$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: 0q6InNmLxQ0cZfO4Jyl+5Tu2WxBqDv6BybU+i8mTKk0= Subject key identifier: EB:24:B0:60:D4:ED:EB:00:75:A2:29:D2:49:DC:A5:8E:9D:8C:1C:3D Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 027C Signing time: Sat 03 Oct 2026 02:41:26 +0000 Manifest this update: Sat 03 Oct 2026 02:41:26 +0000 Manifest next update: Sat 10 Oct 2026 02:41:26 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: Dl1fiOB+gMnXVptjVQOzssHvrC/hzX1VRVsqRaVmANg=) 2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: S+qe2Z8BjsHUcKBFh91p++nA2XhFbE2SxTa6XiCPG9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Oct 3 02:41:26 2026 GMT Not After : Oct 10 02:41:26 2026 GMT Subject: CN=6ac06b56-66f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:0e:4b:47:71:a4:c4:a5:e6:d0:d6:61:cd: 9e:15:47:ff:ad:89:06:26:54:d5:a5:63:2d:9a:1c: 7d:52:6c:fb:d3:87:14:6f:1e:8e:6f:0e:4f:16:43: 8b:f3:17:2f:32:75:ef:1f:df:6b:0d:34:55:30:4c: ba:20:1a:7d:73:05:bb:0a:86:1a:c4:19:8a:a4:67: 21:e7:42:eb:50:a6:94:2c:55:30:11:77:ee:c3:aa: 66:8d:aa:53:35:46:dd:c1:27:65:81:a3:ef:61:9a: 4c:25:e7:3d:d3:56:60:d6:d0:dc:c1:1d:15:1c:9f: 03:3e:be:c1:27:2d:b7:00:aa:e1:d3:3e:c2:e1:30: 85:d1:cc:06:6d:c9:00:f8:07:44:19:ce:85:d9:77: 3c:d7:6b:41:1c:1f:71:58:54:aa:48:c9:56:55:ac: 63:e0:bd:5b:56:c8:7a:8b:8d:75:30:cc:b3:fb:ec: 9b:84:35:46:3d:20:70:59:7f:f4:45:9c:36:62:10: 5d:7d:5a:d4:87:45:de:86:d9:41:81:a5:34:36:3e: 8f:a0:12:f6:75:bc:09:b1:17:37:be:1e:22:94:9c: 64:53:56:8d:e9:f1:bf:41:d2:2d:e6:ee:46:b3:89: 0e:b5:61:c3:73:cb:8b:e0:ca:22:9a:62:9c:2b:ea: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:24:B0:60:D4:ED:EB:00:75:A2:29:D2:49:DC:A5:8E:9D:8C:1C:3D X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:de:4d:c9:c3:71:23:90:a2:95:51:1e:15:ed:13:3e:cc:64: 8b:7d:9b:62:8a:11:de:60:5a:e7:d8:6c:98:e2:73:a2:9f:15: 59:e9:31:de:bd:ab:bc:de:6f:3c:26:a6:7a:ba:56:dd:2e:02: ef:96:7b:9a:14:d4:49:77:17:21:94:9a:ef:84:2d:87:78:7b: 5b:80:59:06:2d:43:b8:e2:0e:30:76:3e:09:3d:84:9c:79:5d: 8c:2e:2b:3b:23:fa:07:ce:d6:0a:9f:3e:7a:e8:5a:c1:74:a2: 9f:06:be:fc:10:a6:25:c5:69:48:ce:16:7c:9b:65:b2:e6:95: 03:fd:1b:c7:e7:53:90:21:5e:48:a1:b4:4b:d5:6b:8b:32:9d: 99:6d:d3:1f:b0:38:55:bd:6c:91:3c:c6:45:a2:36:8f:55:34: 08:bd:11:aa:ae:55:a3:fe:9a:38:40:c2:99:5d:ef:3a:1b:18: 40:7e:0c:7b:03:71:e7:d3:5a:d1:5b:3c:a8:3f:73:d5:a0:44: e8:c3:94:e5:a7:16:95:eb:2c:ba:fb:9d:f1:15:d8:f7:80:c7: fa:54:23:6a:31:d2:cf:b8:fc:f0:60:eb:f3:8e:df:19:8e:2d: 19:b2:7b:56:1c:bc:63:b2:2c:ce:8a:87:98:be:0a:7b:63:e8: 45:d9:6b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYxMDAzMDI0MTI2WhcNMjYxMDEwMDI0MTI2WjAYMRYwFAYD VQQDEw02YWMwNmI1Ni02NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX4OS0dxpMSl5tDWYc2eFUf/rYkGJlTVpWMtmhx9Umz704cUbx6Obw5PFkOL 8xcvMnXvH99rDTRVMEy6IBp9cwW7CoYaxBmKpGch50LrUKaULFUwEXfuw6pmjapT NUbdwSdlgaPvYZpMJec901Zg1tDcwR0VHJ8DPr7BJy23AKrh0z7C4TCF0cwGbckA +AdEGc6F2Xc812tBHB9xWFSqSMlWVaxj4L1bVsh6i411MMyz++ybhDVGPSBwWX/0 RZw2YhBdfVrUh0XehtlBgaU0Nj6PoBL2dbwJsRc3vh4ilJxkU1aN6fG/QdIt5u5G s4kOtWHDc8uL4MoimmKcK+oPGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsksGDU 7esAdaIp0kncpY6djBw9MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1t5NycNxI5CilVEeFe0TPsxki32bYooR3mBa59hsmOJzop8VWekx3r2rvN5v PCamerpW3S4C75Z7mhTUSXcXIZSa74Qth3h7W4BZBi1DuOIOMHY+CT2EnHldjC4r OyP6B87WCp8+euhawXSinwa+/BCmJcVpSM4WfJtlsuaVA/0bx+dTkCFeSKG0S9Vr izKdmW3TH7A4Vb1skTzGRaI2j1U0CL0Rqq5Vo/6aOEDCmV3vOhsYQH4MewNx59Na 0Vs8qD9z1aBE6MOU5acWlessuvud8RXY94DH+lQjajHSz7j88GDr847fGY4tGbJ7 Vhy8Y7IszoqHmL4Ke2PoRdlrJg== -----END CERTIFICATE-----Generated at Sun Oct 4 20:01:06 2026 by rpki-client