$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: SBd5nXDciQBGG2VDgIdKpwkLSr8Y/Pbx/0fsTlPJNy0= Subject key identifier: FB:AA:33:E3:B1:5A:54:B9:E9:9F:21:9D:29:6A:5C:48:15:71:C5:CB Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 0139 Signing time: Wed 23 Sep 2026 05:24:54 +0000 Manifest this update: Wed 23 Sep 2026 05:24:54 +0000 Manifest next update: Wed 30 Sep 2026 05:24:54 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: dMBnPTYmzpJUXe9QFCEXgs+raSVNPV35ajDOPTOXQZA=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: pme8BEo7whHw/nE985T4YJ9ukK31bkVycJriDT2MMKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Sep 23 05:24:54 2026 GMT Not After : Sep 30 05:24:54 2026 GMT Subject: CN=6ab362a6-4383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:b9:dd:48:13:3e:6a:de:db:7d:cd:8c:85: a0:71:65:b5:25:49:b3:2a:e0:5e:0a:19:7d:5e:2c: fe:a6:5d:c7:ce:97:2e:99:a1:39:c0:4d:59:ca:05: ad:bf:c8:6f:9d:b6:00:6c:44:93:40:bc:07:95:e8: 19:77:00:6a:a3:04:1c:9e:6c:90:cb:5d:52:c2:01: 72:d8:34:5d:e7:a7:73:be:14:48:01:ee:eb:85:64: 3c:23:d6:8a:38:ca:61:67:76:36:d2:c4:e5:40:7c: 89:12:d7:1f:ff:92:5c:c4:15:ec:94:65:84:1b:5b: 56:05:c0:6f:4a:85:d8:a1:84:8b:34:36:3b:46:eb: aa:03:8f:54:1c:a3:42:8b:de:6f:f2:a6:8d:76:7c: e1:67:8e:0d:d5:9e:77:29:e2:f2:ae:86:7b:9d:28: 43:21:31:a2:c5:06:23:2b:bc:af:6b:6c:ff:61:2a: 45:9c:10:1d:b5:27:3b:d7:79:3b:06:03:0e:65:ac: 32:60:fc:3d:12:26:08:e2:8d:f3:80:e1:23:d1:32: 8b:68:4b:6d:32:6f:cf:79:3f:df:6f:0e:96:ea:e0: 98:c7:46:04:ea:fc:ad:57:d6:4f:30:24:3a:78:ce: e8:f4:8f:d1:92:30:ce:cf:0b:40:86:72:e4:e4:de: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:33:E3:B1:5A:54:B9:E9:9F:21:9D:29:6A:5C:48:15:71:C5:CB X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:1e:96:bc:de:34:74:a2:a5:e7:58:81:6b:4f:c6:7e:7f: b0:c1:53:84:aa:f5:22:e8:50:86:de:a0:88:53:bd:4d:5a:84: 6b:84:db:7d:b9:e9:92:4e:34:9d:d2:c9:35:c5:34:9b:47:ed: 9e:1c:fe:73:63:8f:07:f4:d5:58:52:3a:f0:7e:29:98:45:b4: 3b:82:42:fb:76:96:27:86:ee:d3:c6:2c:76:d4:e1:84:ce:e2: f4:70:7c:f8:a9:ee:2c:f5:ac:d0:ae:ed:0b:e4:a1:ee:c4:8c: 78:20:ba:84:cc:31:a0:30:bc:fd:e1:6c:59:6b:43:d1:36:75: 1a:da:f4:6e:c3:51:57:e4:65:68:50:fc:e6:ad:94:7f:56:f9: 66:68:e1:59:14:45:f5:dd:5f:4a:a7:0e:22:28:48:aa:17:cc: 74:11:50:55:86:15:54:e6:70:e7:2d:e3:74:b8:05:3d:d0:f4: 26:64:67:ca:1a:6b:07:22:92:7c:d1:13:b2:5d:4c:cc:fc:60: a1:d6:b7:c0:04:74:4a:48:6e:1e:d3:3c:59:1c:72:8e:3c:ce: 85:6a:2b:ce:d6:17:b3:00:45:50:7e:5e:06:62:f0:38:94:d5: 69:0b:c6:d0:25:c0:2d:e7:ad:fe:8b:dd:3d:3d:26:28:0a:63: d9:78:7b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz QjUzQzcyRkEwHhcNMjYwOTIzMDUyNDU0WhcNMjYwOTMwMDUyNDU0WjAYMRYwFAYD VQQDEw02YWIzNjJhNi00MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJ+53UgTPmre233NjIWgcWW1JUmzKuBeChl9Xiz+pl3HzpcumaE5wE1ZygWt v8hvnbYAbESTQLwHlegZdwBqowQcnmyQy11SwgFy2DRd56dzvhRIAe7rhWQ8I9aK OMphZ3Y20sTlQHyJEtcf/5JcxBXslGWEG1tWBcBvSoXYoYSLNDY7RuuqA49UHKNC i95v8qaNdnzhZ44N1Z53KeLyroZ7nShDITGixQYjK7yva2z/YSpFnBAdtSc713k7 BgMOZawyYPw9EiYI4o3zgOEj0TKLaEttMm/PeT/fbw6W6uCYx0YE6vytV9ZPMCQ6 eM7o9I/RkjDOzwtAhnLk5N77swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuqM+Ox WlS56Z8hnSlqXEgVccXLMB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0 QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy LTU0WEhXWlktUFE3VThjdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYyoelrzeNHSipedYgWtPxn5/sMFThKr1IuhQht6giFO9TVqEa4Tbfbnpkk40 ndLJNcU0m0ftnhz+c2OPB/TVWFI68H4pmEW0O4JC+3aWJ4bu08YsdtThhM7i9HB8 +KnuLPWs0K7tC+Sh7sSMeCC6hMwxoDC8/eFsWWtD0TZ1Gtr0bsNRV+RlaFD85q2U f1b5ZmjhWRRF9d1fSqcOIihIqhfMdBFQVYYVVOZw5y3jdLgFPdD0JmRnyhprByKS fNETsl1MzPxgoda3wAR0SkhuHtM8WRxyjjzOhWorztYXswBFUH5eBmLwOJTVaQvG 0CXALeet/ovdPT0mKApj2Xh7Cg== -----END CERTIFICATE-----Generated at Thu Sep 24 03:57:42 2026 by rpki-client