzVWR0QAj80yGmNzzf5IY1Y0RuznvO2gIubFiL9Hea+IjPBsILz7 Vs/P4BsjYuleDeDrJflkQKXZEtUf59BRYskUU581PlbttWwK/WC8f9N12uS0QcwK P6mvp1OFtMHuZIJR2oSKJvtNFRe9431YBplnjI2AUeKEssPXXxv6lh76BvdFPmca i1dz5S19xqDyK9upREr7bH1uHj99omP8y4yfSRr0BCqgUDkWX0vBzigQVtRqbW7K 6NNO/JWADGBAvy75Lcq9AHln9Q== -----END CERTIFICATE-----Generated at Mon Sep 28 19:44:33 2026 by rpki-client