$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: exRS+JNKTEXJDXJ/GHCQ9A7XxC/jU+O8uRJEEinEmBs= Subject key identifier: 38:46:AA:F2:FA:1A:1A:1D:A6:CC:42:BD:66:6B:F8:92:13:5A:E4:BA Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 0960 Signing time: Sat 24 Oct 2026 20:07:34 +0000 Manifest this update: Sat 24 Oct 2026 20:07:34 +0000 Manifest next update: Sat 31 Oct 2026 20:07:34 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: J+VcdWCVLI0qYIsPPzeox0Kl91rRh5tsM/yy9gUBGVc=) 2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: li3YRa9Yv25yotW6/EC7vLabn+M8e7uHM9RYoRoBug8=) 3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: LZ40P7jyeEqSl0L+sairDVVJ2sKXjxklHIoC8zej7gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 24 20:07:34 2026 GMT Not After : Oct 31 20:07:34 2026 GMT Subject: CN=6add1006-cc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:c4:64:51:83:bc:7d:15:dc:aa:17:c8:07: 46:a3:ee:d7:4f:fd:10:33:55:92:ea:2e:ba:78:51: 14:09:1d:61:6f:91:a9:4d:3e:07:25:ac:e7:76:86: 46:84:d7:97:22:48:19:c9:f7:04:25:f9:b1:95:6f: a4:c5:2b:aa:cd:8b:37:27:e8:c5:2d:cc:31:44:a0: 95:d8:49:f8:6b:fe:9b:ba:68:f9:00:f8:37:f2:49: 61:19:ea:05:c4:8e:14:2f:cc:7b:3b:60:7d:60:33: 4d:d6:b5:7b:d6:9b:9c:2c:9e:3d:c0:cb:6d:bd:9e: d8:51:52:f9:2a:3f:5d:b2:ba:10:13:4a:1d:a7:9c: be:ff:1d:a6:2d:92:63:c1:2c:b5:e4:e5:4e:a4:56: ff:38:6a:b6:10:55:be:86:36:78:e4:49:b0:4f:59: 9d:20:18:a2:08:73:91:45:f5:cb:75:45:7e:db:36: cc:cd:46:3b:6d:f5:26:74:f5:b2:c4:5c:e3:ef:bf: 5f:54:fd:16:0d:3d:08:16:59:e0:f9:29:a2:f4:49: c9:89:ef:75:72:7e:9a:b8:36:a9:c7:56:ef:7b:19: c4:74:04:7c:70:2c:da:fd:49:85:b4:ec:97:fe:98: 99:0d:d8:37:85:b5:33:1f:0b:39:00:00:51:b1:f4: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:AA:F2:FA:1A:1A:1D:A6:CC:42:BD:66:6B:F8:92:13:5A:E4:BA X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8f:39:01:e2:a7:1e:57:42:4a:1a:23:18:b7:56:17:d3:9d: 6a:a8:0a:44:c8:e1:7a:d9:f6:6e:bf:75:2f:ff:f3:82:a8:b2: 1c:a2:a4:de:41:99:22:d2:5c:ad:cc:5d:c8:38:d3:19:b6:d8: ba:b2:1d:e0:03:8f:1e:fc:9f:06:62:a7:3b:b5:36:6d:21:6a: 59:db:e8:1e:c7:05:8b:bc:25:e8:af:f2:66:9b:65:fd:fd:e2: a6:ca:f7:68:df:4b:ea:1f:90:56:28:75:95:b2:f0:f3:7a:db: 07:c7:1d:97:64:5e:f2:5b:f0:0f:13:04:ab:3e:13:42:28:20: cf:35:a2:46:67:f4:10:9a:c6:e7:4e:ee:ef:bd:37:0e:32:dc: 59:f3:a2:7c:90:08:12:5d:0a:e6:76:04:8e:fa:41:d7:6e:8d: fb:47:ca:75:84:86:16:94:da:c2:47:ed:df:4a:48:6b:69:e0: 3e:aa:73:68:1b:f8:ea:5d:4d:a3:c3:64:93:d7:0d:d5:42:29: 88:f0:1b:9a:9c:f3:a3:af:f2:f0:c0:06:94:19:3a:8d:a5:bb: 00:f6:cb:b4:95:24:92:c8:70:c4:83:be:ed:d2:dd:16:b1:df: 55:42:c2:7a:fd:69:c6:d4:4b:9c:68:f5:39:e8:62:d7:de:2f: 7e:8e:fa:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYxMDI0MjAwNzM0WhcNMjYxMDMxMjAwNzM0WjAYMRYwFAYD VQQDEw02YWRkMTAwNi1jYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOXEZFGDvH0V3KoXyAdGo+7XT/0QM1WS6i66eFEUCR1hb5GpTT4HJazndoZG hNeXIkgZyfcEJfmxlW+kxSuqzYs3J+jFLcwxRKCV2En4a/6bumj5APg38klhGeoF xI4UL8x7O2B9YDNN1rV71pucLJ49wMttvZ7YUVL5Kj9dsroQE0odp5y+/x2mLZJj wSy15OVOpFb/OGq2EFW+hjZ45EmwT1mdIBiiCHORRfXLdUV+2zbMzUY7bfUmdPWy xFzj779fVP0WDT0IFlng+Smi9EnJie91cn6auDapx1bvexnEdAR8cCza/UmFtOyX /piZDdg3hbUzHws5AABRsfS8ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhGqvL6 GhodpsxCvWZr+JITWuS6MB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGo85AeKnHldCShojGLdWF9OdaqgKRMjhetn2br91L//zgqiyHKKk3kGZItJc rcxdyDjTGbbYurId4AOPHvyfBmKnO7U2bSFqWdvoHscFi7wl6K/yZptl/f3ipsr3 aN9L6h+QVih1lbLw83rbB8cdl2Re8lvwDxMEqz4TQiggzzWiRmf0EJrG507u7703 DjLcWfOifJAIEl0K5nYEjvpB126N+0fKdYSGFpTawkft30pIa2ngPqpzaBv46l1N o8Nkk9cN1UIpiPAbmpzzo6/y8MAGlBk6jaW7APbLtJUkkshwxIO+7dLdFrHfVULC ev1pxtRLnGj1Oehi194vfo76zA== -----END CERTIFICATE-----Generated at Sun Oct 25 07:08:12 2026 by rpki-client