$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json) Hash identifier: afxAJWex+K84+K1o0hlYpnOlodLGbwhy+P38s1qfeA8= Subject key identifier: FE:CE:FB:9C:F5:51:AC:08:E8:37:11:37:57:A0:1C:A0:2C:01:32:50 Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft Manifest number: A3 Signing time: Wed 23 Sep 2026 07:00:09 +0000 Manifest this update: Wed 23 Sep 2026 07:00:09 +0000 Manifest next update: Wed 30 Sep 2026 07:00:09 +0000 Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: +y8BlqNQJNT5tp2ozQsFVVWbttMUV6XSY0KgidgNzdg=) 2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Validity Not Before: Sep 23 07:00:09 2026 GMT Not After : Sep 30 07:00:09 2026 GMT Subject: CN=6ab378f9-326c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:a7:ec:bf:ab:00:70:c5:3c:71:d3:58:ec: 23:da:7e:be:90:ae:c6:4d:05:3b:47:9c:62:d7:53: 18:ef:88:a0:ec:5a:07:b2:24:c5:39:62:26:87:8f: a5:6e:6b:c8:a4:01:34:d8:d1:5b:1b:31:6a:03:17: 58:eb:f4:8f:89:be:7d:92:72:54:b7:2c:e0:ee:51: ac:0b:c8:82:8d:27:a6:96:7d:95:b2:a8:b0:74:1e: cf:60:ae:bc:84:12:19:0b:39:f3:97:7d:cf:4d:01: d3:21:30:14:66:2d:13:09:2a:9e:83:7d:19:1a:02: 72:3b:17:8a:7c:b5:b4:9d:01:4c:17:06:73:c3:b0: d8:e5:78:08:87:ee:b3:2e:63:74:29:7d:98:29:b5: 7e:14:7b:5b:2c:82:be:2e:f1:b8:48:f6:9e:d9:53: 06:c6:22:ba:14:2d:d8:23:91:86:9e:68:1b:69:13: 5a:2c:f8:dc:cd:49:28:a4:61:03:c0:30:0c:4e:d1: e9:1c:3c:fa:93:6d:28:9b:5c:aa:bb:f9:d1:1b:d8: 89:d8:f0:cf:99:47:f5:a7:43:2d:a7:2b:11:d7:c9: 38:ea:6d:6e:35:0b:43:f3:18:b6:04:64:4e:3e:ce: 53:d7:5c:be:07:04:38:18:35:bf:7b:e3:a0:9a:d1: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CE:FB:9C:F5:51:AC:08:E8:37:11:37:57:A0:1C:A0:2C:01:32:50 X509v3 Authority Key Identifier: keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:43:1d:aa:5c:08:39:57:d5:28:6c:3a:86:ac:a4:f5:4e:e3: 41:d3:ea:8c:98:41:b3:d7:1d:0a:5e:3a:69:ce:22:eb:58:4f: 37:71:3a:4a:1e:4c:04:cc:26:9b:af:e0:64:1c:9b:a0:9a:77: 3e:c0:d0:75:eb:ba:46:4f:27:94:77:e6:0a:b7:4f:f4:45:15: 8a:7b:09:ba:fe:cb:44:56:b5:2a:77:a3:13:3c:e4:24:21:99: 38:40:d7:3e:af:14:10:8f:62:1e:5b:a8:ba:fb:26:e0:68:a2: da:56:8c:1c:f6:2b:5b:d5:42:41:91:04:30:96:95:5b:cc:eb: 4e:c0:51:5a:cb:56:1f:f2:a2:20:4f:8f:da:da:84:69:10:83: 02:bb:ff:d1:20:b7:d2:af:5c:31:8d:99:20:b4:63:41:93:1a: 9e:99:2b:64:ca:bb:5e:52:0b:3a:dc:8e:93:f8:a8:96:df:aa: 19:93:1e:43:d5:ff:d8:ee:88:65:65:d0:f0:7a:b4:b6:28:75: 89:9b:35:1e:9f:97:4e:f6:45:8e:32:37:c7:2a:43:e5:a7:55: 60:e2:13:82:0a:bd:74:6f:53:b8:ac:86:11:f2:1c:29:84:5e: eb:3c:ed:c2:96:45:b2:79:d6:4a:d1:1d:98:be:05:80:69:8c: 68:0e:21:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyREIxMTAvBgNVBAUTKENGMjE1QUM5MTFDQUE1MjA2NUM3RUM0QUM3OTU3ODM1 MzgyQkUzRUQwHhcNMjYwOTIzMDcwMDA5WhcNMjYwOTMwMDcwMDA5WjAYMRYwFAYD VQQDEw02YWIzNzhmOS0zMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5Kn7L+rAHDFPHHTWOwj2n6+kK7GTQU7R5xi11MY74ig7FoHsiTFOWImh4+l bmvIpAE02NFbGzFqAxdY6/SPib59knJUtyzg7lGsC8iCjSemln2VsqiwdB7PYK68 hBIZCznzl33PTQHTITAUZi0TCSqeg30ZGgJyOxeKfLW0nQFMFwZzw7DY5XgIh+6z LmN0KX2YKbV+FHtbLIK+LvG4SPae2VMGxiK6FC3YI5GGnmgbaRNaLPjczUkopGED wDAMTtHpHDz6k20om1yqu/nRG9iJ2PDPmUf1p0MtpysR18k46m1uNQtD8xi2BGRO Ps5T11y+BwQ4GDW/e+OgmtHREQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7O+5z1 UawI6DcRN1egHKAsATJQMB8GA1UdIwQYMBaAFM8hWskRyqUgZcfsSseVeDU4K+Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJEQi8wQ0E3N0ZENkM0 MzUxMUYwODEzOEYwN0RDNEY5QUUwMi96eUZheVJIS3BTQmx4LXhLeDVWNE5UZ3I0 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p5RmF5UkhLcFNCbHgteEt4NVY0TlRncjQtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJEQi8wQ0E3N0ZENkM0MzUxMUYwODEzOEYwN0RDNEY5QUUwMi96eUZheVJIS3BT Qmx4LXhLeDVWNE5UZ3I0LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkMdqlwIOVfVKGw6hqyk9U7jQdPqjJhBs9cdCl46ac4i61hPN3E6Sh5MBMwm m6/gZByboJp3PsDQdeu6Rk8nlHfmCrdP9EUVinsJuv7LRFa1KnejEzzkJCGZOEDX Pq8UEI9iHluouvsm4Gii2laMHPYrW9VCQZEEMJaVW8zrTsBRWstWH/KiIE+P2tqE aRCDArv/0SC30q9cMY2ZILRjQZManpkrZMq7XlILOtyOk/iolt+qGZMeQ9X/2O6I ZWXQ8Hq0tih1iZs1Hp+XTvZFjjI3xypD5adVYOITggq9dG9TuKyGEfIcKYRe6zzt wpZFsnnWStEdmL4FgGmMaA4hxw== -----END CERTIFICATE-----Generated at Thu Sep 24 18:26:51 2026 by rpki-client