$ rpki-client -vvvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: JaojlU+gxtPhbTxkEQPVFv1qcnHLCMorXyoTAOWfr9g= Subject key identifier: 13:EC:68:6D:5C:EE:00:57:8F:1F:D9:3A:96:9D:CE:EF:B6:4B:5E:F1 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 8E Signing time: Wed 23 Sep 2026 07:20:25 +0000 Manifest this update: Wed 23 Sep 2026 07:20:24 +0000 Manifest next update: Wed 30 Sep 2026 07:20:24 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: 290hd8jxB/tCNzM+fXZ3vCLxgBtLgj9s8+mLj4tnpFE=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Sep 23 07:20:24 2026 GMT Not After : Sep 30 07:20:24 2026 GMT Subject: CN=6ab37db9-ef0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:04:2e:fa:e9:63:4e:a7:60:46:f7:ce:30: cb:ea:f1:ad:36:c4:76:2c:10:f3:19:73:0b:35:cc: 84:ef:95:a0:01:06:30:92:01:df:c3:cb:a2:d7:80: 3a:06:fe:b5:1e:4e:16:6a:3c:08:55:ad:c3:74:98: ae:63:5c:d6:7a:ba:1c:7b:3a:9a:c6:00:66:68:e3: e2:4a:4f:cb:19:6e:91:f3:c5:56:57:bc:18:5d:01: c5:30:a7:15:bb:20:04:65:dc:50:7c:74:6c:a2:9f: 7d:b2:be:79:2c:b9:1e:f6:3f:69:4b:f0:17:8f:09: e3:a7:cb:e7:3c:23:6c:61:0f:66:a0:bb:86:ff:66: 68:73:ab:f7:22:6f:84:03:0e:6e:38:5b:9a:a2:7a: 1c:70:38:68:f9:12:72:b0:d1:5a:4d:e7:b3:26:9c: 47:a8:be:66:96:02:c4:a8:fe:96:ee:24:73:89:c7: 94:4c:4b:0d:3e:bf:55:95:1e:a4:b2:53:65:ec:86: f3:4a:f5:ab:1e:9c:c9:30:95:b8:f5:76:c4:02:d1: 4a:ab:a3:4d:cf:0f:b3:cf:1e:46:5b:68:e3:d3:ff: 36:77:f1:0a:58:23:94:20:93:a0:89:92:a1:0c:74: 47:c0:53:43:d0:d4:aa:94:2f:f6:9a:4f:3c:28:6e: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:68:6D:5C:EE:00:57:8F:1F:D9:3A:96:9D:CE:EF:B6:4B:5E:F1 X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0b:ca:2e:d6:e6:86:28:d3:e4:97:18:bc:ae:39:6b:76:5b: 63:f6:c9:6a:1a:62:9e:1c:06:22:97:65:52:43:d9:31:48:5c: e8:b8:da:61:01:ac:10:79:0f:4f:9b:50:56:c0:6b:40:dd:b1: 4f:e5:63:f4:c9:6d:c3:65:5d:49:77:08:8a:1d:60:8f:02:13: 45:ae:56:b8:c0:92:9a:53:98:ae:ab:8d:ab:5c:16:83:bc:52: e0:ae:a9:8c:86:0b:c8:49:7a:e7:5a:0b:43:43:11:b8:4e:e2: 5b:71:50:56:c2:a7:da:21:ca:11:2f:63:78:46:81:46:a5:98: 71:fb:be:53:b2:47:0c:80:f1:6a:6d:b3:be:cc:78:93:15:f2: 43:a5:f0:f3:e1:56:a1:58:d1:12:5b:d6:b4:06:6e:56:31:35: d4:0f:da:55:02:9f:fd:b3:46:0a:1d:25:86:a2:de:4e:00:db: b8:20:ce:f3:12:c4:a0:ba:af:f7:02:9b:5f:18:9f:ae:8c:00: 42:a0:8b:43:60:3b:85:41:1c:6e:bd:3f:a3:be:7f:b5:4d:62: 95:b2:a2:f0:fb:d1:20:94:03:96:a0:8b:cf:4a:f6:4a:21:ba: 1e:62:ba:d1:c2:bc:f0:ee:53:3e:02:a7:c2:ab:bb:e3:6a:6c: 14:40:af:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4QUIxMTAvBgNVBAUTKDY2MkVDOUEyQjdCNkNFNDJEMjNBNTIzODUzNEM2NTc2 MjIzMjUzNzIwHhcNMjYwOTIzMDcyMDI0WhcNMjYwOTMwMDcyMDI0WjAYMRYwFAYD VQQDEw02YWIzN2RiOS1lZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM0ELvrpY06nYEb3zjDL6vGtNsR2LBDzGXMLNcyE75WgAQYwkgHfw8ui14A6 Bv61Hk4WajwIVa3DdJiuY1zWerocezqaxgBmaOPiSk/LGW6R88VWV7wYXQHFMKcV uyAEZdxQfHRsop99sr55LLke9j9pS/AXjwnjp8vnPCNsYQ9moLuG/2Zoc6v3Im+E Aw5uOFuaonoccDho+RJysNFaTeezJpxHqL5mlgLEqP6W7iRziceUTEsNPr9VlR6k slNl7IbzSvWrHpzJMJW49XbEAtFKq6NNzw+zzx5GW2jj0/82d/EKWCOUIJOgiZKh DHRHwFND0NSqlC/2mk88KG6bvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPsaG1c 7gBXjx/ZOpadzu+2S17xMB8GA1UdIwQYMBaAFGYuyaK3ts5C0jpSOFNMZXYiMlNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MThBQi84QTU3OTdEQ0U5 NDExMUYwQkZENkNFMzMzQzZGNTZCQy9aaTdKb3JlMnprTFNPbEk0VTB4bGRpSXlV M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MThBQi84QTU3OTdEQ0U5NDExMUYwQkZENkNFMzMzQzZGNTZCQy9aaTdKb3JlMnpr TFNPbEk0VTB4bGRpSXlVM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIAvKLtbmhijT5JcYvK45a3ZbY/bJahpinhwGIpdlUkPZMUhc6LjaYQGsEHkP T5tQVsBrQN2xT+Vj9Mltw2VdSXcIih1gjwITRa5WuMCSmlOYrquNq1wWg7xS4K6p jIYLyEl651oLQ0MRuE7iW3FQVsKn2iHKES9jeEaBRqWYcfu+U7JHDIDxam2zvsx4 kxXyQ6Xw8+FWoVjRElvWtAZuVjE11A/aVQKf/bNGCh0lhqLeTgDbuCDO8xLEoLqv 9wKbXxifrowAQqCLQ2A7hUEcbr0/o75/tU1ilbKi8PvRIJQDlqCLz0r2SiG6HmK6 0cK88O5TPgKnwqu742psFECvPw== -----END CERTIFICATE-----Generated at Thu Sep 24 07:07:37 2026 by rpki-client