$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: yXnOCSRKV3xrHBlmjvosT7DSS6SlNSWxvsAZUn8dRiA= Subject key identifier: F2:9C:57:58:4C:1B:3D:52:98:3A:E1:D0:03:75:5C:38:F6:A0:F2:F9 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 09CA Signing time: Mon 31 Aug 2026 19:53:18 +0000 Manifest this update: Mon 31 Aug 2026 19:53:17 +0000 Manifest next update: Mon 07 Sep 2026 19:53:17 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: 7azPMQMCSXkPmfcOkDsSmwZHiH/23TU//hTLlIwp4lk=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 19:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Aug 31 19:53:17 2026 GMT Not After : Sep 7 19:53:17 2026 GMT Subject: CN=6a95dbad-82bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:47:16:ca:8d:8b:30:25:54:3d:6a:eb:d4: 7b:52:0e:3b:f1:c3:b9:47:70:a5:54:5f:20:58:7c: cd:88:dc:c7:03:19:72:0d:5a:44:71:da:98:dc:8c: 6e:14:29:a4:e7:b6:92:10:6f:9c:c5:76:a1:d1:3e: 82:be:63:3e:74:f6:ff:94:54:c2:43:ea:bc:bb:a7: 4d:1e:df:e2:22:6c:23:07:0f:cd:a1:35:ea:62:cd: 23:29:c2:3f:2d:89:45:9c:09:ef:5b:f1:fe:87:47: 36:6e:fa:69:df:e7:ad:22:6b:63:27:01:ca:2e:5b: d7:4f:19:fd:bd:e2:19:0e:6a:e6:b7:84:85:85:eb: ad:87:77:00:f7:b0:3b:fd:c3:32:c0:3a:89:6f:ca: 7e:23:72:49:3a:8f:7a:d2:04:3d:4e:c3:86:a6:fa: 52:2e:34:c4:f7:fb:a0:ae:ad:4a:bd:a9:01:20:dc: 95:61:82:b2:47:f3:75:d5:2e:b9:6c:34:c1:fa:28: f1:43:8b:fe:5a:40:de:32:e4:90:3a:7b:56:6b:19: 19:d6:9c:14:24:d8:15:36:35:1c:43:37:d0:3c:d3: 77:c2:81:d5:2c:d2:e9:c8:f3:83:d5:78:3b:ec:34: 4e:22:2a:1e:50:c8:ce:05:d4:2c:de:76:cc:46:fe: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9C:57:58:4C:1B:3D:52:98:3A:E1:D0:03:75:5C:38:F6:A0:F2:F9 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:1e:01:a9:b4:9e:6a:4d:71:f9:b9:9e:62:bb:08:a2:bd: 99:e3:54:38:c2:9c:a9:80:23:8d:96:f9:0e:57:1f:1e:c1:18: 23:f0:32:9b:5e:4f:58:fe:72:44:f1:0f:12:40:87:5e:34:da: 40:59:24:d2:c8:4e:6b:a7:a9:1a:af:a2:4b:24:40:39:9a:fc: 16:9f:06:76:c7:88:94:a5:3c:52:bd:e5:95:fd:a1:a4:35:76: 21:82:d8:47:e9:46:1e:e9:a2:4f:d4:26:d3:d8:e9:dc:a6:1b: b5:b6:e9:d3:d3:51:20:81:18:d0:63:3b:aa:de:3b:89:9a:4c: fc:0b:2e:61:f3:b7:6b:51:68:96:03:10:a3:9b:cf:25:b9:e0: eb:3f:43:2c:31:0a:41:c4:0d:5e:7e:52:4d:a9:88:90:3a:93: 37:fb:b6:47:f7:2a:55:68:46:21:93:e9:6c:4f:83:db:a1:47: 43:0c:82:2d:b9:ac:ab:06:b4:16:b3:6c:b9:79:f0:11:3b:49: f6:93:c0:26:30:4d:61:00:ed:69:95:77:2f:d8:7a:ed:d1:2e: 95:0c:42:7f:d0:44:dd:b5:ba:ed:de:1c:77:d1:75:80:1d:6b: 76:a4:40:db:46:ec:70:8f:45:99:6a:59:c4:80:16:f5:91:89: 6a:94:85:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwODMxMTk1MzE3WhcNMjYwOTA3MTk1MzE3WjAYMRYwFAYD VQQDEw02YTk1ZGJhZC04MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvVHFsqNizAlVD1q69R7Ug478cO5R3ClVF8gWHzNiNzHAxlyDVpEcdqY3Ixu FCmk57aSEG+cxXah0T6CvmM+dPb/lFTCQ+q8u6dNHt/iImwjBw/NoTXqYs0jKcI/ LYlFnAnvW/H+h0c2bvpp3+etImtjJwHKLlvXTxn9veIZDmrmt4SFheuth3cA97A7 /cMywDqJb8p+I3JJOo960gQ9TsOGpvpSLjTE9/ugrq1KvakBINyVYYKyR/N11S65 bDTB+ijxQ4v+WkDeMuSQOntWaxkZ1pwUJNgVNjUcQzfQPNN3woHVLNLpyPOD1Xg7 7DROIioeUMjOBdQs3nbMRv4nywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKcV1hM Gz1SmDrh0AN1XDj2oPL5MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAROIeAam0nmpNcfm5nmK7CKK9meNUOMKcqYAjjZb5DlcfHsEYI/Aym15PWP5y RPEPEkCHXjTaQFkk0shOa6epGq+iSyRAOZr8Fp8GdseIlKU8Ur3llf2hpDV2IYLY R+lGHumiT9Qm09jp3KYbtbbp09NRIIEY0GM7qt47iZpM/AsuYfO3a1FolgMQo5vP Jbng6z9DLDEKQcQNXn5STamIkDqTN/u2R/cqVWhGIZPpbE+D26FHQwyCLbmsqwa0 FrNsuXnwETtJ9pPAJjBNYQDtaZV3L9h67dEulQxCf9BE3bW67d4cd9F1gB1rdqRA 20bscI9FmWpZxIAW9ZGJapSFcQ== -----END CERTIFICATE-----Generated at Tue Sep 1 04:51:50 2026 by rpki-client