$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: 1StO/0SYFlgq2EuyEZlQmcDUapmMdDJAwyKxQqnZvjs= Subject key identifier: 33:E1:0B:CC:44:97:78:38:59:82:81:04:EB:BE:D7:18:AD:D1:7F:2A Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 0198 Signing time: Wed 07 Oct 2026 04:49:12 +0000 Manifest this update: Wed 07 Oct 2026 04:49:11 +0000 Manifest next update: Wed 14 Oct 2026 04:49:11 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: 9YTgdHuEFpl/vw4zTfdvPJd/fTOH28PlonHF5bM2wbo=) 2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=) 3: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 04:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Oct 7 04:49:11 2026 GMT Not After : Oct 14 04:49:11 2026 GMT Subject: CN=6ac5cf47-24bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:71:8f:f9:93:de:7a:e8:4c:72:26:ee:b3: 56:35:17:98:24:e2:f0:69:f1:dd:60:6a:5a:de:cc: be:cf:d4:19:47:85:a0:d5:8a:db:83:fb:24:32:71: 25:91:36:d7:56:f8:74:df:1e:b9:7f:39:9a:81:a0: 1d:25:c0:4f:31:91:16:c1:ba:60:62:25:95:f1:cc: 3f:d9:8a:8b:f1:46:db:ef:7c:43:09:ce:d3:32:53: 56:11:05:0b:f1:3c:e6:60:a5:3a:67:22:ec:e9:fc: 94:68:c4:bd:62:62:de:c9:1d:5a:db:15:61:b6:99: f1:eb:fd:91:bb:e2:78:de:5c:fc:fd:c5:01:05:ba: 68:57:28:69:36:41:c2:5d:b5:54:81:d1:8e:76:af: 5a:8f:fa:57:eb:88:ac:aa:e1:6c:31:e9:49:7d:f6: 2e:94:ec:27:62:a6:3e:f6:92:23:6d:5b:f2:11:16: 6c:59:f9:96:88:9b:ae:4b:ba:30:7e:74:3e:86:38: c0:98:36:f8:85:c4:9e:26:7d:7c:c1:78:6c:bf:68: 05:0b:a9:ad:d3:fa:e4:ed:7b:d6:8d:a7:13:fd:85: bd:29:9e:05:3c:01:c8:93:18:3e:b4:af:87:44:21: cc:b0:92:8c:98:b8:c8:3a:44:a4:71:bc:a6:f5:bc: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:0B:CC:44:97:78:38:59:82:81:04:EB:BE:D7:18:AD:D1:7F:2A X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:4e:fc:e2:4e:9d:36:15:d9:ed:64:d2:0b:64:78:60:54: 2d:36:76:d9:c8:9c:e3:76:d3:f7:6f:7c:c7:22:ed:34:cf:dc: e9:f8:0a:35:a0:a7:db:a1:76:12:e7:6e:5c:48:2d:35:78:c4: 4f:99:8e:fe:74:3c:a5:b1:d1:2a:b6:ce:9a:23:e9:cd:d7:52: 0d:f7:a0:ae:44:db:d7:64:59:ba:c4:36:29:be:12:db:13:83: c1:1d:93:25:de:4b:d0:7a:d7:9b:f5:b9:0f:e9:ca:b0:49:3e: 52:3f:86:25:70:90:65:f1:ff:da:b5:f8:7e:a6:81:e5:ca:28: f7:de:43:b0:4c:f9:cc:e4:bc:4d:df:8e:94:b2:90:84:8d:b1: 36:8f:2c:a1:f7:7f:4f:e4:10:17:47:75:54:e2:52:ac:1d:18: d1:e1:3d:f9:e5:b6:56:59:64:e4:a4:a2:9b:f5:5e:73:26:31: 5c:07:8e:0f:b7:dc:47:c1:f5:d6:53:ae:91:7b:35:91:4a:c2: 5f:31:38:59:20:2c:5f:cf:e4:36:02:32:ab:e8:f5:cd:f4:c5: 9e:5c:5d:90:a1:9f:09:88:af:7e:e1:86:40:7c:e0:32:0e:16: 99:d5:8c:91:0e:82:4d:15:dc:54:99:57:c5:36:39:4b:23:d2: 85:57:2b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjYxMDA3MDQ0OTExWhcNMjYxMDE0MDQ0OTExWjAYMRYwFAYD VQQDEw02YWM1Y2Y0Ny0yNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnBxj/mT3nroTHIm7rNWNReYJOLwafHdYGpa3sy+z9QZR4Wg1Yrbg/skMnEl kTbXVvh03x65fzmagaAdJcBPMZEWwbpgYiWV8cw/2YqL8Ubb73xDCc7TMlNWEQUL 8TzmYKU6ZyLs6fyUaMS9YmLeyR1a2xVhtpnx6/2Ru+J43lz8/cUBBbpoVyhpNkHC XbVUgdGOdq9aj/pX64isquFsMelJffYulOwnYqY+9pIjbVvyERZsWfmWiJuuS7ow fnQ+hjjAmDb4hcSeJn18wXhsv2gFC6mt0/rk7XvWjacT/YW9KZ4FPAHIkxg+tK+H RCHMsJKMmLjIOkSkcbym9bxCaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPhC8xE l3g4WYKBBOu+1xit0X8qMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAId5O/OJOnTYV2e1k0gtkeGBULTZ22cic43bT9298xyLtNM/c6fgKNaCn26F2 EuduXEgtNXjET5mO/nQ8pbHRKrbOmiPpzddSDfegrkTb12RZusQ2Kb4S2xODwR2T Jd5L0HrXm/W5D+nKsEk+Uj+GJXCQZfH/2rX4fqaB5coo995DsEz5zOS8Td+OlLKQ hI2xNo8sofd/T+QQF0d1VOJSrB0Y0eE9+eW2Vllk5KSim/VecyYxXAeOD7fcR8H1 1lOukXs1kUrCXzE4WSAsX8/kNgIyq+j1zfTFnlxdkKGfCYivfuGGQHzgMg4WmdWM kQ6CTRXcVJlXxTY5SyPShVcryA== -----END CERTIFICATE-----Generated at Wed Oct 7 19:22:22 2026 by rpki-client