$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: /mhbF1CTzCXb+BZqerJ1TQpiOH+dG9fILg2wpVirh94= Subject key identifier: D0:14:80:1E:51:25:D9:45:EE:68:F8:21:0F:A7:DB:AE:3C:38:38:E0 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 0191 Signing time: Wed 23 Sep 2026 04:17:25 +0000 Manifest this update: Wed 23 Sep 2026 04:17:25 +0000 Manifest next update: Wed 30 Sep 2026 04:17:25 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: zpQEMwKKWExtrNmZ7VNjitz05Jax2aHfE9R2XzOKftg=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Sep 23 04:17:25 2026 GMT Not After : Sep 30 04:17:25 2026 GMT Subject: CN=6ab352d5-a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:da:7a:e4:03:7e:74:64:ea:bd:e0:52:16: 1a:8e:e7:7b:13:bd:28:d1:ac:11:e9:ba:1a:03:1e: 3d:b8:a9:16:f8:00:b7:5e:f2:e7:6a:23:55:91:69: 0a:57:27:8d:10:db:4e:56:f2:a1:44:05:f7:06:07: d3:1e:c6:e4:4d:76:b0:81:ec:53:27:c0:d9:f8:4d: 0d:91:34:61:bd:1e:f5:4b:eb:21:66:f0:aa:c4:f9: b5:2b:65:e0:ea:6e:07:fb:4b:8e:6d:22:03:77:93: 15:24:6f:d3:5a:d3:1e:e3:64:f1:9c:50:72:c9:63: 35:97:c3:e3:84:28:01:dc:69:69:84:b7:c7:c4:1e: cf:93:b4:9b:3e:b0:97:17:b2:24:8d:45:f9:e5:a7: 5f:da:8f:69:12:7e:76:b0:53:57:7d:db:ff:2f:d0: cd:1a:52:42:60:51:9a:16:6d:c9:ad:8b:12:5b:5e: 90:7e:96:d6:76:6b:c1:9a:03:b0:d1:df:f4:d4:60: d5:62:24:06:8b:67:56:5d:21:49:31:2b:ae:25:6d: 91:95:57:57:a4:b7:d6:d8:68:7d:29:06:10:e2:8f: 11:41:08:7f:60:6a:3a:37:a3:41:ca:1a:96:9e:a3: a7:22:24:0d:86:02:fb:4d:a6:10:41:40:5b:54:2e: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:80:1E:51:25:D9:45:EE:68:F8:21:0F:A7:DB:AE:3C:38:38:E0 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2a:3c:50:92:ac:23:a9:a3:29:c6:bf:d3:e5:09:e7:79:3a: b3:db:56:eb:1c:37:21:ae:d5:f8:31:31:1b:bc:82:1c:71:e8: ef:37:d5:db:9b:9c:e3:78:0d:a9:f2:5d:27:c8:e0:0d:25:4f: d8:e0:8e:c9:95:9c:59:5b:c7:39:71:6f:2a:a4:ce:ba:3e:31: 71:b0:70:f7:5a:a1:07:b2:c4:a5:19:62:96:57:65:56:e9:c2: 6b:c9:83:47:2c:ab:06:6e:2e:23:dd:e8:0f:57:d1:e5:d8:fd: 04:96:85:0e:d0:6c:a0:62:b3:ad:74:c8:aa:8b:5e:30:6d:6f: b5:45:9d:c7:5f:a5:41:48:9b:3a:d8:d3:49:c6:d2:6e:5c:5a: 1d:28:c2:01:3f:40:61:cd:d7:32:c9:46:b2:c0:26:a3:34:f1: 99:6e:f8:a6:fa:8d:7b:ba:db:9d:ef:9b:21:12:01:d8:c5:c1: 1e:4c:7d:0e:fb:04:12:b1:ef:19:74:45:31:a5:50:e3:62:2e: d4:df:7b:34:c5:97:dd:ec:41:49:2e:a3:bf:ad:2a:9f:13:cd: fb:f2:41:67:ea:75:14:19:ec:5a:28:8d:95:1c:0f:c1:87:f4: f2:76:b8:f0:17:d8:fd:31:ab:7a:dd:2e:52:3b:0b:20:22:05: d7:d4:9f:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjYwOTIzMDQxNzI1WhcNMjYwOTMwMDQxNzI1WjAYMRYwFAYD VQQDEw02YWIzNTJkNS1hN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFTaeuQDfnRk6r3gUhYajud7E70o0awR6boaAx49uKkW+AC3XvLnaiNVkWkK VyeNENtOVvKhRAX3BgfTHsbkTXawgexTJ8DZ+E0NkTRhvR71S+shZvCqxPm1K2Xg 6m4H+0uObSIDd5MVJG/TWtMe42TxnFByyWM1l8PjhCgB3GlphLfHxB7Pk7SbPrCX F7IkjUX55adf2o9pEn52sFNXfdv/L9DNGlJCYFGaFm3JrYsSW16QfpbWdmvBmgOw 0d/01GDVYiQGi2dWXSFJMSuuJW2RlVdXpLfW2Gh9KQYQ4o8RQQh/YGo6N6NByhqW nqOnIiQNhgL7TaYQQUBbVC4b6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAUgB5R JdlF7mj4IQ+n2648ODjgMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlSo8UJKsI6mjKca/0+UJ53k6s9tW6xw3Ia7V+DExG7yCHHHo7zfV25uc43gN qfJdJ8jgDSVP2OCOyZWcWVvHOXFvKqTOuj4xcbBw91qhB7LEpRlilldlVunCa8mD RyyrBm4uI93oD1fR5dj9BJaFDtBsoGKzrXTIqoteMG1vtUWdx1+lQUibOtjTScbS blxaHSjCAT9AYc3XMslGssAmozTxmW74pvqNe7rbne+bIRIB2MXBHkx9DvsEErHv GXRFMaVQ42Iu1N97NMWX3exBSS6jv60qnxPN+/JBZ+p1FBnsWiiNlRwPwYf08na4 8BfY/TGret0uUjsLICIF19Sf8g== -----END CERTIFICATE-----Generated at Thu Sep 24 13:22:14 2026 by rpki-client