$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: M+J9TXeM1P5HRuBKhuJuihtgsld6C3kPL/a2qKDIwPs= Subject key identifier: 95:80:0E:88:0B:E9:BA:38:5D:70:9B:14:8C:88:C2:68:52:01:FF:18 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0AF1 Signing time: Tue 22 Sep 2026 19:14:23 +0000 Manifest this update: Tue 22 Sep 2026 19:14:23 +0000 Manifest next update: Tue 29 Sep 2026 19:14:23 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: ev3STX9lzAmkIQ9ch2G9PWV8vuHm58JkWtGRWFkd2Fo=) 2: m4V7J6vizIcN54WJYSEUgCMnYB8.asa (hash: miH9DbjRXe4ctNcHFrlvOI5H3/gYKDtlpyBTH8xSqCg=) 3: 683CD6083EF511F1AB4378F7C3833773.roa (hash: 2AqUjb8b7TWsR15Or5pxjFuJpbFFS7iyKcRc0Dhq0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Sep 22 19:14:23 2026 GMT Not After : Sep 29 19:14:23 2026 GMT Subject: CN=6ab2d38f-b7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:b7:e8:6b:30:a3:d3:3f:48:fd:df:5d:1d: 6a:82:c7:f0:fc:a0:53:4d:27:ed:96:8d:9e:d6:67: 5c:e6:4c:95:ae:83:f7:ae:fe:cc:64:2f:b8:64:49: 34:28:ff:66:48:41:87:17:c2:c7:12:f2:b7:90:f5: f9:72:c5:5a:9f:ea:9e:14:6e:2a:24:f9:a0:32:b1: 3f:ae:4e:be:25:48:50:77:fe:b5:ab:b1:fb:17:6b: d0:e5:9c:9c:65:7c:b0:f4:97:61:81:92:0a:bb:36: 5e:d0:22:5a:d3:60:b2:e3:90:15:cc:fe:8c:a3:ef: 20:c6:04:65:cd:30:2c:9f:43:39:e8:6d:7b:34:eb: 5f:71:de:71:5a:dc:a5:06:70:75:c9:7f:cf:fe:f1: b4:3d:7b:1f:72:a8:5e:87:ef:36:5e:76:16:60:40: 4d:33:17:92:0e:4e:4c:92:0d:d7:67:6c:49:4d:15: f5:d4:4e:3a:b2:f3:ea:06:92:07:f8:f9:a9:20:86: 54:44:5c:1e:8f:f9:e8:68:85:3f:75:e6:23:eb:ce: e9:b4:41:dc:d3:fb:c6:69:4f:5d:16:19:cb:01:5b: b4:fd:bc:ed:90:95:a9:c1:dd:d0:34:53:43:12:4d: 35:71:66:7b:5a:1a:ea:00:d5:6b:13:e6:d7:9d:a0: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:80:0E:88:0B:E9:BA:38:5D:70:9B:14:8C:88:C2:68:52:01:FF:18 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:2f:77:9e:20:e6:c2:77:5f:64:d6:62:91:c3:a1:5a:70: d2:38:42:21:fc:e4:07:6b:9e:0b:76:f2:79:5d:f8:9d:d5:3f: 85:29:08:a3:f0:a3:40:14:49:7f:0e:4d:90:6e:39:c7:b5:76: 18:f9:b9:92:ea:a3:fe:46:67:28:18:61:4e:a0:fb:89:b3:9a: f6:e2:18:3a:34:91:d9:14:f5:05:20:16:0b:c8:a0:b4:97:b4: a3:90:5e:58:f6:53:2d:64:4d:8b:b3:87:10:86:21:5a:5b:46: 80:64:a0:6f:1b:15:8c:b5:e3:4b:a4:88:c9:08:23:0c:f1:00: 30:3d:d3:1f:c2:78:78:98:fa:04:41:54:ac:86:2c:22:7e:75: c5:3f:50:36:5b:9b:fb:49:58:ae:83:e2:25:ad:74:f5:f9:21: bb:3e:05:61:d9:21:59:f2:30:91:14:fa:10:e1:9f:f6:6e:e1: d8:c9:3b:d5:f2:26:af:cd:d6:19:b8:9e:bd:5a:3a:26:6c:9a: e2:6d:26:2e:47:6d:5b:83:34:95:28:26:79:6b:13:0d:4e:04: 74:6c:fd:a4:6f:39:0d:9a:46:ae:24:06:9d:3c:d9:52:83:36: 7b:3c:9c:f7:4c:cf:5c:44:00:1c:c3:12:c9:b0:06:21:0f:64: 80:3e:65:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjYwOTIyMTkxNDIzWhcNMjYwOTI5MTkxNDIzWjAYMRYwFAYD VQQDEw02YWIyZDM4Zi1iN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf636Gswo9M/SP3fXR1qgsfw/KBTTSftlo2e1mdc5kyVroP3rv7MZC+4ZEk0 KP9mSEGHF8LHEvK3kPX5csVan+qeFG4qJPmgMrE/rk6+JUhQd/61q7H7F2vQ5Zyc ZXyw9JdhgZIKuzZe0CJa02Cy45AVzP6Mo+8gxgRlzTAsn0M56G17NOtfcd5xWtyl BnB1yX/P/vG0PXsfcqheh+82XnYWYEBNMxeSDk5Mkg3XZ2xJTRX11E46svPqBpIH +PmpIIZURFwej/noaIU/deYj687ptEHc0/vGaU9dFhnLAVu0/bztkJWpwd3QNFND Ek01cWZ7WhrqANVrE+bXnaBkaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWADogL 6bo4XXCbFIyIwmhSAf8YMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABwUvd54g5sJ3X2TWYpHDoVpw0jhCIfzkB2ueC3byeV34ndU/hSkIo/CjQBRJ fw5NkG45x7V2GPm5kuqj/kZnKBhhTqD7ibOa9uIYOjSR2RT1BSAWC8igtJe0o5Be WPZTLWRNi7OHEIYhWltGgGSgbxsVjLXjS6SIyQgjDPEAMD3TH8J4eJj6BEFUrIYs In51xT9QNlub+0lYroPiJa109fkhuz4FYdkhWfIwkRT6EOGf9m7h2Mk71fImr83W GbievVo6Jmya4m0mLkdtW4M0lSgmeWsTDU4EdGz9pG85DZpGriQGnTzZUoM2ezyc 90zPXEQAHMMSybAGIQ9kgD5l3Q== -----END CERTIFICATE-----Generated at Thu Sep 24 13:14:40 2026 by rpki-client