$ rpki-client -vvvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: iIwwtY3D8CL7hDq1v8drmYvx2RM6GAYWOLUWr7GNqeE= Subject key identifier: FF:BD:B8:4C:19:5C:C9:C6:71:08:07:EF:BD:1B:88:1F:6C:31:5A:26 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 026B Signing time: Fri 11 Sep 2026 02:11:12 +0000 Manifest this update: Fri 11 Sep 2026 02:11:11 +0000 Manifest next update: Fri 18 Sep 2026 02:11:11 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: LTK4zdERDomY4XZ9qpmZkwuZTkEva5swjcGGlbOWQmw=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Sep 11 02:11:11 2026 GMT Not After : Sep 18 02:11:11 2026 GMT Subject: CN=6aa36340-c76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:ad:c3:4e:6e:47:d1:46:d5:0b:e7:16:f6: bb:12:c4:59:05:79:27:fa:02:c6:47:a6:e2:75:b1: 01:6e:50:aa:16:68:75:6b:fb:b9:75:3b:70:45:15: 06:04:da:ea:80:12:06:78:10:c9:d2:74:11:90:1c: 0f:db:cd:38:53:da:0e:b7:6b:03:d9:be:f4:bc:cb: a0:38:c6:c6:96:ff:55:48:d2:d4:06:0d:15:d3:3c: d3:6e:4f:41:e0:69:a8:b6:f8:79:28:ee:67:81:09: b7:b5:a0:bb:d9:fc:91:50:80:fb:c6:0a:2c:20:38: c0:7e:f0:92:6a:4c:3c:67:76:31:f9:85:64:49:1a: 69:f6:86:eb:c6:94:86:29:da:34:c7:aa:1b:b3:94: 78:81:ba:fe:5e:79:89:5d:46:81:f3:d9:a9:e7:5b: 17:8e:92:b6:17:db:45:ce:4c:43:c3:ae:e4:47:ab: bf:9d:05:f7:6b:b4:c3:ec:4b:9a:24:c4:3c:66:6b: 49:f5:6d:a8:02:72:61:7a:88:8c:b4:72:55:22:9b: d9:52:33:de:6e:00:4f:d5:df:d8:5d:05:29:1d:fb: 8d:87:2b:c5:db:8f:8f:a8:00:44:aa:4d:05:2c:d6: 06:e1:9c:64:79:e5:0f:a5:63:71:4f:d3:33:80:89: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:B8:4C:19:5C:C9:C6:71:08:07:EF:BD:1B:88:1F:6C:31:5A:26 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:66:14:39:11:0c:c6:18:38:11:82:81:2b:4d:ef:07:eb:00: 79:ef:04:ff:f9:35:c9:fb:33:fc:cb:eb:c0:39:65:50:f8:fd: a1:34:43:ad:53:34:b7:30:25:7f:36:53:b8:ac:81:c5:ef:3d: 9f:a2:06:cf:e4:36:0f:cd:3d:5d:82:c0:09:00:bf:b8:d3:a8: d4:b6:9e:49:67:01:86:5f:7d:67:58:60:50:0f:13:2c:9f:2c: 55:f4:5d:85:67:6d:c3:10:44:a1:ae:e1:fc:1e:a8:a8:f6:12: b2:d8:0e:19:dc:c4:14:db:92:74:e9:e0:05:6d:30:41:ec:51: c0:49:cc:26:80:60:b6:77:67:f5:27:4d:1f:7a:27:db:7d:e1: 77:24:6b:3f:07:08:14:1a:51:fc:f5:9a:32:80:5a:57:dc:77: a3:a7:97:1d:0b:53:6b:ca:f6:6e:80:ee:ef:69:bb:58:43:8b: 24:67:1c:ba:f0:50:f3:d8:4a:94:70:58:b0:d8:57:6a:1a:1a: df:cf:42:21:50:cf:e8:3c:12:ed:14:a8:4b:ce:50:3d:87:07: 2a:3a:f2:2c:41:53:e8:13:fc:43:48:ed:82:1d:ab:34:9c:27: 49:60:84:2e:71:22:93:86:12:9a:3c:0e:af:a9:2c:ef:e9:37: e9:72:c5:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwOTExMDIxMTExWhcNMjYwOTE4MDIxMTExWjAYMRYwFAYD VQQDEw02YWEzNjM0MC1jNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYCtw05uR9FG1QvnFva7EsRZBXkn+gLGR6bidbEBblCqFmh1a/u5dTtwRRUG BNrqgBIGeBDJ0nQRkBwP2804U9oOt2sD2b70vMugOMbGlv9VSNLUBg0V0zzTbk9B 4Gmotvh5KO5ngQm3taC72fyRUID7xgosIDjAfvCSakw8Z3Yx+YVkSRpp9obrxpSG Kdo0x6obs5R4gbr+XnmJXUaB89mp51sXjpK2F9tFzkxDw67kR6u/nQX3a7TD7Eua JMQ8ZmtJ9W2oAnJheoiMtHJVIpvZUjPebgBP1d/YXQUpHfuNhyvF24+PqABEqk0F LNYG4ZxkeeUPpWNxT9MzgIl+uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+9uEwZ XMnGcQgH770biB9sMVomMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUmYUOREMxhg4EYKBK03vB+sAee8E//k1yfsz/MvrwDllUPj9oTRDrVM0tzAl fzZTuKyBxe89n6IGz+Q2D809XYLACQC/uNOo1LaeSWcBhl99Z1hgUA8TLJ8sVfRd hWdtwxBEoa7h/B6oqPYSstgOGdzEFNuSdOngBW0wQexRwEnMJoBgtndn9SdNH3on 233hdyRrPwcIFBpR/PWaMoBaV9x3o6eXHQtTa8r2boDu72m7WEOLJGccuvBQ89hK lHBYsNhXahoa389CIVDP6DwS7RSoS85QPYcHKjryLEFT6BP8Q0jtgh2rNJwnSWCE LnEik4YSmjwOr6ks7+k36XLFJw== -----END CERTIFICATE-----Generated at Fri Sep 11 13:54:33 2026 by rpki-client