$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: AmZwq3RPuWnsCgDf2Fd6RUDiA7nsqi3pxBMCbZeH8/w= Subject key identifier: 27:FE:21:43:F4:F4:6F:D3:0A:C6:5E:DC:83:AB:0B:49:DF:B1:3D:77 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: D8 Signing time: Wed 23 Sep 2026 06:30:21 +0000 Manifest this update: Wed 23 Sep 2026 06:30:20 +0000 Manifest next update: Wed 30 Sep 2026 06:30:20 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: X6Il/WQxtHPxUAgCb+zCy6K5nVj0R2R5CxaVUUBitZk=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: LK3Fx9ZDOnbQgLdeGCFpJxId6+acwMWw9HvmZv77xfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Sep 23 06:30:20 2026 GMT Not After : Sep 30 06:30:20 2026 GMT Subject: CN=6ab371fd-a7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:36:7b:9c:7f:aa:0f:59:b8:d4:37:18:e9: 02:36:36:32:cc:db:86:98:e4:63:81:64:af:81:12: ae:f7:1c:e7:ac:32:20:d0:75:25:1f:90:39:75:2d: d6:fb:85:c7:b0:2a:ee:45:60:43:8f:b0:53:e4:fe: e3:45:88:72:da:7d:5e:30:b6:6f:cb:c6:db:bf:bb: e6:23:1d:17:57:c1:2b:50:c9:7b:af:ad:75:29:fb: 12:4c:b2:f6:f5:ac:47:93:5e:22:42:68:0d:2d:73: 66:35:52:e5:a8:8b:43:75:04:16:cd:bb:3d:d9:6e: 3e:27:ba:87:88:25:8a:16:28:e1:2d:2e:d3:a8:0f: 99:25:12:5f:a7:b5:ea:98:0a:be:39:47:4d:ac:05: 42:41:ee:2e:0c:06:40:7a:f8:a3:de:ef:01:2f:1c: 40:d3:a4:af:3c:d9:df:96:b1:a2:91:8f:9a:91:4e: 43:c6:16:6c:21:32:6c:5d:a5:d0:5c:ec:1c:89:5e: 80:13:cb:1d:f9:a8:8b:ea:ad:29:49:3c:33:da:81: e9:50:de:e4:1b:80:9b:c9:ba:f1:ab:bf:40:c3:0d: 2b:9d:b2:21:bf:aa:ac:4d:f6:e0:c7:02:a9:9a:1b: ac:77:12:56:48:6f:e1:90:5b:5b:83:7e:4a:50:d6: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FE:21:43:F4:F4:6F:D3:0A:C6:5E:DC:83:AB:0B:49:DF:B1:3D:77 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:73:84:48:94:d1:6d:39:a6:ee:3f:30:0c:71:9a:5c:28:21: 5b:e4:eb:63:dd:8f:19:3b:68:61:75:5f:24:50:c1:83:bb:09: 27:60:f1:2b:2f:96:30:3c:64:f2:0d:cf:3f:3f:10:2b:7b:66: 00:19:63:e9:f2:de:04:56:65:9f:41:56:1f:a5:a7:d6:e4:7d: 36:36:3d:ee:cc:fb:2f:ee:40:77:d7:b9:65:47:be:80:42:02: 24:8d:5a:37:61:5c:d8:69:dd:86:c3:bf:c0:89:66:6b:47:d6: b1:1e:22:75:50:39:11:99:39:b8:ff:38:c4:e0:56:e7:b7:6a: b5:16:c4:d0:ed:d8:c7:92:75:aa:02:7e:ac:15:24:95:32:6d: 18:e3:a5:63:af:10:d1:63:52:53:4e:9b:2c:a9:5a:01:e8:35: 6f:2c:54:33:b8:87:0c:bc:be:a4:f8:63:8a:06:1b:c2:5f:fe: 1c:94:5c:70:3e:05:c5:33:e4:bd:17:be:8d:76:4a:7c:5a:45: 17:f9:21:af:1b:6f:ae:3f:44:c5:c4:28:6a:35:0c:d7:49:41: 14:d2:f0:2f:95:a4:01:64:44:ec:01:b1:f1:08:e3:26:2e:58: 10:5a:b9:43:9c:77:54:26:86:55:51:52:44:2b:98:c9:9a:69: 91:0c:ab:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC NDhGQTJFMjEwHhcNMjYwOTIzMDYzMDIwWhcNMjYwOTMwMDYzMDIwWjAYMRYwFAYD VQQDEw02YWIzNzFmZC1hN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuto2e5x/qg9ZuNQ3GOkCNjYyzNuGmORjgWSvgRKu9xznrDIg0HUlH5A5dS3W +4XHsCruRWBDj7BT5P7jRYhy2n1eMLZvy8bbv7vmIx0XV8ErUMl7r611KfsSTLL2 9axHk14iQmgNLXNmNVLlqItDdQQWzbs92W4+J7qHiCWKFijhLS7TqA+ZJRJfp7Xq mAq+OUdNrAVCQe4uDAZAevij3u8BLxxA06SvPNnflrGikY+akU5DxhZsITJsXaXQ XOwciV6AE8sd+aiL6q0pSTwz2oHpUN7kG4Cbybrxq79Aww0rnbIhv6qsTfbgxwKp mhusdxJWSG/hkFtbg35KUNY7EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCf+IUP0 9G/TCsZe3IOrC0nfsT13MB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5 Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHOESJTRbTmm7j8wDHGaXCghW+TrY92PGTtoYXVfJFDBg7sJJ2DxKy+WMDxk 8g3PPz8QK3tmABlj6fLeBFZln0FWH6Wn1uR9NjY97sz7L+5Ad9e5ZUe+gEICJI1a N2Fc2GndhsO/wIlma0fWsR4idVA5EZk5uP84xOBW57dqtRbE0O3Yx5J1qgJ+rBUk lTJtGOOlY68Q0WNSU06bLKlaAeg1byxUM7iHDLy+pPhjigYbwl/+HJRccD4FxTPk vRe+jXZKfFpFF/khrxtvrj9ExcQoajUM10lBFNLwL5WkAWRE7AGx8QjjJi5YEFq5 Q5x3VCaGVVFSRCuYyZppkQyruw== -----END CERTIFICATE-----Generated at Thu Sep 24 03:50:06 2026 by rpki-client