$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: 7eOOcwI0whBl5d1dEcraRBJc2W4aXzI/Xs4sXuxBE/k= Subject key identifier: FD:90:7E:7D:47:95:77:85:6D:C7:24:32:29:BE:47:64:8D:4B:17:02 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 09EE Signing time: Mon 28 Sep 2026 19:59:13 +0000 Manifest this update: Mon 28 Sep 2026 19:59:13 +0000 Manifest next update: Mon 05 Oct 2026 19:59:13 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: TOtIVBnpooOGp026NDqNxEqxapZEKynPtoRtAP3Qvl0=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Sep 28 19:59:13 2026 GMT Not After : Oct 5 19:59:13 2026 GMT Subject: CN=6abac711-b671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:88:3f:f4:4f:d6:79:c1:d1:9e:57:c1:37: a7:11:e4:4b:25:d9:2b:50:ac:13:c9:e0:7e:0a:dc: 34:2c:8e:3a:b5:8d:7c:42:42:57:08:13:c1:58:4b: 9c:8f:f5:d8:7b:bd:7a:8c:ee:e0:8e:98:49:32:b9: 60:2b:6e:56:d1:01:4b:e6:6c:12:08:53:3a:1c:57: 3a:9e:3f:29:21:50:25:1a:71:df:fd:f7:f0:f7:a3: d2:22:71:48:06:10:4a:58:0a:0e:8e:dd:90:84:fa: 51:2e:0b:06:fc:de:d6:29:cf:ed:5e:27:6b:74:25: 2f:01:07:fa:90:0d:78:3c:f7:75:dd:5a:f2:60:e6: f0:b0:12:44:4d:ee:c6:c5:d2:1f:ae:19:3b:fb:ff: e3:aa:83:c4:da:f6:9d:a7:94:ea:36:2b:e2:95:d7: 1b:94:e4:91:73:25:0e:d1:d5:a7:32:22:98:94:36: b9:a3:67:15:75:ec:47:f8:18:8d:75:9c:84:61:a7: fc:76:61:c1:a1:78:27:af:42:8b:ff:e9:8d:d7:b4: 86:99:3f:a0:9f:0c:13:68:4f:fa:2e:cf:85:04:a1: 7e:9f:ca:ee:c4:5a:eb:d4:15:1d:b6:be:ef:c5:fb: 33:70:fa:3e:83:65:8b:ec:5e:7b:3f:f7:30:68:0b: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:7E:7D:47:95:77:85:6D:C7:24:32:29:BE:47:64:8D:4B:17:02 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8d:ee:e6:f5:87:58:39:19:c2:f4:f5:fa:bc:46:b2:b9:e1: 1f:50:ac:91:7e:b3:68:c1:6f:ac:a7:f4:b4:c5:99:89:95:e0: b3:98:45:58:8d:66:c2:27:d3:38:0f:23:4d:32:ae:5f:f7:27: b8:58:ec:59:e0:c9:44:a5:39:71:be:a2:a2:0e:fd:11:45:fa: 4f:fc:1f:d7:30:20:c8:31:37:5f:cc:78:08:58:50:97:fd:09: df:1a:7e:8b:44:bf:27:22:25:f8:a5:a3:d5:05:e6:24:2c:92: 7d:a5:4d:23:57:f9:80:ec:cd:d5:4e:c6:d6:fd:05:b2:4e:9e: 03:2c:e4:dc:61:08:73:41:61:b0:37:43:40:0d:ba:e5:18:16: 73:15:95:03:d9:25:dc:c9:40:41:9d:3b:d0:45:69:52:14:84: 5e:10:ca:a7:75:0b:3d:e1:17:4d:da:1c:1f:db:eb:43:a3:86: 60:ba:cd:ad:88:2e:41:58:02:33:6a:0d:96:83:25:b5:be:e6: 15:e2:be:df:50:4c:b9:d9:6f:16:00:3d:66:c7:af:a9:b9:79: 43:97:cc:55:68:b1:e1:58:69:7e:ec:c6:32:29:10:cd:24:0b: 8e:16:06:dc:ab:72:bf:87:96:ec:c4:db:07:c5:47:e1:55:92: 83:73:cc:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwOTI4MTk1OTEzWhcNMjYxMDA1MTk1OTEzWjAYMRYwFAYD VQQDEw02YWJhYzcxMS1iNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W6IP/RP1nnB0Z5XwTenEeRLJdkrUKwTyeB+Ctw0LI46tY18QkJXCBPBWEuc j/XYe716jO7gjphJMrlgK25W0QFL5mwSCFM6HFc6nj8pIVAlGnHf/ffw96PSInFI BhBKWAoOjt2QhPpRLgsG/N7WKc/tXidrdCUvAQf6kA14PPd13VryYObwsBJETe7G xdIfrhk7+//jqoPE2vadp5TqNivildcblOSRcyUO0dWnMiKYlDa5o2cVdexH+BiN dZyEYaf8dmHBoXgnr0KL/+mN17SGmT+gnwwTaE/6Ls+FBKF+n8ruxFrr1BUdtr7v xfszcPo+g2WL7F57P/cwaAsL9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2Qfn1H lXeFbcckMim+R2SNSxcCMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJI3u5vWHWDkZwvT1+rxGsrnhH1CskX6zaMFvrKf0tMWZiZXgs5hFWI1mwifT OA8jTTKuX/cnuFjsWeDJRKU5cb6iog79EUX6T/wf1zAgyDE3X8x4CFhQl/0J3xp+ i0S/JyIl+KWj1QXmJCySfaVNI1f5gOzN1U7G1v0Fsk6eAyzk3GEIc0FhsDdDQA26 5RgWcxWVA9kl3MlAQZ070EVpUhSEXhDKp3ULPeEXTdocH9vrQ6OGYLrNrYguQVgC M2oNloMltb7mFeK+31BMudlvFgA9Zsevqbl5Q5fMVWix4VhpfuzGMikQzSQLjhYG 3Ktyv4eW7MTbB8VH4VWSg3PMrw== -----END CERTIFICATE-----Generated at Tue Sep 29 02:24:12 2026 by rpki-client