$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: QWsv6EnH5QCTkJcylv050nE2kkF+JfiWi6d6E1Fn3ok= Subject key identifier: C5:04:E4:47:A0:58:13:D3:58:A2:2F:E1:0E:6D:1C:87:84:64:33:2D Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 0160 Signing time: Mon 19 Oct 2026 06:04:08 +0000 Manifest this update: Mon 19 Oct 2026 06:04:08 +0000 Manifest next update: Mon 26 Oct 2026 06:04:08 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: Bfwefaop3+zXl1Y4Ja/8Tsf+0st80PtXM2Rw2AsN/hU=) 2: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) 4: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Oct 19 06:04:08 2026 GMT Not After : Oct 26 06:04:08 2026 GMT Subject: CN=6ad5b2d8-cc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:39:31:70:66:72:f2:1d:5f:93:5b:20:4e: 44:b7:7a:2d:b7:73:0a:eb:2b:c9:f7:08:4a:2e:ab: 56:be:9a:ab:f1:67:5f:25:02:26:37:24:5e:26:51: 95:b4:0c:50:d0:46:84:69:aa:fc:2d:bd:84:6b:f9: af:ca:b4:ca:d4:11:db:06:da:b2:38:f5:a9:9e:28: ae:fb:b2:97:ed:bd:6d:95:b4:1e:0f:8f:6f:30:37: 23:d5:ca:f0:91:ef:fe:3f:e1:82:7e:f4:fe:2a:42: 31:68:9f:15:40:41:7a:22:cb:6e:e4:a9:4b:7c:8a: d9:84:2e:6b:fb:2a:f4:8a:e8:b6:b4:90:b4:39:69: ce:e7:ff:20:08:20:79:b5:92:4e:0f:c4:f1:90:4b: 6c:07:b5:7b:4f:be:09:6d:d8:a5:d8:59:f9:ba:9b: 01:63:26:ff:4a:27:2b:98:11:e9:ad:ac:c6:8d:58: 20:80:62:19:d0:10:c0:4a:bf:45:18:ce:3c:48:3d: 42:33:fc:46:6a:71:27:57:6f:33:bf:11:50:51:5d: 56:5b:60:e5:90:6d:ed:29:14:8d:f0:fd:67:71:38: b5:60:60:98:f7:b4:99:d5:c5:33:a4:01:07:d7:8b: cb:a3:45:3a:ac:6b:e8:a5:b4:6d:55:1c:01:c3:e2: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:E4:47:A0:58:13:D3:58:A2:2F:E1:0E:6D:1C:87:84:64:33:2D X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:c0:d7:d4:b6:96:b5:53:10:fb:a7:4e:3a:54:69:a2:0e: 81:fe:8c:0b:4b:ee:88:7f:22:5e:1f:56:96:1b:fa:3a:40:a7: 1a:ee:5a:33:72:f5:27:99:ff:7e:89:ae:63:bc:b5:e2:b6:a9: 29:13:71:11:26:b8:80:6a:5e:83:d7:cb:b0:f6:16:9e:54:a8: bc:6f:01:86:67:f5:72:ad:7d:d1:b4:ed:10:1f:79:94:97:6b: 82:84:68:82:ca:42:95:b5:94:1e:6e:2a:d2:87:d1:8b:c1:a4: e4:e2:ee:c8:f6:e9:71:67:67:67:a9:ea:99:b9:74:5e:94:d1: 8d:e9:f6:ea:89:e7:ed:c3:58:e9:39:1b:e2:fb:98:c5:d9:f9: ce:4b:55:28:01:2d:41:de:ab:a4:33:72:82:f4:a7:f9:3f:21: 7f:54:f5:f5:88:39:79:fb:cd:f6:8d:3d:70:6a:6c:bc:9e:4d: 88:d2:48:b5:77:bc:fa:93:5f:10:6f:22:ae:18:fe:9d:4f:47: 09:db:4e:5b:3a:17:a3:12:b5:8e:30:00:3c:af:2c:67:18:f2: ef:5d:0c:d4:e3:61:93:82:80:e6:7e:ce:63:8c:d7:cc:33:46: d5:5a:94:86:94:f8:83:15:28:cb:3b:9c:bb:f5:2c:4a:70:3e: c4:a6:12:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYxMDE5MDYwNDA4WhcNMjYxMDI2MDYwNDA4WjAYMRYwFAYD VQQDEw02YWQ1YjJkOC1jYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZQ5MXBmcvIdX5NbIE5Et3ott3MK6yvJ9whKLqtWvpqr8WdfJQImNyReJlGV tAxQ0EaEaar8Lb2Ea/mvyrTK1BHbBtqyOPWpniiu+7KX7b1tlbQeD49vMDcj1crw ke/+P+GCfvT+KkIxaJ8VQEF6Istu5KlLfIrZhC5r+yr0iui2tJC0OWnO5/8gCCB5 tZJOD8TxkEtsB7V7T74Jbdil2Fn5upsBYyb/SicrmBHprazGjVgggGIZ0BDASr9F GM48SD1CM/xGanEnV28zvxFQUV1WW2DlkG3tKRSN8P1ncTi1YGCY97SZ1cUzpAEH 14vLo0U6rGvopbRtVRwBw+Kv4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUE5Eeg WBPTWKIv4Q5tHIeEZDMtMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5PA19S2lrVTEPunTjpUaaIOgf6MC0vuiH8iXh9Wlhv6OkCnGu5aM3L1J5n/ fomuY7y14rapKRNxESa4gGpeg9fLsPYWnlSovG8Bhmf1cq190bTtEB95lJdrgoRo gspClbWUHm4q0ofRi8Gk5OLuyPbpcWdnZ6nqmbl0XpTRjen26onn7cNY6Tkb4vuY xdn5zktVKAEtQd6rpDNygvSn+T8hf1T19Yg5efvN9o09cGpsvJ5NiNJItXe8+pNf EG8irhj+nU9HCdtOWzoXoxK1jjAAPK8sZxjy710M1ONhk4KA5n7OY4zXzDNG1VqU hpT4gxUoyzucu/UsSnA+xKYSMQ== -----END CERTIFICATE-----Generated at Wed Oct 21 07:47:51 2026 by rpki-client