$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: SQpK3DFD+ej6xEw3X9feK/vRjDOKeuSPh31DJH7kWxg= Subject key identifier: 50:CA:F7:3A:7A:B8:99:B2:46:33:3E:38:F8:3E:FD:5F:7B:44:CA:86 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 095F Signing time: Thu 22 Oct 2026 20:13:39 +0000 Manifest this update: Thu 22 Oct 2026 20:13:39 +0000 Manifest next update: Thu 29 Oct 2026 20:13:39 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: scrxdxjBv66sOR5GB4jpKloSIfT8E2xTxyMd1d8o+AM=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: LZ40P7jyeEqSl0L+sairDVVJ2sKXjxklHIoC8zej7gk=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: li3YRa9Yv25yotW6/EC7vLabn+M8e7uHM9RYoRoBug8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 20:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 22 20:13:39 2026 GMT Not After : Oct 29 20:13:39 2026 GMT Subject: CN=6ada6e73-c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:21:a2:13:3a:1f:37:50:12:74:17:e8:9e: 5a:a4:db:d1:56:9e:d0:fd:be:41:36:df:76:99:c8: a7:63:5e:5d:f0:a8:32:f0:55:b4:e1:56:37:07:a2: 4d:08:80:b4:9a:14:56:f1:20:37:f0:c1:57:f0:a2: c2:a7:2c:10:5f:ad:31:06:e6:7e:20:5a:9f:63:10: 4a:d5:2f:b7:f7:8c:51:11:3b:97:6c:9a:8b:f0:34: 37:2c:27:83:65:b6:3e:d4:2d:69:cc:60:6a:5c:19: 1a:c0:15:42:2c:78:2b:0d:97:fd:d1:70:91:06:76: 8c:0b:03:57:2e:31:00:b8:f2:b0:30:3e:db:e4:aa: c6:6f:9d:e9:ce:55:7b:21:78:8f:de:a1:e9:e6:d3: 61:f0:29:8a:65:7b:c5:1e:ac:12:6c:58:40:ad:f5: 55:eb:3e:6c:b0:58:b5:2a:01:d8:ba:ff:5c:72:ef: ca:fc:18:2d:bd:e7:04:1c:79:1d:44:db:bd:06:56: ba:01:2c:18:46:6b:27:26:14:6c:8d:fc:4a:2c:11: 1f:2a:20:db:d5:da:bb:11:bc:8d:a0:66:a6:e7:46: 87:96:c4:49:95:6a:78:c2:c2:d0:60:8c:d8:38:f3: 92:17:73:c5:88:05:d1:4f:cd:f4:2d:d7:7f:df:7a: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CA:F7:3A:7A:B8:99:B2:46:33:3E:38:F8:3E:FD:5F:7B:44:CA:86 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ad:ab:91:b6:84:32:63:4c:f1:e2:9e:10:95:4b:45:c2:51: 88:f3:4f:88:b3:81:6d:3f:19:c1:b9:f5:44:fc:08:58:0c:9c: 59:54:78:21:bc:36:18:96:bc:6c:54:74:41:99:1d:03:de:dc: 88:dd:ff:97:bc:f7:78:6a:fd:4c:f3:87:ef:0d:c8:71:1c:36: 29:25:48:e3:67:5e:1b:b1:a6:12:ed:2f:04:ee:56:01:57:19: 55:0d:6e:e0:19:77:25:2d:d2:22:28:88:fe:8f:00:64:35:a4: b0:85:f8:a0:2a:b3:b3:7b:91:47:73:01:ac:f1:94:8d:e9:2c: 2a:20:a0:6a:ee:b5:8a:81:5e:db:97:54:d3:04:35:9b:2a:68: 19:e8:3b:57:5b:16:3c:95:31:c4:a4:77:7c:77:93:b7:e3:32: 40:a5:d9:bd:ad:1e:eb:4c:ea:bf:c2:29:c0:38:41:27:91:67: 92:06:d2:d5:72:ef:8f:0e:a7:34:66:30:d4:ad:a8:73:85:49: fb:59:18:79:ac:c4:88:8f:ca:91:f9:62:a2:03:99:5e:97:56: 64:1f:4d:c0:da:33:10:e9:1e:a9:8f:f0:b1:c9:20:93:aa:84: 16:55:e5:79:34:2f:b3:d3:94:3a:a4:30:43:1c:a8:9d:70:28: 2a:ff:05:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYxMDIyMjAxMzM5WhcNMjYxMDI5MjAxMzM5WjAYMRYwFAYD VQQDEw02YWRhNmU3My1jODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kshohM6HzdQEnQX6J5apNvRVp7Q/b5BNt92mcinY15d8Kgy8FW04VY3B6JN CIC0mhRW8SA38MFX8KLCpywQX60xBuZ+IFqfYxBK1S+394xRETuXbJqL8DQ3LCeD ZbY+1C1pzGBqXBkawBVCLHgrDZf90XCRBnaMCwNXLjEAuPKwMD7b5KrGb53pzlV7 IXiP3qHp5tNh8CmKZXvFHqwSbFhArfVV6z5ssFi1KgHYuv9ccu/K/BgtvecEHHkd RNu9Bla6ASwYRmsnJhRsjfxKLBEfKiDb1dq7EbyNoGam50aHlsRJlWp4wsLQYIzY OPOSF3PFiAXRT830Ldd/33q0HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDK9zp6 uJmyRjM+OPg+/V97RMqGMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJa2rkbaEMmNM8eKeEJVLRcJRiPNPiLOBbT8Zwbn1RPwIWAycWVR4Ibw2GJa8 bFR0QZkdA97ciN3/l7z3eGr9TPOH7w3IcRw2KSVI42deG7GmEu0vBO5WAVcZVQ1u 4Bl3JS3SIiiI/o8AZDWksIX4oCqzs3uRR3MBrPGUjeksKiCgau61ioFe25dU0wQ1 mypoGeg7V1sWPJUxxKR3fHeTt+MyQKXZva0e60zqv8IpwDhBJ5FnkgbS1XLvjw6n NGYw1K2oc4VJ+1kYeazEiI/KkfliogOZXpdWZB9NwNozEOkeqY/wsckgk6qEFlXl eTQvs9OUOqQwQxyonXAoKv8Fvg== -----END CERTIFICATE-----Generated at Sat Oct 24 10:10:10 2026 by rpki-client