$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: ufLS3WTwA5jb3NiQ0NEGBqFqpk+DbRvez2Uy4dA9PNU= Subject key identifier: 39:76:F9:60:7D:09:FE:A2:12:7A:58:14:F6:FF:10:5E:57:F7:CD:30 Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 0490 Signing time: Fri 04 Sep 2026 23:43:13 +0000 Manifest this update: Fri 04 Sep 2026 23:43:13 +0000 Manifest next update: Fri 11 Sep 2026 23:43:13 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: efUFeRfzNtuPRLTs6M3dHUjUTQ1uQDSp6oiiGmMF+ac=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: Sep 4 23:43:13 2026 GMT Not After : Sep 11 23:43:13 2026 GMT Subject: CN=6a9b5791-cb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:44:a1:aa:11:94:8f:bc:7c:35:61:d7:78: 05:4c:46:41:35:1e:0c:fc:ea:b6:e9:7d:ee:34:60: f1:4e:67:96:54:00:d8:80:d9:9a:b1:b1:29:3b:a5: 91:76:5a:c4:44:48:d2:d2:36:6f:18:4e:66:64:8e: f3:f4:5a:44:6f:83:23:6e:d2:d4:72:be:78:5f:c2: 8f:4e:c3:e1:89:11:cb:65:2d:18:de:18:61:46:b5: 8d:1b:c2:80:74:80:14:db:3f:44:6b:c7:30:80:d9: 2b:5e:36:55:d3:97:61:3d:d3:da:35:d1:99:61:90: 01:33:2c:14:87:a8:5c:5c:c4:0d:56:62:6b:0e:12: 26:33:43:8e:a2:fa:e6:f1:5d:30:67:f6:f8:27:5b: a1:6d:94:04:97:e6:01:63:5b:02:c4:99:53:6d:de: e2:b2:93:89:5d:1b:95:d4:42:de:66:99:14:91:d3: fa:99:35:ff:72:45:34:52:6c:1c:61:3f:38:15:37: 47:cc:94:96:8d:11:8b:09:07:e9:d7:3e:75:12:0d: 89:50:d0:ae:de:15:7b:d6:5c:f3:da:53:59:6b:4f: a7:3b:04:56:de:aa:64:21:71:24:aa:30:67:1b:38: cb:bb:07:aa:9e:e5:18:2b:10:8a:dc:73:11:e1:5a: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:F9:60:7D:09:FE:A2:12:7A:58:14:F6:FF:10:5E:57:F7:CD:30 X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:99:0f:92:16:26:0e:6c:02:2a:24:91:6d:e8:cb:9d:ed: 40:4c:1e:c8:f2:fa:80:e7:6d:4a:90:0a:18:43:e9:8d:1e:f4: 8e:08:d9:8a:af:7f:30:42:7f:2b:b2:75:3f:e4:05:7d:19:7a: 9a:41:68:4a:9d:03:4f:74:5e:86:fb:d4:8f:bd:15:3a:21:72: 3a:de:94:48:fb:ff:51:01:d0:c7:c5:5d:7d:3c:92:5a:39:85: ee:33:c1:67:93:23:a8:cd:b2:38:79:d2:74:b9:1c:56:1b:d1: cb:52:c4:ee:9d:63:e1:c3:71:c2:84:91:e5:08:4d:5c:45:3f: 47:7f:77:58:fd:e9:db:6a:ab:f0:5f:e7:4a:5f:7c:7b:c4:fe: bc:46:3c:ba:e1:de:c2:0f:c1:5a:a6:81:d4:ae:31:27:d5:59: 4d:a6:cc:ab:29:07:df:ad:fe:53:31:48:9e:df:5d:99:b6:56: fd:46:88:8c:f6:3c:ba:43:c6:90:df:0f:4f:b1:18:df:35:43: 0b:81:48:f3:5a:da:9a:3a:a3:c1:c5:68:27:82:59:30:2d:ff: 3b:d4:d7:f2:39:01:7d:fe:4e:71:4a:2a:f2:1a:b1:02:48:1e: a6:41:83:b7:f6:47:e7:d6:a0:0c:c4:34:54:18:88:e6:cc:1b: 7a:de:86:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjYwOTA0MjM0MzEzWhcNMjYwOTExMjM0MzEzWjAYMRYwFAYD VQQDEw02YTliNTc5MS1jYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKtEoaoRlI+8fDVh13gFTEZBNR4M/Oq26X3uNGDxTmeWVADYgNmasbEpO6WR dlrEREjS0jZvGE5mZI7z9FpEb4MjbtLUcr54X8KPTsPhiRHLZS0Y3hhhRrWNG8KA dIAU2z9Ea8cwgNkrXjZV05dhPdPaNdGZYZABMywUh6hcXMQNVmJrDhImM0OOovrm 8V0wZ/b4J1uhbZQEl+YBY1sCxJlTbd7ispOJXRuV1ELeZpkUkdP6mTX/ckU0Umwc YT84FTdHzJSWjRGLCQfp1z51Eg2JUNCu3hV71lzz2lNZa0+nOwRW3qpkIXEkqjBn GzjLuweqnuUYKxCK3HMR4VrcqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl2+WB9 Cf6iEnpYFPb/EF5X980wMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhPeZD5IWJg5sAiokkW3oy53tQEweyPL6gOdtSpAKGEPpjR70jgjZiq9/MEJ/ K7J1P+QFfRl6mkFoSp0DT3RehvvUj70VOiFyOt6USPv/UQHQx8VdfTySWjmF7jPB Z5MjqM2yOHnSdLkcVhvRy1LE7p1j4cNxwoSR5QhNXEU/R393WP3p22qr8F/nSl98 e8T+vEY8uuHewg/BWqaB1K4xJ9VZTabMqykH363+UzFInt9dmbZW/UaIjPY8ukPG kN8PT7EY3zVDC4FI81ramjqjwcVoJ4JZMC3/O9TX8jkBff5OcUoq8hqxAkgepkGD t/ZH59agDMQ0VBiI5swbet6GrA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:40:08 2026 by rpki-client