$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: mq0174eo8hqL0NXXR3RPfyQKYrsaCi8s6mJcGt8gfaE= Subject key identifier: 56:38:4A:C8:DD:1D:C1:BF:54:CB:5D:57:EC:88:43:A1:EF:3F:97:5C Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: 01A2 Signing time: Sat 03 Oct 2026 04:52:53 +0000 Manifest this update: Sat 03 Oct 2026 04:52:52 +0000 Manifest next update: Sat 10 Oct 2026 04:52:52 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: SwyVXMY0jcMTP4FfVBlE9mcrxLt10ph1pjhROnmmHfs=) 2: IvAiiTB5Zz1KV3MWWTDi6FxWc68.asa (hash: WxQm5aGWhfV7ws5Do42D+QlFe+t93Bm4cDF9e41KP+U=) 3: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: KKmlGMQL/Yj1Q6C2BYjNzgq/BcJTxhL/wy2LcPDVah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Oct 3 04:52:52 2026 GMT Not After : Oct 10 04:52:52 2026 GMT Subject: CN=6ac08a25-f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:ae:7a:08:51:9f:31:dc:d7:5d:0e:03:c6: ab:a3:9e:a7:2d:f1:03:09:e8:a1:65:e2:46:c4:0b: f2:48:3f:76:22:88:d2:dd:6f:01:19:ac:1a:06:88: 11:1a:23:cc:e2:25:66:cf:cf:cf:7f:17:0a:ae:ca: 60:df:38:94:f3:98:ad:8b:74:15:fa:ce:f9:6a:80: f2:c6:f0:38:16:eb:04:77:5e:c7:b1:05:ab:66:11: b3:92:c1:b8:5f:36:f8:b5:b3:09:f1:08:d9:0b:ae: 3a:72:de:a9:42:20:b0:6c:7a:80:2c:81:90:aa:d5: 08:73:a1:01:9d:01:47:d1:5f:48:5f:1a:0d:76:f3: 7d:10:b5:7d:48:23:f3:75:bb:6d:c9:20:9f:02:1e: 99:ed:2a:8d:75:be:b3:31:86:4a:2f:59:cc:09:51: 8f:cc:18:21:f8:6e:85:70:b6:de:d9:c2:0d:8b:c7: cd:02:4b:c5:d7:8e:26:f4:aa:c3:c4:49:41:c7:d7: e5:15:59:2c:f0:a4:97:b0:c1:1e:a0:c3:53:b9:b4: 58:61:18:47:47:c4:9e:10:fc:cc:cc:17:c5:f9:b2: f1:99:c5:78:a3:cb:03:5a:a7:6c:5f:53:ba:81:7f: e5:e8:9d:98:18:a6:27:63:aa:1e:aa:47:84:d5:18: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:4A:C8:DD:1D:C1:BF:54:CB:5D:57:EC:88:43:A1:EF:3F:97:5C X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:be:73:80:4a:e5:0a:16:93:ae:b6:24:4e:c7:14:8a:16: 52:ad:7f:59:59:fd:2e:83:29:db:8f:38:e6:bf:c3:e6:ea:38: 92:3f:e9:ca:16:b4:eb:bb:23:58:fa:a3:40:2c:0e:a8:aa:30: d7:ae:34:0c:72:30:65:2c:c5:20:18:a5:77:d6:bd:64:25:c4: a9:fd:10:14:c9:cd:47:9e:b4:5f:21:6c:1b:71:c5:a7:62:ad: 50:1a:f9:3f:bc:11:a6:6a:2a:68:a4:b1:db:b0:11:55:8e:3f: 58:2b:6b:25:f6:28:76:06:52:66:a6:e7:9a:35:e7:88:8b:58: aa:80:77:82:f4:d3:ab:f7:b6:89:52:9f:37:07:77:43:e2:65: 80:f2:f7:26:ac:83:57:3f:38:52:2c:26:a8:46:d0:ff:d2:a6: 13:26:40:43:a6:3d:3c:0f:3f:7b:27:a4:5f:c0:22:f0:4f:3e: af:1c:fa:b9:44:9b:21:82:af:05:bc:e7:fb:4d:c1:83:af:ae: 2b:95:99:73:7a:0a:fe:a6:90:fa:50:a4:58:9f:ac:1d:da:b7: 15:da:6d:a1:fa:a1:70:4e:5e:b8:fe:39:ac:ae:f3:47:8c:bd: 56:d1:0b:cc:ea:24:7c:13:c2:15:13:f2:5c:34:8f:0f:11:4e: af:d0:c3:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjYxMDAzMDQ1MjUyWhcNMjYxMDEwMDQ1MjUyWjAYMRYwFAYD VQQDEw02YWMwOGEyNS1mNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63WueghRnzHc110OA8aro56nLfEDCeihZeJGxAvySD92IojS3W8BGawaBogR GiPM4iVmz8/PfxcKrspg3ziU85iti3QV+s75aoDyxvA4FusEd17HsQWrZhGzksG4 Xzb4tbMJ8QjZC646ct6pQiCwbHqALIGQqtUIc6EBnQFH0V9IXxoNdvN9ELV9SCPz dbttySCfAh6Z7SqNdb6zMYZKL1nMCVGPzBgh+G6FcLbe2cINi8fNAkvF144m9KrD xElBx9flFVks8KSXsMEeoMNTubRYYRhHR8SeEPzMzBfF+bLxmcV4o8sDWqdsX1O6 gX/l6J2YGKYnY6oeqkeE1RgNFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFY4Ssjd HcG/VMtdV+yIQ6HvP5dcMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk7a+c4BK5QoWk662JE7HFIoWUq1/WVn9LoMp24845r/D5uo4kj/pyha067sj WPqjQCwOqKow1640DHIwZSzFIBild9a9ZCXEqf0QFMnNR560XyFsG3HFp2KtUBr5 P7wRpmoqaKSx27ARVY4/WCtrJfYodgZSZqbnmjXniItYqoB3gvTTq/e2iVKfNwd3 Q+JlgPL3JqyDVz84UiwmqEbQ/9KmEyZAQ6Y9PA8/eyekX8Ai8E8+rxz6uUSbIYKv Bbzn+03Bg6+uK5WZc3oK/qaQ+lCkWJ+sHdq3FdptofqhcE5euP45rK7zR4y9VtEL zOokfBPCFRPyXDSPDxFOr9DDrA== -----END CERTIFICATE-----Generated at Sun Oct 4 05:39:49 2026 by rpki-client