$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: bk49sPftiWJwHti9lNS1Ch0HbMCQKaIwZcwzL5e7l4Y= Subject key identifier: 90:A6:73:A2:84:E8:24:FB:53:02:E4:AF:E9:BA:88:5E:3B:29:8D:EF Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 03E5 Signing time: Wed 23 Sep 2026 00:07:02 +0000 Manifest this update: Wed 23 Sep 2026 00:07:01 +0000 Manifest next update: Wed 30 Sep 2026 00:07:01 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: Q5Lxjkt1qAtTEyOWpp4Tfg62ucz08xJl+Re7sXD739w=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: cduqgA+zcJPsXKGFgp0PZtzwmtzbUO7Jgg9Jg1V6cLM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: SWNOrvn46oDLTg74T4Hbq7v10iWBDBnWv7LSwdGRRPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Sep 23 00:07:01 2026 GMT Not After : Sep 30 00:07:01 2026 GMT Subject: CN=6ab31825-56e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:1b:bd:53:e2:9d:81:5e:f2:14:dc:f1:2d: c3:84:2e:a8:66:80:3e:b6:9a:dd:71:43:a3:be:42: 1c:d8:4b:8d:d8:89:2e:61:84:72:1f:f3:a5:49:4c: 82:6c:36:21:b4:3d:f1:7f:da:f7:69:9d:c7:41:fd: 76:e7:84:6b:e9:d0:24:ee:4d:e4:22:d6:3e:db:0e: e6:87:ae:94:1a:fa:ed:f7:a0:d7:66:0c:6e:55:3a: 65:cf:92:8d:39:cc:53:de:44:dc:f0:98:57:11:16: 91:f1:1f:8f:44:c6:3b:e2:83:8e:29:4f:a1:d4:f7: db:00:ca:65:22:ff:75:3a:26:01:61:a8:ec:2a:7b: 2d:f1:08:76:f6:51:d1:db:66:97:7c:b2:59:88:02: 51:de:72:02:e9:69:9a:4c:15:4f:40:6b:45:c4:ab: cf:14:29:6a:ae:35:1d:46:c3:7b:29:17:05:ab:1e: 56:f7:1c:0d:32:24:68:1b:1d:eb:57:c3:f3:63:98: 5f:71:75:b9:a1:f2:02:24:ea:bf:49:dd:16:2c:d7: 64:5f:1a:e7:99:f8:6d:a1:d3:17:73:68:c6:7b:03: b4:33:43:eb:85:65:12:20:20:1d:c2:37:47:2a:5e: c6:07:c8:f9:90:b4:17:5e:13:0d:4c:7c:8a:0c:4a: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:73:A2:84:E8:24:FB:53:02:E4:AF:E9:BA:88:5E:3B:29:8D:EF X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:1e:13:8d:86:c6:a6:4a:f6:93:b4:cb:5f:c8:1a:ce:93: fe:72:66:27:52:24:4b:37:f1:36:85:49:98:89:ba:dd:86:2d: da:8a:23:9d:b8:6f:1b:51:70:bb:0b:77:a0:3d:0d:e1:f3:23: 5a:09:3f:31:13:c7:ba:58:30:b7:1e:66:01:b6:ee:8e:e6:2a: 80:2f:94:72:88:18:f6:62:9b:7b:5a:11:76:02:80:40:3f:11: b1:60:f2:99:02:2c:27:db:2f:85:6c:b7:ce:25:11:b7:79:9c: 70:57:2f:5d:5b:6f:35:cd:32:06:29:ff:56:e2:df:77:0d:44: 9e:8a:05:07:7e:67:29:cf:76:fd:24:1e:0b:0f:40:aa:7c:7d: da:0e:b2:80:a9:20:12:5a:20:5b:c3:62:be:fa:26:30:b0:b1: 3a:6d:94:b9:00:69:4d:95:21:5a:80:8b:10:c9:95:a6:e0:96: 00:36:ba:89:11:fc:31:a8:46:e1:d5:65:38:22:92:00:aa:74: 96:27:cb:1f:cd:42:11:c1:ef:a3:af:a3:4e:c8:9f:6a:46:46: 8d:5a:eb:e3:ae:66:dd:a6:67:a8:3c:23:74:63:0e:de:be:51: ad:c7:4e:67:3a:98:d1:fc:cb:27:71:51:11:a5:da:8a:2b:51: 71:79:63:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYwOTIzMDAwNzAxWhcNMjYwOTMwMDAwNzAxWjAYMRYwFAYD VQQDEw02YWIzMTgyNS01NmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1AbvVPinYFe8hTc8S3DhC6oZoA+tprdcUOjvkIc2EuN2IkuYYRyH/OlSUyC bDYhtD3xf9r3aZ3HQf1254Rr6dAk7k3kItY+2w7mh66UGvrt96DXZgxuVTplz5KN OcxT3kTc8JhXERaR8R+PRMY74oOOKU+h1PfbAMplIv91OiYBYajsKnst8Qh29lHR 22aXfLJZiAJR3nIC6WmaTBVPQGtFxKvPFClqrjUdRsN7KRcFqx5W9xwNMiRoGx3r V8PzY5hfcXW5ofICJOq/Sd0WLNdkXxrnmfhtodMXc2jGewO0M0PrhWUSICAdwjdH Kl7GB8j5kLQXXhMNTHyKDEq+bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCmc6KE 6CT7UwLkr+m6iF47KY3vMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmL4eE42GxqZK9pO0y1/IGs6T/nJmJ1IkSzfxNoVJmIm63YYt2oojnbhvG1Fw uwt3oD0N4fMjWgk/MRPHulgwtx5mAbbujuYqgC+UcogY9mKbe1oRdgKAQD8RsWDy mQIsJ9svhWy3ziURt3mccFcvXVtvNc0yBin/VuLfdw1EnooFB35nKc92/SQeCw9A qnx92g6ygKkgElogW8NivvomMLCxOm2UuQBpTZUhWoCLEMmVpuCWADa6iRH8MahG 4dVlOCKSAKp0lifLH81CEcHvo6+jTsifakZGjVrr465m3aZnqDwjdGMO3r5RrcdO ZzqY0fzLJ3FREaXaiitRcXljSw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:07:33 2026 by rpki-client