$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft File: Z4uMlpbNfoAxmrwSB6onVOobtik.mft (raw, json) Hash identifier: TKV/d4OfJ+IN7T0pxpUMh3Xs+8X/lqJWmkuMvkwsTG4= Subject key identifier: A0:F5:00:FC:63:2D:3C:5A:10:EB:90:B4:18:9B:EE:02:88:58:40:E2 Authority key identifier: 67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29 Certificate issuer: /CN=A91B546C/serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft Manifest number: 16 Signing time: Mon 05 Oct 2026 09:32:54 +0000 Manifest this update: Mon 05 Oct 2026 09:32:53 +0000 Manifest next update: Mon 12 Oct 2026 09:32:53 +0000 Files and hashes: 1: Z4uMlpbNfoAxmrwSB6onVOobtik.crl (hash: kKQ5yYjx16IpoN7oISory25dVuFm0SHQs19dGTdqq64=) 2: 1E3BD8A8A4FB11F1837756A17011F970.roa (hash: 6ad3MddjpmzPtpQkxpgYMqyDaN47j/Tz+nm6LoY8luc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B546C, serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629 Validity Not Before: Oct 5 09:32:53 2026 GMT Not After : Oct 12 09:32:53 2026 GMT Subject: CN=6ac36ec6-f735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:3c:07:ce:9f:d3:ee:f5:47:3a:79:bc:93: 93:b4:96:a0:6b:1a:98:e2:9c:e0:05:07:02:36:63: 32:72:16:11:8c:de:07:1d:58:07:b8:d0:56:d5:a4: 9a:33:18:71:63:77:cb:26:b1:1b:1f:58:95:cc:82: bb:fe:08:70:b3:b9:5d:9f:cd:c5:7e:6a:e5:92:73: 7c:dc:8a:6d:17:04:e1:09:84:8c:6c:98:2a:84:1f: ad:21:07:fe:39:eb:e8:30:02:a6:53:f3:53:7f:52: 5e:f5:c5:ae:61:e1:21:1b:0c:72:06:23:c3:52:e6: 97:33:b5:ba:63:e3:dd:9c:4a:27:2a:3e:27:7c:3d: 14:86:e8:e3:07:99:ff:22:c0:72:af:8c:19:0f:0a: 6c:b9:af:c9:0e:87:d0:fd:50:3f:bd:92:ad:4f:98: 30:e6:cb:97:f8:18:0d:ee:a9:4a:26:c7:73:f3:35: 6f:71:c0:2f:2d:9a:7e:62:94:94:37:22:b0:dd:f6: 50:e3:a8:c6:da:0e:3f:2a:fa:52:89:11:c0:ca:fe: fc:88:43:8b:4d:c3:df:f7:93:a0:94:01:61:8a:fe: 04:ee:5d:14:07:73:7b:b9:3f:5e:50:eb:80:fc:de: 67:86:af:12:e6:ab:8b:78:a3:55:c2:40:b7:8c:d5: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:00:FC:63:2D:3C:5A:10:EB:90:B4:18:9B:EE:02:88:58:40:E2 X509v3 Authority Key Identifier: keyid:67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:ed:90:69:83:27:f4:e1:9c:86:a9:6f:8a:3e:23:ce:4a: 82:68:ca:c9:05:cb:ed:12:0e:4c:98:b6:f9:8f:a4:2d:78:70: a5:31:91:01:87:2b:f5:a6:2c:e4:ef:c1:a1:ef:f1:e6:c4:62: 3f:cd:ff:cc:4d:9f:1a:30:71:71:ae:5c:ce:61:68:9a:bb:e8: c9:37:c2:dd:5a:11:14:ef:eb:ba:58:b2:e7:a9:fa:d4:76:1f: 7f:3c:0e:38:9f:58:1d:f8:1d:a1:28:3c:ef:cc:7d:0f:b6:c2: 73:b1:89:21:35:73:f0:c9:51:3f:7c:c8:98:82:cc:a5:4e:9d: 84:fd:ab:6a:2d:8c:8c:42:7e:0e:29:76:a6:ff:6e:fe:71:1a: cc:a0:17:aa:c0:76:ee:58:6c:ca:27:43:6e:08:49:25:cf:a8: 97:84:ce:53:24:30:f4:a4:ee:ae:75:23:f8:21:60:99:e4:eb: c5:b6:f4:62:c5:98:d1:ef:15:01:6c:3b:57:7f:81:f6:1f:fc: e0:16:39:ce:c4:07:0c:ac:9c:a1:4e:92:10:65:8b:0f:b6:1c: 2a:99:6e:49:99:9f:4f:72:fc:1b:d5:05:03:f1:10:8d:4d:53: 1f:41:ac:b0:6d:5e:ae:c8:e2:6e:06:d3:c8:f8:d0:47:64:9a: db:0e:4f:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTQ2QzExMC8GA1UEBRMoNjc4QjhDOTY5NkNEN0U4MDMxOUFCQzEyMDdBQTI3NTRF QTFCQjYyOTAeFw0yNjEwMDUwOTMyNTNaFw0yNjEwMTIwOTMyNTNaMBgxFjAUBgNV BAMTDTZhYzM2ZWM2LWY3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7QjwHzp/T7vVHOnm8k5O0lqBrGpjinOAFBwI2YzJyFhGM3gcdWAe40FbVpJoz GHFjd8smsRsfWJXMgrv+CHCzuV2fzcV+auWSc3zcim0XBOEJhIxsmCqEH60hB/45 6+gwAqZT81N/Ul71xa5h4SEbDHIGI8NS5pcztbpj492cSicqPid8PRSG6OMHmf8i wHKvjBkPCmy5r8kOh9D9UD+9kq1PmDDmy5f4GA3uqUomx3PzNW9xwC8tmn5ilJQ3 IrDd9lDjqMbaDj8q+lKJEcDK/vyIQ4tNw9/3k6CUAWGK/gTuXRQHc3u5P15Q64D8 3meGrxLmq4t4o1XCQLeM1b/RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoPUA/GMt PFoQ65C0GJvuAohYQOIwHwYDVR0jBBgwFoAUZ4uMlpbNfoAxmrwSB6onVOobtikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NDZDLzA3MTI5Q0M2QTRG QTExRjE5QzIzNDkyNDcwMTFGOTcwL1o0dU1scGJOZm9BeG1yd1NCNm9uVk9vYnRp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjR1TWxwYk5mb0F4bXJ3U0I2b25WT29idGlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 NDZDLzA3MTI5Q0M2QTRGQTExRjE5QzIzNDkyNDcwMTFGOTcwL1o0dU1scGJOZm9B eG1yd1NCNm9uVk9vYnRpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBl3u2QaYMn9OGchqlvij4jzkqCaMrJBcvtEg5MmLb5j6QteHClMZEBhyv1pizk 78Gh7/HmxGI/zf/MTZ8aMHFxrlzOYWiau+jJN8LdWhEU7+u6WLLnqfrUdh9/PA44 n1gd+B2hKDzvzH0PtsJzsYkhNXPwyVE/fMiYgsylTp2E/atqLYyMQn4OKXam/27+ cRrMoBeqwHbuWGzKJ0NuCEklz6iXhM5TJDD0pO6udSP4IWCZ5OvFtvRixZjR7xUB bDtXf4H2H/zgFjnOxAcMrJyhTpIQZYsPthwqmW5JmZ9Pcvwb1QUD8RCNTVMfQayw bV6uyOJuBtPI+NBHZJrbDk8z -----END CERTIFICATE-----Generated at Tue Oct 6 20:05:16 2026 by rpki-client