$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: NOXJcED8hKAcgxr9JZo2nbrAX7DXbnx8Qk5d/dWGMrg= Subject key identifier: 31:56:2F:8F:64:05:E4:F9:BE:F1:55:06:2E:A5:96:E0:DD:F3:8E:EF Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 25A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2589 Signing time: Fri 02 Oct 2026 15:50:46 +0000 Manifest this update: Fri 02 Oct 2026 15:50:45 +0000 Manifest next update: Fri 09 Oct 2026 15:50:45 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 0J3TV+KXVvLlM2TiSCx3Pv4N6v8WsfZnaZ4fJQyDqXE=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9641 (0x25a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Oct 2 15:50:45 2026 GMT Not After : Oct 9 15:50:45 2026 GMT Subject: CN=6abfd2d5-ee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:9e:ee:c6:6a:7d:2b:0d:ae:b9:11:53:50: 03:0b:fd:83:7b:d4:f6:7f:96:93:f8:e4:6a:8d:d4: 7e:6e:ad:f2:ba:38:2c:16:be:71:e5:ae:05:79:47: 34:f7:70:20:bc:f4:95:88:0d:44:f5:ea:72:3f:5d: d1:4a:e0:ba:89:c0:a2:78:14:f4:b0:07:a5:4d:a8: 4c:86:92:f7:42:db:50:b3:94:a0:71:e2:88:7d:60: 8f:75:ec:98:3d:c4:86:b8:88:b6:53:32:71:6e:05: 3d:ea:0b:3d:c2:a3:1a:00:3c:9a:ac:12:82:f7:fb: 3a:16:79:66:1c:ed:f0:9d:d5:85:61:3c:1d:ff:e4: db:be:49:5e:62:58:dc:3e:d5:f2:50:da:10:16:47: 21:5c:47:98:1d:c7:67:59:0b:ce:e9:c2:11:2a:32: 97:1f:10:64:b0:b5:d5:0b:02:34:1d:d4:83:67:b4: 49:7a:72:33:1b:37:7f:68:fa:4c:56:26:a5:d9:8b: 4f:12:4d:c6:9d:12:40:2d:d9:9f:ac:03:b9:c1:d1: 0d:a9:10:f8:49:74:7f:59:1f:55:a1:a5:19:75:3a: 3b:51:41:ca:69:57:22:5e:10:dd:df:72:67:b7:c8: 71:8c:45:85:d8:9f:24:50:87:cc:23:9e:bd:4d:15: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:56:2F:8F:64:05:E4:F9:BE:F1:55:06:2E:A5:96:E0:DD:F3:8E:EF X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:86:6f:1f:cd:eb:7f:e6:1c:49:4a:83:5f:8b:38:e4:39:3c: 22:e3:f8:81:d3:7d:39:31:bd:57:3a:35:ff:76:ad:40:a1:ec: 75:36:74:3b:34:ce:d0:87:0a:cd:ab:56:46:04:ac:3d:e1:c5: f5:58:10:f9:17:da:05:90:58:d2:62:1b:90:7a:b9:fa:2d:79: 7f:2c:6a:33:e7:7f:b8:ec:37:68:32:2f:95:32:6d:f0:c6:a6: 8f:60:57:ce:5f:ab:7f:36:85:08:7a:9a:65:3b:89:a5:a0:97: 7a:d1:76:3d:66:a2:1e:04:62:91:2d:8c:ff:f5:4d:a8:d6:eb: 92:a5:d8:cb:44:43:81:a7:b4:76:d1:45:de:56:5b:5f:d9:be: 3f:03:7c:29:b6:ea:3f:76:52:51:5a:9a:38:d4:4f:3e:1e:d9: f5:25:64:0e:a1:11:06:83:4f:e9:86:f2:17:08:8c:0e:95:52: a7:f4:1c:af:f1:3d:f8:29:e9:17:79:90:d8:88:24:e2:b6:3e: 71:d5:c0:e5:60:d9:fb:6d:94:d6:f3:75:ec:29:6e:a9:e9:9b: 90:93:e4:6d:1f:da:1c:c8:2f:10:12:67:bd:0d:11:74:f8:9e: 97:d1:47:5b:a7:99:76:a9:c9:9c:90:94:9d:db:de:1d:49:e0: e7:5c:2b:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYxMDAyMTU1MDQ1WhcNMjYxMDA5MTU1MDQ1WjAYMRYwFAYD VQQDEw02YWJmZDJkNS1lZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WKe7sZqfSsNrrkRU1ADC/2De9T2f5aT+ORqjdR+bq3yujgsFr5x5a4FeUc0 93AgvPSViA1E9epyP13RSuC6icCieBT0sAelTahMhpL3QttQs5SgceKIfWCPdeyY PcSGuIi2UzJxbgU96gs9wqMaADyarBKC9/s6FnlmHO3wndWFYTwd/+TbvkleYljc PtXyUNoQFkchXEeYHcdnWQvO6cIRKjKXHxBksLXVCwI0HdSDZ7RJenIzGzd/aPpM Vial2YtPEk3GnRJALdmfrAO5wdENqRD4SXR/WR9VoaUZdTo7UUHKaVciXhDd33Jn t8hxjEWF2J8kUIfMI569TRV5OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFWL49k BeT5vvFVBi6lluDd847vMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADIZvH83rf+YcSUqDX4s45Dk8IuP4gdN9OTG9Vzo1/3atQKHsdTZ0OzTO0IcK zatWRgSsPeHF9VgQ+RfaBZBY0mIbkHq5+i15fyxqM+d/uOw3aDIvlTJt8Mamj2BX zl+rfzaFCHqaZTuJpaCXetF2PWaiHgRikS2M//VNqNbrkqXYy0RDgae0dtFF3lZb X9m+PwN8KbbqP3ZSUVqaONRPPh7Z9SVkDqERBoNP6YbyFwiMDpVSp/Qcr/E9+Cnp F3mQ2Igk4rY+cdXA5WDZ+22U1vN17CluqembkJPkbR/aHMgvEBJnvQ0RdPiel9FH W6eZdqnJnJCUndveHUng51wrHA== -----END CERTIFICATE-----Generated at Sun Oct 4 16:47:39 2026 by rpki-client