$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: hH3OkfajBd8yoDDsnt9yY2ycbNn+vBfNtkXOdcesTrw= Subject key identifier: 6F:BA:17:98:5A:5D:FC:5D:70:8D:09:DD:34:8D:DA:BA:63:8A:BE:63 Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: F2 Signing time: Wed 21 Oct 2026 06:55:52 +0000 Manifest this update: Wed 21 Oct 2026 06:55:51 +0000 Manifest next update: Wed 28 Oct 2026 06:55:51 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: fPdZmWwrnyhwUjc8wKoW2cVzYYEE4A4H17ya/vngirI=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: kSmrHi9JwLiLNm5x35+feh2MNm4COGF5CeDRCfiJLgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Oct 21 06:55:51 2026 GMT Not After : Oct 28 06:55:51 2026 GMT Subject: CN=6ad861f8-d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:d6:70:b8:cd:88:9f:38:d6:e3:29:7b:8a: 0a:49:03:d5:8a:e3:08:41:9b:09:e9:a5:a5:dd:04: 55:37:c7:9f:ee:19:c5:0d:8c:b3:13:7b:ae:ef:b0: 72:ae:6e:0d:1b:99:be:07:36:8a:41:8a:ba:93:e6: 61:33:ce:e3:5f:9d:d6:0d:13:9a:e1:9a:b7:33:29: 17:36:92:8e:9e:ce:73:7c:f3:b3:b0:00:d9:00:55: a5:c1:4c:31:23:4e:f0:d7:08:59:3f:81:a6:79:14: 9e:35:89:99:b0:93:36:bd:f7:79:70:93:a7:76:9a: c7:da:44:48:78:2c:e2:5b:86:2b:43:9e:36:d9:5b: 57:4f:04:7f:0d:df:80:f5:73:95:08:d2:3c:88:96: 61:cc:47:78:e0:a1:0b:dc:2a:60:d0:24:e7:61:94: 7c:43:db:5f:1d:c1:6d:db:0a:70:b0:46:75:e8:d0: 32:2b:5e:17:24:8e:62:c5:19:10:39:40:ee:13:28: db:79:fe:53:0b:69:66:40:08:52:fb:54:02:67:37: 1b:bc:1c:08:21:f6:76:48:a9:c2:12:cc:6b:00:bd: 29:32:d1:26:8d:5c:bc:4e:42:21:73:55:ce:66:e3: a2:e6:cb:04:5b:79:5c:0e:0f:80:6a:f3:99:f0:1b: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:17:98:5A:5D:FC:5D:70:8D:09:DD:34:8D:DA:BA:63:8A:BE:63 X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0a:d3:45:75:19:21:c0:ab:5b:a9:c8:19:b0:55:36:bc:44: 39:40:e3:f9:b9:93:30:17:c2:cb:2b:77:2e:88:61:4b:01:79: 48:3a:bf:c5:c4:b4:5c:07:ef:a4:b7:97:2a:6f:3d:48:7a:ef: d3:d0:54:8a:ed:11:a6:a6:ef:5f:41:56:ec:1b:f2:8c:c4:8d: 97:c1:25:c4:8c:fa:77:ff:8a:6e:70:56:92:49:67:86:94:bd: 23:d7:67:28:a1:2c:fc:9b:de:c2:35:0e:84:bd:f1:9d:49:80: b5:19:8b:d9:c1:f4:85:de:9d:c3:b5:9c:5d:a6:a9:b4:76:ec: 78:26:90:c2:9e:79:5d:c9:72:e9:b4:be:b7:ca:c4:34:f3:c8: bb:82:fd:49:7a:a0:3c:c6:16:43:1f:fa:a0:76:8d:77:e0:64: e2:90:f3:b4:bc:a9:9c:7b:8e:ff:88:89:9d:05:40:d7:07:89: 05:5d:55:6f:d8:1d:37:12:d0:06:5f:6f:bd:18:31:8b:0c:e3: 45:1c:02:5d:82:8e:32:ff:55:55:f4:7d:d5:c3:ad:ee:4d:e1: 59:a2:6f:16:ef:00:ee:89:aa:ca:16:30:25:1c:9b:d9:7c:be: ad:29:4b:c1:05:50:1a:6f:ad:48:d4:55:7a:35:b7:02:eb:03: 4a:14:0c:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw M0QzRjdCMEQwHhcNMjYxMDIxMDY1NTUxWhcNMjYxMDI4MDY1NTUxWjAYMRYwFAYD VQQDEw02YWQ4NjFmOC1kOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1avWcLjNiJ841uMpe4oKSQPViuMIQZsJ6aWl3QRVN8ef7hnFDYyzE3uu77By rm4NG5m+BzaKQYq6k+ZhM87jX53WDROa4Zq3MykXNpKOns5zfPOzsADZAFWlwUwx I07w1whZP4GmeRSeNYmZsJM2vfd5cJOndprH2kRIeCziW4YrQ5422VtXTwR/Dd+A 9XOVCNI8iJZhzEd44KEL3Cpg0CTnYZR8Q9tfHcFt2wpwsEZ16NAyK14XJI5ixRkQ OUDuEyjbef5TC2lmQAhS+1QCZzcbvBwIIfZ2SKnCEsxrAL0pMtEmjVy8TkIhc1XO ZuOi5ssEW3lcDg+AavOZ8BuxxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+6F5ha XfxdcI0J3TSN2rpjir5jMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS85MDRGODcwQTYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYz NjdpWnB5R2NPZzhEMF9ldzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXQrTRXUZIcCrW6nIGbBVNrxEOUDj+bmTMBfCyyt3LohhSwF5SDq/xcS0XAfv pLeXKm89SHrv09BUiu0RpqbvX0FW7BvyjMSNl8ElxIz6d/+KbnBWkklnhpS9I9dn KKEs/JvewjUOhL3xnUmAtRmL2cH0hd6dw7WcXaaptHbseCaQwp55Xcly6bS+t8rE NPPIu4L9SXqgPMYWQx/6oHaNd+Bk4pDztLypnHuO/4iJnQVA1weJBV1Vb9gdNxLQ Bl9vvRgxiwzjRRwCXYKOMv9VVfR91cOt7k3hWaJvFu8A7omqyhYwJRyb2Xy+rSlL wQVQGm+tSNRVejW3AusDShQMiA== -----END CERTIFICATE-----Generated at Thu Oct 22 11:41:23 2026 by rpki-client