$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json) Hash identifier: tF33E1xqYTvFm2US/3yRzF/M4SUr6SWZDucCAnU1wlg= Subject key identifier: EA:AD:AA:64:14:0C:7F:A4:15:F9:3D:43:2C:81:41:4A:B6:40:B7:44 Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft Manifest number: 2A Signing time: Wed 23 Sep 2026 08:30:23 +0000 Manifest this update: Wed 23 Sep 2026 08:30:22 +0000 Manifest next update: Wed 30 Sep 2026 08:30:22 +0000 Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: ULovpyazswJ1Zjrf/bBmjBh4cWL+TmLzVdCR+7ag8d4=) 2: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=) 3: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Validity Not Before: Sep 23 08:30:22 2026 GMT Not After : Sep 30 08:30:22 2026 GMT Subject: CN=6ab38e1e-7f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:94:74:7b:fe:25:07:cd:3c:7c:c9:3d:6f: 63:d6:de:31:f8:4e:c2:7e:46:2c:e2:80:9c:df:cb: 1f:11:15:d1:51:cc:c8:d7:83:49:f9:0d:da:10:1d: e9:23:ed:ae:eb:4a:68:4e:8f:62:c4:11:52:99:5a: 7b:88:c4:fb:ed:83:18:a2:63:41:24:5a:98:bd:23: 18:9c:f7:43:bc:13:dc:76:0b:5f:23:96:3a:56:bc: 85:13:a1:a5:ab:43:d2:8d:f4:dd:63:10:11:5c:5a: 77:b0:00:d6:f5:ba:f6:d2:51:1e:9e:45:47:42:84: b1:51:3e:37:fe:23:59:7d:e9:22:0d:61:63:8a:fd: e2:45:f9:dd:55:08:01:63:8e:9a:54:24:df:44:9f: 4b:71:4b:8d:e6:bb:62:39:af:3d:6b:f9:d3:4e:19: 48:d8:8f:39:33:6f:42:7e:69:45:b3:d4:76:0b:15: 7e:0a:76:f6:2b:d1:a8:fb:30:61:5e:9a:36:67:a5: d5:39:88:97:a4:74:59:aa:2f:f0:a4:b1:d9:7b:37: ed:c2:5b:1a:a4:6d:0b:f4:79:5d:b2:b7:d5:2e:a5: 18:77:21:58:6f:57:b5:f2:bf:78:e7:2c:1a:a1:0c: c1:0e:24:ec:ef:d2:23:b7:92:c3:ff:11:9b:54:d9: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AD:AA:64:14:0C:7F:A4:15:F9:3D:43:2C:81:41:4A:B6:40:B7:44 X509v3 Authority Key Identifier: keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:5a:2a:c3:19:dc:e3:92:51:23:0c:de:23:3c:a0:0a:1c: bc:99:d4:ef:52:14:81:7a:76:28:7a:ad:a0:83:6b:ec:29:ca: f7:c2:06:fe:06:58:f8:95:28:2b:b1:50:35:e5:d7:4a:f5:4b: 4f:89:2d:93:90:ca:3e:ca:04:a0:1b:8f:5b:ad:04:1f:bb:7d: c0:dc:f2:52:ac:a0:c1:2f:2d:35:72:c3:5a:b1:69:23:e5:09: 44:df:21:32:3e:6e:79:f9:6e:43:c6:d1:10:46:2c:8b:75:3e: 36:40:ca:e0:e8:ff:e4:2c:f4:6b:98:7e:2e:68:91:cf:22:95: 67:cb:3a:55:3c:5b:0f:4d:ed:7a:04:69:d8:0d:72:9c:97:2d: f2:51:fe:b4:99:de:f9:9c:0f:f3:ad:68:52:2e:35:b6:19:fa: ac:95:9f:24:24:35:95:60:30:85:eb:9d:a4:40:1d:78:1a:ee: 21:7d:a2:78:34:eb:4c:42:14:ec:ff:a8:c7:f7:b2:59:c1:e1: 0f:2e:2b:63:a6:bb:62:f7:45:c5:3a:94:dd:d7:5f:28:1c:45: 63:aa:91:cb:eb:d9:92:98:9d:b5:14:4a:27:19:79:ab:3d:bb: 95:68:0f:20:bb:a5:0b:b7:b4:1c:28:ff:31:f2:6c:95:04:27: 76:57:27:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjU2NDExMC8GA1UEBRMoNkQ5NDgwQ0YzMjg0RDAwMkI1OTFGNUUyMURCMTEyMDk3 RkNFNzBCMTAeFw0yNjA5MjMwODMwMjJaFw0yNjA5MzAwODMwMjJaMBgxFjAUBgNV BAMTDTZhYjM4ZTFlLTdmMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTU5R0e/4lB808fMk9b2PW3jH4TsJ+RizigJzfyx8RFdFRzMjXg0n5DdoQHekj 7a7rSmhOj2LEEVKZWnuIxPvtgxiiY0EkWpi9Ixic90O8E9x2C18jljpWvIUToaWr Q9KN9N1jEBFcWnewANb1uvbSUR6eRUdChLFRPjf+I1l96SINYWOK/eJF+d1VCAFj jppUJN9En0txS43mu2I5rz1r+dNOGUjYjzkzb0J+aUWz1HYLFX4KdvYr0aj7MGFe mjZnpdU5iJekdFmqL/Cksdl7N+3CWxqkbQv0eV2yt9UupRh3IVhvV7Xyv3jnLBqh DMEOJOzv0iO3ksP/EZtU2Ts/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6q2qZBQM f6QV+T1DLIFBSrZAt0QwHwYDVR0jBBgwFoAUbZSAzzKE0AK1kfXiHbESCX/OcLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCNTY0L0E4NzVEMDBBN0E0 OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFLMWtmWGlIYkVTQ1hfT2NM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpTQXp6S0UwQUsxa2ZYaUhiRVNDWF9PY0xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC NTY0L0E4NzVEMDBBN0E0OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFL MWtmWGlIYkVTQ1hfT2NMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCbFoqwxnc45JRIwzeIzygChy8mdTvUhSBenYoeq2gg2vsKcr3wgb+Blj4lSgr sVA15ddK9UtPiS2TkMo+ygSgG49brQQfu33A3PJSrKDBLy01csNasWkj5QlE3yEy Pm55+W5DxtEQRiyLdT42QMrg6P/kLPRrmH4uaJHPIpVnyzpVPFsPTe16BGnYDXKc ly3yUf60md75nA/zrWhSLjW2GfqslZ8kJDWVYDCF652kQB14Gu4hfaJ4NOtMQhTs /6jH97JZweEPLitjprti90XFOpTd118oHEVjqpHL69mSmJ21FEonGXmrPbuVaA8g u6ULt7QcKP8x8myVBCd2VyfZ -----END CERTIFICATE-----Generated at Fri Sep 25 05:44:43 2026 by rpki-client