$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: hsCLSdsSsCI3YmgvJ/ZE0QkQqVEDQRisVIW7XzkMU+c= Subject key identifier: DB:EA:03:20:2B:9D:59:6A:35:98:3E:84:D9:05:D6:FE:B9:C4:24:EA Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 25B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2596 Signing time: Wed 28 Oct 2026 15:45:57 +0000 Manifest this update: Wed 28 Oct 2026 15:45:57 +0000 Manifest next update: Wed 04 Nov 2026 15:45:57 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: hvcjRyQgCtVAqp3nncQP2rjLUHbS3hAmzLm6IwM7gdQ=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 15:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9654 (0x25b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Oct 28 15:45:57 2026 GMT Not After : Nov 4 15:45:57 2026 GMT Subject: CN=6ae218b5-7ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:37:45:9a:4e:a6:ec:67:14:4c:55:c4:16: 8f:8f:54:c7:29:1f:0c:00:0c:bf:40:63:3e:22:92: 6b:72:b9:02:30:bb:d8:1d:4e:a2:a9:21:16:27:6c: ca:a7:ab:7d:69:ff:33:f7:a1:68:c8:4c:ec:c9:63: 6e:38:61:6a:e4:d2:93:18:21:3e:13:3d:ba:11:93: ef:c6:76:24:1a:19:c9:79:8a:2d:d0:df:79:ff:dc: 80:5e:33:7f:8e:15:9a:6d:f5:0c:dd:86:f4:a7:a2: ad:d3:77:63:a5:10:db:f0:7b:ed:48:bb:9d:69:8b: 70:88:83:ea:9f:5f:65:dd:12:36:33:d3:9f:e1:2d: 14:01:71:d1:f0:82:e9:7e:de:b7:54:fa:07:7b:2a: 79:ad:6a:8c:9a:79:ab:2a:62:87:63:13:11:21:02: 05:43:1c:d8:8b:53:6f:22:10:4e:fe:e4:a6:30:5d: 44:73:71:38:80:b2:ff:b4:10:5e:08:3e:10:80:86: 57:cc:da:f1:f1:a6:f3:4a:92:05:21:01:53:73:07: c4:d5:a2:72:78:61:42:47:0c:a0:4f:f0:5d:38:8d: 5b:2f:3a:c4:6c:8c:a1:2c:16:21:ef:bd:45:ec:c1: 34:59:6b:40:40:79:8d:35:7b:6f:9b:65:f0:36:f2: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EA:03:20:2B:9D:59:6A:35:98:3E:84:D9:05:D6:FE:B9:C4:24:EA X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:09:5c:ba:7f:20:33:5b:61:11:77:42:40:a9:6c:b3:5b:38: 65:ea:1e:0f:ba:de:0a:a3:0f:0a:c6:54:3b:c5:b7:ae:12:4d: dc:2c:7d:c4:24:a9:26:20:c2:f8:27:b7:cd:ee:8b:92:f1:37: d5:26:bc:14:00:1a:7c:ae:4c:eb:46:79:2f:26:b7:14:4c:98: 1a:c3:97:89:b9:fc:cc:7b:65:4f:72:99:19:55:f1:fc:2b:3c: 83:7c:53:6f:9c:ea:d8:57:48:8a:2b:b2:ed:f6:b7:b9:3d:a6: 27:fa:12:63:2e:84:22:c9:93:1b:e4:72:09:fd:6a:1a:38:cb: 53:32:46:65:ab:61:68:bb:14:08:04:d3:88:e0:b0:04:39:4f: 73:a5:42:f0:57:8c:3d:7e:83:94:27:7e:14:bd:12:b4:d5:77: 63:1a:46:e6:3c:e7:f8:c6:94:f7:61:b8:78:06:ad:d4:5a:62: ab:7a:ec:9f:f7:fc:a1:d0:6d:2d:74:2c:03:5d:fc:e9:60:80: 83:15:42:14:19:2e:49:4b:90:ad:fc:38:7a:53:a0:68:61:11: b6:a6:02:49:53:74:47:ba:b5:b9:11:43:9e:c0:fb:b0:76:28: b7:34:b5:ee:b1:f8:48:9f:71:65:1f:d9:37:c8:df:53:a7:c5: 39:4d:6f:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYxMDI4MTU0NTU3WhcNMjYxMTA0MTU0NTU3WjAYMRYwFAYD VQQDEw02YWUyMThiNS03ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5M3RZpOpuxnFExVxBaPj1THKR8MAAy/QGM+IpJrcrkCMLvYHU6iqSEWJ2zK p6t9af8z96FoyEzsyWNuOGFq5NKTGCE+Ez26EZPvxnYkGhnJeYot0N95/9yAXjN/ jhWabfUM3Yb0p6Kt03djpRDb8HvtSLudaYtwiIPqn19l3RI2M9Of4S0UAXHR8ILp ft63VPoHeyp5rWqMmnmrKmKHYxMRIQIFQxzYi1NvIhBO/uSmMF1Ec3E4gLL/tBBe CD4QgIZXzNrx8abzSpIFIQFTcwfE1aJyeGFCRwygT/BdOI1bLzrEbIyhLBYh771F 7ME0WWtAQHmNNXtvm2XwNvKyIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvqAyAr nVlqNZg+hNkF1v65xCTqMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAlcun8gM1thEXdCQKlss1s4ZeoeD7reCqMPCsZUO8W3rhJN3Cx9xCSpJiDC +Ce3ze6LkvE31Sa8FAAafK5M60Z5Lya3FEyYGsOXibn8zHtlT3KZGVXx/Cs8g3xT b5zq2FdIiiuy7fa3uT2mJ/oSYy6EIsmTG+RyCf1qGjjLUzJGZathaLsUCATTiOCw BDlPc6VC8FeMPX6DlCd+FL0StNV3YxpG5jzn+MaU92G4eAat1Fpiq3rsn/f8odBt LXQsA1386WCAgxVCFBkuSUuQrfw4elOgaGERtqYCSVN0R7q1uRFDnsD7sHYotzS1 7rH4SJ9xZR/ZN8jfU6fFOU1vPw== -----END CERTIFICATE-----Generated at Thu Oct 29 13:45:36 2026 by rpki-client