$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft File: ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft (raw, json) Hash identifier: rKWswyoj0neoMjck7Zeig1ARAeJxe+v6L56fy0Yt/RY= Subject key identifier: 07:89:B3:71:8E:CB:C4:A3:59:D2:8E:24:B9:E5:BA:A0:49:2E:AB:16 Authority key identifier: 65:4A:44:2A:E8:67:20:06:35:C4:39:6B:B5:3A:35:AB:48:7D:D6:BE Certificate issuer: /CN=A91BB63F/serialNumber=654A442AE867200635C4396BB53A35AB487DD6BE Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft Manifest number: 09 Signing time: Fri 09 Oct 2026 10:02:23 +0000 Manifest this update: Fri 09 Oct 2026 10:02:23 +0000 Manifest next update: Fri 16 Oct 2026 10:02:23 +0000 Files and hashes: 1: ZUpEKuhnIAY1xDlrtTo1q0h91r4.crl (hash: Bd8tN8O4EXCNTOa+MdJsTerQ1yIOeXEL8uTdiVMPy2g=) 2: 8EE35FC2B8B511F18673AEE56911F970.roa (hash: 5MsCr/6liDkkYfq0jIAY9bmaiuJZCi34eFmD0V3/xGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.crl rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB63F, serialNumber=654A442AE867200635C4396BB53A35AB487DD6BE Validity Not Before: Oct 9 10:02:23 2026 GMT Not After : Oct 16 10:02:23 2026 GMT Subject: CN=6ac8bbaf-0683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:db:9b:dc:7b:b3:ff:11:7e:77:51:64:35: 08:85:2d:5f:a2:f8:08:a1:df:f6:9a:39:9b:9a:91: e8:95:88:2b:b1:38:bd:58:4d:e5:d1:44:22:81:4c: eb:e8:51:a7:3a:47:f0:b1:95:59:a4:11:85:d7:3e: c9:7a:53:68:c6:0e:91:67:0b:68:ae:d0:6e:c4:ab: b8:7a:1b:2f:2f:cf:8a:c3:65:0b:08:c5:1c:aa:d5: 8e:d9:b5:2b:2e:74:bd:e3:c3:e4:ef:f7:c7:e6:d5: ad:54:15:35:20:67:70:26:3e:9d:0a:d2:f5:8e:1f: 70:e3:c1:bd:d9:75:3a:4e:6b:4b:1d:15:dd:cb:87: b5:4e:b9:48:59:cf:e7:88:a6:66:a7:99:bc:cd:83: 73:b8:a4:be:25:92:a2:c4:b3:a4:ce:1a:ec:77:7e: d6:1b:3e:3e:36:93:60:c5:48:e7:2f:50:e7:27:98: b9:03:28:e9:06:57:b0:5d:8e:9f:69:71:be:4b:3a: 46:7e:79:7a:68:a7:7d:46:ad:fc:17:79:0d:ea:47: 43:04:73:be:c7:4d:4b:61:cd:44:86:69:61:ae:f8: 03:90:37:2a:99:0b:2e:1e:3f:68:23:73:a7:28:4a: 86:d0:44:4c:07:3b:95:c2:cc:b7:de:bf:9b:35:f3: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:89:B3:71:8E:CB:C4:A3:59:D2:8E:24:B9:E5:BA:A0:49:2E:AB:16 X509v3 Authority Key Identifier: keyid:65:4A:44:2A:E8:67:20:06:35:C4:39:6B:B5:3A:35:AB:48:7D:D6:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:4d:28:47:59:59:7f:ea:38:10:a8:39:18:1e:32:39:be: a6:2f:46:cc:31:7a:2b:ec:03:22:43:e9:d8:ee:aa:75:25:88: 8a:cf:a6:6a:78:d3:81:60:99:a9:33:b6:66:2a:b4:cd:5d:20: 7a:69:52:a5:66:3f:ef:6f:0d:01:e7:26:e8:3c:c4:c1:9b:73: 2f:e6:76:6e:44:c6:d0:24:cf:c6:d8:8d:e7:ad:2e:be:6c:c4: 99:34:1c:e3:55:0c:83:e5:a7:99:75:f6:76:c6:e9:30:47:09: ce:db:d0:4b:96:3b:68:51:52:e4:41:08:ce:78:ce:25:13:8f: 3f:79:50:c7:00:1b:91:d2:ab:82:3a:9e:2a:19:ff:45:fb:aa: d8:11:34:0d:0a:0b:7e:e2:47:0e:29:90:fa:82:5b:67:57:82: 93:90:ba:44:d8:48:6e:34:e7:26:b9:88:12:30:56:23:23:e1: 11:7d:e8:ae:62:b8:c7:26:da:e9:79:b1:d1:91:ad:5d:80:03: 16:a3:94:24:07:d7:3c:f1:41:3a:95:7e:fa:bc:16:89:76:31: 94:ab:82:1e:8a:60:93:c9:84:8f:06:09:bc:16:3b:35:32:98: 5a:5b:55:ff:58:30:c3:7e:1f:a5:41:a8:cf:23:11:98:f1:8f: 20:08:ea:ce -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjYzRjExMC8GA1UEBRMoNjU0QTQ0MkFFODY3MjAwNjM1QzQzOTZCQjUzQTM1QUI0 ODdERDZCRTAeFw0yNjEwMDkxMDAyMjNaFw0yNjEwMTYxMDAyMjNaMBgxFjAUBgNV BAMTDTZhYzhiYmFmLTA2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCof9ub3Huz/xF+d1FkNQiFLV+i+Aih3/aaOZuakeiViCuxOL1YTeXRRCKBTOvo Uac6R/CxlVmkEYXXPsl6U2jGDpFnC2iu0G7Eq7h6Gy8vz4rDZQsIxRyq1Y7ZtSsu dL3jw+Tv98fm1a1UFTUgZ3AmPp0K0vWOH3Djwb3ZdTpOa0sdFd3Lh7VOuUhZz+eI pmanmbzNg3O4pL4lkqLEs6TOGux3ftYbPj42k2DFSOcvUOcnmLkDKOkGV7Bdjp9p cb5LOkZ+eXpop31GrfwXeQ3qR0MEc77HTUthzUSGaWGu+AOQNyqZCy4eP2gjc6co SobQREwHO5XCzLfev5s187CNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB4mzcY7L xKNZ0o4kueW6oEkuqxYwHwYDVR0jBBgwFoAUZUpEKuhnIAY1xDlrtTo1q0h91r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNjNGLzhFQUJDMTRBQjhC MzExRjFCNTQ0NzA3RTY5MTFGOTcwL1pVcEVLdWhuSUFZMXhEbHJ0VG8xcTBoOTFy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlVwRUt1aG5JQVkxeERscnRUbzFxMGg5MXI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC NjNGLzhFQUJDMTRBQjhCMzExRjFCNTQ0NzA3RTY5MTFGOTcwL1pVcEVLdWhuSUFZ MXhEbHJ0VG8xcTBoOTFyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvvk0oR1lZf+o4EKg5GB4yOb6mL0bMMXor7AMiQ+nY7qp1JYiKz6ZqeNOBYJmp M7ZmKrTNXSB6aVKlZj/vbw0B5yboPMTBm3Mv5nZuRMbQJM/G2I3nrS6+bMSZNBzj VQyD5aeZdfZ2xukwRwnO29BLljtoUVLkQQjOeM4lE48/eVDHABuR0quCOp4qGf9F +6rYETQNCgt+4kcOKZD6gltnV4KTkLpE2EhuNOcmuYgSMFYjI+ERfeiuYrjHJtrp ebHRka1dgAMWo5QkB9c88UE6lX76vBaJdjGUq4IeimCTyYSPBgm8Fjs1MphaW1X/ WDDDfh+lQajPIxGY8Y8gCOrO -----END CERTIFICATE-----Generated at Sat Oct 10 13:02:42 2026 by rpki-client