$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: HLdK0WpcXJFCBcVKbswV1oCvE+lymgISb13tawFA6mo= Subject key identifier: 16:81:A9:94:01:CC:B9:C0:F9:C1:18:5F:7A:AC:86:CF:2B:4D:E3:8B Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 127E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1239 Signing time: Wed 30 Sep 2026 17:16:49 +0000 Manifest this update: Wed 30 Sep 2026 17:16:48 +0000 Manifest next update: Wed 07 Oct 2026 17:16:48 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: C6fMMlmOe81LVvJ0zz504rmc1kF/q9HJO4qVNJeu3YI=) 2: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: Q7TAZCpq4GaWZsd4434Sc8mQwgs5ahUecmF+GwWwTqQ=) 3: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) 4: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6LE0lcLwgL3BW95oynVLLd/nxrm4kZLuSBQHxOvu2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4734 (0x127e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Sep 30 17:16:48 2026 GMT Not After : Oct 7 17:16:48 2026 GMT Subject: CN=6abd4401-724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:a3:59:e7:f9:5b:b6:d6:0d:7f:2c:8d:06: 09:2d:6d:4e:fe:91:a9:a7:1f:93:d8:70:20:88:9a: ae:a8:a2:92:7b:12:53:3f:32:d2:9d:74:54:66:b6: 9d:9b:ef:7d:94:b3:a5:04:10:6d:04:3b:cd:e6:53: 17:b5:b5:06:39:db:b1:b7:ee:0b:0e:9a:48:89:07: ab:2b:ee:f2:24:8b:f2:9b:96:cf:ec:29:f6:67:7b: 36:b1:83:af:1d:34:da:7f:26:ea:7b:dc:9f:8b:b4: 8e:32:60:42:9e:42:cc:7c:cd:7c:00:51:21:bf:29: fa:80:59:1b:b9:cc:e2:0a:df:3e:1d:61:ae:50:3a: e9:ae:fb:92:fa:bb:2d:a9:63:fc:16:5e:b6:8e:4e: a1:d6:76:1e:99:c1:72:c2:cf:b2:9c:ba:e4:ce:1a: aa:7f:d2:c9:7b:d3:d5:60:b8:c4:8b:10:a2:71:66: 2e:53:ba:bb:bf:ba:6b:a5:b0:f7:36:21:b7:e1:1f: 66:2f:1c:37:bb:0f:a1:6b:7f:27:3f:1b:2f:20:9d: 22:90:e4:ab:aa:31:9b:94:61:ac:b7:69:da:9a:82: 16:34:e7:3f:0a:24:c0:46:ff:fc:0f:7f:55:88:08: da:be:f8:18:ff:90:73:0f:de:6d:a9:e5:53:ec:bd: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:81:A9:94:01:CC:B9:C0:F9:C1:18:5F:7A:AC:86:CF:2B:4D:E3:8B X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:53:3f:9f:e9:95:c6:6f:59:c8:4c:b9:bd:00:50:d6:7c:33: 02:af:27:30:02:15:50:07:33:c1:d2:8f:58:4f:ec:95:51:b6: b8:d0:6a:0c:4b:e5:60:1a:18:0f:73:a2:13:1e:2f:e3:4e:c8: 7e:28:51:52:5e:53:75:0e:fb:9c:37:73:7c:3e:50:65:48:a7: 76:ef:50:17:89:8c:d1:cc:1e:f6:4b:4a:15:76:0e:72:e5:12: 86:c2:8b:66:1d:e9:bd:7b:ed:a0:69:33:8c:ce:1a:29:6d:7e: eb:0b:d2:fa:32:35:6c:63:00:7f:42:51:fb:0f:b0:82:f3:32: f7:33:f9:c6:c3:00:14:4f:f0:44:f9:e5:87:11:0c:e7:61:d5: c2:28:66:29:1a:fa:c8:c2:15:be:e9:28:8f:6b:8b:81:29:88: 16:fa:64:12:53:bc:46:1d:b8:3d:64:c8:f1:87:61:14:50:c8: ed:4d:c9:eb:e5:c6:87:4d:4b:f8:11:f2:5a:4f:a9:87:43:66: e1:68:37:e3:c7:1c:63:cc:36:3f:0a:5b:02:41:06:3f:57:da: a6:bc:b8:47:ca:a1:b9:5b:7b:e9:0b:08:5a:9a:71:22:10:10: 46:f8:08:73:6e:98:8b:4a:0b:92:86:c2:f8:26:fd:2e:53:cd: 69:d6:d8:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwOTMwMTcxNjQ4WhcNMjYxMDA3MTcxNjQ4WjAYMRYwFAYD VQQDEw02YWJkNDQwMS03MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1OjWef5W7bWDX8sjQYJLW1O/pGppx+T2HAgiJquqKKSexJTPzLSnXRUZrad m+99lLOlBBBtBDvN5lMXtbUGOduxt+4LDppIiQerK+7yJIvym5bP7Cn2Z3s2sYOv HTTafybqe9yfi7SOMmBCnkLMfM18AFEhvyn6gFkbucziCt8+HWGuUDrprvuS+rst qWP8Fl62jk6h1nYemcFyws+ynLrkzhqqf9LJe9PVYLjEixCicWYuU7q7v7prpbD3 NiG34R9mLxw3uw+ha38nPxsvIJ0ikOSrqjGblGGst2namoIWNOc/CiTARv/8D39V iAjavvgY/5BzD95tqeVT7L2VRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaBqZQB zLnA+cEYX3qshs8rTeOLMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1M/n+mVxm9ZyEy5vQBQ1nwzAq8nMAIVUAczwdKPWE/slVG2uNBqDEvlYBoY D3OiEx4v407IfihRUl5TdQ77nDdzfD5QZUindu9QF4mM0cwe9ktKFXYOcuUShsKL Zh3pvXvtoGkzjM4aKW1+6wvS+jI1bGMAf0JR+w+wgvMy9zP5xsMAFE/wRPnlhxEM 52HVwihmKRr6yMIVvukoj2uLgSmIFvpkElO8Rh24PWTI8YdhFFDI7U3J6+XGh01L +BHyWk+ph0Nm4Wg348ccY8w2PwpbAkEGP1fapry4R8qhuVt76QsIWppxIhAQRvgI c26Yi0oLkobC+Cb9LlPNadbYSA== -----END CERTIFICATE-----Generated at Wed Sep 30 22:01:33 2026 by rpki-client