$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: R3gQ/0JbUdN8066Ub9hAcurj4rsVCZGLrsFchegTBpA= Subject key identifier: 24:75:25:1D:CD:40:59:9B:85:9D:CD:99:81:91:59:71:F4:A7:9F:1A Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: D4 Signing time: Sun 11 Oct 2026 07:19:42 +0000 Manifest this update: Sun 11 Oct 2026 07:19:41 +0000 Manifest next update: Sun 18 Oct 2026 07:19:41 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: q7bAf5DzLj2GOLKfZsLsiI3ezKX8dh1HaddOG8AfFUQ=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: 6KeAoBf8MaS5EjBdSVHExGmJ9a8yiTrCwJ3nhslSfTE=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: wYk62Q6Ir+XeXEA2r1rVnPBMrc3HufUoVqQCvgr1iYI=) 4: 995A12922D7911F185835B6B93833773.roa (hash: MmMEahGRPCXh9Mm/eF3pYwkpAK+cwHLCvIqEyEw37C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 07:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Oct 11 07:19:41 2026 GMT Not After : Oct 18 07:19:41 2026 GMT Subject: CN=6acb388d-c8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:a4:5b:86:de:be:0c:b0:5f:c0:a7:69:12: 98:4d:8b:d4:75:53:e1:b2:1f:04:48:5f:37:d9:69: 16:a9:a3:91:ab:f9:96:5b:70:1e:39:55:64:a3:aa: 8c:55:33:22:53:5b:f1:d9:09:80:fe:9f:e9:36:d6: 40:77:d7:0f:82:f0:fa:8e:79:4b:33:69:51:c3:4a: 9b:07:e5:e8:03:66:8d:ea:30:e4:fa:91:6a:08:4b: 94:4c:c5:fc:04:9d:25:d1:51:65:af:85:c9:2f:0f: cb:98:fc:89:c2:41:1c:ab:d8:bd:78:f8:78:ca:18: db:23:ab:42:49:b0:4b:de:42:29:07:5d:56:a9:8d: b6:65:bc:b3:09:5a:8c:c0:46:0d:6f:32:90:c0:09: 8e:80:c9:02:90:90:53:bd:f8:10:58:26:12:00:39: 33:a6:0b:b5:d2:9c:dc:06:c2:98:1a:f4:a2:68:91: 31:98:79:e3:be:23:b9:38:b0:d0:fa:e0:59:57:00: e7:f3:7c:03:97:ab:be:3f:50:dd:0a:aa:d0:bb:71: 0c:90:27:ab:17:8c:eb:cd:10:cd:5c:e8:fd:44:fc: 81:d5:11:d3:05:34:b7:4c:29:cf:b2:58:92:3d:03: 6c:19:c9:8a:61:9e:a0:d5:a5:c0:49:4a:0f:ea:0f: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:25:1D:CD:40:59:9B:85:9D:CD:99:81:91:59:71:F4:A7:9F:1A X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f1:e2:a1:d5:7f:b3:65:2b:82:38:d4:3c:9f:99:41:02:45: 8c:ce:ea:81:5d:c2:75:78:95:17:f4:d3:80:f9:bf:02:67:e5: 20:82:6f:2f:28:fb:ed:1f:81:11:24:f3:de:3c:47:35:60:5c: 4d:77:e0:3e:df:8e:ae:e6:c2:a0:4d:eb:92:e7:55:69:a3:91: 47:a3:50:d6:b9:8c:7a:99:32:0a:51:d5:fe:44:a4:0d:5f:48: 14:79:94:04:73:8a:b0:16:86:31:47:0d:9c:d3:b7:ed:45:fe: 55:e0:55:5d:c2:41:a8:3e:9a:8c:13:84:fb:50:9c:39:c9:46: cf:84:62:19:5c:83:9c:b8:ad:1e:a2:f9:d1:94:1c:7d:eb:ad: bb:54:a4:10:19:0b:23:39:1c:51:4e:6d:3b:6d:98:10:87:08: 56:f2:f5:6c:ac:c6:cd:aa:ac:d1:1e:c4:ad:ba:95:7a:d2:3b: d2:78:0b:55:eb:c6:0a:01:cb:4c:8d:84:b0:6f:5f:87:b7:ba: d5:70:b5:05:25:31:62:75:c7:3a:4f:cb:b5:e4:a4:df:85:ca: 48:24:24:3b:e7:dc:5c:5a:fc:d5:97:d0:b2:ae:14:5a:25:3f: b4:d2:d8:d4:43:ab:f1:d7:3f:ae:71:40:2c:28:8f:c4:1e:bf: 3c:79:9a:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYxMDExMDcxOTQxWhcNMjYxMDE4MDcxOTQxWjAYMRYwFAYD VQQDEw02YWNiMzg4ZC1jOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNKkW4bevgywX8CnaRKYTYvUdVPhsh8ESF832WkWqaORq/mWW3AeOVVko6qM VTMiU1vx2QmA/p/pNtZAd9cPgvD6jnlLM2lRw0qbB+XoA2aN6jDk+pFqCEuUTMX8 BJ0l0VFlr4XJLw/LmPyJwkEcq9i9ePh4yhjbI6tCSbBL3kIpB11WqY22ZbyzCVqM wEYNbzKQwAmOgMkCkJBTvfgQWCYSADkzpgu10pzcBsKYGvSiaJExmHnjviO5OLDQ +uBZVwDn83wDl6u+P1DdCqrQu3EMkCerF4zrzRDNXOj9RPyB1RHTBTS3TCnPsliS PQNsGcmKYZ6g1aXASUoP6g/efwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCR1JR3N QFmbhZ3NmYGRWXH0p58aMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfHiodV/s2UrgjjUPJ+ZQQJFjM7qgV3CdXiVF/TTgPm/AmflIIJvLyj77R+B ESTz3jxHNWBcTXfgPt+OrubCoE3rkudVaaORR6NQ1rmMepkyClHV/kSkDV9IFHmU BHOKsBaGMUcNnNO37UX+VeBVXcJBqD6ajBOE+1CcOclGz4RiGVyDnLitHqL50ZQc feutu1SkEBkLIzkcUU5tO22YEIcIVvL1bKzGzaqs0R7ErbqVetI70ngLVevGCgHL TI2EsG9fh7e61XC1BSUxYnXHOk/LteSk34XKSCQkO+fcXFr81ZfQsq4UWiU/tNLY 1EOr8dc/rnFALCiPxB6/PHmaaQ== -----END CERTIFICATE-----Generated at Sun Oct 11 10:35:22 2026 by rpki-client