$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft File: ZLiL9faqm7HpEXZsjfla6A-IBnc.mft (raw, json) Hash identifier: d09SSrVi281r9wXlWJc8GVvIzrC/izlwz80aJE3munE= Subject key identifier: 9E:39:86:58:8C:EC:82:13:A9:78:76:11:B4:BD:15:3D:45:0F:AD:7C Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77 Certificate issuer: /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft Manifest number: 10 Signing time: Wed 19 Aug 2026 09:49:52 +0000 Manifest this update: Wed 19 Aug 2026 09:49:51 +0000 Manifest next update: Wed 26 Aug 2026 09:49:51 +0000 Files and hashes: 1: ZLiL9faqm7HpEXZsjfla6A-IBnc.crl (hash: 9iZCzvYpd3d3pAEOPfm6awR5z8yPQZk3JoG0TPGJQM0=) 2: 2851C57C88FF11F1BFED971F4A11F970.roa (hash: eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677 Validity Not Before: Aug 19 09:49:51 2026 GMT Not After : Aug 26 09:49:51 2026 GMT Subject: CN=6a857c40-fbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:ba:46:92:79:1b:d3:f9:fc:0c:34:e8:0d: 77:94:58:61:a7:23:1f:e1:c3:7a:5b:3e:da:63:76: 67:54:d7:1b:12:a9:46:eb:1d:bd:c1:34:5e:64:05: 33:eb:93:b9:77:3c:de:81:68:24:c6:86:43:33:4c: 56:d6:87:1d:bd:15:32:ce:9c:03:02:f5:d1:20:28: ba:9b:8b:9b:b3:da:15:0f:e9:46:80:d7:be:9a:29: 70:79:4a:54:b4:15:6c:59:9c:22:a1:dd:bd:c8:53: c8:9c:1a:58:0d:29:1e:e8:49:80:1a:3b:1e:5e:a2: 91:79:dd:00:c3:2f:1a:98:d5:6d:d8:a6:ae:bd:34: 1f:36:1f:a4:51:74:8d:0d:5f:57:d9:60:4a:28:bd: e8:d6:21:be:b1:a6:02:8d:69:10:93:2b:0f:86:1b: 44:2b:55:de:13:b4:3b:6d:18:fe:61:fc:cd:4e:7c: 1b:84:80:ca:a6:e6:7c:20:cf:70:65:0e:28:db:5b: 0b:4d:28:0c:1b:6b:1f:a8:38:4f:5c:91:9d:14:72: 67:3f:f4:13:78:b9:eb:ff:7d:3b:ac:6a:79:19:83: 8d:86:a3:13:b9:d1:1e:fc:4b:e6:d2:98:fa:6b:63: b9:b2:d2:94:85:4f:47:07:c9:f5:0f:94:a3:6a:ef: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:39:86:58:8C:EC:82:13:A9:78:76:11:B4:BD:15:3D:45:0F:AD:7C X509v3 Authority Key Identifier: keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:7e:dc:62:f3:da:81:65:81:eb:08:1b:88:b1:a9:91:a6: 81:15:99:46:10:8d:2b:ab:ed:09:9c:65:2d:59:c7:76:62:a3: a1:d8:a7:c7:db:7a:a9:db:ab:45:df:30:05:ba:70:bd:05:96: 56:77:2e:13:36:07:14:0a:b2:5b:35:8e:9b:78:cc:3b:7c:c5: de:a1:c1:08:b5:ca:d5:95:3a:ed:6d:f4:d4:2c:6c:22:e4:d0: fc:3e:14:85:f5:28:e1:fd:0c:f6:63:e3:0c:39:48:83:96:87: d7:b8:e7:1c:88:20:ed:8e:74:7f:50:e1:26:1c:d9:d7:53:c4: d8:a7:1e:8d:07:76:88:85:f7:90:99:cd:a6:4b:82:25:d8:9d: bd:fd:66:98:f3:d4:5d:ad:bc:40:40:b8:11:c7:13:8f:26:bf: cf:46:a6:57:ec:03:d9:d6:8a:53:b8:e7:11:ef:f5:4b:63:4e: 90:5b:8e:17:71:d7:2f:ab:cd:b3:a2:9c:78:7b:ba:f1:2c:cc: bc:09:c8:6e:b3:ec:de:84:6b:0e:83:c2:d7:52:3e:f7:f1:bd: 17:2c:f7:f3:9e:c5:ff:c3:1c:10:df:f0:1c:60:4b:b4:86:3c: 32:3b:fe:b7:78:e0:a2:33:5c:e6:ad:ec:3f:35:ed:3f:19:c8: d9:cf:eb:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzE5RDExMC8GA1UEBRMoNjRCODhCRjVGNkFBOUJCMUU5MTE3NjZDOERGOTVBRTgw Rjg4MDY3NzAeFw0yNjA4MTkwOTQ5NTFaFw0yNjA4MjYwOTQ5NTFaMBgxFjAUBgNV BAMTDTZhODU3YzQwLWZiYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDsLpGknkb0/n8DDToDXeUWGGnIx/hw3pbPtpjdmdU1xsSqUbrHb3BNF5kBTPr k7l3PN6BaCTGhkMzTFbWhx29FTLOnAMC9dEgKLqbi5uz2hUP6UaA176aKXB5SlS0 FWxZnCKh3b3IU8icGlgNKR7oSYAaOx5eopF53QDDLxqY1W3Ypq69NB82H6RRdI0N X1fZYEoovejWIb6xpgKNaRCTKw+GG0QrVd4TtDttGP5h/M1OfBuEgMqm5nwgz3Bl DijbWwtNKAwbax+oOE9ckZ0Ucmc/9BN4uev/fTusankZg42GoxO50R78S+bSmPpr Y7my0pSFT0cHyfUPlKNq7+1rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnjmGWIzs ghOpeHYRtL0VPUUPrXwwHwYDVR0jBBgwFoAUZLiL9faqm7HpEXZsjfla6A+IBncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMTlEL0ZDRUE2NjFBODhG ODExRjFCMDE5QUUxMTQ3MTFGOTcwL1pMaUw5ZmFxbTdIcEVYWnNqZmxhNkEtSUJu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkxpTDlmYXFtN0hwRVhac2pmbGE2QS1JQm5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MTlEL0ZDRUE2NjFBODhGODExRjFCMDE5QUUxMTQ3MTFGOTcwL1pMaUw5ZmFxbTdI cEVYWnNqZmxhNkEtSUJuYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/cH7cYvPagWWB6wgbiLGpkaaBFZlGEI0rq+0JnGUtWcd2YqOh2KfH23qp26tF 3zAFunC9BZZWdy4TNgcUCrJbNY6beMw7fMXeocEItcrVlTrtbfTULGwi5ND8PhSF 9Sjh/Qz2Y+MMOUiDlofXuOcciCDtjnR/UOEmHNnXU8TYpx6NB3aIhfeQmc2mS4Il 2J29/WaY89RdrbxAQLgRxxOPJr/PRqZX7APZ1opTuOcR7/VLY06QW44Xcdcvq82z opx4e7rxLMy8Cchus+zehGsOg8LXUj738b0XLPfznsX/wxwQ3/AcYEu0hjwyO/63 eOCiM1zmrew/Ne0/GcjZz+sy -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:48 2026 by rpki-client