$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: H3QBO4bPin97ua3mvw6JxT7EuFnzB0eDAkx7Yxn+o58= Subject key identifier: FB:15:C5:95:89:01:65:5D:99:59:A8:72:4F:2F:E9:DE:36:52:45:D1 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 127C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1237 Signing time: Sat 26 Sep 2026 17:10:36 +0000 Manifest this update: Sat 26 Sep 2026 17:10:35 +0000 Manifest next update: Sat 03 Oct 2026 17:10:35 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: vqswIMQHuzvRDVFLZqLwRhj33lv1DSaXK31NwlPSDKw=) 2: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: Q7TAZCpq4GaWZsd4434Sc8mQwgs5ahUecmF+GwWwTqQ=) 3: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) 4: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6LE0lcLwgL3BW95oynVLLd/nxrm4kZLuSBQHxOvu2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4732 (0x127c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Sep 26 17:10:35 2026 GMT Not After : Oct 3 17:10:35 2026 GMT Subject: CN=6ab7fc8c-a2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:4e:86:a2:7b:dd:2a:65:c4:d6:ab:db:1e: 0a:15:1b:c8:e3:36:78:5b:50:52:6b:fa:f3:73:18: 54:e7:8e:12:99:fe:1a:48:80:9a:6d:c5:ea:35:e7: 8b:a6:c1:4c:fb:ab:51:9b:17:77:6f:55:2a:6f:d8: 9d:08:38:a3:a6:6c:27:57:f9:dc:8d:eb:ab:c1:20: bb:7d:1c:5f:e5:e5:bc:13:2a:17:6a:61:c0:86:e7: 17:ce:52:0d:a4:04:7d:08:3d:3a:41:4f:36:38:4d: 8b:8f:30:f5:04:a2:79:2d:04:6b:c0:49:6a:82:d7: ec:f0:89:b2:a5:8a:f5:4f:e7:08:18:58:e6:13:2b: 31:94:f9:82:d8:c3:3d:38:eb:c9:bf:04:fb:e6:0b: 45:d2:d1:79:9b:26:49:a0:42:73:d1:3f:74:2e:d8: 4b:13:cb:6b:cf:60:06:59:d6:d9:58:79:8c:6a:04: 8d:d3:17:1c:21:b6:62:28:c7:87:d9:a5:c7:01:c4: 2d:0b:2f:bd:37:6c:de:d4:03:32:3a:6d:1e:25:05: 85:54:54:2f:1d:87:82:32:be:b0:aa:9b:17:92:de: 63:e7:ce:dd:02:06:b8:ad:4f:f6:48:2d:d3:d6:c3: 55:33:b2:b3:c8:2a:a1:44:7b:93:47:28:e0:ae:07: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:C5:95:89:01:65:5D:99:59:A8:72:4F:2F:E9:DE:36:52:45:D1 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b1:0b:ea:75:48:1b:33:59:4a:ed:a9:f3:22:23:32:85:29: c9:e9:f8:df:14:a4:c7:ba:f8:68:99:65:be:3b:10:86:9b:12: 74:01:94:fb:52:0a:5f:00:ac:8c:1a:4a:1a:17:e7:a3:f3:da: f9:15:0e:b0:96:87:f3:b6:56:9f:29:ee:15:24:17:77:7d:2d: 32:93:e5:0a:77:19:3a:d1:9f:2b:a9:e7:a7:b3:10:b5:5f:9a: a2:14:1e:a0:ab:65:5e:86:a3:40:3b:02:c8:90:aa:b3:2e:a5: 81:2e:7c:6d:82:3f:7c:f1:6e:9d:2e:45:6a:52:c2:90:af:42: 4d:9d:c3:97:99:7e:60:f2:3f:cc:b3:06:ce:10:38:fe:d1:4a: b7:aa:a0:8e:0d:59:6d:de:d7:3d:d4:33:98:45:2a:2b:b0:64: 38:a9:23:6b:14:65:78:55:9e:1e:74:75:a1:55:d7:1c:de:d5: 7d:b6:00:7c:9c:78:a6:11:4d:d7:84:e9:55:4e:9f:a2:69:1c: 04:e9:21:6e:dc:61:ed:80:8d:a8:f1:68:0b:6b:52:d2:88:6c: 6e:57:1f:b9:72:b0:26:f5:f0:6e:ed:93:39:7b:52:8b:d0:02: 3f:34:1e:2e:c3:b7:48:34:be:18:03:62:9c:6c:5b:c4:ac:b9: 33:2b:3f:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwOTI2MTcxMDM1WhcNMjYxMDAzMTcxMDM1WjAYMRYwFAYD VQQDEw02YWI3ZmM4Yy1hMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW5OhqJ73SplxNar2x4KFRvI4zZ4W1BSa/rzcxhU544Smf4aSICabcXqNeeL psFM+6tRmxd3b1Uqb9idCDijpmwnV/ncjeurwSC7fRxf5eW8EyoXamHAhucXzlIN pAR9CD06QU82OE2LjzD1BKJ5LQRrwElqgtfs8ImypYr1T+cIGFjmEysxlPmC2MM9 OOvJvwT75gtF0tF5myZJoEJz0T90LthLE8trz2AGWdbZWHmMagSN0xccIbZiKMeH 2aXHAcQtCy+9N2ze1AMyOm0eJQWFVFQvHYeCMr6wqpsXkt5j587dAga4rU/2SC3T 1sNVM7KzyCqhRHuTRyjgrgdOAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsVxZWJ AWVdmVmock8v6d42UkXRMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAErEL6nVIGzNZSu2p8yIjMoUpyen43xSkx7r4aJllvjsQhpsSdAGU+1IKXwCs jBpKGhfno/Pa+RUOsJaH87ZWnynuFSQXd30tMpPlCncZOtGfK6nnp7MQtV+aohQe oKtlXoajQDsCyJCqsy6lgS58bYI/fPFunS5FalLCkK9CTZ3Dl5l+YPI/zLMGzhA4 /tFKt6qgjg1Zbd7XPdQzmEUqK7BkOKkjaxRleFWeHnR1oVXXHN7VfbYAfJx4phFN 14TpVU6fomkcBOkhbtxh7YCNqPFoC2tS0ohsblcfuXKwJvXwbu2TOXtSi9ACPzQe LsO3SDS+GANinGxbxKy5Mys/NA== -----END CERTIFICATE-----Generated at Mon Sep 28 00:14:37 2026 by rpki-client