$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: Jl3G2q7hI6ZG82p6p/X1IfB6r1pL9+n4rEYfyO7y/OA= Subject key identifier: 19:C0:78:EA:05:4A:FF:A9:0F:44:AF:EC:99:FE:B4:CE:04:02:9C:1F Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 1804 Signing time: Fri 04 Sep 2026 16:30:33 +0000 Manifest this update: Fri 04 Sep 2026 16:30:33 +0000 Manifest next update: Fri 11 Sep 2026 16:30:33 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: LQaHEQgOJ0f463rzkb/N+K/x6FESrZY5OEpIPm2JKDw=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6161 (0x1811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Sep 4 16:30:33 2026 GMT Not After : Sep 11 16:30:33 2026 GMT Subject: CN=6a9af229-1a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:e1:32:ab:f3:02:cd:fc:92:5c:5e:54:85: f6:5e:14:4c:da:7d:ef:0d:f3:36:e2:1a:3b:f0:cc: ca:f2:33:80:12:3a:49:6e:5a:f1:6a:78:fb:8e:de: 85:10:6d:e6:6d:45:23:a0:a4:3b:3f:47:81:4b:3d: bd:07:b7:0c:1c:6b:8a:35:2d:89:85:6d:1f:4a:49: 0d:e3:ac:2c:73:6e:2f:ad:df:c7:13:7a:56:5b:02: 40:31:f4:24:05:1d:cd:59:58:bb:9d:38:1d:9a:ca: 5e:fe:9f:96:7c:c7:c9:3d:24:c9:02:bf:79:c6:74: 80:6c:17:77:65:b6:58:48:f7:7e:93:f3:c0:9e:09: 1e:8b:9a:b2:5d:73:a9:34:d7:da:00:01:74:bf:13: 52:be:c7:4b:b1:33:38:6b:96:49:07:e7:a9:f4:7a: b3:eb:e7:37:b5:4a:75:08:79:28:f8:8f:3f:b3:42: 05:89:3b:34:47:af:c6:d0:2c:11:7f:f5:c7:54:8a: dd:8a:ac:fe:d5:ee:b1:1e:a5:a7:fc:cc:d6:bc:66: 07:dc:2a:01:aa:c8:ec:cb:a8:3a:e6:47:dd:1b:8a: e6:f8:93:c6:a3:75:b3:0a:d5:c4:db:76:b2:be:af: 7a:81:35:ef:fe:70:de:79:01:4c:ac:c8:97:37:b7: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:78:EA:05:4A:FF:A9:0F:44:AF:EC:99:FE:B4:CE:04:02:9C:1F X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b2:89:d1:e1:41:2f:36:df:74:30:63:5e:95:32:41:b4:ed: 4d:53:0e:ca:4e:20:ad:85:86:69:80:5f:c0:7e:48:13:d4:25: 80:1e:15:56:cc:1f:83:a7:5e:ff:ab:87:4f:06:a7:af:71:ad: 6e:b5:e0:cd:a5:ba:56:00:28:5c:5c:20:46:97:6a:1b:02:07: 43:e5:3c:6b:ec:07:a0:9c:48:d5:b4:de:80:a7:32:00:d7:07: 76:62:ac:46:a1:b5:1a:2a:0d:ac:ef:62:4a:d8:46:f5:6c:d7: 39:70:f6:38:fd:56:7b:75:a4:54:bd:82:8b:91:35:8a:ed:f5: 5e:d6:85:df:4b:1d:80:c5:10:22:8e:b0:bb:e3:24:d6:89:f2: 48:bf:2a:cf:26:f6:c2:4d:0c:1e:3d:ed:c5:53:94:02:7f:74: e9:24:69:be:76:82:ed:c3:30:25:3a:bb:10:63:ad:a4:a9:88: 0d:4e:cb:35:12:a3:dd:45:65:5a:17:77:85:52:40:21:bb:a8: f7:73:aa:4e:ee:8a:ca:c1:22:3f:2b:4b:db:de:6d:bd:f4:7c: c1:b1:c8:76:c2:5a:c4:52:18:8d:02:97:cf:cc:0b:e3:08:fc: 45:ba:4d:53:4a:40:b9:5c:52:18:ec:8d:4f:3d:a3:f9:a8:e2: 2f:f4:8b:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwOTA0MTYzMDMzWhcNMjYwOTExMTYzMDMzWjAYMRYwFAYD VQQDEw02YTlhZjIyOS0xYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2w7hMqvzAs38klxeVIX2XhRM2n3vDfM24ho78MzK8jOAEjpJblrxanj7jt6F EG3mbUUjoKQ7P0eBSz29B7cMHGuKNS2JhW0fSkkN46wsc24vrd/HE3pWWwJAMfQk BR3NWVi7nTgdmspe/p+WfMfJPSTJAr95xnSAbBd3ZbZYSPd+k/PAngkei5qyXXOp NNfaAAF0vxNSvsdLsTM4a5ZJB+ep9Hqz6+c3tUp1CHko+I8/s0IFiTs0R6/G0CwR f/XHVIrdiqz+1e6xHqWn/MzWvGYH3CoBqsjsy6g65kfdG4rm+JPGo3WzCtXE23ay vq96gTXv/nDeeQFMrMiXN7cCYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnAeOoF Sv+pD0Sv7Jn+tM4EApwfMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwLKJ0eFBLzbfdDBjXpUyQbTtTVMOyk4grYWGaYBfwH5IE9QlgB4VVswfg6de /6uHTwanr3GtbrXgzaW6VgAoXFwgRpdqGwIHQ+U8a+wHoJxI1bTegKcyANcHdmKs RqG1GioNrO9iSthG9WzXOXD2OP1We3WkVL2Ci5E1iu31XtaF30sdgMUQIo6wu+Mk 1onySL8qzyb2wk0MHj3txVOUAn906SRpvnaC7cMwJTq7EGOtpKmIDU7LNRKj3UVl Whd3hVJAIbuo93OqTu6KysEiPytL295tvfR8wbHIdsJaxFIYjQKXz8wL4wj8RbpN U0pAuVxSGOyNTz2j+ajiL/SL8A== -----END CERTIFICATE-----Generated at Sat Sep 5 06:15:09 2026 by rpki-client