$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: fJWa6ruZQJJmD/DPP0JtJ2IRkyQn+U1uWa8kdWoQqRg= Subject key identifier: A2:8A:DF:D6:F2:52:23:BA:D0:42:58:2F:D5:E1:EF:C9:4D:03:F2:B4 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 090E Signing time: Fri 04 Sep 2026 20:08:32 +0000 Manifest this update: Fri 04 Sep 2026 20:08:31 +0000 Manifest next update: Fri 11 Sep 2026 20:08:31 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: b6MEUxgv2joiWl6mqyKtSzOnFsCjceU5Imwv3+9M00o=) 2: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: ceBEeeb3UVqySdEEXNR+/hrnjzuoPEIkphnInujlh7k=) 3: 3A4918D41DED11F18280100E163D8C67.roa (hash: uBhMZC0iLLV6DLGdu7CIjfThpqfIINH0g+r6R069pHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Sep 4 20:08:31 2026 GMT Not After : Sep 11 20:08:31 2026 GMT Subject: CN=6a9b2540-86b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:cd:ef:70:06:fc:cd:30:71:d0:9f:15:c6: c8:db:a7:ff:6c:22:81:ec:c8:99:1d:06:bb:70:30: 5b:45:d5:34:9b:c5:e9:75:4a:df:ab:2e:9c:e6:cb: 32:eb:e3:05:12:12:2b:a8:80:49:53:81:5b:eb:fa: 13:a6:1e:8c:a0:9f:d2:5c:09:8e:6a:2c:6f:d6:51: 37:8f:1a:86:10:4d:ef:63:1d:67:e6:dc:45:05:33: b1:aa:77:55:cb:ae:5c:9b:4b:67:35:fb:6a:51:46: 32:f0:1a:4e:cf:4e:90:4d:90:b6:ef:36:e2:eb:90: 72:fe:17:6f:17:91:6b:9a:8f:0e:fb:d9:fa:cd:40: 0f:d9:e3:1f:73:75:60:ea:6e:e8:1c:91:72:00:89: d5:85:f4:06:73:06:65:15:c0:8f:dc:72:fa:ba:af: a7:12:b3:b5:8b:68:25:44:32:13:77:18:c7:2f:18: 69:0f:ca:c2:03:2b:9b:0a:b9:87:ab:d6:52:04:50: fc:2f:ae:d9:d1:59:09:f0:02:fd:ac:33:b8:15:18: 0e:32:9c:d0:03:14:e2:d2:92:8c:4c:c1:d3:74:c7: fd:fb:a3:4b:5a:1b:a8:4b:6e:bc:1d:3a:f7:a2:65: a5:4a:6e:2f:61:99:95:63:20:6a:f7:dd:66:39:9e: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8A:DF:D6:F2:52:23:BA:D0:42:58:2F:D5:E1:EF:C9:4D:03:F2:B4 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:7f:a3:1f:ad:99:26:0e:d4:b7:e4:4a:e2:cc:3e:0e:c3: df:37:c0:f8:e3:bf:7c:47:c6:3e:60:4a:a6:5f:94:8f:01:b3: f5:69:67:83:cd:8d:ce:7e:e1:11:36:1f:c9:5e:7c:f7:41:4e: 7b:d3:5a:09:2a:44:dd:9d:3e:93:3c:82:cc:35:52:e8:aa:38: 1c:07:49:85:c4:c7:bf:65:44:fc:ab:64:de:45:91:32:03:2e: 2d:3c:0f:5b:3c:95:50:af:a8:a9:57:bb:2b:e7:8e:53:5e:84: 81:da:5f:99:fd:7d:8f:96:b5:c2:f9:38:a5:4a:03:ae:0f:32: a3:82:b6:64:8a:1c:07:3b:1d:26:c3:72:d1:1c:c3:07:70:b5: 29:7b:49:b3:08:70:c2:8d:3e:76:f6:62:dc:6e:29:df:9b:26: c5:0f:a8:b1:52:b2:fc:db:f6:e4:4d:ad:93:23:b6:f3:56:08: 62:c9:44:c1:c4:8f:2a:b0:80:0e:d7:4e:92:b9:79:33:6d:ee: 15:b0:d5:9f:42:ef:22:83:8a:1b:33:e1:96:36:7f:0f:5e:77: 8f:6a:17:81:c4:e7:59:8a:57:e2:c8:2f:29:c2:e0:97:26:78: ad:52:15:61:10:8c:63:89:54:ff:8b:05:7d:49:c7:3f:2e:17: 4d:ed:fa:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjYwOTA0MjAwODMxWhcNMjYwOTExMjAwODMxWjAYMRYwFAYD VQQDEw02YTliMjU0MC04NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZjN73AG/M0wcdCfFcbI26f/bCKB7MiZHQa7cDBbRdU0m8XpdUrfqy6c5ssy 6+MFEhIrqIBJU4Fb6/oTph6MoJ/SXAmOaixv1lE3jxqGEE3vYx1n5txFBTOxqndV y65cm0tnNftqUUYy8BpOz06QTZC27zbi65By/hdvF5Frmo8O+9n6zUAP2eMfc3Vg 6m7oHJFyAInVhfQGcwZlFcCP3HL6uq+nErO1i2glRDITdxjHLxhpD8rCAyubCrmH q9ZSBFD8L67Z0VkJ8AL9rDO4FRgOMpzQAxTi0pKMTMHTdMf9+6NLWhuoS268HTr3 omWlSm4vYZmVYyBq991mOZ7R3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKK39by UiO60EJYL9Xh78lNA/K0MB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHB/ox+tmSYO1LfkSuLMPg7D3zfA+OO/fEfGPmBKpl+UjwGz9Wlng82Nzn7h ETYfyV5890FOe9NaCSpE3Z0+kzyCzDVS6Ko4HAdJhcTHv2VE/Ktk3kWRMgMuLTwP WzyVUK+oqVe7K+eOU16Egdpfmf19j5a1wvk4pUoDrg8yo4K2ZIocBzsdJsNy0RzD B3C1KXtJswhwwo0+dvZi3G4p35smxQ+osVKy/Nv25E2tkyO281YIYslEwcSPKrCA DtdOkrl5M23uFbDVn0LvIoOKGzPhljZ/D153j2oXgcTnWYpX4sgvKcLglyZ4rVIV YRCMY4lU/4sFfUnHPy4XTe36kA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:20:11 2026 by rpki-client