$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: 117evy9xCSXJedWFhUPcEP02T9hrKRuD5fMriLofDsI= Subject key identifier: B7:C2:BE:2B:CE:EF:47:77:34:A8:E4:1D:4B:F3:EB:D3:F6:EA:09:A4 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A30E Signing time: Thu 10 Sep 2026 14:30:25 +0000 Manifest this update: Thu 10 Sep 2026 14:30:25 +0000 Manifest next update: Thu 17 Sep 2026 14:30:25 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: bt0Xns4COEnEgXofbGV9FJg/1R4OiNWzLeT84URvlYs=) 2: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) 3: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 4: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 5: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 6: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 7: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 8: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) 9: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) 10: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 12: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 13: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7151 (0x1bef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Sep 10 14:30:25 2026 GMT Not After : Sep 17 14:30:25 2026 GMT Subject: CN=6aa2bf01-2f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:9c:13:fb:9e:cc:9e:5f:03:70:a2:f9:29: 8f:69:a8:af:f1:d6:a6:e6:e5:30:c2:cf:db:98:af: a3:aa:5d:3c:12:c5:c7:81:5b:de:aa:8d:ed:81:77: cc:58:a0:0c:4f:5b:12:f2:87:e7:a5:eb:3c:a8:dd: 40:59:cb:6e:03:b4:31:90:9b:14:1c:2b:12:b1:d9: 3d:c3:0b:6b:98:1d:da:17:ec:70:c8:73:7a:3c:4e: 24:6d:86:e7:f3:11:36:2c:59:6d:0c:09:53:9b:43: f1:c3:5b:7a:25:7c:53:60:ea:c6:5e:8b:36:20:90: 0b:ff:a1:d1:c3:21:c3:86:c0:de:29:cf:00:8f:96: da:f0:bd:a9:6d:54:06:cb:b3:53:be:61:bd:4c:55: 83:98:ea:77:1f:95:b1:fe:fa:5f:45:3d:2d:d7:53: 85:91:5c:0e:93:a5:8c:6e:ce:e8:47:03:08:68:0b: c2:e6:d8:ed:f6:cb:ea:f2:6f:3a:65:a0:43:a8:6d: 59:6e:9e:a2:b3:c3:89:10:06:a9:71:2d:6b:43:1e: aa:85:da:56:e1:a7:4c:76:db:73:b5:49:c4:3a:c4: d3:51:c2:52:f0:40:dc:ef:8e:8d:8e:ca:d8:4d:82: 76:c7:49:0d:2b:38:32:1b:30:a8:87:20:ab:3a:f0: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C2:BE:2B:CE:EF:47:77:34:A8:E4:1D:4B:F3:EB:D3:F6:EA:09:A4 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9e:c9:60:04:09:65:7d:c0:a6:96:83:1c:c9:8b:80:74:98: 78:66:1e:1a:22:96:84:31:0e:9c:df:dd:74:c6:66:63:b5:94: b4:c1:59:bc:21:df:8c:7e:d4:5d:66:40:47:1f:83:59:f8:f9: 92:42:63:de:4b:5b:69:35:8c:99:d2:f0:00:08:9c:be:b7:c8: bd:87:0a:4c:61:fc:a1:9b:53:bd:f5:36:0a:22:92:26:6f:3d: 67:d7:e2:2f:d1:d6:cb:a9:39:3b:20:12:5c:df:59:95:0e:4e: fa:de:6e:a6:ac:4e:63:94:1a:21:bd:73:52:7a:71:0a:49:6e: 98:fd:34:cf:51:76:3d:b6:56:2f:d1:e6:f7:10:f0:b6:19:a1: a4:25:d9:34:d6:b9:38:b7:ee:43:fe:b4:d4:1b:97:79:b6:f6: e1:2a:2d:9b:91:b7:f7:db:c9:75:ea:ce:92:e9:47:6a:05:fc: 9e:e9:26:d7:67:db:b6:4c:ae:d1:18:5c:9c:4c:d6:53:77:00: 19:e6:7e:70:29:a5:0b:33:8c:e6:e2:05:87:e8:0c:3c:0f:54: 9f:65:63:eb:e8:28:44:65:89:fc:22:c8:7a:5e:f4:b6:3e:a5: 68:bd:e2:ca:81:28:b3:bb:6a:e6:b8:4e:85:37:29:30:0b:e9: a8:83:d9:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwOTEwMTQzMDI1WhcNMjYwOTE3MTQzMDI1WjAYMRYwFAYD VQQDEw02YWEyYmYwMS0yZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBScE/uezJ5fA3Ci+SmPaaiv8dam5uUwws/bmK+jql08EsXHgVveqo3tgXfM WKAMT1sS8ofnpes8qN1AWctuA7QxkJsUHCsSsdk9wwtrmB3aF+xwyHN6PE4kbYbn 8xE2LFltDAlTm0Pxw1t6JXxTYOrGXos2IJAL/6HRwyHDhsDeKc8Aj5ba8L2pbVQG y7NTvmG9TFWDmOp3H5Wx/vpfRT0t11OFkVwOk6WMbs7oRwMIaAvC5tjt9svq8m86 ZaBDqG1Zbp6is8OJEAapcS1rQx6qhdpW4adMdttztUnEOsTTUcJS8EDc746NjsrY TYJ2x0kNKzgyGzCohyCrOvAr6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfCvivO 70d3NKjkHUvz69P26gmkMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJ7JYAQJZX3AppaDHMmLgHSYeGYeGiKWhDEOnN/ddMZmY7WUtMFZvCHfjH7U XWZARx+DWfj5kkJj3ktbaTWMmdLwAAicvrfIvYcKTGH8oZtTvfU2CiKSJm89Z9fi L9HWy6k5OyASXN9ZlQ5O+t5upqxOY5QaIb1zUnpxCklumP00z1F2PbZWL9Hm9xDw thmhpCXZNNa5OLfuQ/601BuXebb24Sotm5G399vJderOkulHagX8nukm12fbtkyu 0RhcnEzWU3cAGeZ+cCmlCzOM5uIFh+gMPA9Un2Vj6+goRGWJ/CLIel70tj6laL3i yoEos7tq5rhOhTcpMAvpqIPZIw== -----END CERTIFICATE-----Generated at Thu Sep 10 20:35:35 2026 by rpki-client