$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: Kwza99mEZTZuJXTrAV1D12HbWUiC3ixYKJbLV4Zf6s0= Subject key identifier: C8:4A:3E:D2:19:81:D4:EC:82:4D:76:7B:B7:AB:6A:F3:49:50:70:BB Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0279 Signing time: Sun 27 Sep 2026 02:26:38 +0000 Manifest this update: Sun 27 Sep 2026 02:26:37 +0000 Manifest next update: Sun 04 Oct 2026 02:26:37 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: ez5qk+IwgdYwlwQaYrkWVGgM3ZX7E5rWD4M5x8OUNqE=) 2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: S+qe2Z8BjsHUcKBFh91p++nA2XhFbE2SxTa6XiCPG9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Sep 27 02:26:37 2026 GMT Not After : Oct 4 02:26:37 2026 GMT Subject: CN=6ab87ede-1e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:a2:17:cc:eb:14:23:d2:f1:55:9e:eb:90: b8:5a:c2:09:c2:a1:bf:c2:cc:d8:e0:26:ca:4f:6e: c8:51:cb:ba:72:5a:c0:53:33:d6:04:78:5a:62:dd: 0e:a8:e8:7d:9c:64:31:a5:fe:ad:b7:05:61:fb:f3: 63:9d:e9:77:24:5b:dc:0b:4b:ca:aa:d0:df:71:3d: de:d7:c2:48:af:1d:32:6e:34:fe:9b:ac:24:c1:16: a6:b5:7a:98:2d:b8:db:87:15:df:d6:07:65:43:43: d3:11:e2:9c:d5:f4:17:69:1d:b6:7b:f2:f4:08:2a: 59:6c:a9:da:23:2a:ce:5d:95:4a:67:50:a7:87:e4: af:8a:2b:b4:0b:cc:5f:5b:14:01:7c:ce:05:fe:da: 2f:2c:34:1a:46:ab:44:b5:89:e6:e1:99:ad:e7:cf: d4:0a:bb:47:5b:bf:f8:96:3d:ef:58:d7:da:44:ea: 67:31:af:b3:c4:6a:dd:1c:79:d6:ba:8e:0e:c3:a3: 6d:b7:7f:8e:55:b5:9c:7d:a5:c2:06:e8:ef:13:3c: 3d:fa:01:c9:14:f8:1e:a8:4e:99:c6:0d:6d:f8:be: 58:5b:4f:72:60:0e:8d:6c:45:69:57:6f:97:bb:16: 0c:5d:5f:3c:85:f0:f6:56:32:8f:31:09:29:ba:26: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:3E:D2:19:81:D4:EC:82:4D:76:7B:B7:AB:6A:F3:49:50:70:BB X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:6d:f0:4c:67:27:ae:d0:fd:f5:9b:76:2b:c5:cf:37:69: 67:80:09:24:27:74:90:45:f1:7e:ee:84:c3:8b:94:d0:01:c1: 88:4e:c8:70:5d:38:e4:38:a9:4c:a3:b2:5a:a2:a2:e1:c7:c4: 9e:56:74:f4:34:9a:ac:4e:2c:b9:f3:75:10:76:80:de:52:b1: 7b:cd:72:c2:bb:29:bb:bf:f3:4a:b7:ad:df:26:75:96:a2:f7: 36:3f:ca:51:8e:b5:ad:d2:d8:cc:c2:5c:b5:0e:70:90:39:be: 32:f3:2e:ef:3b:ee:73:74:0e:60:5b:e7:8e:60:9e:0f:16:eb: e1:44:14:58:0c:70:13:26:7c:f3:11:45:80:fe:e2:cd:76:26: 51:71:a9:5c:74:dc:57:1f:4c:5e:02:5b:3e:56:39:89:ac:2f: 38:52:c2:55:22:59:51:f7:0e:ab:da:78:51:2c:ff:eb:b3:49: 26:9e:2f:21:5b:c7:78:df:83:ca:5b:d0:e5:58:0d:26:f7:c9: 4e:c0:e6:f6:48:fc:26:ac:ad:99:36:d8:89:5c:35:a8:f7:cb: 0c:15:49:11:9d:66:12:53:46:01:4f:1b:78:18:f6:05:67:16: ba:af:11:3b:5f:c8:96:7c:5e:02:15:8c:7d:57:01:61:7c:79: c0:3d:c6:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwOTI3MDIyNjM3WhcNMjYxMDA0MDIyNjM3WjAYMRYwFAYD VQQDEw02YWI4N2VkZS0xZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd2iF8zrFCPS8VWe65C4WsIJwqG/wszY4CbKT27IUcu6clrAUzPWBHhaYt0O qOh9nGQxpf6ttwVh+/Njnel3JFvcC0vKqtDfcT3e18JIrx0ybjT+m6wkwRamtXqY LbjbhxXf1gdlQ0PTEeKc1fQXaR22e/L0CCpZbKnaIyrOXZVKZ1Cnh+Sviiu0C8xf WxQBfM4F/tovLDQaRqtEtYnm4Zmt58/UCrtHW7/4lj3vWNfaROpnMa+zxGrdHHnW uo4Ow6Ntt3+OVbWcfaXCBujvEzw9+gHJFPgeqE6Zxg1t+L5YW09yYA6NbEVpV2+X uxYMXV88hfD2VjKPMQkpuiaV6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhKPtIZ gdTsgk12e7eravNJUHC7MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgeNt8ExnJ67Q/fWbdivFzzdpZ4AJJCd0kEXxfu6Ew4uU0AHBiE7IcF045Dip TKOyWqKi4cfEnlZ09DSarE4sufN1EHaA3lKxe81ywrspu7/zSret3yZ1lqL3Nj/K UY61rdLYzMJctQ5wkDm+MvMu7zvuc3QOYFvnjmCeDxbr4UQUWAxwEyZ88xFFgP7i zXYmUXGpXHTcVx9MXgJbPlY5iawvOFLCVSJZUfcOq9p4USz/67NJJp4vIVvHeN+D ylvQ5VgNJvfJTsDm9kj8JqytmTbYiVw1qPfLDBVJEZ1mElNGAU8beBj2BWcWuq8R O1/IlnxeAhWMfVcBYXx5wD3Gjw== -----END CERTIFICATE-----Generated at Sun Sep 27 16:52:27 2026 by rpki-client