$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: +v11bNbX9xygJJeFB8JhQyicXFHWE2tds48F5Zt/cgs= Subject key identifier: D2:D6:9A:9B:65:B3:B0:4E:75:11:EC:FF:49:63:E1:2B:F5:56:CC:DF Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A36A Signing time: Mon 26 Oct 2026 14:30:43 +0000 Manifest this update: Mon 26 Oct 2026 14:30:42 +0000 Manifest next update: Mon 02 Nov 2026 14:30:42 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: bQrgEP7dCAeE7cm1tZTmFabQNZMAQcRh/gR3OxbwR7c=) 2: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 3: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) 4: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 5: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 6: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 7: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 8: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) 9: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) 10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 11: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 12: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 13: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7174 (0x1c06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Oct 26 14:30:42 2026 GMT Not After : Nov 2 14:30:42 2026 GMT Subject: CN=6adf6413-31e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:14:26:f4:0a:bd:8c:dd:80:be:87:56:54: a5:d1:1e:fe:86:ed:08:ab:7f:40:84:4c:e8:4e:11: 1b:ee:ed:35:d1:db:a0:bb:72:63:d8:17:25:46:75: 46:d5:ac:53:02:11:d3:95:5d:f4:99:d9:c4:40:af: ec:51:35:b0:6d:7a:d8:14:4c:d9:4a:c2:c4:32:80: 1b:f8:67:75:1f:14:bf:99:4e:5a:1a:c2:5a:a1:ab: 95:68:0c:f7:4b:14:cc:ba:e8:ac:e2:32:8a:69:60: 8b:99:7b:1b:2c:00:72:c3:1c:76:2b:33:4e:a6:22: 3e:3c:1f:89:0d:4d:2d:07:fe:f3:74:82:2a:8e:24: 65:2f:8b:17:f6:92:82:e9:46:19:b5:fc:b1:09:b7: 67:f5:b0:07:4a:e5:e3:0d:3b:77:d5:61:12:1a:ad: e1:61:02:75:bc:ec:74:70:40:94:72:04:09:67:e6: 6f:0b:20:a9:8e:28:20:fe:d5:54:95:15:13:45:eb: ad:7f:8b:1e:33:50:92:00:b1:81:95:3c:88:8b:ad: c2:c7:09:82:d8:e5:fb:47:43:9a:7a:58:9a:57:1a: 73:d1:dc:31:2b:e5:01:e4:fe:3a:c7:ca:17:f7:f0: 2e:78:ac:8d:4a:7b:6d:d9:04:be:da:bd:90:4b:69: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D6:9A:9B:65:B3:B0:4E:75:11:EC:FF:49:63:E1:2B:F5:56:CC:DF X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ad:52:e6:a9:4b:01:3a:2b:37:b8:f1:b0:73:c0:bb:ca:24: 95:3a:9c:ae:e0:62:c5:73:f6:7f:b7:78:d9:06:a2:c3:c4:95: 4e:34:3b:44:9e:50:c5:4a:8c:a9:a6:33:89:4e:d3:45:86:b9: 49:66:c0:df:19:8c:80:d2:dd:3e:31:77:5d:e3:d0:e8:6a:7e: 83:cb:ce:4b:06:36:a0:d3:18:e8:d2:c6:bd:7f:af:1e:a3:68: 1b:6f:84:e2:ef:31:37:6f:e5:ed:5c:6e:4f:52:e4:f1:da:87: 29:c4:35:58:2a:e2:68:a8:5a:33:c3:e7:b5:4d:24:51:34:f4: 44:9d:a9:cf:1a:6a:c2:ba:d6:09:54:ae:e6:bc:15:06:ff:ce: 14:3c:b8:e3:70:62:8a:53:d8:71:b3:95:86:71:8b:92:ba:db: 11:77:c3:c5:a8:8d:da:04:52:29:bb:e7:63:d2:12:0c:54:0e: 10:c0:d0:71:e7:2d:9a:92:de:90:a5:60:d6:63:3b:1d:f3:60: 47:3b:53:5e:14:3e:7e:9f:cd:81:b8:96:ea:d0:78:71:74:f9: 8c:cd:8e:a9:62:ef:1c:bf:f7:7b:90:80:bc:3b:06:e9:16:b5: 30:a8:91:1f:12:49:23:41:1d:cc:80:1d:90:a5:0b:8f:dc:67: dc:6b:db:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYxMDI2MTQzMDQyWhcNMjYxMTAyMTQzMDQyWjAYMRYwFAYD VQQDEw02YWRmNjQxMy0zMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRUUJvQKvYzdgL6HVlSl0R7+hu0Iq39AhEzoThEb7u010dugu3Jj2BclRnVG 1axTAhHTlV30mdnEQK/sUTWwbXrYFEzZSsLEMoAb+Gd1HxS/mU5aGsJaoauVaAz3 SxTMuuis4jKKaWCLmXsbLABywxx2KzNOpiI+PB+JDU0tB/7zdIIqjiRlL4sX9pKC 6UYZtfyxCbdn9bAHSuXjDTt31WESGq3hYQJ1vOx0cECUcgQJZ+ZvCyCpjigg/tVU lRUTReutf4seM1CSALGBlTyIi63CxwmC2OX7R0OaeliaVxpz0dwxK+UB5P46x8oX 9/AueKyNSntt2QS+2r2QS2k9YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLWmptl s7BOdRHs/0lj4Sv1VszfMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAda1S5qlLATorN7jxsHPAu8oklTqcruBixXP2f7d42Qaiw8SVTjQ7RJ5QxUqM qaYziU7TRYa5SWbA3xmMgNLdPjF3XePQ6Gp+g8vOSwY2oNMY6NLGvX+vHqNoG2+E 4u8xN2/l7VxuT1Lk8dqHKcQ1WCriaKhaM8PntU0kUTT0RJ2pzxpqwrrWCVSu5rwV Bv/OFDy443BiilPYcbOVhnGLkrrbEXfDxaiN2gRSKbvnY9ISDFQOEMDQcectmpLe kKVg1mM7HfNgRztTXhQ+fp/NgbiW6tB4cXT5jM2OqWLvHL/3e5CAvDsG6Ra1MKiR HxJJI0EdzIAdkKULj9xn3Gvb4Q== -----END CERTIFICATE-----Generated at Wed Oct 28 14:41:06 2026 by rpki-client