$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: mRBRmARVSPLckjSl1ZXta+CkoPOT0TCNoJ4giBOxs+c= Subject key identifier: CE:AA:B6:EA:86:A4:CA:61:40:F0:9E:E0:4E:3F:18:25:C8:B0:B3:1D Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: D2 Signing time: Wed 07 Oct 2026 07:14:51 +0000 Manifest this update: Wed 07 Oct 2026 07:14:51 +0000 Manifest next update: Wed 14 Oct 2026 07:14:51 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: 3J137y4fgJPIqO+yO0DIt0cdx5AqwUCy7e7BQkZgekg=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: 6KeAoBf8MaS5EjBdSVHExGmJ9a8yiTrCwJ3nhslSfTE=) 3: 995A12922D7911F185835B6B93833773.roa (hash: MmMEahGRPCXh9Mm/eF3pYwkpAK+cwHLCvIqEyEw37C4=) 4: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: wYk62Q6Ir+XeXEA2r1rVnPBMrc3HufUoVqQCvgr1iYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Oct 7 07:14:51 2026 GMT Not After : Oct 14 07:14:51 2026 GMT Subject: CN=6ac5f16b-c991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:af:a6:1c:ea:97:92:57:0e:1a:e6:21:67: 18:fb:e0:e6:5a:6f:de:9e:d1:1a:f2:26:be:bf:a5: bf:13:39:d0:ec:e6:67:bb:df:d3:51:89:ed:61:3e: 3e:23:e1:8f:d5:7a:e1:43:06:2c:a2:18:43:a0:fc: 99:cf:bd:ad:da:14:9b:98:3e:25:3f:7c:72:a2:8b: 07:5d:dc:cc:dd:a8:60:9a:1e:6e:10:68:18:de:bb: c4:86:d8:e6:5d:20:2b:22:82:d4:a2:2e:ec:93:bd: eb:dc:6d:06:d1:d3:61:14:bc:8f:bf:c6:25:6a:06: f7:98:45:61:95:3a:17:d3:30:c7:0d:75:e8:90:0b: d4:20:72:36:fa:a2:19:8e:90:a7:bd:4e:ae:2e:8b: 18:ce:f6:4c:4d:31:68:21:c2:cf:eb:b4:51:9f:f2: f4:51:c7:4f:4f:f3:d2:b1:f8:ee:d0:18:7e:bb:e7: 40:ae:78:78:c6:0f:5c:07:8c:91:7c:03:ec:1c:bf: 1c:9a:dc:6c:6c:d5:ac:ef:e2:3e:5c:dc:3c:59:00: 89:ab:d4:22:2a:a1:08:db:bf:5e:f7:d1:9c:8e:18: de:e1:bd:de:ad:9b:93:07:d6:bf:b4:a7:0e:42:a1: 89:05:76:0c:9a:90:44:e5:e0:ff:c2:75:a6:ba:48: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:B6:EA:86:A4:CA:61:40:F0:9E:E0:4E:3F:18:25:C8:B0:B3:1D X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0a:58:1f:29:33:3c:f7:5d:7f:5f:60:d2:1a:04:3f:76:34: ce:63:a9:c5:f3:93:65:ea:9c:a6:7b:6e:be:f2:8d:af:ba:37: 85:93:44:39:1c:d4:5c:e5:1d:1e:30:3c:ca:e4:64:cb:47:f1: d0:1d:40:1c:9f:8c:78:04:57:e9:f8:21:41:c8:51:b7:95:a7: 27:1f:e5:55:ff:4e:4e:c9:a2:56:8d:fb:91:ee:17:b2:b8:2a: 26:eb:c2:88:42:24:26:9b:2b:b4:d8:b3:7c:56:ce:ee:c5:1e: 10:a2:99:c9:7d:98:e6:5a:5c:5a:84:0e:46:63:0f:87:40:29: c0:e0:79:d5:c6:fd:92:39:78:ff:97:88:32:b0:5a:70:f9:34: 3a:88:e9:84:f1:aa:65:fb:28:b3:f3:f5:31:26:be:f3:0b:34: 2b:57:be:2a:91:e5:c8:e1:ea:fe:8c:8a:87:3e:7d:15:c3:6c: 24:d2:77:ee:07:0c:9f:f2:1e:9e:c4:08:26:4a:a3:96:36:90: 15:0e:99:6f:6d:5b:a7:ad:50:1e:46:6a:b0:04:dc:43:aa:38: fc:56:96:ff:7a:1e:c0:f8:2a:8a:5c:84:ed:bd:07:ed:94:48: b1:43:75:cd:52:4d:66:0a:e4:ea:31:50:02:f1:74:a8:27:f7: 74:aa:be:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYxMDA3MDcxNDUxWhcNMjYxMDE0MDcxNDUxWjAYMRYwFAYD VQQDEw02YWM1ZjE2Yi1jOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8ivphzql5JXDhrmIWcY++DmWm/entEa8ia+v6W/EznQ7OZnu9/TUYntYT4+ I+GP1XrhQwYsohhDoPyZz72t2hSbmD4lP3xyoosHXdzM3ahgmh5uEGgY3rvEhtjm XSArIoLUoi7sk73r3G0G0dNhFLyPv8Ylagb3mEVhlToX0zDHDXXokAvUIHI2+qIZ jpCnvU6uLosYzvZMTTFoIcLP67RRn/L0UcdPT/PSsfju0Bh+u+dArnh4xg9cB4yR fAPsHL8cmtxsbNWs7+I+XNw8WQCJq9QiKqEI279e99Gcjhje4b3erZuTB9a/tKcO QqGJBXYMmpBE5eD/wnWmukioJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6qtuqG pMphQPCe4E4/GCXIsLMdMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQApYHykzPPddf19g0hoEP3Y0zmOpxfOTZeqcpntuvvKNr7o3hZNEORzUXOUd HjA8yuRky0fx0B1AHJ+MeARX6fghQchRt5WnJx/lVf9OTsmiVo37ke4XsrgqJuvC iEIkJpsrtNizfFbO7sUeEKKZyX2Y5lpcWoQORmMPh0ApwOB51cb9kjl4/5eIMrBa cPk0OojphPGqZfsos/P1MSa+8ws0K1e+KpHlyOHq/oyKhz59FcNsJNJ37gcMn/Ie nsQIJkqjljaQFQ6Zb21bp61QHkZqsATcQ6o4/FaW/3oewPgqilyE7b0H7ZRIsUN1 zVJNZgrk6jFQAvF0qCf3dKq+Sw== -----END CERTIFICATE-----Generated at Thu Oct 8 20:35:32 2026 by rpki-client