$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: 4koLH+1bGn1jz74FK0SXMzctSaF15g8QkCQdYIdlX18= Subject key identifier: A4:47:A5:F8:32:48:32:A6:3B:9A:7F:CB:BD:E5:8E:57:22:08:EA:4E Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 016D Signing time: Sat 19 Sep 2026 04:57:53 +0000 Manifest this update: Sat 19 Sep 2026 04:57:53 +0000 Manifest next update: Sat 26 Sep 2026 04:57:53 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: evtvFuraOCpNualRBZ9Yxfm8zGux/pIevmdE60v0P50=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Sep 19 04:57:53 2026 GMT Not After : Sep 26 04:57:53 2026 GMT Subject: CN=6aae1651-1e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:3c:5a:1f:2d:9a:63:65:f9:49:bd:76:6f: 12:ea:a9:65:d8:5e:f5:f3:cc:c6:36:ce:f1:9a:7c: d9:ca:d9:73:00:40:52:93:5d:df:32:74:63:c2:d9: d3:f0:00:1b:c7:1f:a6:b9:8e:bf:ba:ac:4b:40:fa: cc:59:63:09:72:a6:8e:b9:c5:ff:79:df:28:92:2e: c6:e6:5b:98:f8:49:29:be:42:9d:18:ee:4f:38:d5: dc:61:c6:07:26:ec:97:78:44:6c:e9:71:ee:f3:2f: c3:2a:3c:47:24:45:98:58:9b:95:cb:31:6e:65:a6: 13:0d:d7:28:b9:fc:0b:db:81:9f:d0:64:c0:a6:cc: a4:f2:ee:e0:eb:16:b1:2a:57:33:5f:21:4b:15:b6: ea:cd:22:00:3f:8a:68:90:e4:a4:cd:f1:0e:f6:c5: a2:1b:2b:a8:19:5e:6e:1c:27:7b:62:17:81:2a:98: 36:d8:70:3a:10:a8:f5:eb:9e:b3:8d:e7:ca:30:d1: 78:36:25:6d:a5:ea:6e:c7:47:55:1f:90:b4:22:4d: b1:7d:75:f5:9c:2e:f2:5e:66:0b:aa:dd:9d:34:ca: df:64:17:29:c9:e2:9f:34:8b:1a:ee:0e:e2:df:be: 80:1d:25:fb:9d:89:a8:f6:ed:f8:05:27:79:ae:18: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:47:A5:F8:32:48:32:A6:3B:9A:7F:CB:BD:E5:8E:57:22:08:EA:4E X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bd:ed:0a:2a:3e:01:d3:44:66:a9:bf:4c:f5:b8:a3:dc:3b: 6a:be:44:ea:31:f9:05:2b:81:23:c2:aa:6b:3f:9a:f7:ab:88: c4:2c:bb:eb:18:3c:1a:fc:cb:f5:8a:af:1e:41:78:81:dd:10: 7e:0c:3d:69:1d:96:8c:e9:16:09:6d:5f:f0:99:7a:47:2d:77: 45:a5:03:0b:9a:97:bb:64:b7:e1:62:d0:d6:4d:16:dc:46:48: 5f:c1:38:fc:fb:87:75:75:73:3b:9a:97:b8:7b:7b:ec:38:c9: 86:b1:48:d6:c9:60:a9:c8:36:c2:aa:0b:8b:f0:a6:c0:8a:e9: 4e:3f:22:93:4b:b6:bb:ee:24:bd:34:eb:05:2b:73:8c:d2:01: 02:f4:f7:c3:17:fb:59:7c:61:f8:58:d3:ab:28:de:76:05:dd: 06:40:2f:52:35:56:e9:ef:f5:15:ec:cc:0d:83:02:de:25:f7: 11:1e:49:be:cc:fc:9e:ab:7b:cb:b0:cb:66:09:91:03:ee:be: 63:a1:49:67:e9:43:ed:ee:89:ac:ea:cd:39:a9:a1:bd:db:80: a7:0a:d4:0c:1f:11:8e:36:dc:d0:65:1a:e2:e7:fb:38:ef:18: b9:34:d5:5d:6f:41:e6:34:0e:a8:89:34:ba:d7:d7:74:87:b5: fb:4b:85:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYwOTE5MDQ1NzUzWhcNMjYwOTI2MDQ1NzUzWjAYMRYwFAYD VQQDEw02YWFlMTY1MS0xZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dQ8Wh8tmmNl+Um9dm8S6qll2F7188zGNs7xmnzZytlzAEBSk13fMnRjwtnT 8AAbxx+muY6/uqxLQPrMWWMJcqaOucX/ed8oki7G5luY+EkpvkKdGO5PONXcYcYH JuyXeERs6XHu8y/DKjxHJEWYWJuVyzFuZaYTDdcoufwL24Gf0GTApsyk8u7g6xax KlczXyFLFbbqzSIAP4pokOSkzfEO9sWiGyuoGV5uHCd7YheBKpg22HA6EKj1656z jefKMNF4NiVtpepux0dVH5C0Ik2xfXX1nC7yXmYLqt2dNMrfZBcpyeKfNIsa7g7i 376AHSX7nYmo9u34BSd5rhjJdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRHpfgy SDKmO5p/y73ljlciCOpOMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOr3tCio+AdNEZqm/TPW4o9w7ar5E6jH5BSuBI8Kqaz+a96uIxCy76xg8GvzL 9YqvHkF4gd0Qfgw9aR2WjOkWCW1f8Jl6Ry13RaUDC5qXu2S34WLQ1k0W3EZIX8E4 /PuHdXVzO5qXuHt77DjJhrFI1slgqcg2wqoLi/CmwIrpTj8ik0u2u+4kvTTrBStz jNIBAvT3wxf7WXxh+FjTqyjedgXdBkAvUjVW6e/1FezMDYMC3iX3ER5Jvsz8nqt7 y7DLZgmRA+6+Y6FJZ+lD7e6JrOrNOamhvduApwrUDB8Rjjbc0GUa4uf7OO8YuTTV XW9B5jQOqIk0utfXdIe1+0uFcw== -----END CERTIFICATE-----Generated at Sat Sep 19 08:43:44 2026 by rpki-client