$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: Ucb285JH0goUZnddDLSMLFnFe7M0B569LvXczdifHV0= Subject key identifier: 42:AA:C2:7F:14:E7:DD:5C:EB:40:49:7B:8D:14:5E:8B:2B:49:20:37 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 0615 Signing time: Sun 04 Oct 2026 23:04:12 +0000 Manifest this update: Sun 04 Oct 2026 23:04:11 +0000 Manifest next update: Sun 11 Oct 2026 23:04:11 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 85KcyHaRWW3oK/GbV8nGXQKMb4sqqZg9hfH+2EIOOto=) 2: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=) 3: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=) 5: 5778FB08922911F1B1965EDD6A11F970.roa (hash: vkT0Co848XgmWcMvxPBj3JvFfA8woQU/yLqI+8Rvtxs=) 6: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=) 7: FE0D3F76B57C11F19ADFCA4A6711F970.roa (hash: bwdMaBLK0kDQ5a9IZEE6mEH7C45WPKGfvB87UZVm0h0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 23:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Oct 4 23:04:11 2026 GMT Not After : Oct 11 23:04:11 2026 GMT Subject: CN=6ac2db6c-9006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:3c:2a:17:82:08:f6:94:20:12:a8:2b:c9: 24:83:de:34:05:97:04:c2:19:9d:78:1a:0a:ea:43: 0b:58:eb:83:69:62:53:cf:b1:12:fd:4d:26:1f:aa: 4c:4e:a4:f4:7c:c5:b2:d1:6c:63:c9:6d:b3:26:f5: ec:59:f6:ba:c1:84:0a:4b:7a:50:10:27:6b:cc:67: 2c:63:9a:6d:23:4f:f3:94:0d:e8:c7:e3:d8:31:0f: f5:d8:7a:f8:a3:02:04:9b:16:2a:6c:46:a7:de:20: c3:03:dc:43:08:c8:14:bd:16:b8:29:13:b2:47:17: c7:cd:d3:36:61:61:24:39:b8:d1:39:f2:bc:47:0d: 10:8a:f4:e8:65:d5:d5:a3:54:b6:93:a6:64:9d:36: 76:1f:66:42:9d:80:11:95:af:fd:df:01:3a:ed:b3: ce:4d:bb:24:63:94:6c:2e:47:bb:ec:68:e6:95:ad: 7b:8e:e4:6d:01:be:0c:cc:15:9c:b3:13:72:06:93: e9:cd:87:25:df:aa:58:2c:9e:ae:6a:8b:29:58:c2: 72:72:7a:fe:ff:9f:de:f4:1a:8d:27:05:df:6f:15: 83:c9:c8:f9:ba:82:81:62:dc:ee:17:79:07:1b:ff: de:6b:49:f3:fa:70:6d:fa:65:72:7c:be:33:83:66: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:C2:7F:14:E7:DD:5C:EB:40:49:7B:8D:14:5E:8B:2B:49:20:37 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:64:8f:9c:cd:43:8f:c4:81:03:9a:9e:69:83:ca:09:ae:d5: ef:23:7c:7b:3b:bb:be:63:82:45:b8:ed:74:6e:c8:24:33:51: a7:6d:55:01:e5:f2:e4:18:ed:e5:6f:61:5d:93:03:b0:2b:3e: d3:7f:db:08:aa:1e:71:74:7e:f1:a8:1b:e6:f3:95:68:aa:36: 62:6b:ee:88:0a:aa:64:3f:ad:4c:ba:c1:ff:90:d7:a2:d1:29: 8b:93:32:27:52:84:a1:bc:dc:7d:1e:0b:d0:7c:21:1b:56:f4: 86:9c:b9:81:37:de:ee:0a:54:55:ce:94:8d:3b:25:6c:b7:e8: 1b:dc:e6:66:4b:7d:3c:52:70:53:45:e6:5f:8e:86:78:95:dd: 56:1b:bb:67:51:4e:bb:20:c4:f1:b3:1c:a4:81:06:e2:7f:6c: 29:c1:7d:af:12:c5:ea:0e:b5:26:86:32:7d:5c:be:6e:f5:fc: 48:a9:ae:29:8d:cb:09:df:72:ee:48:0d:2d:9f:38:9c:12:dd: 74:2f:b2:73:27:d1:7b:2f:06:cf:14:18:72:61:5a:dd:59:9a: f1:2a:7d:24:cb:02:d3:f7:a5:8e:34:50:9f:ec:2b:ab:ca:32: b7:de:c6:92:3e:b2:fb:c7:ff:94:4e:e0:0e:82:50:9e:e1:e2: 45:42:d7:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjYxMDA0MjMwNDExWhcNMjYxMDExMjMwNDExWjAYMRYwFAYD VQQDEw02YWMyZGI2Yy05MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAib48KheCCPaUIBKoK8kkg940BZcEwhmdeBoK6kMLWOuDaWJTz7ES/U0mH6pM TqT0fMWy0WxjyW2zJvXsWfa6wYQKS3pQECdrzGcsY5ptI0/zlA3ox+PYMQ/12Hr4 owIEmxYqbEan3iDDA9xDCMgUvRa4KROyRxfHzdM2YWEkObjROfK8Rw0QivToZdXV o1S2k6ZknTZ2H2ZCnYARla/93wE67bPOTbskY5RsLke77Gjmla17juRtAb4MzBWc sxNyBpPpzYcl36pYLJ6uaospWMJycnr+/5/e9BqNJwXfbxWDycj5uoKBYtzuF3kH G//ea0nz+nBt+mVyfL4zg2Z9JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKqwn8U 591c60BJe40UXosrSSA3MB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAWSPnM1Dj8SBA5qeaYPKCa7V7yN8ezu7vmOCRbjtdG7IJDNRp21VAeXy5Bjt 5W9hXZMDsCs+03/bCKoecXR+8agb5vOVaKo2YmvuiAqqZD+tTLrB/5DXotEpi5My J1KEobzcfR4L0HwhG1b0hpy5gTfe7gpUVc6UjTslbLfoG9zmZkt9PFJwU0XmX46G eJXdVhu7Z1FOuyDE8bMcpIEG4n9sKcF9rxLF6g61JoYyfVy+bvX8SKmuKY3LCd9y 7kgNLZ84nBLddC+ycyfRey8GzxQYcmFa3Vma8Sp9JMsC0/eljjRQn+wrq8oyt97G kj6y+8f/lE7gDoJQnuHiRULXcw== -----END CERTIFICATE-----Generated at Tue Oct 6 20:33:48 2026 by rpki-client