$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: bercoEfxCFJ1WNFhN2D8oGnGTY8eQOxx60WZF1hTR3Q= Subject key identifier: 7B:6D:C7:73:71:A9:9E:FA:DE:A4:3B:F4:E6:C2:E7:C1:73:40:BC:78 Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: B3 Signing time: Wed 23 Sep 2026 06:49:42 +0000 Manifest this update: Wed 23 Sep 2026 06:49:41 +0000 Manifest next update: Wed 30 Sep 2026 06:49:41 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: SB5hGB8QVSTpeJMjmOyPB8Vul/VH1g4ofpqrN2Bb7sg=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: RqCpDoo45BvdNa/Wr+sL6cLBWSatPQ0KKDjOjSMWLg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Sep 23 06:49:41 2026 GMT Not After : Sep 30 06:49:41 2026 GMT Subject: CN=6ab37686-df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:b1:8f:63:1a:23:db:41:3d:a3:96:ce:9c: 8b:ec:0b:bc:36:3c:d6:6d:d0:34:07:2c:c4:3f:19: 12:1a:4c:34:e6:86:53:57:78:f6:7d:1a:bf:ed:9e: f6:06:02:53:b3:4a:e8:c5:f4:a8:eb:46:84:ec:32: f0:a5:81:a8:f9:b5:be:30:38:cb:58:28:2c:2e:6d: ee:10:35:81:dd:3c:c1:32:13:eb:42:1e:51:46:48: f9:38:6d:04:e1:a2:d9:97:26:4a:d8:e0:43:7f:80: 2f:9a:5f:41:3b:27:34:c1:fa:d4:79:c7:01:31:fc: c4:e5:5f:89:25:b3:90:7c:19:84:e9:3f:08:04:55: f9:a9:31:20:c0:0e:44:ab:ee:ec:15:d5:b8:23:bb: 3b:21:00:00:f3:e4:b0:9d:27:48:3f:4c:0d:4f:ee: 49:e1:e9:64:e4:c0:57:de:89:b1:b9:7d:81:68:fd: 27:3f:69:76:54:e1:f1:e2:28:0d:a6:15:27:bc:78: 22:da:2e:af:a3:1f:ca:df:15:61:12:97:6a:4d:c2: b3:52:9e:fa:dc:39:cb:80:9e:13:9e:8e:15:b2:40: 4d:78:e7:a6:04:3f:aa:71:35:f0:19:81:e4:e1:91: 15:63:77:3b:28:c3:40:9f:b8:42:ea:a1:e4:0a:03: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:C7:73:71:A9:9E:FA:DE:A4:3B:F4:E6:C2:E7:C1:73:40:BC:78 X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:81:58:9f:49:25:b4:78:7a:6c:3f:7c:be:90:cd:e1:6d:c5: bd:cd:74:0a:f7:8a:e2:64:73:e3:68:14:27:8b:52:12:55:93: ee:cd:c2:f1:84:bf:6c:4a:ba:ff:5a:eb:ac:bb:8f:dc:f8:96: f9:c2:2d:a6:92:05:8d:ce:00:4c:b8:a1:23:a9:cb:79:ea:03: 59:d7:69:bd:66:38:d2:bb:84:b2:a7:02:98:d6:18:cd:b3:33: a8:93:2e:39:e1:35:a6:9d:dd:5f:62:1e:d5:87:1f:fd:b4:54: 09:fd:41:c6:12:51:34:d3:fc:00:2c:16:8f:f5:6b:c2:28:b5: 00:ce:cc:fc:ea:ff:27:a9:7a:5d:de:01:91:b7:53:03:e0:23: 30:b7:d1:e1:1d:28:fa:cf:c2:c7:cf:1d:da:12:3c:41:56:95: 0a:94:0a:67:6c:d4:72:59:21:61:06:86:a1:49:bb:1c:31:1a: 76:eb:60:7e:27:a1:1c:49:bf:8d:9d:ae:4b:02:00:e6:8c:e1: 67:2b:60:75:da:16:20:d6:af:2c:fe:81:df:f6:f2:7d:39:2c: 1c:0b:8b:76:17:9f:51:cf:44:80:0e:b9:ff:d3:1f:72:60:6c: e9:d6:aa:14:23:29:03:49:67:ae:60:c8:20:42:83:46:0c:81: bf:b7:aa:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAwMkQxMTAvBgNVBAUTKDY1NEUwMjAxMjVDMUI3NTA3ODI2RjA1RkREQTkyNEI1 Mjg3NDA4RjkwHhcNMjYwOTIzMDY0OTQxWhcNMjYwOTMwMDY0OTQxWjAYMRYwFAYD VQQDEw02YWIzNzY4Ni1kZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqSxj2MaI9tBPaOWzpyL7Au8NjzWbdA0ByzEPxkSGkw05oZTV3j2fRq/7Z72 BgJTs0roxfSo60aE7DLwpYGo+bW+MDjLWCgsLm3uEDWB3TzBMhPrQh5RRkj5OG0E 4aLZlyZK2OBDf4Avml9BOyc0wfrUeccBMfzE5V+JJbOQfBmE6T8IBFX5qTEgwA5E q+7sFdW4I7s7IQAA8+SwnSdIP0wNT+5J4elk5MBX3omxuX2BaP0nP2l2VOHx4igN phUnvHgi2i6vox/K3xVhEpdqTcKzUp763DnLgJ4Tno4VskBNeOemBD+qcTXwGYHk 4ZEVY3c7KMNAn7hC6qHkCgOIkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHttx3Nx qZ763qQ79ObC58FzQLx4MB8GA1UdIwQYMBaAFGVOAgElwbdQeCbwX92pJLUodAj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDAyRC8xNDlENUI1MkFE QTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQxQjRKdkJmM2Fra3RTaDBD UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDAyRC8xNDlENUI1MkFEQTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQx QjRKdkJmM2Fra3RTaDBDUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqoFYn0kltHh6bD98vpDN4W3Fvc10CveK4mRz42gUJ4tSElWT7s3C8YS/bEq6 /1rrrLuP3PiW+cItppIFjc4ATLihI6nLeeoDWddpvWY40ruEsqcCmNYYzbMzqJMu OeE1pp3dX2Ie1Ycf/bRUCf1BxhJRNNP8ACwWj/Vrwii1AM7M/Or/J6l6Xd4BkbdT A+AjMLfR4R0o+s/Cx88d2hI8QVaVCpQKZ2zUclkhYQaGoUm7HDEadutgfiehHEm/ jZ2uSwIA5ozhZytgddoWINavLP6B3/byfTksHAuLdhefUc9EgA65/9MfcmBs6daq FCMpA0lnrmDIIEKDRgyBv7eqeA== -----END CERTIFICATE-----Generated at Thu Sep 24 08:41:16 2026 by rpki-client