$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: 47zA1meXJx4NowvVgkpW27e5VVFheifGzKXaXJppJpg= Subject key identifier: 2A:A6:C0:CB:D2:FD:9B:5A:A2:7D:33:79:AA:E0:F4:40:0B:DE:A9:93 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0960 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 094E Signing time: Tue 22 Sep 2026 19:58:36 +0000 Manifest this update: Tue 22 Sep 2026 19:58:36 +0000 Manifest next update: Tue 29 Sep 2026 19:58:36 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: Y5OtsblaCUBFAAqc4En6iBYsg823B/+hxbY1FuPcb38=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2400 (0x960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Sep 22 19:58:36 2026 GMT Not After : Sep 29 19:58:36 2026 GMT Subject: CN=6ab2ddec-2e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:bd:55:b0:f9:0d:e0:0b:02:ef:7a:90:e6: 6a:9b:fa:30:e7:d9:9c:6f:65:af:0f:60:b2:4e:41: 06:b8:57:1b:df:88:d7:fb:7b:e2:76:b4:34:93:f0: b7:cc:9f:51:e8:41:5a:64:b5:cb:64:70:16:0f:46: fd:ef:55:f9:54:df:27:6a:4c:06:a4:a6:85:8e:22: 50:a8:35:cc:86:61:23:be:02:20:3b:84:52:e9:e6: d1:a4:91:c1:d7:61:98:2c:ec:b4:26:63:89:27:d3: c6:2c:58:f5:24:f9:a4:cd:a9:7c:06:a0:54:40:74: 6f:d6:5b:cb:76:58:76:a9:20:07:af:27:dd:86:b2: 20:4f:2f:bc:3c:d3:bd:f1:e8:2b:9b:16:40:1f:20: 2b:34:72:d8:c2:e5:4d:29:f8:11:3c:67:49:9b:a6: a9:cf:54:34:eb:e3:fd:af:a8:49:11:0a:49:ff:eb: 48:46:5c:06:13:60:31:ab:a9:51:9f:dc:0f:f9:1f: 5f:51:ad:5f:b6:03:df:7d:00:69:0b:89:f7:d7:e4: 01:f2:44:b1:1a:e7:92:4b:f4:7a:19:67:95:e2:f9: 97:5e:80:8a:df:e6:a9:f3:7e:63:58:e0:58:37:cc: 06:ca:7a:ed:56:ba:86:d8:89:f9:1e:76:31:c3:02: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A6:C0:CB:D2:FD:9B:5A:A2:7D:33:79:AA:E0:F4:40:0B:DE:A9:93 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e7:76:c0:26:e3:59:b7:23:ce:da:b8:32:08:37:ba:48:9f: b0:e8:3c:e6:6c:22:64:74:1f:2d:43:f7:45:78:cc:63:12:34: 0b:68:5a:44:c3:d9:7f:07:08:d4:30:07:4e:fd:06:b4:6f:25: e6:8b:90:2f:83:5e:a9:4a:67:9d:d8:24:b5:83:c4:0c:4d:68: b4:31:c0:d5:0d:c2:48:f1:2c:2e:9f:96:ce:ff:87:d4:a5:94: d9:3c:6e:27:9f:0c:b9:25:19:80:15:50:e2:31:7c:b1:5e:9a: 23:74:be:75:97:a3:1a:04:86:b3:14:83:84:8c:1e:83:e9:e5: 2d:7d:4d:fc:63:5c:e6:c0:d7:ca:a4:a0:19:21:da:c9:88:4d: 16:55:21:ee:a8:8e:04:36:c6:43:1e:4a:f7:a6:45:e2:83:d7: 15:19:12:4e:81:84:c0:08:12:7e:a5:c4:ae:a8:ed:5d:14:89: e2:af:e3:2a:47:94:48:a5:f6:38:4c:a1:7f:ef:1e:18:27:e3: 17:55:14:83:ff:6b:1b:a3:8a:f5:53:6a:c2:2a:d7:8e:3f:de: 88:d5:da:79:61:7b:80:34:aa:4a:25:ca:b6:6a:3f:da:ed:18: 06:04:48:52:3e:11:67:ec:ca:25:90:2d:0f:f2:63:24:e4:1b: e7:8b:72:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYwOTIyMTk1ODM2WhcNMjYwOTI5MTk1ODM2WjAYMRYwFAYD VQQDEw02YWIyZGRlYy0yZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiO9VbD5DeALAu96kOZqm/ow59mcb2WvD2CyTkEGuFcb34jX+3vidrQ0k/C3 zJ9R6EFaZLXLZHAWD0b971X5VN8nakwGpKaFjiJQqDXMhmEjvgIgO4RS6ebRpJHB 12GYLOy0JmOJJ9PGLFj1JPmkzal8BqBUQHRv1lvLdlh2qSAHryfdhrIgTy+8PNO9 8egrmxZAHyArNHLYwuVNKfgRPGdJm6apz1Q06+P9r6hJEQpJ/+tIRlwGE2Axq6lR n9wP+R9fUa1ftgPffQBpC4n31+QB8kSxGueSS/R6GWeV4vmXXoCK3+ap835jWOBY N8wGynrtVrqG2In5HnYxwwKiHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqmwMvS /Ztaon0zearg9EAL3qmTMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdud2wCbjWbcjztq4Mgg3ukifsOg85mwiZHQfLUP3RXjMYxI0C2haRMPZfwcI 1DAHTv0GtG8l5ouQL4NeqUpnndgktYPEDE1otDHA1Q3CSPEsLp+Wzv+H1KWU2Txu J58MuSUZgBVQ4jF8sV6aI3S+dZejGgSGsxSDhIweg+nlLX1N/GNc5sDXyqSgGSHa yYhNFlUh7qiOBDbGQx5K96ZF4oPXFRkSToGEwAgSfqXErqjtXRSJ4q/jKkeUSKX2 OEyhf+8eGCfjF1UUg/9rG6OK9VNqwirXjj/eiNXaeWF7gDSqSiXKtmo/2u0YBgRI Uj4RZ+zKJZAtD/JjJOQb54ty0A== -----END CERTIFICATE-----Generated at Thu Sep 24 05:05:50 2026 by rpki-client