$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: QRED4IWxj1rcvLh8osRJDXErxYd0mGHWPLBWqgNs0xE= Subject key identifier: 5A:72:C5:69:99:BE:DC:BE:2C:49:6C:C6:C3:4B:84:B9:02:8E:79:9B Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 0275 Signing time: Mon 05 Oct 2026 02:17:56 +0000 Manifest this update: Mon 05 Oct 2026 02:17:55 +0000 Manifest next update: Mon 12 Oct 2026 02:17:55 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: E/uMceFyjgW9qoPssyzLqjBWeCgOLUEB82/v2/E1dhg=) 2: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) 3: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Oct 5 02:17:55 2026 GMT Not After : Oct 12 02:17:55 2026 GMT Subject: CN=6ac308d3-8f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:88:25:43:54:35:78:43:2a:5c:26:3b:9f: d3:a9:f1:2e:f1:ed:6f:d7:c9:59:7e:96:a7:2f:de: 0e:7f:ad:91:77:bb:aa:54:98:0a:3a:7a:e9:7f:2a: 5d:94:57:de:df:bb:e7:cd:8e:f7:90:2f:0b:44:b9: 7e:4c:de:15:df:3b:13:4f:c2:22:69:04:27:8e:87: 49:ff:a3:d8:6c:e4:2d:63:1b:49:cb:34:72:f3:a3: 94:80:c8:bc:be:b7:3d:bf:20:22:98:12:6d:af:d3: 0f:56:57:53:c9:0a:22:49:ee:fb:8d:0c:c4:5f:01: a3:34:ca:17:cd:a1:07:93:72:13:f5:17:7f:07:eb: e0:6d:f7:0a:c7:d3:c2:18:c3:68:d3:13:42:b5:05: 7d:37:28:92:85:d5:d7:3a:ac:e8:d4:7f:b6:1b:73: 62:1b:2a:8c:1a:6c:cc:87:09:39:cd:74:13:1c:70: 46:39:0a:0b:fb:2a:f6:3b:63:a3:84:41:6f:61:d1: 30:b3:ef:66:2f:2b:1f:fe:4e:15:05:e0:eb:4e:b4: f2:85:6e:46:a4:a2:df:6f:36:a4:3a:40:04:ac:80: 33:de:92:9b:c9:e7:09:6f:98:de:39:87:9f:2e:26: 58:50:fb:a1:21:77:29:a5:23:eb:90:26:64:74:ff: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:C5:69:99:BE:DC:BE:2C:49:6C:C6:C3:4B:84:B9:02:8E:79:9B X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:56:c7:71:e3:60:f1:f8:85:bb:ec:4b:1a:33:71:14:e4:c1: 2b:28:bc:9e:b6:fa:80:34:e0:05:13:6c:5e:93:8e:16:ed:4b: 8b:c2:6d:38:ee:72:55:4b:ac:5c:f3:6f:32:f9:35:0e:05:3f: ab:b3:9a:65:29:10:d5:9c:13:3d:0f:9a:ed:7b:32:87:e4:38: eb:15:e4:12:56:d2:b7:92:86:30:76:1f:79:3d:00:89:39:ed: c1:7d:9c:e4:9f:5d:f6:90:cc:d4:95:3f:8e:11:41:90:15:65: 9b:d2:c1:0c:98:c7:ae:d2:e7:ce:70:1d:15:83:51:32:41:5f: 8e:c2:68:82:43:d6:85:97:22:e4:ee:a6:2c:c5:fe:cc:e3:8e: 9b:3a:77:06:82:b4:3d:0f:1a:ca:08:1b:2d:bc:9c:59:d4:77: 30:a2:9a:93:8d:d9:97:37:0b:1b:32:a8:3a:70:52:aa:66:0e: 48:4c:c1:fd:ab:0e:b8:80:a5:ef:52:cd:e0:6a:7e:20:10:3d: ff:eb:31:48:59:81:b1:ea:55:60:b9:b6:c3:a6:27:21:99:8b: f8:cf:47:1c:26:6b:34:72:2b:2e:0c:dd:c8:35:96:df:01:dc: 23:bc:f1:c3:63:ae:4f:af:51:0e:87:40:ac:10:ef:62:d3:46: ea:f0:d7:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYxMDA1MDIxNzU1WhcNMjYxMDEyMDIxNzU1WjAYMRYwFAYD VQQDEw02YWMzMDhkMy04ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/eIJUNUNXhDKlwmO5/TqfEu8e1v18lZfpanL94Of62Rd7uqVJgKOnrpfypd lFfe37vnzY73kC8LRLl+TN4V3zsTT8IiaQQnjodJ/6PYbOQtYxtJyzRy86OUgMi8 vrc9vyAimBJtr9MPVldTyQoiSe77jQzEXwGjNMoXzaEHk3IT9Rd/B+vgbfcKx9PC GMNo0xNCtQV9NyiShdXXOqzo1H+2G3NiGyqMGmzMhwk5zXQTHHBGOQoL+yr2O2Oj hEFvYdEws+9mLysf/k4VBeDrTrTyhW5GpKLfbzakOkAErIAz3pKbyecJb5jeOYef LiZYUPuhIXcppSPrkCZkdP+BywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpyxWmZ vty+LElsxsNLhLkCjnmbMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw1bHceNg8fiFu+xLGjNxFOTBKyi8nrb6gDTgBRNsXpOOFu1Li8JtOO5yVUus XPNvMvk1DgU/q7OaZSkQ1ZwTPQ+a7Xsyh+Q46xXkElbSt5KGMHYfeT0AiTntwX2c 5J9d9pDM1JU/jhFBkBVlm9LBDJjHrtLnznAdFYNRMkFfjsJogkPWhZci5O6mLMX+ zOOOmzp3BoK0PQ8ayggbLbycWdR3MKKak43ZlzcLGzKoOnBSqmYOSEzB/asOuICl 71LN4Gp+IBA9/+sxSFmBsepVYLm2w6YnIZmL+M9HHCZrNHIrLgzdyDWW3wHcI7zx w2OuT69RDodArBDvYtNG6vDX6A== -----END CERTIFICATE-----Generated at Mon Oct 5 12:56:03 2026 by rpki-client