$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: l2WGEqxlJOrzo599TtdL+rV/qe4knCIrue42ktZaL/I= Subject key identifier: E1:BE:DC:C0:AA:99:6A:21:55:63:69:AF:50:4C:B8:3E:D4:32:62:8B Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 018E Signing time: Mon 19 Oct 2026 05:26:52 +0000 Manifest this update: Mon 19 Oct 2026 05:26:51 +0000 Manifest next update: Mon 26 Oct 2026 05:26:51 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: S4agiK9Z/keVCIlcVSAygTmklhYy5t2QvIGhLhR6/aA=) 2: 7AF7C814840211F1973E26E995A30FBC.roa (hash: is6JOCj8UH69lDcFhNaVF+Wuwi+xpA8ahsitf2M2Xz8=) 3: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Oct 19 05:26:51 2026 GMT Not After : Oct 26 05:26:51 2026 GMT Subject: CN=6ad5aa1b-2583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:e8:1c:b5:b8:1b:58:b2:ad:cc:f3:7f:07: 82:46:e8:67:6c:20:f4:f8:20:4f:19:ae:45:4d:2a: b1:07:f1:d1:7b:f2:c5:dd:03:40:3e:6c:e8:89:46: 62:36:4b:76:58:6c:a2:3a:f3:54:19:81:d3:ae:22: cd:83:da:03:c8:13:26:e3:c5:e0:ff:0f:fa:f9:19: f5:a2:c4:de:da:df:66:be:73:c1:61:f1:ac:b1:6d: f6:56:ed:85:f3:72:58:4d:95:29:a7:55:bf:7d:62: 9a:9b:12:13:c4:97:b8:05:de:de:24:28:13:65:09: 2a:92:29:44:04:f6:35:48:80:32:03:12:97:ba:00: 16:6f:cc:ae:fd:eb:dc:84:e6:47:83:c3:e2:02:73: 38:68:e1:48:e7:ab:1a:86:32:12:82:c5:d9:e2:7f: 6b:21:f2:71:45:1e:01:7b:73:07:ed:f3:73:04:73: 2b:61:8a:12:d0:49:1f:17:da:39:55:0f:c0:9d:a7: fc:26:7b:22:9d:ad:48:1e:e6:3d:63:8e:de:c9:e6: 1f:8b:94:bd:bf:c1:cc:e4:12:16:d0:91:8d:63:08: 23:81:22:89:69:e8:3d:57:65:f4:c8:24:b7:df:59: ac:61:6e:75:72:4e:1b:ae:14:29:64:a6:9a:a5:72: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BE:DC:C0:AA:99:6A:21:55:63:69:AF:50:4C:B8:3E:D4:32:62:8B X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3e:2c:9b:6c:83:6e:f7:46:92:01:66:74:dc:02:63:2c:93: 4d:15:b2:fa:85:fd:ec:7c:01:8f:db:a2:51:07:94:57:76:70: 94:cf:17:ee:8e:0b:38:8f:3c:5b:e0:99:1b:a4:a1:3f:8f:0f: e9:a5:ef:59:8e:2e:ea:7c:ca:17:16:6a:52:7e:7a:d2:12:4f: d0:1c:80:c7:ea:2d:a1:ce:94:7d:a4:d1:5e:12:b5:74:62:28: b2:70:56:8a:55:34:1e:84:11:87:d1:6d:d2:8d:da:5d:e6:2d: b8:a4:63:17:54:cc:c4:10:b6:91:b0:b4:37:ae:ed:5a:85:41: 1c:f1:c9:84:76:39:1d:b0:fe:e3:46:83:0e:dc:fd:cc:e3:2c: e9:f7:e3:e3:58:1e:df:99:f0:0d:45:be:83:3d:1f:c0:0c:17: 1e:74:ce:1c:b7:d9:59:1c:c1:cf:27:ad:dc:5b:16:5b:75:51: 80:32:f0:d4:9e:86:ec:5e:0d:b1:e8:26:65:0a:2b:e8:05:38: c9:8b:88:9b:b1:4c:cc:a6:7d:6e:e2:32:d3:74:6d:40:c4:cc: 5b:77:22:4f:be:08:ce:58:82:e0:c9:f9:d4:1a:db:3d:7c:da: 1f:37:60:e6:d5:21:82:4b:d0:7d:c6:64:06:cb:ef:62:73:74: f2:b3:34:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYxMDE5MDUyNjUxWhcNMjYxMDI2MDUyNjUxWjAYMRYwFAYD VQQDEw02YWQ1YWExYi0yNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGboHLW4G1iyrczzfweCRuhnbCD0+CBPGa5FTSqxB/HRe/LF3QNAPmzoiUZi Nkt2WGyiOvNUGYHTriLNg9oDyBMm48Xg/w/6+Rn1osTe2t9mvnPBYfGssW32Vu2F 83JYTZUpp1W/fWKamxITxJe4Bd7eJCgTZQkqkilEBPY1SIAyAxKXugAWb8yu/evc hOZHg8PiAnM4aOFI56sahjISgsXZ4n9rIfJxRR4Be3MH7fNzBHMrYYoS0EkfF9o5 VQ/Anaf8Jnsina1IHuY9Y47eyeYfi5S9v8HM5BIW0JGNYwgjgSKJaeg9V2X0yCS3 31msYW51ck4brhQpZKaapXLEzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOG+3MCq mWohVWNpr1BMuD7UMmKLMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfz4sm2yDbvdGkgFmdNwCYyyTTRWy+oX97HwBj9uiUQeUV3ZwlM8X7o4LOI88 W+CZG6ShP48P6aXvWY4u6nzKFxZqUn560hJP0ByAx+otoc6UfaTRXhK1dGIosnBW ilU0HoQRh9Ft0o3aXeYtuKRjF1TMxBC2kbC0N67tWoVBHPHJhHY5HbD+40aDDtz9 zOMs6ffj41ge35nwDUW+gz0fwAwXHnTOHLfZWRzBzyet3FsWW3VRgDLw1J6G7F4N segmZQor6AU4yYuIm7FMzKZ9buIy03RtQMTMW3ciT74IzliC4Mn51BrbPXzaHzdg 5tUhgkvQfcZkBsvvYnN08rM0XA== -----END CERTIFICATE-----Generated at Mon Oct 19 09:34:24 2026 by rpki-client