$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: 0Y5GLIpC+wuKuMjnW2MJV+ra4jkekoe8GryM4lv6Yo8= Subject key identifier: 22:56:16:8B:93:95:E2:45:82:54:4B:A8:AD:BA:51:7A:2B:76:63:86 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 031E Signing time: Fri 25 Sep 2026 01:01:13 +0000 Manifest this update: Fri 25 Sep 2026 01:01:13 +0000 Manifest next update: Fri 02 Oct 2026 01:01:13 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: wHzSFGY9sclj1Jt0ACzTSRzfSZxOS9rN94m+SZ81pWA=) 2: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: ZEuPiUQckZniRx9NOhZ6gYYx61mX4enZZWyGpfGF2y0=) 3: 2D554D1875B911F19160F3B762A30FBC.roa (hash: awvfykrSz6QoQMrBSUpkmUV2t8VsWMbwM0JMYPHRNiE=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: kcXC8wBP+o9JuaOs9TbOrSDUWgSogQuiEdXCi6dydEA=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 2sdmpYEclOMLpBPBQMRyf2bR5K+Znn8UXPaVbPG6E8g=) 6: D21111C2190011F187AE9EA5203D8C67.roa (hash: QBY/KlIfl7r0REBMASrW8pgiV36TJqXHiWnzxZNFLi8=) 7: F84FF96A493911ED805EB686C4F9AE02.roa (hash: w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=) 8: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: 3ocK4Bfl3SbnaTMCj/lDw0pUXGryAmwBhjWzwEoz6ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Sep 25 01:01:13 2026 GMT Not After : Oct 2 01:01:13 2026 GMT Subject: CN=6ab5c7d9-a0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:40:e3:9f:71:51:43:c0:a6:05:02:20:66: da:99:cf:e8:0a:8d:12:41:38:c8:1a:e1:c3:39:78: 56:93:ff:c5:18:74:72:f2:e9:e7:75:e0:2a:98:b9: 5e:d3:87:da:a9:8f:76:fd:65:c1:1b:d3:4c:9c:84: 8e:6a:20:78:3b:99:ad:44:7a:a5:f0:5e:3c:04:fb: 6a:87:ea:d1:6c:44:77:97:f5:eb:6c:7d:65:33:41: e6:0d:97:ab:4e:fb:ec:fb:ee:77:70:c6:50:f8:98: 44:8b:f9:98:67:27:76:b2:41:77:03:9e:5a:22:a7: 88:4e:86:c7:dc:92:55:b5:10:6a:2f:77:48:46:f0: 2e:ec:04:f6:63:dc:08:38:ea:6e:80:a7:ab:2b:db: 6b:ee:89:a8:1b:bc:90:35:04:9d:18:5f:9c:f9:bd: 9d:84:bb:db:de:dd:9a:9d:10:7e:48:13:37:5a:ef: 11:17:6b:c9:d0:16:20:cb:6d:91:2a:8d:c6:68:be: e4:e4:8b:f7:89:a5:fa:44:95:c0:9a:f0:87:0e:65: b8:6f:23:58:bf:47:b4:f6:53:07:0f:99:e3:ef:72: 4d:9e:91:ab:f5:4a:9a:42:d8:6f:8b:58:b3:bd:f1: c7:91:bd:eb:c6:55:84:f8:68:a1:ad:d3:43:81:1c: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:16:8B:93:95:E2:45:82:54:4B:A8:AD:BA:51:7A:2B:76:63:86 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9d:a1:d7:26:90:0c:cb:6d:03:fd:1c:3d:49:91:af:c7:a3: d0:30:b0:16:e8:d9:32:20:cc:29:e5:18:8c:d7:a9:49:8d:92: cd:2b:26:47:21:83:fa:55:61:c3:6a:87:83:f1:a8:b7:f0:cb: b9:b1:c5:a9:ab:d2:5a:8f:87:7a:c4:71:db:0f:81:d4:c0:05: bf:8b:da:0b:1f:b9:18:5c:37:dd:fb:d2:1f:53:24:1c:46:70: 69:0b:e1:6a:1b:65:cd:87:fa:f2:29:33:f3:1a:0e:4f:55:92: 65:13:ab:e8:4f:75:2f:bb:0d:37:df:6f:be:d6:6d:70:ef:53: 41:84:16:51:7f:95:01:3b:e7:0b:2a:c1:9a:d4:ac:26:6c:b7: b5:22:52:19:60:1e:5b:ac:27:f8:87:82:1b:11:53:c2:52:b7: 80:82:6d:e8:59:f3:67:5c:63:7b:e7:f9:82:2a:a3:d0:1a:10: 91:50:35:54:06:3b:14:3f:06:4a:22:21:36:ee:ee:90:14:d2: de:d5:2e:4b:a6:4d:99:9a:b5:41:fe:2c:b1:e7:e5:0f:e2:00: 8c:85:df:21:3b:9c:37:41:c5:ef:16:c8:a3:84:6a:bb:97:af: ed:a3:f3:54:2d:c0:7c:42:29:aa:e8:cb:85:01:56:22:1c:f4: c8:ce:77:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwOTI1MDEwMTEzWhcNMjYxMDAyMDEwMTEzWjAYMRYwFAYD VQQDEw02YWI1YzdkOS1hMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiFA459xUUPApgUCIGbamc/oCo0SQTjIGuHDOXhWk//FGHRy8unndeAqmLle 04faqY92/WXBG9NMnISOaiB4O5mtRHql8F48BPtqh+rRbER3l/XrbH1lM0HmDZer Tvvs++53cMZQ+JhEi/mYZyd2skF3A55aIqeITobH3JJVtRBqL3dIRvAu7AT2Y9wI OOpugKerK9tr7omoG7yQNQSdGF+c+b2dhLvb3t2anRB+SBM3Wu8RF2vJ0BYgy22R Ko3GaL7k5Iv3iaX6RJXAmvCHDmW4byNYv0e09lMHD5nj73JNnpGr9UqaQthvi1iz vfHHkb3rxlWE+GihrdNDgRzs+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJWFouT leJFglRLqK26UXordmOGMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd52h1yaQDMttA/0cPUmRr8ej0DCwFujZMiDMKeUYjNepSY2SzSsmRyGD+lVh w2qHg/Got/DLubHFqavSWo+HesRx2w+B1MAFv4vaCx+5GFw33fvSH1MkHEZwaQvh ahtlzYf68ikz8xoOT1WSZROr6E91L7sNN99vvtZtcO9TQYQWUX+VATvnCyrBmtSs Jmy3tSJSGWAeW6wn+IeCGxFTwlK3gIJt6FnzZ1xje+f5giqj0BoQkVA1VAY7FD8G SiIhNu7ukBTS3tUuS6ZNmZq1Qf4sseflD+IAjIXfITucN0HF7xbIo4Rqu5ev7aPz VC3AfEIpqujLhQFWIhz0yM532Q== -----END CERTIFICATE-----Generated at Fri Sep 25 18:34:59 2026 by rpki-client