$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: KCLmux+vV0gjaSxJUHJ6cnyd3wAGHWCp4UDZ/NHzFO0= Subject key identifier: 39:6E:FA:75:E5:58:29:08:D9:9F:5C:EF:7C:70:E9:C9:05:66:6B:AE Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0589 Signing time: Tue 06 Oct 2026 23:22:37 +0000 Manifest this update: Tue 06 Oct 2026 23:22:36 +0000 Manifest next update: Tue 13 Oct 2026 23:22:36 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: Mh6mTbBad1e/idj/KnjatPn1T9fMlt2bGL6hKgxxQrM=) 2: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) 3: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Oct 6 23:22:36 2026 GMT Not After : Oct 13 23:22:36 2026 GMT Subject: CN=6ac582bc-7255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:b5:d3:52:a6:98:95:1c:d1:d9:e9:9a:85: 87:a2:a3:3c:1f:9c:e1:53:e0:8a:5c:30:4f:5a:17: d1:b6:c9:5d:d3:5b:b4:d9:10:be:aa:f2:29:4a:3b: 8e:45:3d:ca:8d:3f:0c:2d:39:1f:8f:8c:90:be:14: 6e:18:fa:9a:af:32:4f:10:e5:4b:95:43:82:97:a1: 5f:d0:26:dc:e0:46:2e:e2:3d:1d:36:14:ea:1b:36: dd:df:2d:a1:8b:1e:3d:61:1f:b6:1a:18:ee:f7:1e: 4f:8b:a8:f3:8b:76:89:49:e5:4b:9f:66:81:b4:40: d7:35:62:cd:42:2a:42:9a:18:cb:a8:17:72:53:0b: 21:9d:6e:4f:78:73:d9:eb:86:5b:04:f2:d4:70:0b: 9d:d9:ff:82:38:a8:fc:92:ac:b5:a8:ff:43:ea:a3: 76:fc:bd:1a:84:29:16:5f:fb:0f:f0:ee:49:1b:ed: 5e:73:a6:6b:46:fc:14:d0:9d:ce:25:68:2d:be:a2: ff:71:dc:64:2a:09:e0:27:56:90:33:b0:42:e0:31: b3:13:34:b1:81:18:52:6c:67:b0:29:c0:7b:64:bc: ed:05:4a:25:ee:70:c7:d0:72:75:87:bb:3a:20:36: b6:8d:72:da:8a:2f:48:f5:34:7e:db:ee:a9:dd:80: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:FA:75:E5:58:29:08:D9:9F:5C:EF:7C:70:E9:C9:05:66:6B:AE X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9b:bd:66:85:fe:17:ba:2f:9f:c0:19:2c:64:6b:59:12:81: 94:4a:06:4b:3a:0a:9e:78:4a:a7:ff:bd:ef:ac:4a:d9:27:e4: d3:23:20:b7:4b:4e:d5:88:d6:93:17:7e:de:46:57:ad:52:d6: 59:df:0e:0f:ae:4e:df:71:d9:4a:a4:24:16:37:89:49:4f:a3: db:0f:2d:cb:9a:ed:25:b8:cc:d9:e7:bf:47:4c:38:b3:7f:6c: 39:e3:9f:91:e4:96:99:84:94:f6:b4:ef:d4:8d:a0:32:b5:f2: 2c:b6:ff:94:33:59:69:de:bd:c5:2d:e0:a3:24:8f:fe:d5:58: f8:7a:00:39:74:82:13:d0:41:d5:40:7d:33:05:e5:8e:36:80: d6:6e:5d:5b:c8:69:07:cf:43:0e:e2:8d:a3:d8:ef:ff:00:c0: 0e:36:3e:a1:69:84:ec:4f:05:0b:b5:29:cb:38:4f:a8:b0:a1: 52:9d:b6:08:80:65:1b:9d:44:e1:66:74:75:f4:26:06:c8:fe: bd:fc:c3:a3:ec:6b:41:0a:c9:b5:70:52:ec:38:c6:9c:75:40: f7:27:1d:f0:a7:b7:2d:20:17:d4:98:c5:9e:00:d2:72:be:6f: 08:24:8e:4b:0a:d6:32:2c:96:00:3c:53:bf:75:57:0b:f8:75: e1:4a:d8:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYxMDA2MjMyMjM2WhcNMjYxMDEzMjMyMjM2WjAYMRYwFAYD VQQDEw02YWM1ODJiYy03MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz96101KmmJUc0dnpmoWHoqM8H5zhU+CKXDBPWhfRtsld01u02RC+qvIpSjuO RT3KjT8MLTkfj4yQvhRuGPqarzJPEOVLlUOCl6Ff0Cbc4EYu4j0dNhTqGzbd3y2h ix49YR+2Ghju9x5Pi6jzi3aJSeVLn2aBtEDXNWLNQipCmhjLqBdyUwshnW5PeHPZ 64ZbBPLUcAud2f+COKj8kqy1qP9D6qN2/L0ahCkWX/sP8O5JG+1ec6ZrRvwU0J3O JWgtvqL/cdxkKgngJ1aQM7BC4DGzEzSxgRhSbGewKcB7ZLztBUol7nDH0HJ1h7s6 IDa2jXLaii9I9TR+2+6p3YDo8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlu+nXl WCkI2Z9c73xw6ckFZmuuMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5u9ZoX+F7ovn8AZLGRrWRKBlEoGSzoKnnhKp/+976xK2Sfk0yMgt0tO1YjW kxd+3kZXrVLWWd8OD65O33HZSqQkFjeJSU+j2w8ty5rtJbjM2ee/R0w4s39sOeOf keSWmYSU9rTv1I2gMrXyLLb/lDNZad69xS3goySP/tVY+HoAOXSCE9BB1UB9MwXl jjaA1m5dW8hpB89DDuKNo9jv/wDADjY+oWmE7E8FC7UpyzhPqLChUp22CIBlG51E 4WZ0dfQmBsj+vfzDo+xrQQrJtXBS7DjGnHVA9ycd8Ke3LSAX1JjFngDScr5vCCSO SwrWMiyWADxTv3VXC/h14UrYbg== -----END CERTIFICATE-----Generated at Thu Oct 8 07:29:00 2026 by rpki-client