$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: efXs2HN2yUqAjHwtaF4Fw8kuO4FMw9kAXFTqgaPX3YE= Subject key identifier: F9:8D:A6:CD:A3:FD:B1:AD:EB:F1:87:05:6B:01:E6:37:44:36:F5:B3 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D7C Signing time: Tue 22 Sep 2026 17:54:51 +0000 Manifest this update: Tue 22 Sep 2026 17:54:51 +0000 Manifest next update: Tue 29 Sep 2026 17:54:51 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: jek6bwLTwoxKYYrJSnOK+D2SM3DGxcw1s0Uw3S5Qtz8=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Sep 22 17:54:51 2026 GMT Not After : Sep 29 17:54:51 2026 GMT Subject: CN=6ab2c0eb-515d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:fd:4f:df:7f:7c:5c:f5:44:af:1c:e4:a3: 0c:c7:de:f3:5c:1b:7f:a8:f9:0a:78:ef:72:72:4c: 95:37:68:c6:87:65:df:90:a3:73:90:15:17:dd:b0: 41:b0:71:17:f6:b2:ba:ae:c3:ce:01:af:d7:f5:5f: 73:c0:2f:fc:fc:78:8b:8d:e7:04:e4:cc:49:c7:3c: 29:22:55:f1:b0:c5:2a:d1:1e:c6:29:a4:53:39:d8: 10:72:8d:5f:5a:80:03:5a:e6:e1:75:7b:5b:3c:e3: 92:e3:f4:0f:e2:0b:43:32:2b:cc:ca:a5:b0:c2:e4: 40:c2:55:60:96:35:c3:d9:58:20:3b:bf:05:e5:d3: 1a:d6:95:04:23:38:58:2e:4d:83:27:6f:a2:38:16: 98:1b:d5:a2:a1:dd:93:9e:d5:3b:3d:e7:47:a3:5c: c5:5a:db:a8:2c:ad:75:29:05:a1:e9:d2:40:53:17: b6:42:11:a7:3c:c6:63:7a:a9:da:0e:b3:e8:9a:f0: dc:cb:96:d1:05:1a:2e:cf:73:aa:54:0e:58:cf:25: 98:18:fd:9f:54:cc:09:05:61:ce:04:c2:f6:ed:12: 27:58:f0:63:19:07:62:22:51:03:b4:e1:f2:99:a6: 57:9c:c2:23:43:e1:84:6e:66:c4:44:83:e2:bb:da: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:A6:CD:A3:FD:B1:AD:EB:F1:87:05:6B:01:E6:37:44:36:F5:B3 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:eb:ab:42:6b:de:98:b9:0c:57:a5:99:64:12:f4:51:f9:f5: 1e:c9:dd:db:15:76:25:5a:2e:c4:1d:63:88:a4:85:aa:d7:36: f8:d1:dd:a6:14:77:98:eb:ed:a8:a1:0a:5d:e7:c1:98:0f:30: 19:53:64:87:f8:d0:6f:44:33:05:f2:06:0b:06:8f:39:46:59: 49:03:91:74:80:18:4e:71:35:4a:0c:ba:1f:de:ce:4d:c1:c9: 03:f9:f5:35:47:13:11:49:02:0a:62:4f:8e:16:d2:e3:bc:d5: 36:46:66:b6:c5:40:24:ed:92:6d:97:53:da:e4:8d:09:2e:bf: 69:3b:ad:5a:45:93:7c:73:c8:ba:92:b7:6c:48:ed:38:a4:f9: f6:79:b2:c4:6c:6a:4a:46:3e:44:72:41:8c:40:36:a8:63:7b: 1b:3b:d7:a1:e4:ee:1b:9b:5e:9b:71:0e:b6:8d:59:c9:8e:db: d3:fc:5f:96:55:4f:ad:61:c3:2b:7a:ef:c4:ad:bc:86:22:8e: 42:b1:88:bd:84:b7:49:4d:b7:44:e0:78:59:de:b2:2d:f3:4b: 6f:ea:e5:57:9e:b7:b3:23:a2:d2:32:e1:98:e6:61:88:19:f3: 0c:cb:dc:70:74:c1:d4:78:69:49:41:b2:cb:ae:28:e9:4b:d1: 74:5a:ed:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwOTIyMTc1NDUxWhcNMjYwOTI5MTc1NDUxWjAYMRYwFAYD VQQDEw02YWIyYzBlYi01MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze39T99/fFz1RK8c5KMMx97zXBt/qPkKeO9yckyVN2jGh2XfkKNzkBUX3bBB sHEX9rK6rsPOAa/X9V9zwC/8/HiLjecE5MxJxzwpIlXxsMUq0R7GKaRTOdgQco1f WoADWubhdXtbPOOS4/QP4gtDMivMyqWwwuRAwlVgljXD2VggO78F5dMa1pUEIzhY Lk2DJ2+iOBaYG9Wiod2TntU7PedHo1zFWtuoLK11KQWh6dJAUxe2QhGnPMZjeqna DrPomvDcy5bRBRouz3OqVA5YzyWYGP2fVMwJBWHOBML27RInWPBjGQdiIlEDtOHy maZXnMIjQ+GEbmbERIPiu9o3cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmNps2j /bGt6/GHBWsB5jdENvWzMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+urQmvemLkMV6WZZBL0Ufn1Hsnd2xV2JVouxB1jiKSFqtc2+NHdphR3mOvt qKEKXefBmA8wGVNkh/jQb0QzBfIGCwaPOUZZSQORdIAYTnE1Sgy6H97OTcHJA/n1 NUcTEUkCCmJPjhbS47zVNkZmtsVAJO2SbZdT2uSNCS6/aTutWkWTfHPIupK3bEjt OKT59nmyxGxqSkY+RHJBjEA2qGN7GzvXoeTuG5tem3EOto1ZyY7b0/xfllVPrWHD K3rvxK28hiKOQrGIvYS3SU23ROB4Wd6yLfNLb+rlV563syOi0jLhmOZhiBnzDMvc cHTB1HhpSUGyy64o6UvRdFrtvw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:47:34 2026 by rpki-client