$ rpki-client -vvvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: n0OvZCoYvkTaXwUrcq8TT57FjxJCeC2WHxp/8fWS0AI= Subject key identifier: 28:51:C5:FF:7D:E0:E9:1A:9A:12:9F:3B:8E:84:27:8E:A3:F8:8D:DF Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0274 Signing time: Fri 25 Sep 2026 02:07:00 +0000 Manifest this update: Fri 25 Sep 2026 02:07:00 +0000 Manifest next update: Fri 02 Oct 2026 02:07:00 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: iyBFul7GG7k1t4TBSWGVIWAvDbHYeetYOFWDR6xYxIY=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: Jt26OkH5GsZzx3PXVTRWExsHyUAi4WnLglyQDm9L/j8=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: tSLdp80FVd5ixH2uZT2QMYA1+OsbaeZKHwPMzoQDX+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Sep 25 02:07:00 2026 GMT Not After : Oct 2 02:07:00 2026 GMT Subject: CN=6ab5d744-2cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:18:2e:18:71:09:4a:a1:ac:bf:f9:a4:18: 5f:7a:ea:a5:e3:54:63:6a:4b:04:41:08:34:fc:fc: 75:16:c1:89:4a:6f:4f:22:6c:fa:73:fd:70:53:0a: dc:02:c6:76:32:3f:9d:92:d9:39:a9:01:f6:e8:17: 25:e2:ac:66:45:da:8e:bb:fe:e7:fd:fc:d9:2b:42: de:62:52:35:d5:82:b5:c2:8e:47:92:6e:0d:09:6d: 4f:8d:0f:61:d7:45:53:1b:7e:bf:82:05:07:d6:78: 39:0b:e9:68:a4:55:05:8e:f8:50:6b:6c:03:b4:3a: 2d:d7:25:65:2f:d9:5d:12:34:72:d4:d6:a0:87:30: 90:3a:86:b6:30:a2:ca:62:c9:4d:f3:d8:c8:9f:72: 01:f6:ff:26:31:ff:a3:e8:67:6c:4d:4d:66:b7:c2: 80:0a:3e:08:c7:60:48:58:b9:12:cb:01:1c:46:4a: 43:15:b3:b5:14:ca:fc:79:62:ed:d0:ed:f9:a1:cd: 17:89:0f:70:07:92:a6:ce:8d:a3:66:56:d7:51:0d: 2b:60:fb:bf:f4:79:b2:43:c8:6c:bc:6f:0e:cc:f4: fb:a8:c5:27:cb:c1:80:20:d4:bd:ae:3e:cf:cb:2d: bc:e6:a6:05:9e:aa:b0:43:64:59:b1:0a:17:17:af: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:C5:FF:7D:E0:E9:1A:9A:12:9F:3B:8E:84:27:8E:A3:F8:8D:DF X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:6f:db:46:d8:15:fa:c4:6e:bb:55:bf:30:a0:fc:b7:10:33: 56:fd:f6:02:30:cf:d4:29:9d:28:ce:cb:15:51:2b:1f:59:7d: d1:a7:ee:f6:bb:56:e6:67:30:3b:c8:c0:fe:28:f2:0e:52:fa: c1:12:c0:d8:fa:33:f2:95:e5:37:e7:94:cd:0c:e2:b8:32:76: 25:86:82:44:c9:7a:5d:c1:02:9c:90:ac:7d:47:9b:1c:f6:64: c5:69:77:5e:e4:90:e0:42:68:d3:43:70:63:de:d3:af:32:8e: bb:f8:c4:e3:c6:50:41:f5:d0:53:ea:75:8d:64:d4:9e:03:b4: 08:f5:6e:ee:13:13:a0:40:d9:b0:4c:1a:23:9e:49:c9:06:01: c6:3b:77:c5:0c:42:a0:1b:94:47:ab:9b:e5:b6:6c:4f:78:7c: 47:bd:40:12:ff:95:b9:31:92:7f:f8:e1:d8:76:f8:38:77:7e: 31:bb:19:ed:93:48:c9:8d:86:1b:9f:d0:a4:cc:e4:17:05:bf: c8:35:51:c1:4a:a5:c3:72:42:94:07:65:04:d6:fb:92:4c:95: f3:33:0d:06:47:47:7c:48:f4:ed:d4:97:e7:09:46:1d:7c:5f: 44:8d:2a:78:ae:43:a6:e2:ec:b6:4a:59:e6:6f:a9:fd:98:7d: 76:f4:9a:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwOTI1MDIwNzAwWhcNMjYxMDAyMDIwNzAwWjAYMRYwFAYD VQQDEw02YWI1ZDc0NC0yY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BoYLhhxCUqhrL/5pBhfeuql41RjaksEQQg0/Px1FsGJSm9PImz6c/1wUwrc AsZ2Mj+dktk5qQH26Bcl4qxmRdqOu/7n/fzZK0LeYlI11YK1wo5Hkm4NCW1PjQ9h 10VTG36/ggUH1ng5C+lopFUFjvhQa2wDtDot1yVlL9ldEjRy1NaghzCQOoa2MKLK YslN89jIn3IB9v8mMf+j6GdsTU1mt8KACj4Ix2BIWLkSywEcRkpDFbO1FMr8eWLt 0O35oc0XiQ9wB5Kmzo2jZlbXUQ0rYPu/9HmyQ8hsvG8OzPT7qMUny8GAINS9rj7P yy285qYFnqqwQ2RZsQoXF68qEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChRxf99 4OkamhKfO46EJ46j+I3fMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAum/bRtgV+sRuu1W/MKD8txAzVv32AjDP1CmdKM7LFVErH1l90afu9rtW5mcw O8jA/ijyDlL6wRLA2Poz8pXlN+eUzQziuDJ2JYaCRMl6XcECnJCsfUebHPZkxWl3 XuSQ4EJo00NwY97TrzKOu/jE48ZQQfXQU+p1jWTUngO0CPVu7hMToEDZsEwaI55J yQYBxjt3xQxCoBuUR6ub5bZsT3h8R71AEv+VuTGSf/jh2Hb4OHd+MbsZ7ZNIyY2G G5/QpMzkFwW/yDVRwUqlw3JClAdlBNb7kkyV8zMNBkdHfEj07dSX5wlGHXxfRI0q eK5DpuLstkpZ5m+p/Zh9dvSaMg== -----END CERTIFICATE-----Generated at Fri Sep 25 17:16:05 2026 by rpki-client