$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft File: sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft (raw, json) Hash identifier: 9/YCaLj7TxM9pef9hNeUs7C7k+l0vDQNvAl51bv5Yoc= Subject key identifier: 26:08:CD:D5:F5:FA:BF:4C:0C:52:CD:32:33:86:36:68:B7:AC:8A:00 Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E Certificate issuer: /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft Manifest number: 23 Signing time: Wed 21 Oct 2026 09:28:46 +0000 Manifest this update: Wed 21 Oct 2026 09:28:46 +0000 Manifest next update: Wed 28 Oct 2026 09:28:46 +0000 Files and hashes: 1: sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl (hash: tik7K5OK7/JKGXaekAcAVBwUqlV4UnAnl+5MYVCGWzI=) 2: 862E552A9BC911F18D38C8025A11F970.roa (hash: 8na8yVbkSv2r8L3/v2gwJOLTTRp9fQmqAH2HTVZD2cc=) 3: 3F981D2E9BC611F1BF28F2DA5711F970.roa (hash: sKVxProcEOHvrgAV+/slNwjk7EfvxI0MK4OVX+Z8sEw=) 4: 403C1EB09BC611F1BF28F2DA5711F970.roa (hash: j/xjaXbBB1ibKX7WVXJ3Yos+ih/Ydlfy2wHxZhD7qPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E Validity Not Before: Oct 21 09:28:46 2026 GMT Not After : Oct 28 09:28:46 2026 GMT Subject: CN=6ad885ce-c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:4d:a2:ad:1f:22:cb:9f:8e:01:bd:74:2c: 10:62:34:00:3a:f3:6c:ef:1c:5b:f8:7d:68:63:7e: 99:fe:f3:48:08:da:40:50:d9:f4:6e:ec:26:9b:cd: 7c:f7:03:38:35:15:24:40:c6:34:b9:1b:95:01:e0: fb:49:6a:75:cc:9e:66:5a:ef:6e:bd:57:4f:39:b5: ba:64:c0:d7:8e:54:f8:34:07:29:e2:a1:64:d0:40: b1:e4:fc:42:28:d0:22:d9:92:ce:79:b9:f5:c6:ba: 28:3b:28:5a:d7:9e:40:85:a1:40:f9:7d:ec:eb:40: 5a:9f:78:99:e2:12:ec:30:94:65:e4:69:3c:ac:2d: 7e:dc:09:dc:16:41:7c:99:49:e7:49:9c:aa:79:30: f2:e4:d1:84:ed:17:a7:4f:1c:0b:d1:d6:c1:76:49: 9b:39:1f:49:58:e1:0d:3d:d5:bd:b4:aa:f7:b2:f5: 56:bb:b3:d0:41:f6:47:b9:c7:8d:e3:15:22:1c:e5: 5f:1f:d8:73:42:c1:75:1e:90:d8:d1:1a:3c:87:d1: 0d:df:c5:b8:b3:df:2d:50:b8:5b:70:2b:ba:1e:5c: 8f:f5:e2:67:ad:33:ce:05:7d:d8:10:60:eb:e7:71: a4:51:f3:22:28:dd:49:06:ec:49:08:a8:a4:b3:0e: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:08:CD:D5:F5:FA:BF:4C:0C:52:CD:32:33:86:36:68:B7:AC:8A:00 X509v3 Authority Key Identifier: keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b3:4e:5a:1f:95:00:2b:fd:69:32:27:3f:0a:26:b7:bc:12: 12:d9:fc:6b:4a:78:78:e4:dc:8e:a1:f4:8c:8a:55:4c:57:70: d1:4d:5c:f6:e6:32:0d:02:02:53:92:86:2d:b4:0a:6e:63:70: db:af:79:19:56:92:a0:38:a6:89:ad:9c:82:96:6b:73:01:ea: 13:49:ae:b1:69:1c:d6:fb:9e:11:74:d3:4a:b7:97:58:f3:c0: 84:91:b6:ad:1a:a6:a2:81:b4:34:65:6a:53:5a:b1:95:47:6c: 49:e2:98:4a:50:69:bc:be:74:8f:a5:b8:33:05:13:22:d8:e9: 45:0f:9d:55:cf:16:f7:1e:d1:a7:2d:0b:fa:66:e9:77:ee:13: 3c:47:66:15:8b:24:1d:c6:74:37:05:48:9f:23:8a:3c:29:99: 09:fe:13:9e:99:18:ca:0f:3a:11:4a:6b:84:b4:9c:25:fb:00: 13:42:2f:7b:8c:01:0e:7f:e9:93:b5:aa:0e:e3:c8:3b:dd:95: 98:df:2e:c6:c8:b3:6d:12:6d:f5:14:c6:1e:a2:7f:2d:ac:08: 3e:f5:d8:59:56:01:a8:7b:99:07:4f:e3:d0:bd:95:d1:2e:db: 1f:7e:37:ee:20:d9:82:b2:1c:6a:94:4c:f0:3a:e7:66:65:67: 0c:dc:ad:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDhDQjExMC8GA1UEBRMoQjE5QzMyNEM0Njc5RDJFNDU2ODM0Mzg5QUZGQjc1MDRF REYwOTcxRTAeFw0yNjEwMjEwOTI4NDZaFw0yNjEwMjgwOTI4NDZaMBgxFjAUBgNV BAMTDTZhZDg4NWNlLWM5M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3102irR8iy5+OAb10LBBiNAA682zvHFv4fWhjfpn+80gI2kBQ2fRu7CabzXz3 Azg1FSRAxjS5G5UB4PtJanXMnmZa7269V085tbpkwNeOVPg0BynioWTQQLHk/EIo 0CLZks55ufXGuig7KFrXnkCFoUD5fezrQFqfeJniEuwwlGXkaTysLX7cCdwWQXyZ SedJnKp5MPLk0YTtF6dPHAvR1sF2SZs5H0lY4Q091b20qvey9Va7s9BB9ke5x43j FSIc5V8f2HNCwXUekNjRGjyH0Q3fxbiz3y1QuFtwK7oeXI/14metM84FfdgQYOvn caRR8yIo3UkG7EkIqKSzDu59AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJgjN1fX6 v0wMUs0yM4Y2aLesigAwHwYDVR0jBBgwFoAUsZwyTEZ50uRWg0OJr/t1BO3wlx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0OENCL0RDNTZERUJDOUJD NTExRjE4RkUwMzc2QzU3MTFGOTcwL3Nad3lURVo1MHVSV2cwT0pyX3QxQk8zd2x4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1p3eVRFWjUwdVJXZzBPSnJfdDFCTzN3bHg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 OENCL0RDNTZERUJDOUJDNTExRjE4RkUwMzc2QzU3MTFGOTcwL3Nad3lURVo1MHVS V2cwT0pyX3QxQk8zd2x4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAus05aH5UAK/1pMic/Cia3vBIS2fxrSnh45NyOofSMilVMV3DRTVz25jINAgJT koYttApuY3Dbr3kZVpKgOKaJrZyClmtzAeoTSa6xaRzW+54RdNNKt5dY88CEkbat GqaigbQ0ZWpTWrGVR2xJ4phKUGm8vnSPpbgzBRMi2OlFD51Vzxb3HtGnLQv6Zul3 7hM8R2YViyQdxnQ3BUifI4o8KZkJ/hOemRjKDzoRSmuEtJwl+wATQi97jAEOf+mT taoO48g73ZWY3y7GyLNtEm31FMYeon8trAg+9dhZVgGoe5kHT+PQvZXRLtsffjfu INmCshxqlEzwOudmZWcM3K31 -----END CERTIFICATE-----Generated at Thu Oct 22 17:32:30 2026 by rpki-client