$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: TlY0okJJzUGdZlxWgAxXcTzwfQr+5PNRgXCuztb2Szg= Subject key identifier: 07:4E:B4:43:12:5E:31:E0:F8:21:49:14:80:E9:BB:78:D3:0F:F1:09 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 021B Signing time: Tue 25 Aug 2026 03:09:32 +0000 Manifest this update: Tue 25 Aug 2026 03:09:32 +0000 Manifest next update: Tue 01 Sep 2026 03:09:32 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: 5gHLGke9XWHgP6z+ujPqxVUNVCDkyQRKyt2tKrU+ssQ=) 2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=) 3: BD8B68BA42CC11F1BD2C946EC6833773.roa (hash: PJ2RHts9xjf+3YDjugk579PPcnPLTSFFjF4EMsN7ELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Aug 25 03:09:32 2026 GMT Not After : Sep 1 03:09:32 2026 GMT Subject: CN=6a8d076c-dc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:76:16:0b:26:d3:b7:78:55:ee:3d:0d:93: 7d:e4:c7:29:83:8f:66:bb:c3:ed:12:93:91:b7:c0: 22:a5:36:ed:3b:fb:23:35:49:6b:34:b5:98:4d:14: ac:7f:c1:c9:f7:00:f2:38:a0:e0:a9:53:e0:a2:c6: 25:bd:bc:9c:eb:fe:a0:44:96:5f:b2:de:8b:12:94: fb:9c:73:b2:05:2e:8f:4b:bb:40:84:0b:bf:65:09: d6:93:5e:e4:7f:6b:a1:76:5c:dc:09:8a:79:ef:17: 48:0c:4c:c2:d7:a0:96:bb:00:0b:e4:e2:07:a8:85: 5b:9d:5a:57:0f:6b:f8:b4:fd:5e:84:e0:d8:ef:56: 4c:ce:58:0b:2b:f4:3d:5f:9e:d7:8d:50:a2:06:f7: 21:94:f8:08:81:23:90:33:be:78:74:6d:d1:ee:74: 06:b2:52:33:9a:69:5f:63:9b:a9:0c:94:e3:cc:59: 60:72:8a:6f:f0:93:4a:80:85:58:51:cd:e4:1a:60: 16:7c:84:a5:02:b1:da:77:c1:6d:be:45:e5:1f:51: 62:d7:ee:80:ef:56:f2:52:66:84:99:7d:b3:44:33: dc:3f:7e:e7:8c:b0:5b:c0:00:4f:18:f2:ac:63:7f: 20:88:dd:b6:0b:90:95:de:c6:a6:fd:62:e9:9c:78: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:B4:43:12:5E:31:E0:F8:21:49:14:80:E9:BB:78:D3:0F:F1:09 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:aa:84:14:50:03:b7:e1:93:bd:f0:f0:50:88:53:8c:5f:da: ea:08:7b:ec:94:95:1c:1e:40:8b:37:4f:b5:01:48:71:7e:fd: e1:7a:54:0a:7c:e2:ea:9d:5d:e9:52:a2:9d:fb:ee:6b:f2:0d: 23:bf:16:f8:d6:af:d6:c4:a4:7e:13:6d:fc:5b:84:29:6d:7d: 60:e4:e2:f9:05:76:2d:cf:e2:ee:7d:c1:70:64:26:b9:12:8c: a2:7e:62:f4:57:27:d9:ca:65:3d:c4:ca:84:d2:37:f1:2e:17: d5:36:d7:f5:7c:16:60:ed:67:a6:8f:73:83:72:fc:63:c3:9a: e3:fb:ed:67:cd:76:32:85:96:5f:fb:5c:b8:bd:01:94:89:af: 55:87:08:49:91:d7:74:f9:02:b5:96:83:4c:c8:20:c8:3a:3d: 29:54:a0:53:e3:a7:76:e7:9e:1e:d7:e4:b5:bb:da:58:e4:af: 75:43:71:03:b0:71:bf:9e:e3:ec:c1:45:c8:bd:13:a8:3b:2f: 0a:42:e1:d4:2b:43:db:93:ce:39:50:9b:96:ed:b4:8f:8d:41: d0:4b:53:ac:f8:54:73:60:fb:c9:c6:2b:98:c4:ba:27:0b:b4: 9c:fd:18:f1:b2:64:a5:ef:5e:c1:bf:ba:c9:21:d7:e4:3e:91: a8:05:f2:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjYwODI1MDMwOTMyWhcNMjYwOTAxMDMwOTMyWjAYMRYwFAYD VQQDEw02YThkMDc2Yy1kYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCN2Fgsm07d4Ve49DZN95Mcpg49mu8PtEpORt8AipTbtO/sjNUlrNLWYTRSs f8HJ9wDyOKDgqVPgosYlvbyc6/6gRJZfst6LEpT7nHOyBS6PS7tAhAu/ZQnWk17k f2uhdlzcCYp57xdIDEzC16CWuwAL5OIHqIVbnVpXD2v4tP1ehODY71ZMzlgLK/Q9 X57XjVCiBvchlPgIgSOQM754dG3R7nQGslIzmmlfY5upDJTjzFlgcopv8JNKgIVY Uc3kGmAWfISlArHad8FtvkXlH1Fi1+6A71byUmaEmX2zRDPcP37njLBbwABPGPKs Y38giN22C5CV3sam/WLpnHh3jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdOtEMS XjHg+CFJFIDpu3jTD/EJMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo6qEFFADt+GTvfDwUIhTjF/a6gh77JSVHB5AizdPtQFIcX794XpUCnzi6p1d 6VKinfvua/INI78W+Nav1sSkfhNt/FuEKW19YOTi+QV2Lc/i7n3BcGQmuRKMon5i 9Fcn2cplPcTKhNI38S4X1TbX9XwWYO1npo9zg3L8Y8Oa4/vtZ812MoWWX/tcuL0B lImvVYcISZHXdPkCtZaDTMggyDo9KVSgU+OndueeHtfktbvaWOSvdUNxA7Bxv57j 7MFFyL0TqDsvCkLh1CtD25POOVCblu20j41B0EtTrPhUc2D7ycYrmMS6Jwu0nP0Y 8bJkpe9ewb+6ySHX5D6RqAXy1A== -----END CERTIFICATE-----Generated at Wed Aug 26 20:21:04 2026 by rpki-client