$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: 460ppQBfGPekinxEFmus5cpILjq8YjopcerME1OfGPM= Subject key identifier: D6:FC:72:D2:65:11:C4:E4:80:0D:BA:A3:C5:08:1D:58:28:FD:1F:DB Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 25B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2595 Signing time: Mon 26 Oct 2026 15:43:55 +0000 Manifest this update: Mon 26 Oct 2026 15:43:55 +0000 Manifest next update: Mon 02 Nov 2026 15:43:55 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: S1v8sTjEV5OvN8DTON6DVVR00m6mkhFLX3LmSnSalMM=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9653 (0x25b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Oct 26 15:43:55 2026 GMT Not After : Nov 2 15:43:55 2026 GMT Subject: CN=6adf753b-5598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:fd:0d:4c:37:18:e7:16:45:9e:c0:89:7e: e2:fe:8f:03:32:77:d1:bd:05:32:aa:46:98:c3:90: 2b:14:ec:75:76:dc:e6:35:9f:69:c4:1c:9a:ca:62: 67:f3:8d:06:e2:05:c1:45:17:04:57:be:a5:68:a2: f4:fb:b1:42:97:8d:07:f1:f4:9d:2f:a1:81:40:45: 25:58:dc:15:0a:a3:a9:a0:11:ba:d2:c5:ae:1c:69: 4f:58:29:ca:c1:f3:46:d7:c3:ed:58:f8:b1:c5:5e: 8b:59:d0:88:1c:f3:a3:9d:ca:87:48:03:9f:61:73: 10:35:0e:08:8e:7c:a9:ea:a2:56:0f:8c:4c:88:d1: e5:c3:85:f5:f9:b2:59:f0:b8:36:1f:6b:fa:49:7f: 87:33:6f:0d:43:72:b0:43:56:7a:b9:ad:c8:ba:07: 80:35:9f:1a:d8:9e:2a:22:27:d6:68:1a:27:b2:c1: bc:24:8a:b9:11:c1:8c:cb:2b:fc:4c:95:c5:02:22: 27:24:65:c7:f2:1e:98:0d:87:68:02:13:52:9f:be: 26:3d:32:42:2d:45:e3:48:b7:97:56:58:0c:5f:e4: 1a:1b:4f:a3:ec:a2:24:29:a3:59:43:ab:3d:6a:f8: 57:05:51:c4:29:50:df:11:74:15:bf:67:c6:19:65: 07:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FC:72:D2:65:11:C4:E4:80:0D:BA:A3:C5:08:1D:58:28:FD:1F:DB X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:d8:a5:21:97:39:ce:66:0b:46:10:0b:f0:3f:d0:73:6d: fb:34:dc:1f:41:1a:d4:54:03:aa:a9:e9:fa:5d:61:03:a1:1e: 33:72:63:41:00:3b:f9:cd:40:56:56:e8:94:42:4c:ee:8e:51: cd:0b:5b:90:1a:bb:de:d8:d2:48:64:ef:11:62:03:dd:8a:0d: e3:1f:ae:1f:6f:97:5b:92:01:5d:cb:14:da:8d:9b:69:f8:25: cd:2f:d5:ad:84:f7:3a:f6:7a:db:28:b5:f2:ef:88:09:19:1b: 1e:26:ea:3b:f1:a4:5f:d0:aa:fd:bd:8f:91:cf:8d:9b:0d:89: 6a:10:d1:bd:ae:12:e1:59:9e:76:5f:48:0e:94:d1:48:fe:36: 5e:64:27:d9:47:c7:cd:d2:3c:73:a8:5e:ce:f9:b9:d5:07:f6: 9c:10:34:e7:03:9c:ed:1c:38:f0:98:55:a3:a3:7b:a0:f0:a7: 8f:5f:e4:83:3c:0a:58:24:75:9b:36:9f:34:4f:bd:b4:e7:30: 58:aa:4d:e0:47:bb:94:c0:8f:9e:fd:06:db:40:36:82:2f:f1: 21:91:90:64:4c:d7:75:56:69:69:75:46:cc:27:5b:12:10:ef: 32:58:54:c1:35:b7:55:88:ec:10:c8:e5:d4:55:ef:68:55:19: e5:8e:60:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYxMDI2MTU0MzU1WhcNMjYxMTAyMTU0MzU1WjAYMRYwFAYD VQQDEw02YWRmNzUzYi01NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudL9DUw3GOcWRZ7AiX7i/o8DMnfRvQUyqkaYw5ArFOx1dtzmNZ9pxByaymJn 840G4gXBRRcEV76laKL0+7FCl40H8fSdL6GBQEUlWNwVCqOpoBG60sWuHGlPWCnK wfNG18PtWPixxV6LWdCIHPOjncqHSAOfYXMQNQ4Ijnyp6qJWD4xMiNHlw4X1+bJZ 8Lg2H2v6SX+HM28NQ3KwQ1Z6ua3IugeANZ8a2J4qIifWaBonssG8JIq5EcGMyyv8 TJXFAiInJGXH8h6YDYdoAhNSn74mPTJCLUXjSLeXVlgMX+QaG0+j7KIkKaNZQ6s9 avhXBVHEKVDfEXQVv2fGGWUHkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNb8ctJl EcTkgA26o8UIHVgo/R/bMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3rYpSGXOc5mC0YQC/A/0HNt+zTcH0Ea1FQDqqnp+l1hA6EeM3JjQQA7+c1A VlbolEJM7o5RzQtbkBq73tjSSGTvEWID3YoN4x+uH2+XW5IBXcsU2o2bafglzS/V rYT3OvZ62yi18u+ICRkbHibqO/GkX9Cq/b2Pkc+Nmw2JahDRva4S4Vmedl9IDpTR SP42XmQn2UfHzdI8c6hezvm51Qf2nBA05wOc7Rw48JhVo6N7oPCnj1/kgzwKWCR1 mzafNE+9tOcwWKpN4Ee7lMCPnv0G20A2gi/xIZGQZEzXdVZpaXVGzCdbEhDvMlhU wTW3VYjsEMjl1FXvaFUZ5Y5g6g== -----END CERTIFICATE-----Generated at Mon Oct 26 23:37:18 2026 by rpki-client