$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft File: ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json) Hash identifier: 0mCokegUVPR9ESKDoSZHj0FLgp37lP8kbXhHIAIDSrI= Subject key identifier: BB:8E:FC:02:A1:EC:1E:4F:5B:0C:FC:43:F7:78:76:B5:CA:27:C8:83 Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D Certificate issuer: /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D Certificate serial: 142C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft Manifest number: 1C44 Signing time: Thu 24 Sep 2026 16:52:08 +0000 Manifest this update: Thu 24 Sep 2026 16:52:08 +0000 Manifest next update: Thu 01 Oct 2026 16:52:08 +0000 Files and hashes: 1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: WciP9NGXZp133iZNbWC9QMTEoI1nM/lIggTETibaNQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5164 (0x142c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D Validity Not Before: Sep 24 16:52:08 2026 GMT Not After : Oct 1 16:52:08 2026 GMT Subject: CN=6ab55538-a379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:16:cc:2a:9e:69:33:71:1a:1e:96:39:ca: 8c:ca:81:3d:40:75:d1:0a:db:35:3b:c0:db:85:d1: f0:0d:95:de:bc:27:1b:1d:ad:09:48:a6:9c:fd:97: 55:01:e3:b7:e1:e9:69:09:94:d3:cf:a7:d5:94:36: 52:0d:1f:60:c6:c7:2e:cd:6a:9c:3d:d4:e0:92:d3: 7b:42:43:a5:e0:59:03:4d:d0:b5:c1:c4:d4:22:68: 49:04:b8:5e:99:44:0d:d9:40:69:33:8d:5f:59:3d: d2:63:cb:c7:6e:b1:a2:fb:15:c1:88:ab:f6:aa:f9: 8c:f7:34:61:38:3b:2c:ad:d9:a0:3b:7f:38:05:c4: 83:05:e2:45:a8:b1:0a:67:b5:30:36:40:ed:69:80: bf:98:08:9b:fa:b0:5a:c9:9d:cd:4b:79:7f:13:06: 37:de:8b:15:f0:39:b0:4c:fb:f7:47:69:f0:84:9f: 7c:cd:60:dd:0a:f8:ab:82:b6:c0:fb:53:99:2c:e0: b8:84:b2:43:06:53:3c:d2:2b:ac:20:e4:0b:27:00: a7:3a:98:79:1e:0e:da:65:fc:d6:ed:53:90:d7:f7: 39:8f:ac:57:26:4c:5b:a4:f3:49:b2:74:64:28:66: b1:6e:03:64:b0:a9:4a:aa:59:2f:c8:03:fd:20:19: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8E:FC:02:A1:EC:1E:4F:5B:0C:FC:43:F7:78:76:B5:CA:27:C8:83 X509v3 Authority Key Identifier: keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:62:2b:a3:38:ef:d3:d1:04:0c:a3:cb:5c:a6:1d:0a:59: 9c:5a:f9:d2:b0:6b:12:da:25:93:d5:3f:64:dd:13:81:c8:88: 58:dd:8e:5a:f8:cc:4e:06:03:ae:8f:74:b1:02:f0:0f:43:62: db:f7:33:08:91:61:33:dc:0d:6d:75:45:74:85:38:fa:45:44: 6a:d8:eb:2a:7e:a0:5d:af:08:b7:0d:5f:9f:64:a6:87:8a:54: fb:99:af:34:d9:ca:73:47:99:70:01:67:bc:fa:78:11:63:61: c1:8e:8c:57:8b:36:10:d1:37:70:40:e6:11:48:86:43:8a:30: 9c:1a:7d:02:67:2b:d0:00:ce:a3:92:3c:15:ef:27:c3:e1:cd: 5a:83:41:be:5f:a2:83:e3:bb:31:fa:a6:48:b4:46:4d:79:7c: 43:31:f7:fb:e0:13:8e:f8:98:12:47:0b:33:c1:56:08:34:83: 0d:a2:31:3b:ce:fb:d5:d9:6c:e8:d8:84:3f:f2:b1:3d:df:04: 39:a5:af:e6:ad:18:36:5e:d4:97:db:a8:f5:1e:cb:bc:90:a9: 08:84:81:3c:a8:55:9e:59:2f:35:2d:ce:26:f2:22:90:44:01: d6:5f:5b:10:2a:c8:d3:60:04:0c:32:ad:f2:46:88:1d:3f:7e: 5e:4f:04:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDY3MjEyNEY2MzNDODkxOUNBNUQ3NjZEODlFOUNDRkYw QjIxRjBDOEQwHhcNMjYwOTI0MTY1MjA4WhcNMjYxMDAxMTY1MjA4WjAYMRYwFAYD VQQDEw02YWI1NTUzOC1hMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WwWzCqeaTNxGh6WOcqMyoE9QHXRCts1O8DbhdHwDZXevCcbHa0JSKac/ZdV AeO34elpCZTTz6fVlDZSDR9gxscuzWqcPdTgktN7QkOl4FkDTdC1wcTUImhJBLhe mUQN2UBpM41fWT3SY8vHbrGi+xXBiKv2qvmM9zRhODssrdmgO384BcSDBeJFqLEK Z7UwNkDtaYC/mAib+rBayZ3NS3l/EwY33osV8DmwTPv3R2nwhJ98zWDdCvirgrbA +1OZLOC4hLJDBlM80iusIOQLJwCnOph5Hg7aZfzW7VOQ1/c5j6xXJkxbpPNJsnRk KGaxbgNksKlKqlkvyAP9IBl6VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuO/AKh 7B5PWwz8Q/d4drXKJ8iDMB8GA1UdIwQYMBaAFGchJPYzyJGcpddm2J6cz/CyHwyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWtaeWwxMmJZbnB6UDhMSWZE STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5RWs5alBJa1p5bDEyYllucHpQOExJZkRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWta eWwxMmJZbnB6UDhMSWZESTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXfpiK6M479PRBAyjy1ymHQpZnFr50rBrEtolk9U/ZN0TgciIWN2OWvjMTgYD ro90sQLwD0Ni2/czCJFhM9wNbXVFdIU4+kVEatjrKn6gXa8Itw1fn2Smh4pU+5mv NNnKc0eZcAFnvPp4EWNhwY6MV4s2ENE3cEDmEUiGQ4ownBp9Amcr0ADOo5I8Fe8n w+HNWoNBvl+ig+O7MfqmSLRGTXl8QzH3++ATjviYEkcLM8FWCDSDDaIxO8771dls 6NiEP/KxPd8EOaWv5q0YNl7Ul9uo9R7LvJCpCISBPKhVnlkvNS3OJvIikEQB1l9b ECrI02AEDDKt8kaIHT9+Xk8Efg== -----END CERTIFICATE-----Generated at Thu Sep 24 20:47:01 2026 by rpki-client