$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: S0bWzvE5NcSevXpXMJR5RAKpmJtpDOQ8uPC6HVOyxYM= Subject key identifier: 1C:9F:6B:A1:F9:10:3F:3F:C5:A8:34:7C:66:83:5B:B7:90:A8:FF:8E Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 0152 Signing time: Sun 27 Sep 2026 05:42:52 +0000 Manifest this update: Sun 27 Sep 2026 05:42:52 +0000 Manifest next update: Sun 04 Oct 2026 05:42:52 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: f/+S25J9p7AINlYKpBA6T4zgpccehLLsLfQSVGpKUN0=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 05:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Sep 27 05:42:52 2026 GMT Not After : Oct 4 05:42:52 2026 GMT Subject: CN=6ab8acdc-ec4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:51:bd:49:07:dd:86:f2:07:5c:c8:e8:21: 4b:1e:7b:cb:11:3c:40:9b:c2:2e:85:4a:ae:1d:8b: 12:5d:e1:a3:a2:9f:fa:ff:0a:78:f8:8b:0f:57:60: 5e:10:20:ea:41:21:4b:5d:6c:37:f2:6c:ec:28:a7: 6f:34:c3:f4:ae:f7:fb:f5:7f:38:60:d4:aa:b3:73: ee:31:71:0e:15:68:07:69:93:11:91:80:d4:29:08: b2:91:48:a2:4a:d9:b3:87:71:ee:ab:41:a7:5f:e1: ac:64:6b:38:23:bd:2a:41:30:71:62:b0:e7:29:54: 0d:6b:2a:2b:db:dd:93:c4:00:f9:06:65:5e:74:31: 2a:a0:f8:05:93:98:f1:b9:f8:d1:b4:65:1e:72:07: 78:45:be:b2:c4:1c:1e:98:88:4c:97:6a:b7:e8:2b: f0:f4:fb:60:8d:48:4e:79:5a:9b:bf:e7:29:45:96: 8c:0c:86:4f:9f:4d:b0:78:97:24:aa:f3:20:7c:d4: d4:44:6e:0f:b9:06:bd:52:5c:e4:90:57:c3:41:40: 20:1d:b7:18:85:a6:5f:1f:40:dd:35:c2:12:88:97: 2e:89:4a:4a:01:b5:5e:4a:c7:78:b9:f8:19:32:8b: 6b:2a:ad:91:93:95:10:9f:86:46:a2:ea:fd:de:86: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9F:6B:A1:F9:10:3F:3F:C5:A8:34:7C:66:83:5B:B7:90:A8:FF:8E X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2a:79:be:7e:2c:a0:71:4c:4b:2e:2d:e9:c1:43:8a:ea:d0: 4c:87:a8:b4:9f:59:a4:de:fa:09:ca:6e:8a:d1:1d:8f:8a:41: d6:e6:fc:fb:56:b5:ed:d0:0f:bd:59:c8:2d:0e:13:0a:69:97: f9:b9:15:52:35:22:3f:22:e7:8d:dd:80:54:c3:84:98:5d:6d: b2:6a:96:58:0e:de:a3:90:3f:07:b5:c2:de:1a:d8:28:23:71: 73:c1:b9:ca:99:56:28:31:a9:b4:7d:dc:f1:19:45:cc:b4:8c: 37:95:f3:b1:30:63:6a:53:a1:03:07:78:0f:b7:b0:d4:8d:74: 47:30:3d:b8:7a:9c:ff:e1:bd:3a:c8:1f:a6:17:8e:2a:0d:c9: 76:10:cc:c2:04:e4:16:e2:02:4e:cf:14:2e:d5:77:c2:59:84: 4d:fb:77:49:69:d7:78:c3:d4:9c:2f:c4:9c:9b:26:c3:30:61: 7f:d7:50:32:56:71:70:16:a7:a7:2d:c0:f1:bc:51:6e:89:15: 12:db:5b:bb:71:fb:97:7b:43:51:a7:5a:49:3b:b2:d4:d8:2d: dd:a5:6d:d8:42:d6:86:23:30:cb:5b:f2:da:fd:09:3a:77:ad: a1:e7:dd:70:bc:cb:75:13:13:7f:da:95:14:b8:a2:10:d1:67: e1:d7:74:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjYwOTI3MDU0MjUyWhcNMjYxMDA0MDU0MjUyWjAYMRYwFAYD VQQDEw02YWI4YWNkYy1lYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8JRvUkH3YbyB1zI6CFLHnvLETxAm8IuhUquHYsSXeGjop/6/wp4+IsPV2Be ECDqQSFLXWw38mzsKKdvNMP0rvf79X84YNSqs3PuMXEOFWgHaZMRkYDUKQiykUii Stmzh3Huq0GnX+GsZGs4I70qQTBxYrDnKVQNayor292TxAD5BmVedDEqoPgFk5jx ufjRtGUecgd4Rb6yxBwemIhMl2q36Cvw9PtgjUhOeVqbv+cpRZaMDIZPn02weJck qvMgfNTURG4PuQa9UlzkkFfDQUAgHbcYhaZfH0DdNcISiJcuiUpKAbVeSsd4ufgZ MotrKq2Rk5UQn4ZGour93oZ0gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByfa6H5 ED8/xag0fGaDW7eQqP+OMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmyp5vn4soHFMSy4t6cFDiurQTIeotJ9ZpN76CcpuitEdj4pB1ub8+1a17dAP vVnILQ4TCmmX+bkVUjUiPyLnjd2AVMOEmF1tsmqWWA7eo5A/B7XC3hrYKCNxc8G5 yplWKDGptH3c8RlFzLSMN5XzsTBjalOhAwd4D7ew1I10RzA9uHqc/+G9OsgfpheO Kg3JdhDMwgTkFuICTs8ULtV3wlmETft3SWnXeMPUnC/EnJsmwzBhf9dQMlZxcBan py3A8bxRbokVEttbu3H7l3tDUadaSTuy1Ngt3aVt2ELWhiMwy1vy2v0JOnetoefd cLzLdRMTf9qVFLiiENFn4dd0Aw== -----END CERTIFICATE-----Generated at Tue Sep 29 00:53:14 2026 by rpki-client