$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: KDiDiua3MM656ZJyPS+riBP/zUOwi4nCV2godjutRl8= Subject key identifier: AA:F5:2C:39:44:4A:AE:14:8F:D4:9E:6B:F7:3E:36:97:09:D6:23:3D Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 02BB Signing time: Wed 23 Sep 2026 01:15:44 +0000 Manifest this update: Wed 23 Sep 2026 01:15:43 +0000 Manifest next update: Wed 30 Sep 2026 01:15:43 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: INqvROm6wJ51PaOlBQPa9+e9RVNcl4TAj//XHRHUrtg=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) 3: QK7DtSsjZHkLvCZn-3ari_TaLM4.asa (hash: FV923MSWqLwVY2tJIYtkQ6ydnq4/MNwBnbEihOXKuTA=) 4: SaoGQURflsgAadr5lQ24wGCUmxk.asa (hash: 8k/T8/5jKKmoBwRbcBbi8Q41mGNqzHqtmLn+bq0XWZ8=) 5: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Sep 23 01:15:43 2026 GMT Not After : Sep 30 01:15:43 2026 GMT Subject: CN=6ab32840-5413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:cc:83:6d:a1:cb:4c:77:1d:9e:63:2e:9b: 27:17:41:da:a2:fb:33:00:af:ef:88:c4:23:ae:85: 0f:9e:80:e7:fe:9f:cf:19:c6:39:5d:c2:a5:3a:e8: 1d:96:14:73:f5:c8:39:7b:0a:e4:59:c9:bb:69:9a: 67:0c:dd:99:f3:75:94:55:bf:e8:4d:4e:58:af:ef: c6:ff:da:ff:a3:a6:1a:11:78:73:05:3d:99:86:65: d9:bd:ef:d3:ac:d9:30:bb:ef:28:f4:38:e8:84:02: 91:89:8b:84:7d:9a:69:27:14:a1:d6:fc:05:84:82: 09:af:6b:fd:37:48:a5:50:7c:86:2d:a1:6c:2d:1d: 3d:20:29:e4:69:b2:91:97:eb:6b:1c:2e:57:c6:80: ca:8c:56:b2:1c:6f:cc:c8:4d:d3:c2:73:69:52:a2: b0:33:f4:30:d3:ee:31:9e:35:e4:14:66:a5:88:d7: da:1b:26:e4:6f:38:0e:e1:b8:e6:95:ee:0a:61:13: c2:55:60:2a:10:80:78:d5:1f:bc:ac:9c:53:9d:b6: b6:a6:2b:77:f1:44:1a:eb:fb:cb:5d:1c:dd:7d:24: a3:0b:2e:c7:5c:87:03:73:51:69:0f:91:d5:21:6a: 1c:d7:12:20:21:d0:ea:1f:48:46:5f:3d:e8:a6:36: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:2C:39:44:4A:AE:14:8F:D4:9E:6B:F7:3E:36:97:09:D6:23:3D X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:25:fa:03:50:a1:0e:3e:09:b5:92:7e:19:ea:c7:fc:14: e0:6e:52:09:bb:e6:12:80:9f:8b:07:43:90:7a:e3:7a:8f:45: fd:5b:80:84:35:5a:a6:a7:e5:47:46:36:4c:df:11:12:0b:24: 7d:5a:a1:dc:c6:be:c8:1a:95:26:03:a8:31:67:47:4d:68:93: 6c:22:39:23:34:4f:45:7b:48:64:80:33:8d:f2:e9:3d:6a:18: 49:fd:4c:c0:7d:f4:e8:55:34:40:f9:08:34:23:03:dc:de:51: 1d:7b:d8:68:4a:81:ea:a3:fc:b4:a2:48:56:e5:ad:59:b2:a3: af:48:da:09:67:0a:d5:f4:23:de:15:37:15:7e:7b:de:79:df: 36:77:1a:51:75:d7:73:64:4d:b9:d2:0f:f8:15:40:24:7a:54: 37:c7:87:00:9b:ea:b6:23:24:a2:e5:93:47:ec:77:02:c7:f4: cf:b7:ff:c5:d7:55:12:85:1c:1e:9b:42:8d:a3:b1:89:6f:91: 1f:2d:9c:c4:ed:0c:9e:04:bb:72:08:86:45:52:65:cc:04:5a: 42:44:10:67:4c:73:c8:5a:fb:15:2e:8b:95:6a:50:9e:b9:70: e4:4f:48:67:1f:70:1f:20:3f:3c:27:b4:c6:44:e8:7a:57:44: ad:8e:b0:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwOTIzMDExNTQzWhcNMjYwOTMwMDExNTQzWjAYMRYwFAYD VQQDEw02YWIzMjg0MC01NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklbMg22hy0x3HZ5jLpsnF0HaovszAK/viMQjroUPnoDn/p/PGcY5XcKlOugd lhRz9cg5ewrkWcm7aZpnDN2Z83WUVb/oTU5Yr+/G/9r/o6YaEXhzBT2ZhmXZve/T rNkwu+8o9DjohAKRiYuEfZppJxSh1vwFhIIJr2v9N0ilUHyGLaFsLR09ICnkabKR l+trHC5XxoDKjFayHG/MyE3TwnNpUqKwM/Qw0+4xnjXkFGaliNfaGybkbzgO4bjm le4KYRPCVWAqEIB41R+8rJxTnba2pit38UQa6/vLXRzdfSSjCy7HXIcDc1FpD5HV IWoc1xIgIdDqH0hGXz3opjaI3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKr1LDlE Sq4Uj9Sea/c+NpcJ1iM9MB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkHQl+gNQoQ4+CbWSfhnqx/wU4G5SCbvmEoCfiwdDkHrjeo9F/VuAhDVapqfl R0Y2TN8REgskfVqh3Ma+yBqVJgOoMWdHTWiTbCI5IzRPRXtIZIAzjfLpPWoYSf1M wH306FU0QPkINCMD3N5RHXvYaEqB6qP8tKJIVuWtWbKjr0jaCWcK1fQj3hU3FX57 3nnfNncaUXXXc2RNudIP+BVAJHpUN8eHAJvqtiMkouWTR+x3Asf0z7f/xddVEoUc HptCjaOxiW+RHy2cxO0MngS7cgiGRVJlzARaQkQQZ0xzyFr7FS6LlWpQnrlw5E9I Zx9wHyA/PCe0xkToeldErY6w1g== -----END CERTIFICATE-----Generated at Fri Sep 25 02:58:17 2026 by rpki-client