$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json) Hash identifier: nPlULiLbPan85XUh/m5q5mHcFUndTAC5qHrrq78Yrb8= Subject key identifier: C3:07:8A:E2:5B:64:7D:B9:AA:9A:77:A4:D2:20:A9:BB:50:66:FE:16 Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft Manifest number: 018C Signing time: Wed 23 Sep 2026 04:18:37 +0000 Manifest this update: Wed 23 Sep 2026 04:18:36 +0000 Manifest next update: Wed 30 Sep 2026 04:18:36 +0000 Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: mfVKIyV7Hta5dnjaWoyTq8DrmQ9N5m7uGW5tYwKZAoc=) 2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: Q8f/qW78UATDJkOYAmyqIeNWlz0nJt0VKruL/5wxjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Validity Not Before: Sep 23 04:18:36 2026 GMT Not After : Sep 30 04:18:36 2026 GMT Subject: CN=6ab3531c-06fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:6e:ec:73:6d:08:ae:a7:bf:92:8b:dd:1e: b1:ff:7d:63:93:e1:da:b3:4d:13:14:d5:ec:42:f6: ff:0e:f7:5b:0e:0b:88:9f:53:54:3c:81:66:10:7d: e9:e6:b4:53:e7:5f:ea:0f:7c:18:93:4f:bf:b2:ff: 70:ad:9b:7f:f5:1f:f8:ae:f1:70:ed:df:fc:92:1c: bd:e6:90:67:b3:1e:05:c8:70:7e:02:e8:d9:b0:aa: 77:14:ea:be:63:e4:91:5e:ad:5a:ff:51:50:65:0f: ff:05:c6:67:a4:24:c7:08:0f:09:e9:41:44:1f:26: f5:7d:b0:af:ee:f0:4e:f8:61:a1:bf:11:e2:34:85: 89:84:7f:fa:95:5e:18:57:6d:5e:41:d9:20:b3:b1: 8c:00:c7:04:a7:c3:83:7e:b4:35:cd:29:11:ba:36: 06:de:f6:a9:ff:f0:dc:39:20:be:17:c7:55:f9:9f: 31:7b:99:cc:c3:6f:86:47:bc:7e:2e:86:b4:3a:de: 45:1b:b0:02:1d:d9:82:21:05:f3:61:d7:0a:8b:23: 6b:d4:98:00:40:0f:c5:34:26:08:ae:53:58:d6:7a: fd:5a:55:8d:55:77:f5:c5:1c:21:bc:b4:d1:cd:40: 85:84:0c:85:3c:ec:11:c7:d1:8c:d4:d8:d8:53:bc: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:8A:E2:5B:64:7D:B9:AA:9A:77:A4:D2:20:A9:BB:50:66:FE:16 X509v3 Authority Key Identifier: keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dd:67:1a:7c:73:49:0a:06:aa:d2:de:89:b0:ae:97:0c:b2: 08:15:f0:1c:7a:df:66:7e:ed:c1:21:53:dc:a9:66:4c:04:fd: 1b:84:59:62:7f:9a:a9:ee:83:b0:58:07:91:7e:8f:48:5a:cb: 4f:92:13:b4:ee:42:6b:0c:f1:44:d2:69:9b:df:48:c7:05:19: 51:8e:1d:9a:1d:4c:26:a8:69:43:f4:8d:4d:8f:46:ec:f4:13: 7a:3d:89:ca:f6:f4:c7:45:66:69:36:99:3b:16:ea:21:ef:a4: bf:57:9c:70:38:2f:fa:82:72:23:94:13:55:11:71:a2:c9:16: 2b:61:f2:ff:60:8d:57:d2:0b:b4:22:16:b1:97:51:d7:a4:8e: de:d9:43:83:5a:7d:12:d8:48:fa:c3:6d:c2:eb:ee:22:9f:11: 9a:72:9f:78:98:b2:6e:a8:8f:50:1c:a3:f0:74:40:4f:4e:f9: e9:b4:5d:eb:10:f0:e3:49:10:13:cf:72:48:6e:75:45:34:2a: 76:03:46:ff:af:22:d4:b8:b6:e7:e5:3d:3d:14:7b:74:1e:c6: ba:55:1b:67:e3:ba:e4:00:33:e9:61:25:0f:61:8f:f5:36:21: 6e:c9:93:85:26:b9:b3:cf:0d:5c:e3:2d:04:e9:bf:e9:fa:25: 8a:c8:0a:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKENGQkIwMzhGREI4Mzg2NTQyMDQ5NjI5ODBBRDIyMUM5 NDE1RDVDRkYwHhcNMjYwOTIzMDQxODM2WhcNMjYwOTMwMDQxODM2WjAYMRYwFAYD VQQDEw02YWIzNTMxYy0wNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdxu7HNtCK6nv5KL3R6x/31jk+Has00TFNXsQvb/DvdbDguIn1NUPIFmEH3p 5rRT51/qD3wYk0+/sv9wrZt/9R/4rvFw7d/8khy95pBnsx4FyHB+AujZsKp3FOq+ Y+SRXq1a/1FQZQ//BcZnpCTHCA8J6UFEHyb1fbCv7vBO+GGhvxHiNIWJhH/6lV4Y V21eQdkgs7GMAMcEp8ODfrQ1zSkRujYG3vap//DcOSC+F8dV+Z8xe5nMw2+GR7x+ Loa0Ot5FG7ACHdmCIQXzYdcKiyNr1JgAQA/FNCYIrlNY1nr9WlWNVXf1xRwhvLTR zUCFhAyFPOwRx9GM1NjYU7x2+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMHiuJb ZH25qpp3pNIgqbtQZv4WMB8GA1UdIwQYMBaAFM+7A4/bg4ZUIElimArSIclBXVz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi9GOTAyRTUzMDVE QkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhsUWdTV0tZQ3RJaHlVRmRY UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o3c0RqOXVEaGxRZ1NXS1lDdEloeVVGZFhQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi9GOTAyRTUzMDVEQkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhs UWdTV0tZQ3RJaHlVRmRYUDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdN1nGnxzSQoGqtLeibCulwyyCBXwHHrfZn7twSFT3KlmTAT9G4RZYn+aqe6D sFgHkX6PSFrLT5ITtO5CawzxRNJpm99IxwUZUY4dmh1MJqhpQ/SNTY9G7PQTej2J yvb0x0VmaTaZOxbqIe+kv1eccDgv+oJyI5QTVRFxoskWK2Hy/2CNV9ILtCIWsZdR 16SO3tlDg1p9EthI+sNtwuvuIp8RmnKfeJiybqiPUByj8HRAT0756bRd6xDw40kQ E89ySG51RTQqdgNG/68i1Li25+U9PRR7dB7GulUbZ+O65AAz6WElD2GP9TYhbsmT hSa5s88NXOMtBOm/6folisgK2w== -----END CERTIFICATE-----Generated at Thu Sep 24 15:47:52 2026 by rpki-client