$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: dOhr5lihKh+YzGh69Oyr6o9bV6NR6nBFCSomlA1Mtx8= Subject key identifier: 7A:3E:78:7F:84:AB:5F:6E:B9:54:03:90:0C:48:AF:81:57:77:3D:93 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 1282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 1277 Signing time: Tue 22 Sep 2026 17:00:59 +0000 Manifest this update: Tue 22 Sep 2026 17:00:59 +0000 Manifest next update: Tue 29 Sep 2026 17:00:59 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: +m6sytAikQtCcNgR8CNgkUUSnAu8uqtzPygxfGAJxS4=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Sep 22 17:00:59 2026 GMT Not After : Sep 29 17:00:59 2026 GMT Subject: CN=6ab2b44b-c385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:b2:d2:3f:df:c8:c0:a2:1d:bc:28:45:8e: 75:8c:a0:cf:af:1f:03:12:80:06:73:5d:ac:8b:32: cd:e7:ff:97:2c:8b:b7:f0:e8:ec:6c:03:54:b4:d6: 51:46:c3:b1:d5:b0:7c:64:32:8f:32:1b:89:4f:1e: 47:4a:e8:6d:74:bc:d5:b9:2f:ec:c2:b1:88:b0:c5: 5c:9d:30:eb:e4:57:21:2c:fe:02:8d:56:03:74:b7: db:5e:8a:4c:01:50:70:17:d7:51:48:30:ac:c6:c2: 4e:db:6b:48:da:51:13:2d:45:6d:3b:0a:56:44:20: 00:b1:58:32:8c:83:32:48:c7:0a:6e:32:1e:b4:0a: 39:17:e6:8f:2a:88:3e:a0:b7:bb:80:aa:55:7a:69: 81:72:ee:84:b9:7c:85:ee:d3:29:5d:6d:a5:8b:21: 8d:58:90:17:9a:45:96:bd:0d:ce:21:28:f9:f7:d0: ee:d9:6c:82:2b:80:db:f6:99:30:06:cf:67:34:2c: d0:24:d7:8f:77:23:22:a9:ee:33:40:4d:fd:52:ce: d3:ed:86:f5:ab:0f:d9:99:ee:8b:14:72:5b:5b:49: 68:ee:11:b7:a8:03:fe:c1:a4:2c:4b:f9:b5:ea:07: 59:9d:98:83:a8:13:cf:e5:d9:33:c1:db:2e:77:c3: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:78:7F:84:AB:5F:6E:B9:54:03:90:0C:48:AF:81:57:77:3D:93 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ea:c2:91:55:65:09:bb:f8:14:2a:42:af:5f:38:30:9a:28: 11:da:9b:6a:ed:ee:78:3e:d3:08:82:5c:eb:c2:02:13:f0:06: e3:20:12:51:e1:62:b5:a2:67:c6:e0:58:4b:31:74:cb:b6:6d: 07:eb:6b:9f:c2:b0:ab:16:5c:93:d2:10:ab:4d:7b:53:27:70: 83:07:22:1a:5c:25:04:96:97:84:a8:b1:93:c9:cb:1e:a4:d3: fc:1c:8d:50:70:fd:a2:83:8a:b6:b6:fb:a1:60:a9:66:16:76: 24:e3:49:35:9c:f9:4a:0f:79:07:2e:d8:09:47:c6:4d:5f:ae: f9:86:d4:41:41:76:f4:2a:72:4f:cd:ad:bc:bb:82:51:69:a7: f4:1a:e5:2d:64:49:78:94:35:b1:67:27:01:72:58:85:53:ce: 84:4b:c4:cb:39:3e:c4:13:c9:8e:b1:a8:8d:4f:38:31:b6:ca: 3e:4d:11:87:c0:df:58:35:6d:67:4c:53:b3:a6:4c:6c:5d:48: eb:c7:e3:8a:ac:1c:07:cc:4a:8b:cb:b5:9e:2e:ae:35:82:58: ec:5d:22:38:66:cf:7c:52:d9:51:93:50:a2:a0:ad:f8:17:d0: b3:e1:0c:f1:12:38:2d:c3:50:da:82:7d:21:5a:0c:b6:30:0f: 80:3a:d5:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjYwOTIyMTcwMDU5WhcNMjYwOTI5MTcwMDU5WjAYMRYwFAYD VQQDEw02YWIyYjQ0Yi1jMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzOy0j/fyMCiHbwoRY51jKDPrx8DEoAGc12sizLN5/+XLIu38OjsbANUtNZR RsOx1bB8ZDKPMhuJTx5HSuhtdLzVuS/swrGIsMVcnTDr5FchLP4CjVYDdLfbXopM AVBwF9dRSDCsxsJO22tI2lETLUVtOwpWRCAAsVgyjIMySMcKbjIetAo5F+aPKog+ oLe7gKpVemmBcu6EuXyF7tMpXW2liyGNWJAXmkWWvQ3OISj599Du2WyCK4Db9pkw Bs9nNCzQJNePdyMiqe4zQE39Us7T7Yb1qw/Zme6LFHJbW0lo7hG3qAP+waQsS/m1 6gdZnZiDqBPP5dkzwdsud8NViQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHo+eH+E q19uuVQDkAxIr4FXdz2TMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGerCkVVlCbv4FCpCr184MJooEdqbau3ueD7TCIJc68ICE/AG4yASUeFitaJn xuBYSzF0y7ZtB+trn8KwqxZck9IQq017UydwgwciGlwlBJaXhKixk8nLHqTT/ByN UHD9ooOKtrb7oWCpZhZ2JONJNZz5Sg95By7YCUfGTV+u+YbUQUF29CpyT82tvLuC UWmn9BrlLWRJeJQ1sWcnAXJYhVPOhEvEyzk+xBPJjrGojU84MbbKPk0Rh8DfWDVt Z0xTs6ZMbF1I68fjiqwcB8xKi8u1ni6uNYJY7F0iOGbPfFLZUZNQoqCt+BfQs+EM 8RI4LcNQ2oJ9IVoMtjAPgDrVfQ== -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:12 2026 by rpki-client