$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: YUP8aFBguQwW43wt8YtD9fMu6oaPZTU6sb+7AbAWZaw= Subject key identifier: 52:A4:AA:DC:33:F7:EE:6E:A9:DB:C3:07:C7:0A:08:2E:6E:93:9B:D6 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 0610 Signing time: Thu 24 Sep 2026 22:55:11 +0000 Manifest this update: Thu 24 Sep 2026 22:55:10 +0000 Manifest next update: Thu 01 Oct 2026 22:55:10 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: HUErorIjP5W2U6qetI/wxvU194dxmol26hiEgG2Zjl0=) 2: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=) 3: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=) 4: 5778FB08922911F1B1965EDD6A11F970.roa (hash: vkT0Co848XgmWcMvxPBj3JvFfA8woQU/yLqI+8Rvtxs=) 5: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=) 6: FE0D3F76B57C11F19ADFCA4A6711F970.roa (hash: bwdMaBLK0kDQ5a9IZEE6mEH7C45WPKGfvB87UZVm0h0=) 7: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Sep 24 22:55:10 2026 GMT Not After : Oct 1 22:55:10 2026 GMT Subject: CN=6ab5aa4f-b915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:01:c5:d9:62:bf:98:b7:ca:13:78:97:c0: 3c:1f:a2:05:53:4e:cc:9d:d7:d6:d4:75:dd:78:af: f5:d5:ea:40:60:c8:24:22:01:92:e5:5e:46:fc:fc: af:98:e6:fd:03:77:88:2e:b7:25:7a:76:a8:90:09: ac:d1:b9:c9:f3:0f:ce:c5:59:8c:3a:a8:ea:5a:ba: b6:c7:13:4f:6d:f4:2e:d2:de:11:44:d0:23:0e:94: 8f:e4:91:fd:48:e7:27:63:6c:70:99:a2:ec:c3:75: 7b:0d:f6:3d:b8:ce:63:8d:60:10:7a:c9:1a:15:f1: 47:36:9a:e5:2a:9b:30:8b:22:fb:7c:44:27:66:ee: 79:1c:b3:4b:f8:1d:af:c8:29:ef:e8:10:f7:51:c0: 07:87:76:92:10:11:5b:51:a5:72:7f:52:be:6e:51: 49:17:dc:4c:2e:df:1b:cf:cf:9b:c8:fc:6d:da:22: 7c:55:5c:19:85:77:fa:95:b2:03:58:9c:55:81:81: c2:35:0d:7f:ea:b1:5c:f7:2d:5b:e1:ba:2d:25:8b: 50:e7:1a:40:db:e2:3a:4f:7b:c7:02:36:68:90:17: ce:3f:88:54:4f:3a:95:c2:db:09:f8:f9:a1:b5:ac: f8:62:11:1a:9c:2d:7b:42:f1:06:50:35:69:00:18: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A4:AA:DC:33:F7:EE:6E:A9:DB:C3:07:C7:0A:08:2E:6E:93:9B:D6 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b9:fa:45:5e:74:3c:18:34:32:35:0e:bc:7a:94:90:a0:b5: 1f:0d:e6:c0:7c:92:ee:fa:ca:a3:6e:23:05:9e:18:ab:af:44: bd:32:ad:41:15:9a:9b:50:32:77:2a:36:20:16:ad:a8:37:82: d7:c2:eb:16:4b:e0:d3:a1:42:50:9a:5f:d0:7a:6f:e0:47:f5: 9a:bd:6a:0c:b5:38:1c:27:2d:27:d2:00:88:e6:52:f6:16:53: 70:b3:d7:60:4a:1b:05:f2:41:d4:df:f3:00:5f:4b:c1:1d:d0: d1:4c:ae:7b:fd:9f:18:93:7c:32:cf:50:c1:b9:63:6e:79:61: dc:7d:82:e7:86:c2:14:30:4f:b5:23:fb:7f:75:7c:b2:3b:b7: a1:e2:7f:2e:ad:73:b3:8e:a6:2a:b7:21:a3:50:88:45:f8:38: 6c:76:46:2c:48:45:ff:60:0a:5a:7b:fd:71:49:9e:cd:5f:c3: 50:d1:14:d3:9e:1b:53:e5:50:7e:09:68:12:7e:1d:b4:0b:ca: 90:1e:ef:3b:94:75:3f:a6:7c:89:14:5d:74:28:0d:4e:dd:14: bd:96:e9:cb:3a:2f:9a:2d:14:22:86:f7:b9:be:18:97:e0:e7: c7:47:e6:97:00:7e:6b:a8:f7:c8:fd:ad:c0:88:89:84:4e:b7: 72:fe:14:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjYwOTI0MjI1NTEwWhcNMjYxMDAxMjI1NTEwWjAYMRYwFAYD VQQDEw02YWI1YWE0Zi1iOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyEBxdliv5i3yhN4l8A8H6IFU07MndfW1HXdeK/11epAYMgkIgGS5V5G/Pyv mOb9A3eILrclenaokAms0bnJ8w/OxVmMOqjqWrq2xxNPbfQu0t4RRNAjDpSP5JH9 SOcnY2xwmaLsw3V7DfY9uM5jjWAQeskaFfFHNprlKpswiyL7fEQnZu55HLNL+B2v yCnv6BD3UcAHh3aSEBFbUaVyf1K+blFJF9xMLt8bz8+byPxt2iJ8VVwZhXf6lbID WJxVgYHCNQ1/6rFc9y1b4botJYtQ5xpA2+I6T3vHAjZokBfOP4hUTzqVwtsJ+Pmh taz4YhEanC17QvEGUDVpABggFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKkqtwz 9+5uqdvDB8cKCC5uk5vWMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQLn6RV50PBg0MjUOvHqUkKC1Hw3mwHyS7vrKo24jBZ4Yq69EvTKtQRWam1Ay dyo2IBatqDeC18LrFkvg06FCUJpf0Hpv4Ef1mr1qDLU4HCctJ9IAiOZS9hZTcLPX YEobBfJB1N/zAF9LwR3Q0Uyue/2fGJN8Ms9Qwbljbnlh3H2C54bCFDBPtSP7f3V8 sju3oeJ/Lq1zs46mKrcho1CIRfg4bHZGLEhF/2AKWnv9cUmezV/DUNEU054bU+VQ fgloEn4dtAvKkB7vO5R1P6Z8iRRddCgNTt0UvZbpyzovmi0UIob3ub4Yl+Dnx0fm lwB+a6j3yP2twIiJhE63cv4UNw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:01:34 2026 by rpki-client