$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: kX9jqrOESwbpRGFOIi/Fs8emxqWb45Tyf0k2vdW2xDg= Subject key identifier: 04:39:AB:92:59:7B:E8:E9:5B:8F:19:87:49:69:55:7E:26:DA:BB:57 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0D55 Signing time: Tue 22 Sep 2026 17:57:31 +0000 Manifest this update: Tue 22 Sep 2026 17:57:30 +0000 Manifest next update: Tue 29 Sep 2026 17:57:30 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: R3iD+WRx3dhlS48hThtgEjhN2tbcs9GvbPfcYe4o5Vg=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: Sxrl2OJjqLizBQZtNGLPtySKPh8WR/5ZhRA5Oe2x6sY=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: hGCYtCOIvO4umfp83BHr43BYp8vvO8LHfZyo0x1hdrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Sep 22 17:57:30 2026 GMT Not After : Sep 29 17:57:30 2026 GMT Subject: CN=6ab2c18b-0ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:a0:64:21:96:32:7b:91:1a:c5:e8:e3:a3: b8:27:3f:e5:e3:57:b5:d1:ae:8c:c7:e7:fa:61:d4: 21:ea:a2:e6:e8:4a:40:4d:5d:62:9b:b0:1a:50:20: 21:92:65:7d:ce:44:4c:04:3a:b6:68:63:f1:68:65: 25:3c:5f:e2:4d:e8:bc:b9:b8:38:cf:2b:21:d7:cf: d1:48:05:48:15:9d:ff:05:ce:ec:ac:4b:e5:1f:76: 15:12:7d:f0:31:cd:9b:61:99:73:ed:d8:48:9c:6e: 94:7b:1e:7a:d3:75:0e:b8:f2:3e:17:9f:50:1a:c3: 8e:c3:a0:38:79:2f:e9:44:58:7e:1a:1d:ab:38:1d: 27:36:92:68:54:f2:b4:a0:14:27:df:5e:83:b9:15: 75:c5:17:d2:44:8c:2f:40:3c:f2:5a:ba:2f:20:53: 78:7a:42:55:7d:c2:8d:ab:a0:d2:75:f3:4e:b6:3d: 12:a2:f9:6b:21:a1:58:54:ec:0b:24:2f:4e:19:c9: 44:f8:5e:c1:88:db:d4:8a:e3:e9:83:8a:64:e2:2a: 87:62:e6:69:ba:58:e5:9e:f9:09:8c:b8:e8:c5:93: c9:2b:44:15:d4:48:ec:64:2c:79:cd:02:84:b6:82: 27:fa:89:a9:59:5b:18:32:ab:62:65:41:aa:43:77: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:AB:92:59:7B:E8:E9:5B:8F:19:87:49:69:55:7E:26:DA:BB:57 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d7:2f:41:5b:11:bd:9d:55:fe:47:fd:d8:df:42:23:52:3d: 64:11:e8:d2:6e:88:09:bb:20:3e:24:29:5e:12:43:4f:4f:72: 42:18:ab:a7:ee:65:31:d6:89:35:de:41:c4:f4:4b:15:e1:72: 7f:5f:fc:97:b7:e4:ac:df:6f:2b:76:a2:61:a4:2b:2e:1c:86: 95:79:59:c1:90:74:02:51:71:f4:b2:7e:7c:68:ae:1c:18:64: d5:8e:9e:3f:3b:89:bb:1b:0d:a8:06:fd:a9:63:e9:7b:03:1b: 24:e9:a9:02:f7:3f:ad:0e:d9:59:ee:0a:54:58:3d:6a:52:95: 37:33:81:59:ba:2d:f2:37:09:77:a2:06:64:97:8e:8e:fc:39: 73:bf:14:b3:74:dc:6a:09:ae:3d:12:db:aa:07:b9:83:5b:82: 23:37:b5:a2:bc:fc:24:73:84:c1:a1:e2:b5:89:76:6a:1a:7c: 0f:96:b3:b2:26:6e:ae:34:4b:2b:e6:f5:5f:3e:e8:66:42:79: 9e:fe:19:d9:35:ba:b4:61:ea:43:c0:fd:c0:e5:dc:24:bb:7e: 19:fc:e2:3e:e4:0f:ae:c6:8f:ad:07:fd:27:1f:8e:18:55:cd: 71:e3:0c:0e:72:b0:e5:d6:b1:fc:b5:f3:f5:d6:16:00:53:ef: 36:9b:9e:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjYwOTIyMTc1NzMwWhcNMjYwOTI5MTc1NzMwWjAYMRYwFAYD VQQDEw02YWIyYzE4Yi0wZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu++gZCGWMnuRGsXo46O4Jz/l41e10a6Mx+f6YdQh6qLm6EpATV1im7AaUCAh kmV9zkRMBDq2aGPxaGUlPF/iTei8ubg4zysh18/RSAVIFZ3/Bc7srEvlH3YVEn3w Mc2bYZlz7dhInG6Uex5603UOuPI+F59QGsOOw6A4eS/pRFh+Gh2rOB0nNpJoVPK0 oBQn316DuRV1xRfSRIwvQDzyWrovIFN4ekJVfcKNq6DSdfNOtj0SovlrIaFYVOwL JC9OGclE+F7BiNvUiuPpg4pk4iqHYuZpuljlnvkJjLjoxZPJK0QV1EjsZCx5zQKE toIn+ompWVsYMqtiZUGqQ3fyFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ5q5JZ e+jpW48Zh0lpVX4m2rtXMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9cvQVsRvZ1V/kf92N9CI1I9ZBHo0m6ICbsgPiQpXhJDT09yQhirp+5lMdaJ Nd5BxPRLFeFyf1/8l7fkrN9vK3aiYaQrLhyGlXlZwZB0AlFx9LJ+fGiuHBhk1Y6e PzuJuxsNqAb9qWPpewMbJOmpAvc/rQ7ZWe4KVFg9alKVNzOBWbot8jcJd6IGZJeO jvw5c78Us3TcagmuPRLbqge5g1uCIze1orz8JHOEwaHitYl2ahp8D5azsiZurjRL K+b1Xz7oZkJ5nv4Z2TW6tGHqQ8D9wOXcJLt+GfziPuQPrsaPrQf9Jx+OGFXNceMM DnKw5dax/LXz9dYWAFPvNpueiQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:35 2026 by rpki-client