$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: woqkyaYcscizyZlARBbNQy5vQs2ulnZUqWQw2ZmJcf0= Subject key identifier: 21:71:A5:83:7C:D7:3F:A2:4E:09:AA:C8:E3:5F:00:88:57:0E:DC:34 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0CC4 Signing time: Tue 22 Sep 2026 18:25:53 +0000 Manifest this update: Tue 22 Sep 2026 18:25:53 +0000 Manifest next update: Tue 29 Sep 2026 18:25:53 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: mMoHFaI9drJzx4EZ0p8htNcDYGdWnq7IzrPa5tgEdLc=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: k/Dtkdo/ASwNUW0b7Vf+PXcxj0dpm2I2YrIKuMX9lpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Sep 22 18:25:53 2026 GMT Not After : Sep 29 18:25:53 2026 GMT Subject: CN=6ab2c831-32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:8a:2b:40:fd:3c:98:e1:8d:e6:dd:37:06: 9b:92:3a:c5:f2:45:0e:a1:17:83:38:3a:04:41:ae: a7:d6:19:21:6f:52:eb:92:6d:4a:7b:5e:d9:a4:a9: 53:be:ce:1d:28:03:de:9f:fa:16:11:7f:a8:c7:aa: 11:35:25:01:f7:42:bd:7d:b8:d8:12:e0:18:d8:dd: f9:da:99:91:69:bd:2c:b6:d4:93:0c:9c:2e:fa:18: 4f:29:f7:93:d8:f0:81:39:ee:17:5b:6d:87:b3:e0: a6:7d:77:71:79:97:49:eb:ec:97:1a:3c:a6:57:b8: 57:c4:cf:00:9f:9c:d5:7f:11:4d:45:40:9a:03:7c: 5e:9d:65:e0:39:e7:9c:d4:ec:89:5d:75:26:63:cb: 3f:e9:60:b5:b6:ca:a8:9c:38:51:24:02:ff:a2:e7: 84:a6:0e:5e:70:f1:6b:f6:da:11:1a:bd:85:fb:6e: 7f:8b:73:d4:45:8c:56:c9:bb:31:55:b3:f2:20:b6: b1:dc:a7:d1:d4:1e:11:cf:3c:d0:84:98:ee:3c:a6: 8b:ae:6b:90:da:78:dd:15:15:bb:8a:cf:6a:0f:74: 6e:7c:78:16:35:19:6a:4f:09:97:9f:18:d5:da:38: eb:8f:fb:32:c3:bd:3b:e3:f2:a7:c8:f4:67:6b:c3: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:71:A5:83:7C:D7:3F:A2:4E:09:AA:C8:E3:5F:00:88:57:0E:DC:34 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:62:ec:d7:fb:a1:84:ef:f0:d3:ef:81:a0:e3:9f:b8:b4:b8: 0c:d1:b0:e3:b5:89:29:a6:61:d2:14:44:13:5d:c1:d2:96:1f: 09:3d:5e:ab:db:fe:6a:8f:e9:9b:f3:3d:3e:9e:06:6d:e0:38: 85:19:e7:90:ce:10:11:78:a2:b6:33:22:10:1b:3e:64:5c:12: e3:b1:f2:70:38:72:85:c5:b9:db:07:16:23:25:c6:c0:ba:92: 92:32:4e:e7:9a:6f:91:ff:6e:c5:13:26:0e:99:c4:19:21:1f: 65:3f:27:56:f9:a6:86:62:a9:9e:5a:43:c8:72:ec:98:f3:e5: 01:41:73:30:a7:34:18:f0:a9:02:e0:0a:9d:91:91:0a:eb:4c: 74:25:12:32:c9:1b:41:79:5d:19:e8:9a:24:de:55:41:e6:11: 3e:ab:a5:45:35:da:12:88:cc:78:37:2c:4a:47:bc:85:45:5d: 9e:70:ff:dd:ac:27:90:9c:0c:86:5f:cb:b4:c8:79:c8:69:55: 49:ae:29:80:92:26:ec:4e:6b:27:f0:70:95:d1:8e:b2:16:42: 9e:25:73:5e:08:32:9a:ef:87:9b:6c:82:3a:33:f9:90:01:3b: 83:a3:6b:70:69:9f:08:f8:da:4d:d5:87:21:11:ed:ee:ab:c9: d4:bf:f8:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjYwOTIyMTgyNTUzWhcNMjYwOTI5MTgyNTUzWjAYMRYwFAYD VQQDEw02YWIyYzgzMS0zMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo26KK0D9PJjhjebdNwabkjrF8kUOoReDODoEQa6n1hkhb1Lrkm1Ke17ZpKlT vs4dKAPen/oWEX+ox6oRNSUB90K9fbjYEuAY2N352pmRab0sttSTDJwu+hhPKfeT 2PCBOe4XW22Hs+CmfXdxeZdJ6+yXGjymV7hXxM8An5zVfxFNRUCaA3xenWXgOeec 1OyJXXUmY8s/6WC1tsqonDhRJAL/oueEpg5ecPFr9toRGr2F+25/i3PURYxWybsx VbPyILax3KfR1B4RzzzQhJjuPKaLrmuQ2njdFRW7is9qD3RufHgWNRlqTwmXnxjV 2jjrj/syw7074/KnyPRna8N+1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFxpYN8 1z+iTgmqyONfAIhXDtw0MB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsWLs1/uhhO/w0++BoOOfuLS4DNGw47WJKaZh0hREE13B0pYfCT1eq9v+ao/p m/M9Pp4GbeA4hRnnkM4QEXiitjMiEBs+ZFwS47HycDhyhcW52wcWIyXGwLqSkjJO 55pvkf9uxRMmDpnEGSEfZT8nVvmmhmKpnlpDyHLsmPPlAUFzMKc0GPCpAuAKnZGR CutMdCUSMskbQXldGeiaJN5VQeYRPqulRTXaEojMeDcsSke8hUVdnnD/3awnkJwM hl/LtMh5yGlVSa4pgJIm7E5rJ/BwldGOshZCniVzXggymu+Hm2yCOjP5kAE7g6Nr cGmfCPjaTdWHIRHt7qvJ1L/40w== -----END CERTIFICATE-----Generated at Thu Sep 24 07:11:16 2026 by rpki-client