$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: +5Bus0L5FzRV204d0C1HCVFCbtwNguPcYSRTCuqCI4w= Subject key identifier: 2E:B2:EF:D5:89:16:11:AB:36:E9:5E:28:64:EA:C5:A3:EC:5D:AF:88 Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 0299 Signing time: Sat 03 Oct 2026 02:18:07 +0000 Manifest this update: Sat 03 Oct 2026 02:18:06 +0000 Manifest next update: Sat 10 Oct 2026 02:18:06 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: DWmqeSLL7OfJ228ll4s8+OIv6J1KUlL7upDJFKbjF7I=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: 4SvZhtnQRaMclxVMRPekHetkaBiZHBA089g6qLYw1BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: Oct 3 02:18:06 2026 GMT Not After : Oct 10 02:18:06 2026 GMT Subject: CN=6ac065df-f5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:1a:0f:d3:ea:ab:7a:7d:be:c4:7a:7f:7f: 69:69:16:46:bc:56:73:cc:58:1b:98:88:7b:c2:c2: da:ec:04:14:7c:8b:34:a6:f7:39:41:bd:23:ba:14: b9:8c:ce:bd:46:b7:22:02:be:ff:77:b7:62:92:92: b3:56:f0:3d:d4:53:4a:79:f7:47:74:64:fc:29:c8: 09:5a:6e:8a:7d:e6:26:cf:64:1c:6c:8d:1c:97:f6: d9:0a:14:85:5c:58:d7:62:15:01:22:f6:77:a3:80: 77:ab:93:d2:d0:1d:9b:77:25:90:2f:d0:4e:f5:26: 7a:b5:07:34:5d:12:1d:72:6c:7d:25:1f:1b:85:2b: 68:9d:c5:a1:dc:37:a7:6e:41:0b:7e:1a:51:16:c3: 48:a1:b7:3b:f0:a3:58:c3:cf:24:c0:8b:4b:ff:17: 5f:f0:9a:b6:40:18:37:47:69:6c:4b:4c:5c:c7:3a: 14:38:4f:ca:12:6f:b0:fb:85:c7:9f:35:07:c5:90: af:6f:52:57:b3:4e:ea:a9:5b:5e:a0:7b:f9:11:83: 06:5c:cd:32:62:ab:5a:aa:2d:f5:ad:d0:e8:18:28: 35:ac:6b:55:fb:cd:81:bc:53:f9:7f:de:a7:f8:f3: 28:f7:a7:b9:e7:2b:79:a4:20:a9:45:71:46:cf:44: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:EF:D5:89:16:11:AB:36:E9:5E:28:64:EA:C5:A3:EC:5D:AF:88 X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1b:82:4c:28:f1:f6:a8:d7:0e:6b:da:e0:1c:82:f9:4b:b2: 49:1b:77:b7:9a:1f:8e:40:b9:05:57:d5:c3:eb:19:e5:96:d1: d7:94:78:df:e6:3f:7f:1d:d6:99:8a:8c:e3:d7:33:56:60:9c: 1c:14:a1:33:6a:e3:07:98:d9:8b:5f:10:2f:25:46:fc:c1:dc: 97:b8:4c:87:63:db:53:2a:17:02:69:2c:cc:e3:9a:40:4b:dc: 72:a6:0f:2d:56:fc:86:c6:1a:54:f2:64:6d:2d:ac:20:d3:f1: 96:a6:28:53:7f:47:91:25:96:aa:18:d6:8b:9d:28:f6:65:dd: 72:13:57:c3:67:be:19:29:da:a8:60:26:30:94:a0:97:59:6a: ca:19:b3:95:e1:29:8e:1c:d8:43:53:bc:06:7e:40:f3:27:0f: 11:f9:56:14:cb:38:92:6a:ad:66:c1:96:f2:bd:11:d2:2b:09: 60:b0:0e:74:eb:82:43:14:f3:e1:ca:31:90:b5:3b:cb:02:b0: 18:fb:a8:a0:e2:9c:1c:94:67:63:ee:b2:73:38:47:a3:5b:4c: 8f:9e:20:96:40:2f:af:b9:5c:a3:f9:18:80:15:39:ba:94:61: 20:89:31:5b:03:d9:ed:4f:01:6c:eb:03:d7:3e:86:07:59:37: 62:24:75:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjYxMDAzMDIxODA2WhcNMjYxMDEwMDIxODA2WjAYMRYwFAYD VQQDEw02YWMwNjVkZi1mNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz4aD9Pqq3p9vsR6f39paRZGvFZzzFgbmIh7wsLa7AQUfIs0pvc5Qb0juhS5 jM69RrciAr7/d7dikpKzVvA91FNKefdHdGT8KcgJWm6KfeYmz2QcbI0cl/bZChSF XFjXYhUBIvZ3o4B3q5PS0B2bdyWQL9BO9SZ6tQc0XRIdcmx9JR8bhStoncWh3Den bkELfhpRFsNIobc78KNYw88kwItL/xdf8Jq2QBg3R2lsS0xcxzoUOE/KEm+w+4XH nzUHxZCvb1JXs07qqVteoHv5EYMGXM0yYqtaqi31rdDoGCg1rGtV+82BvFP5f96n +PMo96e55yt5pCCpRXFGz0TLnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6y79WJ FhGrNuleKGTqxaPsXa+IMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqxuCTCjx9qjXDmva4ByC+UuySRt3t5ofjkC5BVfVw+sZ5ZbR15R43+Y/fx3W mYqM49czVmCcHBShM2rjB5jZi18QLyVG/MHcl7hMh2PbUyoXAmkszOOaQEvccqYP LVb8hsYaVPJkbS2sINPxlqYoU39HkSWWqhjWi50o9mXdchNXw2e+GSnaqGAmMJSg l1lqyhmzleEpjhzYQ1O8Bn5A8ycPEflWFMs4kmqtZsGW8r0R0isJYLAOdOuCQxTz 4coxkLU7ywKwGPuooOKcHJRnY+6yczhHo1tMj54glkAvr7lco/kYgBU5upRhIIkx WwPZ7U8BbOsD1z6GB1k3YiR1Og== -----END CERTIFICATE-----Generated at Sun Oct 4 22:18:15 2026 by rpki-client