$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft File: zfpbwg4xKRmsax7K2Stx5zSmALA.mft (raw, json) Hash identifier: KgwJHMa1pa/vW9AmzSbrmYt49Ja8dEcZvQdkVrMR6l0= Subject key identifier: AB:E1:60:CC:96:2C:AA:9A:DF:0E:80:55:46:12:65:89:4E:6A:D1:2B Authority key identifier: CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0 Certificate issuer: /CN=A91731A3/serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft Manifest number: 16 Signing time: Mon 21 Sep 2026 09:00:21 +0000 Manifest this update: Mon 21 Sep 2026 09:00:20 +0000 Manifest next update: Mon 28 Sep 2026 09:00:20 +0000 Files and hashes: 1: zfpbwg4xKRmsax7K2Stx5zSmALA.crl (hash: h1rE3WvRO4JDYVMbKVK7SnhggXxhzCSJsjBxsoe508c=) 2: FF8ED6FA979211F1B1FF570F5011F970.roa (hash: Lh2K/wF9t2esCreJupluX3wR+8TGZ0wv94ej3vVe05c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731A3, serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0 Validity Not Before: Sep 21 09:00:20 2026 GMT Not After : Sep 28 09:00:20 2026 GMT Subject: CN=6ab0f225-9ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:8a:94:44:8e:67:9a:b2:76:42:45:d5:80: 17:33:69:fc:0e:d3:7b:57:86:70:68:5a:5d:44:c9: 38:fd:06:39:35:de:b1:26:51:6d:4b:76:8e:22:ad: 6a:10:c7:eb:1b:ae:44:c8:9f:31:58:c4:15:a9:03: 2e:6c:e2:15:ae:7b:7b:16:9e:8e:0c:2a:2a:a7:ce: 52:fa:2c:19:d7:e3:f3:5e:b6:fa:1a:5d:13:3f:12: 4c:97:57:47:51:5b:42:23:29:57:00:20:3b:a6:e7: 22:3b:d0:c1:e1:94:8f:68:b5:a4:33:26:69:dd:ee: 73:a4:c7:32:6d:00:d1:80:0a:cc:68:27:79:bc:83: ba:53:30:97:57:c7:e0:56:03:7e:d9:94:50:ec:87: e4:68:9a:6f:6b:b3:4d:9c:c4:1a:7a:fb:3e:e9:38: 56:6e:53:7c:06:2c:6d:f6:ad:1c:a4:80:3c:1b:bb: 3e:e7:3c:47:70:78:d0:bd:3a:08:fe:07:9e:85:db: 9d:1c:42:1e:d3:11:34:dc:a5:c4:48:ca:f4:4a:70: 78:03:b6:17:69:a9:b7:ed:89:24:4c:9e:62:8c:69: 66:b5:a9:cf:73:39:c0:f5:dd:f8:a9:2b:b2:41:6e: d4:de:74:bd:83:85:5e:05:c8:28:51:14:75:b9:a1: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E1:60:CC:96:2C:AA:9A:DF:0E:80:55:46:12:65:89:4E:6A:D1:2B X509v3 Authority Key Identifier: keyid:CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:c9:72:32:b9:dc:49:4f:25:0d:5c:98:ab:73:9a:f7:7b:34: a0:01:7d:bc:8e:7d:c1:1f:d6:17:97:c5:6c:a1:6e:05:bb:7d: 46:71:db:ad:a3:46:d9:e9:61:0e:09:f5:0f:45:84:84:32:fd: 77:27:3c:b1:c6:f9:9c:7c:91:98:f4:aa:6c:f3:45:c2:11:fc: 55:eb:e3:9d:d4:a3:ca:89:b5:ad:ea:09:fd:28:7a:50:f6:c0: fd:4c:78:9f:c1:61:ea:00:6b:47:35:0d:a9:bf:7f:2e:7d:16: a1:c0:0c:24:37:68:68:75:75:c0:1d:e3:fb:0e:66:78:09:a7: 4b:2c:29:56:c5:40:db:c1:cc:8c:34:2d:68:70:37:d0:ac:7c: f2:7e:00:a2:cd:33:fa:0e:86:af:b9:69:45:8e:f0:ba:e2:53: d7:92:7f:9b:f0:dc:8c:b4:eb:fc:ec:f1:e3:9b:0f:93:96:14: e2:2f:89:29:e2:18:7c:7f:d2:fb:d2:b8:63:87:97:69:e5:cf: 9c:ab:34:c8:3b:69:c3:20:4b:7c:f7:b9:0a:9b:f3:12:d5:de: 2b:93:ab:7e:50:10:18:d0:c6:2f:c0:aa:54:85:93:3b:15:f9: 95:33:fb:43:27:b2:c4:46:fc:9a:cc:a3:5e:fe:a4:a4:85:9a: 05:02:19:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBMzExMC8GA1UEBRMoQ0RGQTVCQzIwRTMxMjkxOUFDNkIxRUNBRDkyQjcxRTcz NEE2MDBCMDAeFw0yNjA5MjEwOTAwMjBaFw0yNjA5MjgwOTAwMjBaMBgxFjAUBgNV BAMTDTZhYjBmMjI1LTlhYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb0YqURI5nmrJ2QkXVgBczafwO03tXhnBoWl1EyTj9Bjk13rEmUW1Ldo4irWoQ x+sbrkTInzFYxBWpAy5s4hWue3sWno4MKiqnzlL6LBnX4/NetvoaXRM/EkyXV0dR W0IjKVcAIDum5yI70MHhlI9otaQzJmnd7nOkxzJtANGACsxoJ3m8g7pTMJdXx+BW A37ZlFDsh+Romm9rs02cxBp6+z7pOFZuU3wGLG32rRykgDwbuz7nPEdweNC9Ogj+ B56F250cQh7TETTcpcRIyvRKcHgDthdpqbftiSRMnmKMaWa1qc9zOcD13fipK7JB btTedL2DhV4FyChRFHW5ocDHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq+FgzJYs qprfDoBVRhJliU5q0SswHwYDVR0jBBgwFoAUzfpbwg4xKRmsax7K2Stx5zSmALAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUEzLzlGQTFCMzAyOTc5 MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jtc2F4N0syU3R4NXpTbUFM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZwYndnNHhLUm1zYXg3SzJTdHg1elNtQUxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUEzLzlGQTFCMzAyOTc5MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jt c2F4N0syU3R4NXpTbUFMQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDXyXIyudxJTyUNXJirc5r3ezSgAX28jn3BH9YXl8VsoW4Fu31Gcduto0bZ6WEO CfUPRYSEMv13JzyxxvmcfJGY9Kps80XCEfxV6+Od1KPKibWt6gn9KHpQ9sD9THif wWHqAGtHNQ2pv38ufRahwAwkN2hodXXAHeP7DmZ4CadLLClWxUDbwcyMNC1ocDfQ rHzyfgCizTP6DoavuWlFjvC64lPXkn+b8NyMtOv87PHjmw+TlhTiL4kp4hh8f9L7 0rhjh5dp5c+cqzTIO2nDIEt897kKm/MS1d4rk6t+UBAY0MYvwKpUhZM7FfmVM/tD J7LERvyazKNe/qSkhZoFAhlt -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:28 2026 by rpki-client