$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: zo+vjIBHl2KZ/xY8QbPoEJIgR2xegH0GSoOqwnTSCIM= Subject key identifier: A4:A9:E2:AB:05:6A:D7:67:CA:9B:1E:58:AA:B2:59:64:0A:19:A6:A9 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 02B4 Signing time: Sat 03 Oct 2026 02:04:25 +0000 Manifest this update: Sat 03 Oct 2026 02:04:25 +0000 Manifest next update: Sat 10 Oct 2026 02:04:25 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: e2h9L5O6to+D3VGlMn4wQ0qUzk0r4K8D57edUQAVHo8=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Oct 3 02:04:25 2026 GMT Not After : Oct 10 02:04:25 2026 GMT Subject: CN=6ac062a9-53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:5c:d9:d1:42:1b:b0:7b:91:9f:f6:31:2b: 30:67:20:02:89:e0:56:8e:27:94:b5:d1:73:a6:8a: c2:ef:2a:81:57:6d:0b:88:da:af:e8:f0:e0:5b:d7: 88:8e:28:ce:47:cb:09:3a:f6:c2:07:36:cc:99:3a: 7b:07:64:6e:a1:18:a1:1e:5c:ee:a9:9d:84:a6:f3: c7:c7:1e:1b:a8:67:d5:8e:fa:d5:6b:47:91:31:11: 84:62:6b:f6:4e:d2:b6:71:55:d8:74:da:61:b7:01: 8f:72:09:cb:dd:5b:39:1e:b9:8a:5f:bd:1e:67:a2: 3c:44:af:ec:a4:c4:ec:f9:f5:e5:7a:aa:02:82:7c: 32:1a:5b:3f:0d:7b:91:4b:fc:7f:ee:69:03:bb:28: 3c:e3:2f:a5:d8:8a:6b:77:52:c6:9a:c8:b8:b3:f7: be:f7:98:44:55:75:21:60:c5:05:ea:92:4c:99:9f: f8:51:06:ae:c2:a5:38:a0:36:71:34:d1:57:f0:ad: c0:e1:05:2c:3b:99:d9:5c:c8:eb:47:11:d8:ea:89: 97:8e:0d:eb:e0:d4:8c:cd:c5:d1:51:f7:ee:66:eb: ec:a7:93:96:e3:72:c6:a0:49:1b:bc:a0:02:a1:38: a7:c3:93:e7:2f:3b:70:73:6f:3f:4d:03:97:82:f2: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:E2:AB:05:6A:D7:67:CA:9B:1E:58:AA:B2:59:64:0A:19:A6:A9 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e4:3a:b8:9e:83:d1:8b:ce:4f:89:7a:f9:21:9e:16:21:50: 86:ee:c0:23:70:19:7e:7d:a5:ea:30:7d:45:37:bb:b7:cf:c2: e4:dc:ad:f7:c6:ab:14:32:a2:0a:28:fe:3f:ed:7d:f1:68:7e: 43:b1:7a:80:f2:24:ba:39:55:0f:f6:c6:3d:45:f9:78:5c:84: 5a:2d:17:e1:e9:df:3e:ba:5a:73:1c:4d:55:f1:33:c2:5e:07: 81:1d:d9:88:c1:34:bf:2a:c2:cd:bd:ad:41:1a:08:cd:62:ee: d3:b7:e4:34:ee:3b:51:02:e3:b2:74:73:01:a8:37:b8:b6:d1: d6:09:e5:7b:72:31:00:ec:05:a6:ad:b7:63:80:65:0a:3f:62: 20:69:3c:b6:cd:20:12:48:0e:0d:5f:f4:fd:e7:bd:8e:77:3c: c0:fb:91:c1:10:c9:24:ea:94:9b:5d:97:32:43:3a:b6:77:ed: ba:59:44:18:61:bb:17:97:fc:0f:b9:cd:45:71:db:ed:30:d7: 44:15:01:3e:f9:a0:05:f9:82:8c:85:6a:56:ab:6c:8d:b6:35: dd:81:9a:39:30:34:07:4e:5b:b8:63:f3:99:97:b7:37:2b:59: 62:a9:7d:04:2c:2b:a9:13:db:41:46:26:8d:fd:af:3e:53:89: 13:37:9c:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYxMDAzMDIwNDI1WhcNMjYxMDEwMDIwNDI1WjAYMRYwFAYD VQQDEw02YWMwNjJhOS01M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhJc2dFCG7B7kZ/2MSswZyACieBWjieUtdFzporC7yqBV20LiNqv6PDgW9eI jijOR8sJOvbCBzbMmTp7B2RuoRihHlzuqZ2EpvPHxx4bqGfVjvrVa0eRMRGEYmv2 TtK2cVXYdNphtwGPcgnL3Vs5HrmKX70eZ6I8RK/spMTs+fXleqoCgnwyGls/DXuR S/x/7mkDuyg84y+l2Iprd1LGmsi4s/e+95hEVXUhYMUF6pJMmZ/4UQauwqU4oDZx NNFX8K3A4QUsO5nZXMjrRxHY6omXjg3r4NSMzcXRUffuZuvsp5OW43LGoEkbvKAC oTinw5PnLztwc28/TQOXgvKcBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSp4qsF atdnypseWKqyWWQKGaapMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+Q6uJ6D0YvOT4l6+SGeFiFQhu7AI3AZfn2l6jB9RTe7t8/C5Nyt98arFDKi Cij+P+198Wh+Q7F6gPIkujlVD/bGPUX5eFyEWi0X4enfPrpacxxNVfEzwl4HgR3Z iME0vyrCzb2tQRoIzWLu07fkNO47UQLjsnRzAag3uLbR1gnle3IxAOwFpq23Y4Bl Cj9iIGk8ts0gEkgODV/0/ee9jnc8wPuRwRDJJOqUm12XMkM6tnftullEGGG7F5f8 D7nNRXHb7TDXRBUBPvmgBfmCjIVqVqtsjbY13YGaOTA0B05buGPzmZe3NytZYql9 BCwrqRPbQUYmjf2vPlOJEzeccw== -----END CERTIFICATE-----Generated at Sun Oct 4 19:54:47 2026 by rpki-client