$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: lzs6s3OIgoz4cIHMocpaE/E7+SzI4Dl2D/LzGVcRyps= Subject key identifier: 23:9E:51:D4:91:9F:26:79:3B:B0:82:5F:7A:0C:94:7D:0E:F7:9C:83 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 09D6 Signing time: Thu 24 Sep 2026 19:49:28 +0000 Manifest this update: Thu 24 Sep 2026 19:49:27 +0000 Manifest next update: Thu 01 Oct 2026 19:49:27 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: rI6jnAnNxdVB/kDM1E9J/Yk/iQrGrpbMBHxO59CuhVY=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Sep 24 19:49:27 2026 GMT Not After : Oct 1 19:49:27 2026 GMT Subject: CN=6ab57ec8-cab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:43:38:5c:8a:13:ee:29:df:11:56:db:be: 3a:6b:87:b6:9c:7c:c1:c4:d7:d2:50:b6:cc:a7:51: 0a:c0:b9:ee:bb:da:6c:b9:3d:e4:f4:e9:7d:a9:b0: 1c:0f:76:d7:4a:c9:e6:50:22:ae:a8:de:dc:3d:e7: 89:85:2c:53:98:41:aa:a8:3f:5e:55:3f:a4:2c:da: 2c:54:98:43:b7:d8:5b:3f:a8:05:a0:00:b8:95:37: 40:1b:25:4b:c2:f3:fc:cd:99:96:e3:0b:81:08:6e: 20:20:c4:55:96:34:f6:21:c8:17:c9:32:b3:08:be: 56:1b:f4:70:a7:97:d8:59:a7:5a:7e:90:51:3a:2a: 78:94:ae:8a:f0:7e:22:90:5b:a5:1d:8e:17:cb:84: 42:8e:dd:45:37:19:d6:17:50:f8:13:a0:bb:9b:fa: 79:20:57:59:1a:3f:e7:5c:c5:87:ff:8b:b6:da:fc: 5d:74:f5:52:c4:71:ec:30:a2:f6:cd:cf:89:51:82: 3a:4d:72:6f:6b:95:1f:b7:ff:56:2f:d6:a4:1b:7a: d4:2e:c8:8e:93:35:4d:21:2c:e2:ba:98:91:a8:b1: b6:46:2e:47:a4:f6:b9:7a:35:dc:74:85:05:03:2e: 89:c4:16:e0:2a:5c:0a:18:35:7c:73:c6:e7:65:07: bb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9E:51:D4:91:9F:26:79:3B:B0:82:5F:7A:0C:94:7D:0E:F7:9C:83 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:57:38:75:ae:5d:e5:d3:82:d7:1e:f7:85:99:86:62:54:81: 39:03:25:8f:85:e7:9c:de:ba:c5:3b:4e:bd:8c:63:f6:a9:f4: d6:36:c0:3a:2c:f2:e4:82:44:61:ac:0a:ab:30:e5:9b:e9:a5: 6f:e6:df:67:80:6d:2d:ef:61:4e:1d:53:83:95:78:7d:8d:4a: e2:d1:27:41:96:8e:b5:c5:27:26:c6:6f:f2:85:ae:58:05:f1: bc:da:33:c5:4f:36:18:44:3c:7d:1f:d4:e0:ff:b2:cc:65:1a: a3:6d:d7:bd:f1:70:64:e9:44:74:4e:80:12:e8:07:30:42:cc: 9d:80:df:ff:8b:a5:85:fb:a2:64:35:44:79:2d:54:77:c7:f2: ba:a6:93:39:2c:04:86:20:d4:82:36:e1:02:4f:69:fa:32:e8: 94:e4:2d:52:e3:08:8b:8a:b1:c4:52:cc:04:e4:6f:b9:35:99: 39:98:7a:f5:fc:f1:3c:6e:09:2e:1a:8f:5f:fb:21:a2:04:05: 87:c3:31:a0:b1:81:6e:cd:71:80:6d:95:12:b6:25:2f:5a:4d: d4:5a:46:f7:a9:39:7e:09:82:16:08:14:c6:2f:1f:56:db:78: c3:2d:ba:f1:71:e8:97:f9:7c:09:8a:84:01:71:af:9b:5b:db: a5:ea:65:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwOTI0MTk0OTI3WhcNMjYxMDAxMTk0OTI3WjAYMRYwFAYD VQQDEw02YWI1N2VjOC1jYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL1DOFyKE+4p3xFW2746a4e2nHzBxNfSULbMp1EKwLnuu9psuT3k9Ol9qbAc D3bXSsnmUCKuqN7cPeeJhSxTmEGqqD9eVT+kLNosVJhDt9hbP6gFoAC4lTdAGyVL wvP8zZmW4wuBCG4gIMRVljT2IcgXyTKzCL5WG/Rwp5fYWadafpBROip4lK6K8H4i kFulHY4Xy4RCjt1FNxnWF1D4E6C7m/p5IFdZGj/nXMWH/4u22vxddPVSxHHsMKL2 zc+JUYI6TXJva5Uft/9WL9akG3rULsiOkzVNISziupiRqLG2Ri5HpPa5ejXcdIUF Ay6JxBbgKlwKGDV8c8bnZQe7GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOeUdSR nyZ5O7CCX3oMlH0O95yDMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1c4da5d5dOC1x73hZmGYlSBOQMlj4XnnN66xTtOvYxj9qn01jbAOizy5IJE YawKqzDlm+mlb+bfZ4BtLe9hTh1Tg5V4fY1K4tEnQZaOtcUnJsZv8oWuWAXxvNoz xU82GEQ8fR/U4P+yzGUao23XvfFwZOlEdE6AEugHMELMnYDf/4ulhfuiZDVEeS1U d8fyuqaTOSwEhiDUgjbhAk9p+jLolOQtUuMIi4qxxFLMBORvuTWZOZh69fzxPG4J LhqPX/shogQFh8MxoLGBbs1xgG2VErYlL1pN1FpG96k5fgmCFggUxi8fVtt4wy26 8XHol/l8CYqEAXGvm1vbpeplTQ== -----END CERTIFICATE-----Generated at Sat Sep 26 05:41:28 2026 by rpki-client