$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: VaowpPN7bINyru7/xY0U7/O3xOCbDmepyz4vttUMBdk= Subject key identifier: F3:FB:4B:5A:5F:54:62:61:E2:E2:4B:DB:DA:F4:C7:81:6F:12:10:B1 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 01A3 Signing time: Sat 03 Oct 2026 05:06:45 +0000 Manifest this update: Sat 03 Oct 2026 05:06:44 +0000 Manifest next update: Sat 10 Oct 2026 05:06:44 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: PHY0Oj8HcVC7gPgRmbvG2fUe1QRHXFvcPgTX7DaTkp0=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: zIk6J0N0742RdEvubg3AlZvYEvOIg7avsvcbwF9cq9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Oct 3 05:06:44 2026 GMT Not After : Oct 10 05:06:44 2026 GMT Subject: CN=6ac08d65-8d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:83:05:b8:a3:35:3b:5c:83:96:64:c7:0a: b0:f2:fa:f8:01:4a:dc:5a:08:21:96:25:12:f2:00: 5b:5c:cf:f3:1e:34:e6:f4:c0:25:23:96:cc:6f:0b: 89:02:67:1e:7c:72:73:0a:ce:c3:0c:0a:70:df:45: 37:1e:aa:e1:20:19:b0:b3:80:ac:2a:5b:8b:ef:60: f5:c5:53:59:3f:26:cb:62:49:51:8e:4c:ad:4f:9c: 66:f8:d9:b2:ca:c0:9f:55:fb:96:e1:fa:93:78:dc: d4:6f:eb:a6:31:04:3a:ff:0a:65:3a:5f:56:87:e5: ef:e5:3e:ce:13:fd:bb:99:88:51:8c:ae:78:1a:e2: ed:f9:84:54:1d:16:1d:18:d4:1f:f5:a2:e1:33:40: e2:b2:1c:f0:01:f6:b1:91:26:93:80:97:98:2a:ea: 53:e3:39:d4:76:ee:4f:29:53:a8:11:75:a1:55:7a: ef:45:4e:71:00:e9:72:62:dd:69:c8:2b:4f:06:64: aa:b7:e5:c2:e8:ec:4c:4a:70:be:72:6f:f0:41:57: c9:e5:eb:9a:b6:5e:76:9b:03:c7:ba:1b:b3:8d:7b: 36:23:93:7d:ca:6a:d6:8a:46:3e:b9:28:32:e1:14: 60:85:eb:78:38:9e:6d:ab:04:f6:f5:71:70:9d:cc: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FB:4B:5A:5F:54:62:61:E2:E2:4B:DB:DA:F4:C7:81:6F:12:10:B1 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:00:06:8d:d8:58:89:41:72:46:39:b4:7f:4a:ea:c4:81:53: 6e:2c:01:8c:9d:aa:fd:33:de:fd:04:7f:14:4e:77:90:e2:d2: 90:c6:ab:0f:0e:06:6f:88:08:3e:bd:9a:27:f1:8a:6b:34:63: 7b:28:24:b7:dc:06:cb:04:57:d1:ca:ec:b8:f1:a5:38:cd:35: ac:a5:19:a0:5c:3f:1f:2e:94:ef:81:27:bd:45:02:22:3f:f9: ab:b5:88:7a:87:97:e1:bd:b9:fa:2a:97:d8:95:ab:e0:8d:5c: 1d:80:87:a0:f6:61:86:e7:23:1e:fe:01:a0:4c:4c:18:5c:22: 0f:b5:74:61:5c:93:19:dc:86:7d:68:7a:ff:e3:c5:e9:32:21: 66:9e:30:67:5d:58:0b:e9:9a:93:ec:f0:0d:1f:6e:7e:c4:c7: a3:39:d4:d5:30:26:00:0d:21:45:95:46:66:6c:dd:ef:6b:c6: 46:cb:4b:ba:bc:fe:1b:97:d9:da:ca:98:5c:d1:25:75:f1:89: 47:1c:2a:20:f2:94:be:67:e3:0f:a4:16:14:60:72:08:3d:13: db:1a:10:2d:8a:9c:cf:23:f7:9d:11:66:e1:c8:5a:87:be:1d: 92:b4:72:77:3f:9a:27:eb:66:6a:0e:58:40:21:a3:3a:7f:01: 78:59:59:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjYxMDAzMDUwNjQ0WhcNMjYxMDEwMDUwNjQ0WjAYMRYwFAYD VQQDEw02YWMwOGQ2NS04ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+GDBbijNTtcg5Zkxwqw8vr4AUrcWgghliUS8gBbXM/zHjTm9MAlI5bMbwuJ AmcefHJzCs7DDApw30U3HqrhIBmws4CsKluL72D1xVNZPybLYklRjkytT5xm+Nmy ysCfVfuW4fqTeNzUb+umMQQ6/wplOl9Wh+Xv5T7OE/27mYhRjK54GuLt+YRUHRYd GNQf9aLhM0DishzwAfaxkSaTgJeYKupT4znUdu5PKVOoEXWhVXrvRU5xAOlyYt1p yCtPBmSqt+XC6OxMSnC+cm/wQVfJ5euatl52mwPHuhuzjXs2I5N9ymrWikY+uSgy 4RRghet4OJ5tqwT29XFwncwpkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP7S1pf VGJh4uJL29r0x4FvEhCxMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsgAGjdhYiUFyRjm0f0rqxIFTbiwBjJ2q/TPe/QR/FE53kOLSkMarDw4Gb4gI Pr2aJ/GKazRjeygkt9wGywRX0crsuPGlOM01rKUZoFw/Hy6U74EnvUUCIj/5q7WI eoeX4b25+iqX2JWr4I1cHYCHoPZhhucjHv4BoExMGFwiD7V0YVyTGdyGfWh6/+PF 6TIhZp4wZ11YC+mak+zwDR9ufsTHoznU1TAmAA0hRZVGZmzd72vGRstLurz+G5fZ 2sqYXNEldfGJRxwqIPKUvmfjD6QWFGByCD0T2xoQLYqczyP3nRFm4chah74dkrRy dz+aJ+tmag5YQCGjOn8BeFlZkg== -----END CERTIFICATE-----Generated at Sun Oct 4 17:06:00 2026 by rpki-client