$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: TJ9I/+kSYP3seKsSQZDWhsrEm7cq5yDOz+SjxWkrTT8= Subject key identifier: A6:78:3A:72:2C:46:DA:3F:69:09:AC:DB:DC:FF:3C:B6:F5:D3:C2:0E Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 09E3 Signing time: Tue 20 Oct 2026 19:56:47 +0000 Manifest this update: Tue 20 Oct 2026 19:56:46 +0000 Manifest next update: Tue 27 Oct 2026 19:56:46 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: s86TGp+RIONE4KM92+OUWo/Npgz5k0qqsVd6MnSmc1Y=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 19:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Oct 20 19:56:46 2026 GMT Not After : Oct 27 19:56:46 2026 GMT Subject: CN=6ad7c77f-2878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:11:d6:b3:ef:46:70:3b:d1:e4:1e:fa:35: 90:7b:8a:38:58:4e:ac:e3:4f:d0:e5:74:ba:e9:17: b5:a6:a0:48:22:af:d6:9a:5f:fa:3b:26:61:8f:e3: 13:72:8f:fe:f4:84:60:80:b4:c3:e7:9f:1d:bf:ba: 5e:ce:1f:85:42:c5:64:25:cd:d6:29:06:79:6d:68: 1a:84:f6:81:8f:8c:a7:a3:8f:e4:69:d6:a3:49:a9: de:1e:94:77:02:78:d0:c2:f5:8a:e3:34:19:08:c8: 3d:d3:be:29:47:43:06:b2:58:12:86:d3:66:c7:dc: 56:c5:22:e3:e8:57:96:29:80:fe:35:8c:1e:da:b8: a6:ea:77:45:89:68:cd:a1:2b:7d:e0:a6:17:4b:7b: 26:8a:b2:3a:3c:f9:78:e7:fa:35:a3:a5:0d:40:f7: 5d:b4:09:b5:88:05:51:7e:95:c2:a6:cc:9f:76:c8: 6c:c3:90:0a:d5:96:c2:7e:f2:a0:a6:2c:9b:74:11: ba:1e:25:52:b3:11:fb:24:78:3f:22:fd:3a:aa:38: 9b:97:43:76:37:14:3a:53:de:17:a7:0b:7f:c8:62: 7a:68:f2:70:bf:98:e6:0e:f0:93:14:94:48:68:24: 17:e7:48:2b:75:db:e4:2f:ee:92:6d:f4:f2:2a:5d: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:3A:72:2C:46:DA:3F:69:09:AC:DB:DC:FF:3C:B6:F5:D3:C2:0E X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5d:9a:fa:cf:bd:43:89:24:ab:c8:0b:38:c5:d1:25:61:c0: b3:65:dd:72:0a:71:18:d9:10:bc:dc:7b:2c:36:12:53:92:46: 32:db:53:85:93:1f:fe:48:75:a2:c3:9a:97:c9:2d:4e:ef:11: 0d:96:e3:d1:c1:1b:24:5e:66:cc:a8:ac:21:57:c7:d7:92:51: 8c:4a:91:f1:8e:16:6b:9a:5e:47:d3:14:b7:b6:d0:cf:dd:9f: f6:7c:5c:f6:77:af:d5:a8:9f:16:02:4d:2e:8e:7a:08:4e:59: e8:83:f4:63:56:65:56:26:c1:d2:36:3d:41:cc:a3:b4:32:47: 31:44:f4:8e:04:c5:22:fa:a2:7b:52:2d:d9:55:1a:71:9a:d7: 1c:ac:9e:83:2f:98:d4:62:46:97:20:bc:1a:b9:d2:d5:e2:a3: 16:d8:e7:f6:bd:27:68:f4:36:1b:44:f9:b0:8c:be:9e:c2:eb: 0a:c3:05:3b:aa:ce:c4:74:ce:19:5b:a1:fe:c1:34:f2:2c:fc: db:f5:72:8c:5e:f7:67:eb:31:77:29:47:41:03:58:4b:18:5c: 5b:98:1e:3d:03:f4:1e:cb:ee:63:04:88:db:9e:f9:40:a0:dd: e1:1d:ad:bc:7b:48:cf:04:af:0a:4e:8e:74:a7:d7:62:f2:3d: 51:8d:85:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYxMDIwMTk1NjQ2WhcNMjYxMDI3MTk1NjQ2WjAYMRYwFAYD VQQDEw02YWQ3Yzc3Zi0yODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tsR1rPvRnA70eQe+jWQe4o4WE6s40/Q5XS66Re1pqBIIq/Wml/6OyZhj+MT co/+9IRggLTD558dv7pezh+FQsVkJc3WKQZ5bWgahPaBj4yno4/kadajSaneHpR3 AnjQwvWK4zQZCMg9074pR0MGslgShtNmx9xWxSLj6FeWKYD+NYwe2rim6ndFiWjN oSt94KYXS3smirI6PPl45/o1o6UNQPddtAm1iAVRfpXCpsyfdshsw5AK1ZbCfvKg piybdBG6HiVSsxH7JHg/Iv06qjibl0N2NxQ6U94Xpwt/yGJ6aPJwv5jmDvCTFJRI aCQX50grddvkL+6SbfTyKl0bEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZ4OnIs Rto/aQms29z/PLb108IOMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPl2a+s+9Q4kkq8gLOMXRJWHAs2XdcgpxGNkQvNx7LDYSU5JGMttThZMf/kh1 osOal8ktTu8RDZbj0cEbJF5mzKisIVfH15JRjEqR8Y4Wa5peR9MUt7bQz92f9nxc 9nev1aifFgJNLo56CE5Z6IP0Y1ZlVibB0jY9QcyjtDJHMUT0jgTFIvqie1It2VUa cZrXHKyegy+Y1GJGlyC8GrnS1eKjFtjn9r0naPQ2G0T5sIy+nsLrCsMFO6rOxHTO GVuh/sE08iz82/VyjF73Z+sxdylHQQNYSxhcW5gePQP0HsvuYwSI2575QKDd4R2t vHtIzwSvCk6OdKfXYvI9UY2FDw== -----END CERTIFICATE-----Generated at Thu Oct 22 10:42:42 2026 by rpki-client