$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft File: ZLiL9faqm7HpEXZsjfla6A-IBnc.mft (raw, json) Hash identifier: Zl6NFmQUqJkZKNN3g5VlRzthg8UeAVTWZ9xK9VY9lAg= Subject key identifier: D1:3C:C3:99:BF:B5:97:60:E5:1E:4B:D2:0D:73:C5:A4:2D:12:52:90 Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77 Certificate issuer: /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft Manifest number: 21 Signing time: Mon 21 Sep 2026 08:51:01 +0000 Manifest this update: Mon 21 Sep 2026 08:51:00 +0000 Manifest next update: Mon 28 Sep 2026 08:51:00 +0000 Files and hashes: 1: ZLiL9faqm7HpEXZsjfla6A-IBnc.crl (hash: UghBJC4OnaX6lZmA74hhtVQBhC1Xshe3X6O9q1dmkos=) 2: 2851C57C88FF11F1BFED971F4A11F970.roa (hash: eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677 Validity Not Before: Sep 21 08:51:00 2026 GMT Not After : Sep 28 08:51:00 2026 GMT Subject: CN=6ab0eff4-1c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:80:aa:c8:74:e2:4b:6e:5c:10:6e:36:36: 71:bf:9a:14:f2:c9:b4:85:9e:66:0a:13:3a:99:b3: 6d:98:01:0b:87:57:52:41:02:75:e7:24:44:ab:4e: a2:e5:5b:d9:f3:d9:9e:2b:64:b5:47:00:4f:d7:f9: da:75:aa:33:d6:98:fd:a3:d8:72:b1:35:f5:b8:37: 1f:72:f2:eb:bc:2e:a0:6d:0f:94:0e:03:c1:94:e2: 4f:e8:a2:f5:8e:0f:11:84:2a:46:58:a2:40:a7:f5: 87:00:d3:cd:66:ca:24:58:87:33:c6:2e:72:41:42: 5e:0c:1a:5a:c2:b5:9a:cc:2c:1e:02:21:2f:de:b0: b4:bd:95:6a:8d:0c:36:52:cc:0a:86:fd:4d:3d:b2: d7:d6:0e:94:58:c8:0d:bd:3d:6a:46:50:8b:d3:da: a1:c5:d6:a3:a4:2f:f9:92:99:41:8f:c2:5c:3a:03: 29:17:92:39:91:35:90:86:5c:cb:7e:41:cb:b3:3e: 2f:3e:b1:70:58:5b:6a:7e:68:b9:37:d8:f0:1f:15: 19:6c:1e:ff:aa:7f:69:fc:b1:83:45:d0:e3:ac:38: 87:3b:8c:6c:51:cd:ad:59:d4:ca:e4:6a:84:49:d6: a2:20:5d:4e:98:c2:da:95:f5:d9:35:55:53:a9:44: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3C:C3:99:BF:B5:97:60:E5:1E:4B:D2:0D:73:C5:A4:2D:12:52:90 X509v3 Authority Key Identifier: keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:48:2e:e3:8f:12:54:b9:28:a2:6a:0f:0e:b8:a2:48:a2:6a: 53:36:0b:4f:bf:23:9e:07:97:59:e7:8f:98:47:0c:6a:8a:51: b1:9a:be:86:36:a1:2c:77:1a:ce:48:07:75:81:89:3a:f4:26: f8:87:4a:5c:bd:c2:e4:ce:bb:54:70:fb:3f:12:da:26:34:7e: e7:09:49:38:2d:92:03:ed:79:e0:04:91:af:f3:1b:15:c5:85: 1e:79:60:70:e1:a3:ed:f9:4b:6c:d1:e9:0e:5e:31:8a:af:d1: b7:54:d2:36:15:6a:42:2b:d5:b3:ad:9b:65:3b:e8:b9:15:f9: df:87:ff:cf:26:67:58:bd:6f:7c:b4:65:b4:69:13:b1:19:84: 89:4b:02:9c:28:29:42:cc:8f:c9:ab:e4:61:62:c6:89:b5:d9: fc:c6:3f:d0:47:cf:43:cc:cb:f7:fd:cb:cf:83:a6:bb:b1:ce: 4d:a3:d7:42:74:12:c9:9a:08:7e:66:5c:e1:01:88:fe:d9:e9: 6c:9c:52:63:c7:14:3e:75:cd:3c:a1:01:5e:67:ee:50:a2:07: 6b:8a:34:9d:1f:ad:f4:9a:35:97:2b:69:cb:77:ef:c2:37:d7: d3:48:8e:cf:2a:ed:17:59:df:dd:f3:a2:91:95:63:37:f9:af: 12:68:64:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzE5RDExMC8GA1UEBRMoNjRCODhCRjVGNkFBOUJCMUU5MTE3NjZDOERGOTVBRTgw Rjg4MDY3NzAeFw0yNjA5MjEwODUxMDBaFw0yNjA5MjgwODUxMDBaMBgxFjAUBgNV BAMTDTZhYjBlZmY0LTFjMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaFICqyHTiS25cEG42NnG/mhTyybSFnmYKEzqZs22YAQuHV1JBAnXnJESrTqLl W9nz2Z4rZLVHAE/X+dp1qjPWmP2j2HKxNfW4Nx9y8uu8LqBtD5QOA8GU4k/oovWO DxGEKkZYokCn9YcA081myiRYhzPGLnJBQl4MGlrCtZrMLB4CIS/esLS9lWqNDDZS zAqG/U09stfWDpRYyA29PWpGUIvT2qHF1qOkL/mSmUGPwlw6AykXkjmRNZCGXMt+ QcuzPi8+sXBYW2p+aLk32PAfFRlsHv+qf2n8sYNF0OOsOIc7jGxRza1Z1MrkaoRJ 1qIgXU6YwtqV9dk1VVOpROGDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0TzDmb+1 l2DlHkvSDXPFpC0SUpAwHwYDVR0jBBgwFoAUZLiL9faqm7HpEXZsjfla6A+IBncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMTlEL0ZDRUE2NjFBODhG ODExRjFCMDE5QUUxMTQ3MTFGOTcwL1pMaUw5ZmFxbTdIcEVYWnNqZmxhNkEtSUJu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkxpTDlmYXFtN0hwRVhac2pmbGE2QS1JQm5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MTlEL0ZDRUE2NjFBODhGODExRjFCMDE5QUUxMTQ3MTFGOTcwL1pMaUw5ZmFxbTdI cEVYWnNqZmxhNkEtSUJuYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwSC7jjxJUuSiiag8OuKJIompTNgtPvyOeB5dZ54+YRwxqilGxmr6GNqEsdxrO SAd1gYk69Cb4h0pcvcLkzrtUcPs/EtomNH7nCUk4LZID7XngBJGv8xsVxYUeeWBw 4aPt+Uts0ekOXjGKr9G3VNI2FWpCK9WzrZtlO+i5Ffnfh//PJmdYvW98tGW0aROx GYSJSwKcKClCzI/Jq+RhYsaJtdn8xj/QR89DzMv3/cvPg6a7sc5No9dCdBLJmgh+ ZlzhAYj+2elsnFJjxxQ+dc08oQFeZ+5QogdrijSdH630mjWXK2nLd+/CN9fTSI7P Ku0XWd/d86KRlWM3+a8SaGRz -----END CERTIFICATE-----Generated at Tue Sep 22 02:44:33 2026 by rpki-client