$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: k8N23LLVPCfA/uPS21QG90x9iQQ/NboDDHsp1+VOhxA= Subject key identifier: DC:A0:DE:2C:07:DD:BA:0F:B6:F3:40:23:FE:DC:B4:94:16:42:A4:35 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 03EB Signing time: Mon 05 Oct 2026 00:29:26 +0000 Manifest this update: Mon 05 Oct 2026 00:29:25 +0000 Manifest next update: Mon 12 Oct 2026 00:29:25 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: gHJPknqFGUxrs8uoOfmdzgXHde16JeZ2TjOTn8JMx0s=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: SWNOrvn46oDLTg74T4Hbq7v10iWBDBnWv7LSwdGRRPQ=) 3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: cduqgA+zcJPsXKGFgp0PZtzwmtzbUO7Jgg9Jg1V6cLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Oct 5 00:29:25 2026 GMT Not After : Oct 12 00:29:25 2026 GMT Subject: CN=6ac2ef66-0b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:7e:26:cd:26:f3:2b:f0:99:e0:87:12:3e: c8:8c:87:97:9f:ba:16:b7:70:85:fb:20:37:b3:2b: 2f:87:48:f2:77:84:0a:dc:db:41:f9:64:27:9f:c5: d9:45:b0:cc:26:84:7c:16:aa:a9:8e:dc:89:4b:e8: 0a:52:20:0e:9e:c3:72:62:e0:eb:ff:91:38:2b:79: 2c:ab:12:af:1c:ee:69:3e:b3:56:f3:db:66:33:fd: 6e:ec:ff:17:83:81:91:d2:72:5b:12:ef:d1:ef:3a: d9:1d:95:aa:81:7c:6e:15:39:25:28:e9:e9:5d:dd: 21:77:29:66:29:e3:e9:9d:6c:36:14:45:62:80:cc: 29:a9:70:4c:6c:53:c9:c3:b3:38:73:0f:02:31:14: 3a:9c:0c:8c:65:c2:2e:21:b1:92:6d:c3:f2:6c:db: 4a:0a:3c:a1:d4:07:90:47:98:32:2e:ec:45:92:63: a8:2a:16:4b:a9:68:bd:c6:34:d8:84:d9:3f:8a:25: 32:ce:14:40:3a:85:15:5d:26:ae:c8:b3:0a:a7:d5: 31:41:92:02:41:3b:d0:bb:92:62:45:0e:f5:f5:87: b5:5d:9f:2c:91:f6:ba:d5:77:9a:1f:92:9b:92:4c: 97:b6:ca:cb:6a:d5:14:2b:0c:9d:48:eb:b9:dc:cb: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:DE:2C:07:DD:BA:0F:B6:F3:40:23:FE:DC:B4:94:16:42:A4:35 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:83:a7:b3:0e:d3:e2:8b:cb:15:98:b3:a6:f4:15:b9:18: f7:7f:21:b8:b8:f4:2a:d7:41:cd:41:3a:ec:45:4e:f9:bc:cb: d8:2e:84:43:ed:82:7b:40:9d:e3:3f:e4:f5:35:af:76:c7:c7: 0d:4b:f2:62:22:8d:0f:b9:2c:7a:7f:7a:e8:22:db:d4:7b:1c: 23:b7:c6:78:34:dd:8c:37:ff:8b:1e:5e:dc:18:d4:13:c9:2f: a8:6c:e6:6f:78:db:d0:3c:5d:0d:20:83:43:d9:a7:c6:1c:fb: d6:98:6c:c9:a7:84:f8:55:46:d6:ca:4d:07:6d:d1:39:78:c7: 69:c0:99:4f:92:31:58:32:93:2e:78:b2:4a:2c:61:ef:75:4c: b3:38:28:5b:3b:59:df:4a:18:c0:16:77:6a:32:7f:6e:b6:81: 51:35:38:4b:8f:62:95:96:a1:c6:91:42:31:9a:4c:bf:73:fb: c6:cd:ee:94:88:b6:e2:bb:e9:ba:11:8f:44:76:8e:77:f6:67: d6:dd:2d:2a:24:7b:12:8d:7b:16:13:b6:e0:79:e7:86:aa:d4: 22:a7:23:b6:d7:b6:03:ba:5e:47:97:3b:42:ef:94:fd:9f:15: ad:34:a5:2e:c9:9a:2d:0d:9f:e4:d4:1f:e5:e8:e8:04:cb:01: fb:74:8a:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYxMDA1MDAyOTI1WhcNMjYxMDEyMDAyOTI1WjAYMRYwFAYD VQQDEw02YWMyZWY2Ni0wYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPF+Js0m8yvwmeCHEj7IjIeXn7oWt3CF+yA3sysvh0jyd4QK3NtB+WQnn8XZ RbDMJoR8FqqpjtyJS+gKUiAOnsNyYuDr/5E4K3ksqxKvHO5pPrNW89tmM/1u7P8X g4GR0nJbEu/R7zrZHZWqgXxuFTklKOnpXd0hdylmKePpnWw2FEVigMwpqXBMbFPJ w7M4cw8CMRQ6nAyMZcIuIbGSbcPybNtKCjyh1AeQR5gyLuxFkmOoKhZLqWi9xjTY hNk/iiUyzhRAOoUVXSauyLMKp9UxQZICQTvQu5JiRQ719Ye1XZ8skfa61XeaH5Kb kkyXtsrLatUUKwydSOu53Mt4YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyg3iwH 3boPtvNAI/7ctJQWQqQ1MB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl92Dp7MO0+KLyxWYs6b0FbkY938huLj0KtdBzUE67EVO+bzL2C6EQ+2Ce0Cd 4z/k9TWvdsfHDUvyYiKND7ksen966CLb1HscI7fGeDTdjDf/ix5e3BjUE8kvqGzm b3jb0DxdDSCDQ9mnxhz71phsyaeE+FVG1spNB23ROXjHacCZT5IxWDKTLniySixh 73VMszgoWztZ30oYwBZ3ajJ/braBUTU4S49ilZahxpFCMZpMv3P7xs3ulIi24rvp uhGPRHaOd/Zn1t0tKiR7Eo17FhO24HnnhqrUIqcjtte2A7peR5c7Qu+U/Z8VrTSl LsmaLQ2f5NQf5ejoBMsB+3SKog== -----END CERTIFICATE-----Generated at Mon Oct 5 06:59:25 2026 by rpki-client