$ rpki-client -vvvf rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft File: zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft (raw, json) Hash identifier: jwL84ED8z6t3ggPtyNt8sucqgJukfhBMUVkFKTqFLCk= Subject key identifier: 31:17:5C:97:4F:A5:A3:2F:AD:A0:5E:F3:A5:50:9D:9B:AE:C7:EE:D1 Authority key identifier: CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 Certificate issuer: /CN=A91834CD/serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft Manifest number: 1C Signing time: Fri 11 Sep 2026 09:02:12 +0000 Manifest this update: Fri 11 Sep 2026 09:02:12 +0000 Manifest next update: Fri 18 Sep 2026 09:02:12 +0000 Files and hashes: 1: zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl (hash: 5bGkds05ljPSVgQPvA6gDaW7L/x4pOX6FcSWChKxFq0=) 2: 22D62D36898111F1A3670DB57111F970.roa (hash: jmB4MGZHwijIKXiayoobyScKrPUI2NpE/HjML3cPfk4=) 3: 2204A202898111F1A3670DB57111F970.roa (hash: srqwVWzCJpkzBj2Y9MyPZrLADSShhS9dMHGlJluKLnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834CD, serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Validity Not Before: Sep 11 09:02:12 2026 GMT Not After : Sep 18 09:02:12 2026 GMT Subject: CN=6aa3c394-deb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:6d:e0:09:43:d7:ca:7e:1f:f4:24:d4:b9: 40:66:40:b6:95:cd:61:b3:f7:a1:8d:0f:01:2e:9a: d7:86:d7:a1:8f:95:5e:f8:02:97:71:d6:f5:46:1c: 38:85:0b:5c:a1:08:29:c8:5c:90:bf:c5:96:8a:78: f9:d5:10:67:e4:c3:7d:89:05:af:29:30:ab:92:1a: 32:da:e5:ea:b5:50:3e:b4:32:b4:e7:eb:65:bf:3d: 4a:f8:b6:d5:ec:b1:db:b8:72:a2:93:b9:88:b2:8d: 5a:9a:66:f2:d0:26:a0:78:a2:b5:05:8b:69:e5:34: 36:7b:bf:8c:8c:44:d7:59:d5:c0:1e:b1:5e:36:30: b3:2e:bc:1e:96:62:83:2e:7b:14:2b:c2:b2:2a:3e: 91:6d:91:fa:da:d7:6b:a6:94:76:10:1c:2e:59:8a: ae:4f:5c:82:cd:2d:4e:e8:4e:45:11:8e:23:fd:9e: 4b:f9:56:2e:25:08:40:8d:92:e1:be:c1:20:77:82: a7:aa:54:2d:b3:31:04:70:0b:ec:ab:7c:a5:36:72: 96:10:d1:c0:1c:c6:3f:be:2b:5c:ba:63:8d:ac:74: e4:70:8b:47:7a:98:de:31:53:5d:9a:04:40:05:ce: 2f:5d:be:77:6b:4b:b0:ca:ba:ea:30:89:a7:7a:29: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:5C:97:4F:A5:A3:2F:AD:A0:5E:F3:A5:50:9D:9B:AE:C7:EE:D1 X509v3 Authority Key Identifier: keyid:CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:a3:19:cf:31:98:5f:31:8f:74:a0:9e:b2:74:9e:77:54: 04:7c:88:8f:d8:ee:f7:5e:d8:01:ab:9e:0c:28:ea:1a:c6:93: 31:8d:24:3d:f0:cf:f5:89:18:f6:a5:9d:b3:cc:5c:9a:cb:cd: b7:2b:7a:a9:ca:eb:01:a3:1a:3f:50:29:be:70:16:6e:2e:ca: ff:61:fe:d5:19:d6:00:16:3d:35:95:e2:a5:1a:a3:e0:43:54: 6c:9f:a1:f4:05:ae:c7:76:8f:bc:cd:44:a6:e1:40:39:fb:a0: fc:01:2f:38:87:3f:09:ae:c6:45:56:04:6b:1e:fb:59:e4:21: 62:6f:24:d1:9d:2f:c3:dd:bc:62:3c:5e:7d:37:23:90:49:24: 8c:d1:01:5c:0b:f6:0f:b6:ba:4d:79:37:bf:19:60:f5:29:6c: 40:13:e7:31:44:41:fd:fb:c5:24:c6:7a:69:85:4c:c3:2c:fb: 85:d5:ce:e9:e9:16:2c:4f:c0:55:d1:94:8a:fc:ab:af:69:71: cc:d3:34:51:94:6a:a9:fa:a2:c0:73:eb:10:33:72:f4:45:85: a6:7a:e7:01:01:18:da:03:d4:0f:bc:e7:3e:17:ba:c8:09:f6: 0a:40:dc:c1:6d:5f:c8:c8:d7:48:1d:40:a0:34:ee:74:10:04: e3:09:99:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzRDRDExMC8GA1UEBRMoQ0Q3ODcyQUFGNzQ3QkFFMDNBNjExOEM4MzgxNDQxRkY5 ODdGQ0Q3NTAeFw0yNjA5MTEwOTAyMTJaFw0yNjA5MTgwOTAyMTJaMBgxFjAUBgNV BAMTDTZhYTNjMzk0LWRlYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg923gCUPXyn4f9CTUuUBmQLaVzWGz96GNDwEumteG16GPlV74Apdx1vVGHDiF C1yhCCnIXJC/xZaKePnVEGfkw32JBa8pMKuSGjLa5eq1UD60MrTn62W/PUr4ttXs sdu4cqKTuYiyjVqaZvLQJqB4orUFi2nlNDZ7v4yMRNdZ1cAesV42MLMuvB6WYoMu exQrwrIqPpFtkfra12umlHYQHC5Ziq5PXILNLU7oTkURjiP9nkv5Vi4lCECNkuG+ wSB3gqeqVC2zMQRwC+yrfKU2cpYQ0cAcxj++K1y6Y42sdORwi0d6mN4xU12aBEAF zi9dvndrS7DKuuowiad6Kcm5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMRdcl0+l oy+toF7zpVCdm67H7tEwHwYDVR0jBBgwFoAUzXhyqvdHuuA6YRjIOBRB/5h/zXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNENELzgyMEYzMUQ2ODk4 MDExRjFCNkIwRUYwNzcxMTFGOTcwL3pYaHlxdmRIdXVBNllSaklPQlJCXzVoX3pY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelhoeXF2ZEh1dUE2WVJqSU9CUkJfNWhfelhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NENELzgyMEYzMUQ2ODk4MDExRjFCNkIwRUYwNzcxMTFGOTcwL3pYaHlxdmRIdXVB NllSaklPQlJCXzVoX3pYVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB30aMZzzGYXzGPdKCesnSed1QEfIiP2O73XtgBq54MKOoaxpMxjSQ98M/1iRj2 pZ2zzFyay823K3qpyusBoxo/UCm+cBZuLsr/Yf7VGdYAFj01leKlGqPgQ1Rsn6H0 Ba7Hdo+8zUSm4UA5+6D8AS84hz8JrsZFVgRrHvtZ5CFibyTRnS/D3bxiPF59NyOQ SSSM0QFcC/YPtrpNeTe/GWD1KWxAE+cxREH9+8UkxnpphUzDLPuF1c7p6RYsT8BV 0ZSK/KuvaXHM0zRRlGqp+qLAc+sQM3L0RYWmeucBARjaA9QPvOc+F7rICfYKQNzB bV/IyNdIHUCgNO50EATjCZn1 -----END CERTIFICATE-----Generated at Fri Sep 11 12:09:34 2026 by rpki-client