$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: Vi+2NM0twbFHsfqmP9VTYnt/wqqXoizLQT+7Ccm5LDY= Subject key identifier: EB:57:38:09:DC:18:EA:82:B0:FA:CE:1B:92:6E:1B:AC:DB:86:7B:AF Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: C2 Signing time: Tue 29 Sep 2026 07:28:36 +0000 Manifest this update: Tue 29 Sep 2026 07:28:36 +0000 Manifest next update: Tue 06 Oct 2026 07:28:36 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: +V9hU9H5hPgewF1i5mMDi16XfedgShXqfp6SHXxovOs=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 07:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Sep 29 07:28:36 2026 GMT Not After : Oct 6 07:28:36 2026 GMT Subject: CN=6abb68a4-9628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:e8:8f:c3:aa:a4:e1:3d:5b:f2:12:e5:b5: 9e:99:29:bb:50:a2:c9:db:95:36:26:6b:b1:2b:10: bf:21:43:97:c2:6c:a3:e8:a2:74:b2:a5:d7:c6:25: 52:c3:92:7b:ac:9a:50:51:02:10:33:fe:6c:06:cc: 1d:90:1e:ff:52:bb:ac:e3:df:97:ca:ed:ff:61:ab: d4:76:61:89:14:91:40:e8:86:5f:0d:0d:94:78:e7: 72:cc:14:85:7d:d9:3f:76:ba:39:6d:dc:38:64:e5: 9f:fc:bf:42:fe:40:c7:2e:54:00:33:ef:fd:50:96: 06:58:78:c6:8f:aa:ec:3f:d3:51:c1:01:e6:ee:03: d1:6c:d0:70:1c:64:a6:7e:97:6b:33:19:52:83:45: 63:d2:ea:bb:8e:2d:27:a7:e3:7e:04:d4:ac:db:96: d8:18:fe:3a:4b:b3:34:f0:07:de:e8:18:79:eb:80: 7e:c1:31:9b:c0:40:cd:01:60:0b:b7:c4:d7:6f:3e: 77:e9:66:bc:17:dc:48:a8:13:ec:cd:41:62:e4:13: b3:f5:0e:db:96:1b:f0:44:74:9c:4a:a5:90:fb:53: 63:9a:3b:53:dc:ae:ab:7c:43:0e:16:0c:ea:87:c5: e6:fc:d2:af:8e:17:e1:96:99:4e:3c:10:d0:51:fb: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:38:09:DC:18:EA:82:B0:FA:CE:1B:92:6E:1B:AC:DB:86:7B:AF X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8d:33:cb:d2:f1:ba:44:ec:d7:6b:2a:4d:93:cf:0e:b6:c0: a8:a3:78:9e:5c:17:56:11:78:70:4e:56:e4:59:1c:61:85:09: 9e:00:a8:e2:a2:33:74:be:72:32:1c:9c:0e:63:ea:f5:c9:44: 75:30:05:e4:20:35:24:1e:3a:6b:8a:08:2f:27:fe:99:a1:f1: 4a:50:85:25:be:26:42:01:6e:6f:10:74:40:cb:22:b9:cd:94: b6:80:21:c6:0d:70:7c:e7:03:00:c7:64:eb:1a:15:7d:51:f6: 84:47:92:d6:ce:78:7f:c2:83:4b:6a:fc:e1:49:d8:ff:42:ab: 40:66:2c:ce:c4:af:ce:e2:cf:c8:44:90:1f:06:9e:a6:9d:b2: 12:00:e0:69:25:12:b5:e7:9d:15:e6:34:59:66:76:53:aa:94: 71:c0:2f:7d:f2:94:49:8f:8b:80:4e:bb:23:25:5e:28:fd:3b: 68:f3:89:c4:2d:9e:96:9c:db:22:69:9f:f7:ea:f4:38:1b:2a: 8d:f0:af:be:3f:b3:2a:a9:28:ba:62:a7:57:e8:f1:c9:14:37: 2c:68:03:38:f8:a2:03:29:dd:20:44:22:55:72:6d:8a:87:c4: 5d:90:48:c0:b8:b9:02:ff:b9:a9:67:4d:48:dd:ac:0c:06:c0: 74:82:20:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTQxMTAvBgNVBAUTKEFGMzA4OTVEQ0UzQzY1QzIzQkVDNTRDQjA4OTg1OEVC QTE2MTg5Q0UwHhcNMjYwOTI5MDcyODM2WhcNMjYxMDA2MDcyODM2WjAYMRYwFAYD VQQDEw02YWJiNjhhNC05NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXzoj8OqpOE9W/IS5bWemSm7UKLJ25U2JmuxKxC/IUOXwmyj6KJ0sqXXxiVS w5J7rJpQUQIQM/5sBswdkB7/Urus49+Xyu3/YavUdmGJFJFA6IZfDQ2UeOdyzBSF fdk/dro5bdw4ZOWf/L9C/kDHLlQAM+/9UJYGWHjGj6rsP9NRwQHm7gPRbNBwHGSm fpdrMxlSg0Vj0uq7ji0np+N+BNSs25bYGP46S7M08Afe6Bh564B+wTGbwEDNAWAL t8TXbz536Wa8F9xIqBPszUFi5BOz9Q7blhvwRHScSqWQ+1NjmjtT3K6rfEMOFgzq h8Xm/NKvjhfhlplOPBDQUftR3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtXOAnc GOqCsPrOG5JuG6zbhnuvMB8GA1UdIwQYMBaAFK8wiV3OPGXCO+xUywiYWOuhYYnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9DN0FGQTZBMjlE QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpjSTc3RlRMQ0poWTY2Rmhp YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGljNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5NC9DN0FGQTZBMjlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpj STc3RlRMQ0poWTY2RmhpYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACo0zy9LxukTs12sqTZPPDrbAqKN4nlwXVhF4cE5W5FkcYYUJngCo4qIzdL5y MhycDmPq9clEdTAF5CA1JB46a4oILyf+maHxSlCFJb4mQgFubxB0QMsiuc2UtoAh xg1wfOcDAMdk6xoVfVH2hEeS1s54f8KDS2r84UnY/0KrQGYszsSvzuLPyESQHwae pp2yEgDgaSUSteedFeY0WWZ2U6qUccAvffKUSY+LgE67IyVeKP07aPOJxC2elpzb Immf9+r0OBsqjfCvvj+zKqkoumKnV+jxyRQ3LGgDOPiiAyndIEQiVXJtiofEXZBI wLi5Av+5qWdNSN2sDAbAdIIghA== -----END CERTIFICATE-----Generated at Tue Sep 29 13:25:34 2026 by rpki-client