$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft File: zfpbwg4xKRmsax7K2Stx5zSmALA.mft (raw, json) Hash identifier: zrynfS1XUtZmM62eH5npUNUKXf7eGydgs1Gv6MXgJx0= Subject key identifier: BD:F5:C7:79:2A:70:F2:D0:81:69:BF:06:89:EC:8E:57:0B:15:7C:80 Authority key identifier: CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0 Certificate issuer: /CN=A91731A3/serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft Manifest number: 27 Signing time: Sun 25 Oct 2026 09:11:15 +0000 Manifest this update: Sun 25 Oct 2026 09:11:14 +0000 Manifest next update: Sun 01 Nov 2026 09:11:14 +0000 Files and hashes: 1: zfpbwg4xKRmsax7K2Stx5zSmALA.crl (hash: Zip+pAn2xUedNJ395BVPdQXyUjAxx3LgijpX4taURdA=) 2: FF8ED6FA979211F1B1FF570F5011F970.roa (hash: Lh2K/wF9t2esCreJupluX3wR+8TGZ0wv94ej3vVe05c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731A3, serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0 Validity Not Before: Oct 25 09:11:14 2026 GMT Not After : Nov 1 09:11:14 2026 GMT Subject: CN=6addc7b3-efc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:94:ed:ae:97:1a:80:39:26:d4:d2:f4:08: f7:fa:8b:d3:6f:3d:a3:17:fd:6d:34:59:5b:15:bb: d7:96:cc:45:bf:51:5e:07:b7:38:f4:03:ec:97:30: 09:03:fe:4a:5a:56:4b:3f:51:cc:56:c4:73:b8:a4: 05:08:4a:66:37:e1:e5:5a:b8:c5:43:2c:b6:90:e7: da:d5:ec:02:7a:bb:67:c6:a5:a5:a5:ff:25:77:12: 96:83:0f:b7:a3:c2:df:a0:c8:7a:a3:88:d5:ec:30: a7:0b:93:d7:c3:6f:78:bd:87:c4:57:74:18:34:30: 53:ea:38:5e:ae:59:79:7c:56:3a:f2:16:7d:e3:73: 85:d1:b7:de:a8:d1:0f:f4:9b:a1:38:08:99:c1:4b: 3c:6a:b6:aa:59:f2:61:da:91:6a:2b:45:72:a0:34: c0:1f:dd:02:de:02:49:d9:46:f0:17:36:17:da:da: 8c:37:25:95:d5:f0:b9:6a:fc:1d:81:ab:69:0b:1d: 1c:7d:8c:66:24:ce:9e:a6:25:52:60:69:85:6d:32: 12:7f:5a:7f:00:7d:73:b4:ec:66:ed:8a:a2:1d:32: 98:90:af:0b:65:97:07:c3:b4:64:89:5a:08:8a:77: 53:d2:e7:e5:9a:7b:2a:cd:51:e8:2b:23:bd:8f:70: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:C7:79:2A:70:F2:D0:81:69:BF:06:89:EC:8E:57:0B:15:7C:80 X509v3 Authority Key Identifier: keyid:CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b6:c3:a6:f2:dc:e0:4d:b1:7b:9f:2b:20:a9:86:68:ec:af: 8a:5c:43:e0:ca:55:d0:ce:ef:cf:a2:a5:e3:8b:08:55:00:60: ef:fd:e1:49:68:f1:9a:6d:a8:88:d3:68:4e:07:f9:69:47:ef: 3b:f8:e5:72:36:fe:5e:c4:2f:25:cf:0e:c2:7d:3c:06:db:72: 64:91:e7:81:41:27:d1:1d:7d:60:8d:12:51:af:12:5f:d6:b8: 97:37:8c:4b:3d:11:4f:fd:1f:4a:01:13:f4:24:6c:de:81:9d: 5f:5f:a3:5f:24:df:99:9a:c8:7d:3d:50:ab:4d:ae:e7:ac:a9: 39:28:dd:44:e1:e9:d0:a3:31:8b:03:42:23:c2:5e:ad:0a:32: 30:ab:50:47:13:44:34:7f:6b:a7:1a:a2:22:0a:e2:23:a6:6a: 1f:ed:d5:64:32:fa:ba:7e:81:5e:ef:1d:df:4c:0a:90:12:1f: 02:8c:40:67:07:00:e5:a2:30:85:8f:b3:30:07:7b:22:eb:ba: 4e:ce:22:43:46:33:12:25:0b:f8:ad:b1:a5:1e:11:d8:14:ff: 9a:97:48:f3:8b:88:fd:72:a7:7a:01:5f:48:2a:4f:b3:55:80: 0f:ef:3f:f0:d4:12:1c:a8:f4:ac:0c:bf:7a:67:0e:80:2b:71: 9e:8b:d5:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBMzExMC8GA1UEBRMoQ0RGQTVCQzIwRTMxMjkxOUFDNkIxRUNBRDkyQjcxRTcz NEE2MDBCMDAeFw0yNjEwMjUwOTExMTRaFw0yNjExMDEwOTExMTRaMBgxFjAUBgNV BAMTDTZhZGRjN2IzLWVmYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE7ZTtrpcagDkm1NL0CPf6i9NvPaMX/W00WVsVu9eWzEW/UV4Htzj0A+yXMAkD /kpaVks/UcxWxHO4pAUISmY34eVauMVDLLaQ59rV7AJ6u2fGpaWl/yV3EpaDD7ej wt+gyHqjiNXsMKcLk9fDb3i9h8RXdBg0MFPqOF6uWXl8VjryFn3jc4XRt96o0Q/0 m6E4CJnBSzxqtqpZ8mHakWorRXKgNMAf3QLeAknZRvAXNhfa2ow3JZXV8Llq/B2B q2kLHRx9jGYkzp6mJVJgaYVtMhJ/Wn8AfXO07GbtiqIdMpiQrwtllwfDtGSJWgiK d1PS5+WaeyrNUegrI72PcJl1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvfXHeSpw 8tCBab8GieyOVwsVfIAwHwYDVR0jBBgwFoAUzfpbwg4xKRmsax7K2Stx5zSmALAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUEzLzlGQTFCMzAyOTc5 MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jtc2F4N0syU3R4NXpTbUFM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZwYndnNHhLUm1zYXg3SzJTdHg1elNtQUxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUEzLzlGQTFCMzAyOTc5MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jt c2F4N0syU3R4NXpTbUFMQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdtsOm8tzgTbF7nysgqYZo7K+KXEPgylXQzu/PoqXjiwhVAGDv/eFJaPGabaiI 02hOB/lpR+87+OVyNv5exC8lzw7CfTwG23JkkeeBQSfRHX1gjRJRrxJf1riXN4xL PRFP/R9KARP0JGzegZ1fX6NfJN+Zmsh9PVCrTa7nrKk5KN1E4enQozGLA0Ijwl6t CjIwq1BHE0Q0f2unGqIiCuIjpmof7dVkMvq6foFe7x3fTAqQEh8CjEBnBwDlojCF j7MwB3si67pOziJDRjMSJQv4rbGlHhHYFP+al0jzi4j9cqd6AV9IKk+zVYAP7z/w 1BIcqPSsDL96Zw6AK3Gei9V3 -----END CERTIFICATE-----Generated at Sun Oct 25 23:30:27 2026 by rpki-client