$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: pTixTeODFV6yq4Ckd5CFy4ym06G74Go+o2gkaOI6NK8= Subject key identifier: 50:63:E9:20:98:41:EF:95:85:EE:55:CB:58:E3:1A:E7:81:06:89:40 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 09F0 Signing time: Fri 02 Oct 2026 20:06:21 +0000 Manifest this update: Fri 02 Oct 2026 20:06:20 +0000 Manifest next update: Fri 09 Oct 2026 20:06:20 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: irgIH2qOSOY8uCPb5sJaUnS/z0II4YXJpo4+viM7Qhw=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Oct 2 20:06:20 2026 GMT Not After : Oct 9 20:06:20 2026 GMT Subject: CN=6ac00ebd-caf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:bc:0b:28:a0:b6:0f:90:15:44:d8:eb:7e: f7:f5:45:3f:89:60:4e:90:eb:2e:f2:0e:e1:6d:03: 62:6c:9b:f6:a3:18:55:48:cd:ae:ba:89:c6:a2:23: 13:c9:b7:92:3d:dd:df:fa:09:0b:58:e8:84:3f:70: d7:81:5b:50:87:60:c2:d3:e0:de:91:b8:f8:08:2a: 32:b9:94:87:d7:51:ed:7c:53:61:a3:88:c9:ec:ea: 3a:8c:e2:67:03:8a:9e:da:c8:4d:47:64:a5:88:b5: f8:ad:86:eb:32:72:0a:cd:b8:40:d8:36:51:77:9d: cc:6f:a8:80:b3:b9:29:d0:c3:58:77:fe:5d:70:ea: b1:e1:65:5e:60:66:6f:5b:4b:1a:ed:30:c6:5d:e4: 24:f7:ed:35:ae:bb:f0:c6:40:13:4c:d0:65:75:85: b5:9a:13:cd:3d:8a:b3:6d:a5:48:7d:61:d8:85:c1: 86:b9:84:eb:dc:f9:a9:0d:c9:5e:ab:17:35:0f:b1: 8e:3e:cd:2f:21:fa:68:b3:71:98:64:83:36:a4:0d: f6:0f:7f:b0:b4:ed:2c:90:eb:b5:8c:21:e0:c0:66: fc:29:46:6d:32:b9:ac:e7:5c:60:e9:7e:57:d0:4a: 1e:5b:f7:69:02:96:a6:48:cd:0b:88:1d:09:70:b0: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:63:E9:20:98:41:EF:95:85:EE:55:CB:58:E3:1A:E7:81:06:89:40 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a0:a5:ad:b0:3b:a4:29:f5:63:58:26:5c:a3:c1:40:91:d2: 2b:12:18:60:3c:32:e5:98:fa:5b:95:5b:1a:9e:0d:1f:7a:34: a1:9e:64:a2:44:f5:05:24:53:28:14:3f:14:d6:1a:0e:0f:84: a3:73:86:e5:50:86:25:2e:5e:89:4a:f8:23:48:e0:3d:8d:dc: 92:41:a0:9f:87:42:3b:77:ec:77:66:14:c7:84:2c:e7:d6:87: f7:4d:f9:f1:1c:22:c9:e0:82:b4:67:05:b0:f8:70:11:95:75: 7d:d6:29:a3:a8:d2:51:14:21:d4:9f:50:64:25:c0:a2:d5:e1: a2:69:92:dd:35:b9:39:fe:c6:8e:ea:91:c7:58:e5:f1:97:e3: 12:d9:e6:ce:a8:0c:6c:d8:c9:33:56:02:32:7e:37:44:f2:c9: b5:98:4b:7a:f1:b4:a3:2e:8d:97:9a:56:81:60:6f:b2:73:65: 64:04:b4:fb:ee:13:50:68:4a:07:ee:a1:b3:37:c6:93:d3:af: 90:4c:bd:20:57:e3:d7:83:e8:e6:29:3c:63:6a:84:09:c5:cf: b8:05:5d:2d:36:21:ac:83:28:5c:6b:de:99:5e:6a:fd:14:a2: 60:32:a6:8f:54:53:0b:51:64:8e:a6:2f:6f:98:32:7f:88:00: 43:16:c6:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYxMDAyMjAwNjIwWhcNMjYxMDA5MjAwNjIwWjAYMRYwFAYD VQQDEw02YWMwMGViZC1jYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiwu8Cyigtg+QFUTY63739UU/iWBOkOsu8g7hbQNibJv2oxhVSM2uuonGoiMT ybeSPd3f+gkLWOiEP3DXgVtQh2DC0+Dekbj4CCoyuZSH11HtfFNho4jJ7Oo6jOJn A4qe2shNR2SliLX4rYbrMnIKzbhA2DZRd53Mb6iAs7kp0MNYd/5dcOqx4WVeYGZv W0sa7TDGXeQk9+01rrvwxkATTNBldYW1mhPNPYqzbaVIfWHYhcGGuYTr3PmpDcle qxc1D7GOPs0vIfpos3GYZIM2pA32D3+wtO0skOu1jCHgwGb8KUZtMrms51xg6X5X 0EoeW/dpApamSM0LiB0JcLCLdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBj6SCY Qe+Vhe5Vy1jjGueBBolAMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhaClrbA7pCn1Y1gmXKPBQJHSKxIYYDwy5Zj6W5VbGp4NH3o0oZ5kokT1BSRT KBQ/FNYaDg+Eo3OG5VCGJS5eiUr4I0jgPY3ckkGgn4dCO3fsd2YUx4Qs59aH9035 8RwiyeCCtGcFsPhwEZV1fdYpo6jSURQh1J9QZCXAotXhommS3TW5Of7GjuqRx1jl 8ZfjEtnmzqgMbNjJM1YCMn43RPLJtZhLevG0oy6Nl5pWgWBvsnNlZAS0++4TUGhK B+6hszfGk9OvkEy9IFfj14Po5ik8Y2qECcXPuAVdLTYhrIMoXGvemV5q/RSiYDKm j1RTC1FkjqYvb5gyf4gAQxbGlw== -----END CERTIFICATE-----Generated at Sun Oct 4 21:59:19 2026 by rpki-client