$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: g2EBqY1fU854zNDeQpdyckDRXJFe275UTLF83E0euc0= Subject key identifier: 42:48:44:1A:D7:3F:42:14:C5:7A:2B:1D:79:99:6F:6F:F8:63:63:49 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1B0F Signing time: Fri 04 Sep 2026 16:15:52 +0000 Manifest this update: Fri 04 Sep 2026 16:15:52 +0000 Manifest next update: Fri 11 Sep 2026 16:15:52 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: jMrQrTFvPLzG3cB+6+CYvj+ozLd0BnSY0b43nSslJoM=) 2: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) 3: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6961 (0x1b31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Sep 4 16:15:52 2026 GMT Not After : Sep 11 16:15:52 2026 GMT Subject: CN=6a9aeeb8-7c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:c8:72:3b:4f:9e:74:fa:96:bc:5f:84:00: 1a:89:9d:b5:60:26:54:85:5f:3a:54:f1:62:30:4c: 58:75:8a:57:b3:f3:d9:93:c6:ba:b3:21:d0:02:bb: a7:02:3d:ee:fc:4b:98:65:f4:32:3b:28:3d:60:38: e7:4e:b6:ad:8d:2d:c0:3d:57:4d:29:9c:86:29:b0: 05:8d:53:c7:78:9e:0e:d0:2e:63:b8:2f:c6:6b:4f: cb:0d:65:71:26:74:f8:29:90:3a:66:c1:51:72:36: 0e:f4:da:2c:8b:82:0e:73:a5:e3:8f:f9:46:dc:78: 17:30:3d:bb:39:f4:2e:08:06:e4:5f:b2:2f:73:a4: 7d:92:75:51:51:91:d5:c0:cd:27:11:65:ea:3c:dc: 0a:5f:3b:d6:f5:4b:61:4b:5b:98:45:f8:96:60:46: e9:90:e6:9d:f6:ee:8a:35:a7:d7:4e:c0:25:5c:b1: 5b:66:18:3b:10:f3:a3:1c:99:20:72:75:f8:cb:70: 2e:7b:82:59:a6:4c:a8:4d:10:b3:f3:ff:8b:74:1b: 32:73:2c:0f:f5:cd:87:5f:b5:e6:a5:84:fb:12:45: 1c:91:a7:e6:f3:fe:a3:cd:11:57:60:0e:d0:9a:18: 44:f9:f1:ea:7f:a5:d5:1f:5e:ce:46:a3:32:fa:62: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:44:1A:D7:3F:42:14:C5:7A:2B:1D:79:99:6F:6F:F8:63:63:49 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:d7:22:a7:44:41:ff:76:2b:14:04:ad:69:1f:bd:b9:df: 2e:c0:dc:ba:dc:e5:e8:29:33:df:e3:80:9b:9a:e2:7f:d2:e7: 07:3a:43:35:7f:f1:4e:8f:42:0e:7a:d6:7c:2e:f3:a5:06:ca: 2f:d2:7c:e2:69:17:d8:e2:25:2c:4d:df:29:a7:ee:cd:2a:cf: c4:47:cc:76:00:99:e7:de:b9:d8:07:33:8e:4e:59:7b:eb:48: 29:20:e0:a2:da:1f:d8:20:b4:84:e4:e7:b9:8b:ed:46:c2:40: 6a:cb:d8:95:6b:77:38:c3:57:ea:c3:a2:0d:cd:e9:95:43:f6: b6:aa:c2:03:a2:6e:be:ce:87:b3:dd:24:0d:67:a6:fd:ef:8e: 4b:9d:de:81:a1:22:86:0c:ba:54:74:23:4d:1b:aa:36:07:51: 5b:5f:d0:b7:94:11:54:8a:0b:b4:2f:bc:f0:c7:69:2f:ee:eb: bb:69:ff:14:a3:a7:58:51:01:9a:12:82:bd:cd:a6:13:d7:69: f3:bd:68:9b:aa:2e:b0:c8:a4:2b:b1:07:5b:8e:89:b8:fc:d1: fc:b7:9d:09:7e:7a:e9:2b:cd:79:5b:c4:6a:6a:de:87:94:57: 9c:69:d7:59:5b:bf:03:db:27:a2:74:e1:9c:f3:85:36:82:81: 18:f0:dd:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwOTA0MTYxNTUyWhcNMjYwOTExMTYxNTUyWjAYMRYwFAYD VQQDEw02YTlhZWViOC03YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTbIcjtPnnT6lrxfhAAaiZ21YCZUhV86VPFiMExYdYpXs/PZk8a6syHQArun Aj3u/EuYZfQyOyg9YDjnTratjS3APVdNKZyGKbAFjVPHeJ4O0C5juC/Ga0/LDWVx JnT4KZA6ZsFRcjYO9Nosi4IOc6Xjj/lG3HgXMD27OfQuCAbkX7Ivc6R9knVRUZHV wM0nEWXqPNwKXzvW9UthS1uYRfiWYEbpkOad9u6KNafXTsAlXLFbZhg7EPOjHJkg cnX4y3Aue4JZpkyoTRCz8/+LdBsycywP9c2HX7XmpYT7EkUckafm8/6jzRFXYA7Q mhhE+fHqf6XVH17ORqMy+mJOiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJIRBrX P0IUxXorHXmZb2/4Y2NJMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWPbXIqdEQf92KxQErWkfvbnfLsDcutzl6Ckz3+OAm5rif9LnBzpDNX/xTo9C DnrWfC7zpQbKL9J84mkX2OIlLE3fKafuzSrPxEfMdgCZ59652Aczjk5Ze+tIKSDg otof2CC0hOTnuYvtRsJAasvYlWt3OMNX6sOiDc3plUP2tqrCA6Juvs6Hs90kDWem /e+OS53egaEihgy6VHQjTRuqNgdRW1/Qt5QRVIoLtC+88MdpL+7ru2n/FKOnWFEB mhKCvc2mE9dp871om6ousMikK7EHW46JuPzR/LedCX566SvNeVvEamreh5RXnGnX WVu/A9snonThnPOFNoKBGPDdyQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:47:41 2026 by rpki-client