$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: jhjJbNjva7ZLNaYQ9tzZP7/X/m5ULwJ8vbQzhfLyYHM= Subject key identifier: 8B:84:1F:01:7D:A5:59:F9:C2:BE:99:29:2A:80:80:5E:37:36:17:63 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: BA Signing time: Fri 25 Sep 2026 07:01:20 +0000 Manifest this update: Fri 25 Sep 2026 07:01:19 +0000 Manifest next update: Fri 02 Oct 2026 07:01:19 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: fhTwPJcQChduh4m5h2zkv6QYeYLqvSclzsJthzzcNZc=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Sep 25 07:01:19 2026 GMT Not After : Oct 2 07:01:19 2026 GMT Subject: CN=6ab61c3f-1a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:af:12:fc:f8:48:56:ec:af:35:b1:f8:00: 93:07:e9:8f:05:8f:95:2d:94:68:5a:1c:81:bc:ec: 5f:91:37:c9:5b:d6:8f:29:c6:08:f0:5d:48:1b:f6: aa:11:32:ff:e8:76:b3:2e:13:54:39:7c:52:f4:6f: 4c:65:3e:cc:22:8a:59:42:17:00:71:7d:a4:54:e3: 59:ad:98:af:cc:ab:cb:a1:2f:38:1c:dd:79:3e:72: 1c:79:a1:9c:3f:c8:c9:9a:ac:90:90:23:50:6f:15: e1:8a:fa:86:da:b8:95:8a:bb:7e:50:32:d4:50:32: 5b:7f:4d:16:d4:2c:92:a9:71:1e:2f:5c:1c:5c:68: b7:7e:f3:8f:17:3e:79:06:3f:f2:45:70:6a:b5:7b: 5c:7c:59:8b:3f:ec:97:31:de:cf:83:a0:91:00:44: 9c:38:50:f1:60:e8:c4:15:fd:36:3d:4e:c0:29:9a: ac:9c:9e:2e:7c:2f:69:0e:9f:6a:27:30:e6:b2:1a: 61:f4:4b:5e:df:69:d6:2f:91:b9:19:00:99:06:12: 9b:a2:66:e1:6c:27:db:3c:c1:40:75:7a:48:a9:20: a0:8f:ae:e2:6e:3e:ef:0e:3d:8e:16:7d:f6:62:f0: 51:19:f8:55:6c:ee:67:91:6a:a5:59:be:f6:5d:ed: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:1F:01:7D:A5:59:F9:C2:BE:99:29:2A:80:80:5E:37:36:17:63 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:9d:34:5f:bf:ff:83:90:5d:a2:2c:87:af:b0:91:56:a6:53: b8:63:ca:0a:d3:90:a7:0b:4b:6a:92:f0:e7:d0:1b:d5:e3:2a: 02:86:62:1e:d8:1c:46:76:61:28:b2:7e:3d:2e:20:7f:ce:8d: 1a:c0:a0:72:ab:8d:89:c2:1e:21:0c:3d:22:42:2b:7c:a0:f8: 26:7f:a0:10:4a:05:aa:77:1f:08:a7:fd:87:de:ba:03:99:d9: 75:d2:57:16:37:86:eb:54:54:25:5f:ed:33:b7:55:a0:b6:5f: fe:54:57:e9:75:85:bf:7c:f8:62:05:ee:82:7b:47:45:9e:f1: 35:63:24:1c:9f:28:e3:6b:ea:48:78:cb:ff:f1:dd:42:ba:b6: a1:00:a0:8c:4d:f2:b5:e8:bd:de:fd:29:78:13:62:78:1c:e6: 55:8a:38:af:85:dd:b0:ad:64:22:40:90:08:11:85:17:ed:cd: 91:08:08:46:07:00:f3:d7:e7:54:c8:95:a2:d6:92:e4:04:47: d8:1d:47:42:7f:cd:e4:35:e3:71:60:3d:f8:72:cf:6c:bf:3c: 08:4c:4c:ee:61:c2:7b:f4:54:e5:58:62:93:46:44:16:87:e2: 4b:ac:ab:16:36:38:f4:13:fa:20:c0:25:7e:bc:8b:9c:35:67: 3b:7d:4f:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwMDAxMTAvBgNVBAUTKDY1QUFCRUYxN0NDQzA4MEM5QTM2MkEwODIxNTMwNEIx MUJENTA3RkUwHhcNMjYwOTI1MDcwMTE5WhcNMjYxMDAyMDcwMTE5WjAYMRYwFAYD VQQDEw02YWI2MWMzZi0xYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06yvEvz4SFbsrzWx+ACTB+mPBY+VLZRoWhyBvOxfkTfJW9aPKcYI8F1IG/aq ETL/6HazLhNUOXxS9G9MZT7MIopZQhcAcX2kVONZrZivzKvLoS84HN15PnIceaGc P8jJmqyQkCNQbxXhivqG2riVirt+UDLUUDJbf00W1CySqXEeL1wcXGi3fvOPFz55 Bj/yRXBqtXtcfFmLP+yXMd7Pg6CRAEScOFDxYOjEFf02PU7AKZqsnJ4ufC9pDp9q JzDmshph9Ete32nWL5G5GQCZBhKbombhbCfbPMFAdXpIqSCgj67ibj7vDj2OFn32 YvBRGfhVbO5nkWqlWb72Xe2C1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuEHwF9 pVn5wr6ZKSqAgF43NhdjMB8GA1UdIwQYMBaAFGWqvvF8zAgMmjYqCCFTBLEb1Qf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FNUExMzhEMDlE MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNBeWFOaW9JSVZNRXNSdlZC XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjAwMC9FNUExMzhEMDlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNB eWFOaW9JSVZNRXNSdlZCXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqp00X7//g5BdoiyHr7CRVqZTuGPKCtOQpwtLapLw59Ab1eMqAoZiHtgcRnZh KLJ+PS4gf86NGsCgcquNicIeIQw9IkIrfKD4Jn+gEEoFqncfCKf9h966A5nZddJX FjeG61RUJV/tM7dVoLZf/lRX6XWFv3z4YgXugntHRZ7xNWMkHJ8o42vqSHjL//Hd Qrq2oQCgjE3ytei93v0peBNieBzmVYo4r4XdsK1kIkCQCBGFF+3NkQgIRgcA89fn VMiVotaS5ARH2B1HQn/N5DXjcWA9+HLPbL88CExM7mHCe/RU5Vhik0ZEFofiS6yr FjY49BP6IMAlfryLnDVnO31P6w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:45:18 2026 by rpki-client