$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: 4dR3uOtt/5dzmYPeecEOiLEMU+Y636uqoNLToJWa/JA= Subject key identifier: B9:40:EC:43:FD:D5:0C:29:84:E0:FD:38:B0:B4:00:2C:DC:94:D3:12 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A33A Signing time: Fri 02 Oct 2026 14:31:42 +0000 Manifest this update: Fri 02 Oct 2026 14:31:41 +0000 Manifest next update: Fri 09 Oct 2026 14:31:41 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: VHtPVjoUuAyW1npJ/TSJbTg7kr0ccRv4uK4zhC1TTxY=) 2: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) 3: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 4: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 5: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 6: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) 7: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 8: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 9: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 10: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 11: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) 12: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 13: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 14:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7162 (0x1bfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Oct 2 14:31:41 2026 GMT Not After : Oct 9 14:31:41 2026 GMT Subject: CN=6abfc04e-1fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:97:86:e4:1a:4a:79:ae:4f:3c:fd:19:17: 59:0d:cb:b0:72:8d:74:5a:d8:2a:d8:bc:ef:22:84: 3f:2d:a9:f5:bf:62:a2:99:b8:a7:5d:45:f8:24:95: 8a:98:fa:92:25:51:21:a5:ce:9a:56:93:16:c0:f7: 90:cf:0f:a6:33:59:3e:e7:84:68:70:3d:ca:7a:e6: c5:16:e0:3b:d1:71:ca:77:1c:5c:df:42:72:a9:e7: 49:e1:b2:1a:cc:7c:fd:64:68:0b:e4:9a:dd:18:f0: 75:28:32:f0:9b:6b:97:4b:d8:8b:6f:4b:d5:0b:ed: 46:3c:7a:df:54:bf:b9:45:74:84:0a:fe:3a:5b:5b: a3:06:c4:a2:6c:b3:14:23:7e:a9:34:b1:9c:62:31: 8b:93:3e:96:c0:6f:d1:9f:41:bb:43:0e:67:22:0b: bc:25:39:89:ea:2b:a3:12:e8:ed:36:2b:ad:f5:9f: fe:3d:16:b8:d9:0d:de:61:46:ba:1f:72:cf:4e:65: fe:e8:e8:18:32:69:49:6f:ac:fc:fa:24:4b:5b:05: 26:e4:dd:4f:8f:b9:20:c5:b4:44:cb:68:ef:97:4d: 04:e3:7f:92:a1:46:fa:ba:6f:40:9d:02:6a:41:5f: 98:78:8c:21:32:66:57:22:22:cb:14:d9:4f:49:d0: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:EC:43:FD:D5:0C:29:84:E0:FD:38:B0:B4:00:2C:DC:94:D3:12 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4f:b4:36:82:81:57:13:8f:1c:ae:97:bc:dd:c6:84:ce:2e: 39:7d:69:2b:11:bd:9a:67:3f:e0:a6:88:80:e3:11:16:c5:9c: 0b:11:5e:93:10:9f:1e:18:92:74:80:0a:76:99:66:e9:70:b2: f7:84:a4:0d:b7:9d:5d:b5:ec:19:b5:4e:e4:84:33:30:2b:f5: 18:b4:86:94:5a:ed:75:72:30:9e:7a:17:5f:98:5e:da:4b:c4: 96:0a:94:6e:11:33:97:bc:28:3c:58:d3:af:39:88:d9:12:3f: 5c:bb:8f:c6:c0:ba:04:6f:09:0e:05:cf:8b:1f:0b:54:76:1d: f4:20:7b:1b:02:7f:f2:08:5d:30:11:3e:49:64:e7:6b:dd:11: c4:6e:17:30:1f:7f:9c:f6:bb:58:c2:e3:6b:ca:8b:07:60:1d: 4f:5c:d0:08:00:a2:59:d7:c7:f8:35:14:03:c8:85:07:41:df: f0:ed:b4:70:fa:a5:a1:cd:82:e2:ed:c9:f1:0b:89:2f:e1:d0: b2:f2:db:3e:38:73:f9:6a:1a:5e:bd:cb:4f:63:64:a2:0b:84: b9:eb:f1:b9:b1:93:97:b2:c8:da:36:33:48:16:ad:88:20:fb: 7c:7c:19:57:48:27:e1:f1:be:0c:55:6f:98:a8:1f:a4:6b:00: 22:56:8f:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYxMDAyMTQzMTQxWhcNMjYxMDA5MTQzMTQxWjAYMRYwFAYD VQQDEw02YWJmYzA0ZS0xZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmKXhuQaSnmuTzz9GRdZDcuwco10Wtgq2LzvIoQ/Lan1v2KimbinXUX4JJWK mPqSJVEhpc6aVpMWwPeQzw+mM1k+54RocD3KeubFFuA70XHKdxxc30JyqedJ4bIa zHz9ZGgL5JrdGPB1KDLwm2uXS9iLb0vVC+1GPHrfVL+5RXSECv46W1ujBsSibLMU I36pNLGcYjGLkz6WwG/Rn0G7Qw5nIgu8JTmJ6iujEujtNiut9Z/+PRa42Q3eYUa6 H3LPTmX+6OgYMmlJb6z8+iRLWwUm5N1Pj7kgxbREy2jvl00E43+SoUb6um9AnQJq QV+YeIwhMmZXIiLLFNlPSdDEpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlA7EP9 1QwphOD9OLC0ACzclNMSMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASU+0NoKBVxOPHK6XvN3GhM4uOX1pKxG9mmc/4KaIgOMRFsWcCxFekxCfHhiS dIAKdplm6XCy94SkDbedXbXsGbVO5IQzMCv1GLSGlFrtdXIwnnoXX5he2kvElgqU bhEzl7woPFjTrzmI2RI/XLuPxsC6BG8JDgXPix8LVHYd9CB7GwJ/8ghdMBE+SWTn a90RxG4XMB9/nPa7WMLja8qLB2AdT1zQCACiWdfH+DUUA8iFB0Hf8O20cPqloc2C 4u3J8QuJL+HQsvLbPjhz+WoaXr3LT2NkoguEuevxubGTl7LI2jYzSBatiCD7fHwZ V0gn4fG+DFVvmKgfpGsAIlaPsw== -----END CERTIFICATE-----Generated at Fri Oct 2 21:45:48 2026 by rpki-client