$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: vctlyEpdMHKLLWGH52yhGHeUbuFfTP6nxuHqC26jw4Y= Subject key identifier: E1:8C:04:A0:92:11:89:20:4C:32:8E:18:0F:76:DC:42:2B:1B:7E:B1 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 259B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 257B Signing time: Fri 04 Sep 2026 15:42:49 +0000 Manifest this update: Fri 04 Sep 2026 15:42:48 +0000 Manifest next update: Fri 11 Sep 2026 15:42:48 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: Gms8Wh2Medup6DxzTX5iYrbL2zgPWH1+n9Pns1bip/w=) 2: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9627 (0x259b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Sep 4 15:42:48 2026 GMT Not After : Sep 11 15:42:48 2026 GMT Subject: CN=6a9ae6f9-8eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:e3:78:b8:6a:ef:94:48:92:d0:58:bb:0c: 3f:7e:02:10:d8:a0:07:5b:27:14:cc:09:8e:0a:5d: ad:6a:9d:9e:3f:6e:47:33:0e:12:9b:6c:c9:de:89: 7d:4b:1f:5e:e0:12:4c:36:6b:40:89:8e:cb:a7:a6: c5:1f:b4:5b:29:9f:5e:cd:19:80:e7:4c:e9:46:5d: 69:27:0a:4f:21:4e:09:e6:ad:18:c3:66:04:2c:4e: 79:ed:fb:e5:1d:4b:fe:9a:04:54:61:65:1d:ea:57: 89:39:d5:87:e1:ef:62:71:35:fd:4c:c9:ab:49:e4: 49:84:12:79:77:a9:4f:57:4a:91:30:45:2d:7f:6d: d6:7f:5b:d1:82:c4:0c:df:b0:84:08:33:52:59:d4: fc:a1:fe:f5:0b:c2:ba:bc:64:2d:c4:db:de:f9:91: a5:8f:8a:4b:90:55:68:b1:f2:f3:ad:15:91:92:d4: d5:a6:50:16:0a:d6:91:bc:8e:50:7c:1f:b1:b2:9c: e0:af:2e:bd:c6:e7:d0:67:ea:38:da:cf:da:dd:21: 23:f8:3e:b3:11:de:cb:5d:87:54:4c:59:1d:80:4b: 2f:9b:7a:4e:2b:55:43:8d:f3:40:44:6f:1d:cb:bb: 01:d5:9c:0b:14:de:5a:af:49:74:54:8c:3e:e6:fe: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:04:A0:92:11:89:20:4C:32:8E:18:0F:76:DC:42:2B:1B:7E:B1 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5f:c5:57:6c:3a:22:e6:f0:6d:70:7e:a2:3b:cd:52:77:df: 69:bb:8b:34:ab:12:77:8a:20:fa:4b:0d:a2:9a:93:9e:ab:d4: 7b:d0:f0:d8:03:d3:58:b3:d7:98:72:5f:47:d9:8b:4f:54:ce: 43:18:76:8c:ac:9b:47:a8:58:37:b9:bf:a8:2e:62:33:e6:38: fd:40:e3:20:de:ef:27:2d:0c:a1:94:a5:1b:9a:64:8e:51:bf: af:cc:4b:eb:e0:d1:a2:96:38:b5:db:2a:3c:9a:2d:13:07:9e: 68:45:12:f8:96:1e:7c:8a:20:10:46:2a:17:2e:0f:1c:f7:95: 04:b4:ce:14:46:6d:7d:6b:51:d4:2f:be:9b:00:71:1d:f5:e5: d1:bb:cc:02:14:e5:37:3f:f9:b2:bd:18:cd:51:ed:de:11:fa: e0:81:e3:b2:16:bc:69:eb:24:ed:29:0a:ad:47:18:8e:2b:92: 16:dc:48:98:55:ae:66:f7:61:aa:d3:69:e4:1b:0b:e8:0b:68: f1:4c:ac:4f:0c:6f:3f:e2:61:0a:aa:3e:02:ef:08:41:23:08: b4:4e:bd:78:39:ff:02:b6:ca:13:61:c6:37:14:49:96:f2:93: 7b:68:80:37:70:df:66:fd:41:b2:fd:7e:6a:1c:be:2a:cd:29: aa:ae:a5:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwOTA0MTU0MjQ4WhcNMjYwOTExMTU0MjQ4WjAYMRYwFAYD VQQDEw02YTlhZTZmOS04ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y7jeLhq75RIktBYuww/fgIQ2KAHWycUzAmOCl2tap2eP25HMw4Sm2zJ3ol9 Sx9e4BJMNmtAiY7Lp6bFH7RbKZ9ezRmA50zpRl1pJwpPIU4J5q0Yw2YELE557fvl HUv+mgRUYWUd6leJOdWH4e9icTX9TMmrSeRJhBJ5d6lPV0qRMEUtf23Wf1vRgsQM 37CECDNSWdT8of71C8K6vGQtxNve+ZGlj4pLkFVosfLzrRWRktTVplAWCtaRvI5Q fB+xspzgry69xufQZ+o42s/a3SEj+D6zEd7LXYdUTFkdgEsvm3pOK1VDjfNARG8d y7sB1ZwLFN5ar0l0VIw+5v7sLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGMBKCS EYkgTDKOGA923EIrG36xMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdl/FV2w6IubwbXB+ojvNUnffabuLNKsSd4og+ksNopqTnqvUe9Dw2APTWLPX mHJfR9mLT1TOQxh2jKybR6hYN7m/qC5iM+Y4/UDjIN7vJy0MoZSlG5pkjlG/r8xL 6+DRopY4tdsqPJotEweeaEUS+JYefIogEEYqFy4PHPeVBLTOFEZtfWtR1C++mwBx HfXl0bvMAhTlNz/5sr0YzVHt3hH64IHjsha8aesk7SkKrUcYjiuSFtxImFWuZvdh qtNp5BsL6Ato8UysTwxvP+JhCqo+Au8IQSMItE69eDn/ArbKE2HGNxRJlvKTe2iA N3DfZv1Bsv1+ahy+Ks0pqq6l8w== -----END CERTIFICATE-----Generated at Sat Sep 5 06:34:37 2026 by rpki-client