$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: jufKtx8jeN40lvJjRQoj2Tqk3v2x8iP7uiiEffxtu0Q= Subject key identifier: 84:15:99:7E:9A:39:94:49:2E:FA:D7:87:F6:77:71:23:E7:16:14:EE Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: E4 Signing time: Wed 23 Sep 2026 06:20:00 +0000 Manifest this update: Wed 23 Sep 2026 06:20:00 +0000 Manifest next update: Wed 30 Sep 2026 06:20:00 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: BnepTFxyy/IHskwG9sRlHHNObM5kQEHGEwRydRyyClY=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: kSmrHi9JwLiLNm5x35+feh2MNm4COGF5CeDRCfiJLgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Sep 23 06:20:00 2026 GMT Not After : Sep 30 06:20:00 2026 GMT Subject: CN=6ab36f90-b9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:1c:71:57:b9:8c:76:a9:61:5a:29:81:f1: a3:2c:cb:6b:3d:9f:c4:be:d8:80:06:a1:a7:22:1c: e8:80:71:29:6c:29:24:fe:e0:8a:92:70:8f:74:53: db:a8:ec:8c:e0:d0:19:18:51:1a:a6:ca:5e:24:01: ae:b2:73:82:3d:4b:14:59:c2:f7:69:eb:c6:29:36: ae:9e:7d:41:6a:db:ea:f3:5a:17:d5:eb:13:f1:a7: c7:d9:97:0b:8f:ec:36:e7:f0:ff:99:33:50:89:80: 32:72:bf:a2:61:84:87:00:f6:a2:23:ab:69:06:c3: ad:9b:bd:e8:45:98:32:d7:75:c5:e9:d5:56:4a:93: a8:e4:f0:5a:67:93:0d:7c:f2:1c:47:20:1c:d4:67: 75:53:fe:20:48:02:d7:1a:2f:dd:99:f4:91:36:93: 3b:28:74:df:c9:65:a2:de:e8:eb:85:94:bb:4c:65: 26:45:14:4e:1a:a0:6c:8a:d5:24:2e:3c:c6:54:29: c1:f4:e3:30:cc:91:8b:66:68:24:f0:d6:ae:98:07: a7:27:9f:51:70:e1:fa:2d:f9:b0:9f:b6:c1:93:99: 68:c7:ff:e7:24:f2:2f:be:fc:af:f0:ab:c9:38:07: 0a:5c:16:a3:cd:95:2f:c5:80:98:c6:2d:04:9b:92: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:15:99:7E:9A:39:94:49:2E:FA:D7:87:F6:77:71:23:E7:16:14:EE X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:92:dd:8b:fa:89:d4:e6:b7:37:cf:15:7e:ab:fc:3d:2d:38: fd:51:19:3a:6f:0c:cb:05:d0:db:a0:93:02:97:1f:82:b2:13: f4:2f:f8:63:af:2a:14:a7:cc:f8:44:f2:fb:0b:0f:eb:2c:b5: 43:d4:2e:f1:48:e0:ec:46:e9:8d:cf:f1:b6:ab:76:49:69:9a: 59:18:e6:78:e8:ba:30:98:b5:22:18:0c:fd:f2:65:0b:9a:b6: d8:1e:fd:30:87:25:df:e3:e8:65:74:85:a9:ef:76:90:d6:cc: 42:ff:8c:b6:5e:af:21:f9:b9:7f:fe:f9:cd:3e:a9:b0:02:a2: 27:54:0e:94:bb:fe:eb:43:37:b7:c1:15:3a:80:16:82:fa:10: 09:e1:0b:fe:dc:38:79:2a:70:40:f0:f1:f2:fc:74:85:9b:42: 6c:5e:cf:93:32:8f:30:c4:e0:2d:b5:90:2e:5d:6a:30:8e:ac: ca:94:67:cb:d7:7e:cf:9e:6e:03:64:b7:17:e5:c7:29:51:f8: 0e:5c:18:0c:92:d7:7c:da:59:f1:0e:01:9c:0e:46:85:5a:75: 82:4f:54:3e:61:65:67:7a:39:3a:a2:0e:49:7b:7b:dc:95:58: b7:8d:1f:c4:a8:c5:a4:0e:88:18:29:c6:26:c2:59:f1:54:ad: ea:3f:55:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw M0QzRjdCMEQwHhcNMjYwOTIzMDYyMDAwWhcNMjYwOTMwMDYyMDAwWjAYMRYwFAYD VQQDEw02YWIzNmY5MC1iOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM4ccVe5jHapYVopgfGjLMtrPZ/EvtiABqGnIhzogHEpbCkk/uCKknCPdFPb qOyM4NAZGFEapspeJAGusnOCPUsUWcL3aevGKTaunn1Batvq81oX1esT8afH2ZcL j+w25/D/mTNQiYAycr+iYYSHAPaiI6tpBsOtm73oRZgy13XF6dVWSpOo5PBaZ5MN fPIcRyAc1Gd1U/4gSALXGi/dmfSRNpM7KHTfyWWi3ujrhZS7TGUmRRROGqBsitUk LjzGVCnB9OMwzJGLZmgk8NaumAenJ59RcOH6Lfmwn7bBk5lox//nJPIvvvyv8KvJ OAcKXBajzZUvxYCYxi0Em5LXlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQVmX6a OZRJLvrXh/Z3cSPnFhTuMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS85MDRGODcwQTYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYz NjdpWnB5R2NPZzhEMF9ldzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVZLdi/qJ1Oa3N88Vfqv8PS04/VEZOm8MywXQ26CTApcfgrIT9C/4Y68qFKfM +ETy+wsP6yy1Q9Qu8Ujg7Ebpjc/xtqt2SWmaWRjmeOi6MJi1IhgM/fJlC5q22B79 MIcl3+PoZXSFqe92kNbMQv+Mtl6vIfm5f/75zT6psAKiJ1QOlLv+60M3t8EVOoAW gvoQCeEL/tw4eSpwQPDx8vx0hZtCbF7PkzKPMMTgLbWQLl1qMI6sypRny9d+z55u A2S3F+XHKVH4DlwYDJLXfNpZ8Q4BnA5GhVp1gk9UPmFlZ3o5OqIOSXt73JVYt40f xKjFpA6IGCnGJsJZ8VSt6j9Vrw== -----END CERTIFICATE-----Generated at Thu Sep 24 09:47:29 2026 by rpki-client