$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: JV9Gz43wjMEdH+fqVHvQOTyXgFtCLRRWwatGmJ1tQwA= Subject key identifier: 88:15:16:BC:33:9E:91:B2:CF:88:D7:0F:AB:3A:F4:30:EB:68:7F:D0 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 25B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2594 Signing time: Sat 24 Oct 2026 15:42:50 +0000 Manifest this update: Sat 24 Oct 2026 15:42:50 +0000 Manifest next update: Sat 31 Oct 2026 15:42:50 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: hfJ5YWZHG06yNYgRhSJGppKWwmW37OHlZvWOBkAC2hA=) 2: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 3: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 4: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9652 (0x25b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Oct 24 15:42:50 2026 GMT Not After : Oct 31 15:42:50 2026 GMT Subject: CN=6adcd1fa-5383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:46:7b:94:91:7c:45:1f:ad:23:18:77:71: a4:63:e7:70:09:4d:70:03:37:a5:f8:2e:da:8a:2d: 75:a7:d2:56:c4:4f:8e:32:25:e5:a7:c7:52:62:19: 00:2d:92:4d:58:a8:a5:35:5c:da:67:19:a3:a4:27: 19:16:9c:d5:5b:e7:22:93:5c:1b:5e:fd:95:06:ef: 1c:1d:12:dd:e3:24:63:7d:b2:5a:b7:73:20:6b:cd: 8f:56:f3:b5:80:59:2d:0f:23:82:1a:8f:9e:9e:f9: 76:4d:91:18:17:e3:9b:1d:07:61:70:ee:f3:45:bf: f2:78:2d:e6:72:17:eb:7f:d2:3c:54:3b:21:e6:4f: 43:d0:bb:2c:6c:23:7d:33:1f:33:e7:da:0a:24:de: 13:bd:b2:e2:59:eb:14:31:14:9c:41:8f:56:f6:0b: a7:07:ba:c0:3e:37:a3:2e:0e:a9:15:14:a1:70:a0: 7e:03:2e:b7:8f:18:f6:aa:7b:28:33:5a:3d:38:2e: 77:e2:77:b6:bc:a0:7b:7d:e1:4c:a0:1b:66:c5:6e: e2:99:b2:4a:61:3f:ed:a5:81:28:59:9e:96:87:7d: ae:e1:24:db:b5:58:41:55:7f:a2:a4:41:f2:61:ee: f8:60:38:3b:8c:2a:18:98:6e:75:03:03:b7:eb:f4: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:16:BC:33:9E:91:B2:CF:88:D7:0F:AB:3A:F4:30:EB:68:7F:D0 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2f:a2:d8:2b:3a:b9:aa:de:bc:9c:fa:e2:8c:38:16:1a:27: 64:26:d8:e5:b8:4a:97:a4:c4:d4:5c:59:cd:d1:f5:d2:65:ee: 9b:45:e5:5e:f3:3e:f9:6d:5e:0b:2b:14:63:8c:c6:64:42:8b: a8:04:4e:41:c1:47:50:14:68:39:6d:8b:39:54:be:af:22:f6: 5a:83:1b:26:26:b8:f6:0c:c8:97:7e:fb:ea:0f:7e:7b:75:3e: ed:0b:25:ed:3c:f1:ca:b3:4c:1c:06:8c:24:0c:c4:04:22:5a: e5:a4:b6:62:7c:2d:99:7c:4f:76:33:8c:9b:6b:c8:ee:ac:6b: d0:d1:f7:72:ba:04:37:fa:18:d3:30:f5:5f:dc:0c:ea:f0:92: ea:87:71:0a:64:ce:be:f3:b1:65:83:30:2b:f2:b9:be:a8:26: 8f:98:3d:d4:31:71:8c:5c:40:82:62:5e:1d:99:0c:fa:8f:72: 56:2f:38:f6:37:59:66:0b:f0:2f:b9:88:69:ac:ef:74:43:16: 01:d1:03:bf:0f:cb:dd:42:e3:ad:51:ce:02:eb:19:a8:ff:af: 9f:a4:2b:9e:f3:5f:e8:55:2b:0f:b5:76:c8:59:47:8d:70:49: 75:39:f6:a8:70:22:50:84:c0:0b:df:ff:c9:f7:9b:01:29:f9: 49:81:15:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYxMDI0MTU0MjUwWhcNMjYxMDMxMTU0MjUwWjAYMRYwFAYD VQQDEw02YWRjZDFmYS01MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI9Ge5SRfEUfrSMYd3GkY+dwCU1wAzel+C7aii11p9JWxE+OMiXlp8dSYhkA LZJNWKilNVzaZxmjpCcZFpzVW+cik1wbXv2VBu8cHRLd4yRjfbJat3Mga82PVvO1 gFktDyOCGo+envl2TZEYF+ObHQdhcO7zRb/yeC3mchfrf9I8VDsh5k9D0LssbCN9 Mx8z59oKJN4TvbLiWesUMRScQY9W9gunB7rAPjejLg6pFRShcKB+Ay63jxj2qnso M1o9OC534ne2vKB7feFMoBtmxW7imbJKYT/tpYEoWZ6Wh32u4STbtVhBVX+ipEHy Ye74YDg7jCoYmG51AwO36/SrUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgVFrwz npGyz4jXD6s69DDraH/QMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEy+i2Cs6uarevJz64ow4FhonZCbY5bhKl6TE1FxZzdH10mXum0XlXvM++W1e CysUY4zGZEKLqAROQcFHUBRoOW2LOVS+ryL2WoMbJia49gzIl3776g9+e3U+7Qsl 7TzxyrNMHAaMJAzEBCJa5aS2YnwtmXxPdjOMm2vI7qxr0NH3croEN/oY0zD1X9wM 6vCS6odxCmTOvvOxZYMwK/K5vqgmj5g91DFxjFxAgmJeHZkM+o9yVi849jdZZgvw L7mIaazvdEMWAdEDvw/L3ULjrVHOAusZqP+vn6QrnvNf6FUrD7V2yFlHjXBJdTn2 qHAiUITAC9//yfebASn5SYEV1Q== -----END CERTIFICATE-----Generated at Sun Oct 25 20:59:01 2026 by rpki-client