$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: XvifsmaT4j4JrrtMOMKtwW1HnABsD2hsA/q7NT4298M= Subject key identifier: B3:5C:CB:47:08:25:A4:E3:E7:47:11:96:13:DD:B7:1A:97:0C:32:4D Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0D33 Signing time: Fri 02 Oct 2026 18:27:25 +0000 Manifest this update: Fri 02 Oct 2026 18:27:24 +0000 Manifest next update: Fri 09 Oct 2026 18:27:24 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: AwWIxGC9T0qazdGL/PYNSuhivpGfNw/yzisT8OomB3c=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: +BPBYR1M3IpRWCz8iKJdYsyNMyw7jMfkzwh68F3jNCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Oct 2 18:27:24 2026 GMT Not After : Oct 9 18:27:24 2026 GMT Subject: CN=6abff78d-19e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:22:ac:44:d1:ca:55:4a:d8:cc:24:a9:a5: 68:13:61:aa:97:4c:79:eb:96:ea:6e:2e:52:04:fb: a8:8e:a4:5b:66:ae:0d:79:38:bf:95:75:63:2e:cd: f2:bd:9c:63:73:f6:e0:42:f1:c6:08:ad:d6:f8:34: 87:4f:77:33:ea:b8:e3:66:8e:b0:8c:9f:c2:e5:a5: a4:da:e9:55:5c:7d:90:99:f3:b3:e7:f2:c0:d0:50: ca:b5:a5:27:66:fa:4d:16:e7:48:4b:ad:27:89:3d: 9a:1b:e3:59:8d:48:f2:04:4c:15:73:76:c8:05:82: cf:fd:46:b6:cc:89:6b:77:1d:12:70:04:73:cf:1a: 62:5b:98:1a:d0:5a:7f:b5:b4:49:73:69:de:da:44: a3:8e:5e:28:e4:08:82:e9:c9:f2:25:cc:3b:c8:10: 14:d7:8e:7b:78:8e:62:12:c3:fe:cc:6b:44:36:e6: 91:d0:19:76:85:39:60:dc:08:a2:f9:10:54:26:82: 7a:1d:f2:65:74:3d:44:9a:4e:4d:8c:41:ee:fb:0d: 19:7f:d1:19:40:c1:f1:9b:08:f7:1e:b9:62:7a:ae: 85:68:2e:a5:65:c7:84:e0:3a:ba:f8:ae:f4:44:bf: e6:97:2c:4d:a7:69:7e:b3:a2:8b:20:e6:33:ec:47: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:CB:47:08:25:A4:E3:E7:47:11:96:13:DD:B7:1A:97:0C:32:4D X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:89:e5:2a:a2:e6:ed:a3:f8:b7:22:e4:72:ab:9e:e8:35:97: 01:54:fe:98:90:83:e8:de:a1:2a:ec:9b:74:dc:6a:21:f8:e5: 72:9a:a0:36:68:3d:3b:6a:63:70:53:e6:e7:f1:b3:34:2f:11: 27:af:be:c2:1b:2a:5c:4e:21:e9:c0:f6:84:65:1e:76:66:5b: 92:77:cf:9f:75:7e:5c:8e:e6:cb:93:e7:e5:f1:02:be:ac:3c: 4a:57:aa:55:8a:99:d3:ac:0c:6d:95:37:ad:0f:e8:cc:8a:76: 21:2e:82:e9:ea:15:88:3b:2a:e1:31:93:ee:f8:36:45:cb:1e: dc:ed:87:0b:a2:11:43:a1:10:09:cc:8e:98:d1:6e:b3:ef:a7: 27:09:b8:c1:24:7e:3f:0a:5e:c4:70:fe:cb:fe:b4:00:1a:dc: 35:ed:a3:2e:5a:3b:3e:18:e7:49:7d:25:34:6e:94:1f:35:bb: 6f:ee:fd:a0:0e:b3:98:31:a3:cf:fd:15:63:f7:a1:64:f2:b6: 13:e3:da:fa:ff:5a:56:71:44:39:d7:75:ca:fe:d6:dd:25:03: ef:55:34:ba:3f:1a:eb:2e:a9:24:47:ce:56:0c:9b:c9:ac:cd: 1e:b8:19:12:b7:b4:d8:42:b3:df:38:c5:a0:76:05:11:39:bc: eb:30:c0:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjYxMDAyMTgyNzI0WhcNMjYxMDA5MTgyNzI0WjAYMRYwFAYD VQQDEw02YWJmZjc4ZC0xOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc4irETRylVK2MwkqaVoE2Gql0x565bqbi5SBPuojqRbZq4NeTi/lXVjLs3y vZxjc/bgQvHGCK3W+DSHT3cz6rjjZo6wjJ/C5aWk2ulVXH2QmfOz5/LA0FDKtaUn ZvpNFudIS60niT2aG+NZjUjyBEwVc3bIBYLP/Ua2zIlrdx0ScARzzxpiW5ga0Fp/ tbRJc2ne2kSjjl4o5AiC6cnyJcw7yBAU1457eI5iEsP+zGtENuaR0Bl2hTlg3Aii +RBUJoJ6HfJldD1Emk5NjEHu+w0Zf9EZQMHxmwj3Hrlieq6FaC6lZceE4Dq6+K70 RL/mlyxNp2l+s6KLIOYz7EcepwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNcy0cI JaTj50cRlhPdtxqXDDJNMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjInlKqLm7aP4tyLkcque6DWXAVT+mJCD6N6hKuybdNxqIfjlcpqgNmg9O2pj cFPm5/GzNC8RJ6++whsqXE4h6cD2hGUedmZbknfPn3V+XI7my5Pn5fECvqw8Sleq VYqZ06wMbZU3rQ/ozIp2IS6C6eoViDsq4TGT7vg2Rcse3O2HC6IRQ6EQCcyOmNFu s++nJwm4wSR+PwpexHD+y/60ABrcNe2jLlo7PhjnSX0lNG6UHzW7b+79oA6zmDGj z/0VY/ehZPK2E+Pa+v9aVnFEOdd1yv7W3SUD71U0uj8a6y6pJEfOVgybyazNHrgZ Ere02EKz3zjFoHYFETm86zDAwg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:30:05 2026 by rpki-client