$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: Cfmvbag+OQ2ALs6Vvr9sE2qxIs8Zo8J7UgOnBE5D/JY= Subject key identifier: C3:AC:CB:7C:02:C8:7E:D2:B8:08:95:0F:61:5E:A9:CE:06:E2:1C:B0 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0276 Signing time: Tue 27 Oct 2026 02:12:45 +0000 Manifest this update: Tue 27 Oct 2026 02:12:45 +0000 Manifest next update: Tue 03 Nov 2026 02:12:45 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: rI5UYlK7uJsnKb7bBOxsaZnyzFzoK94cIM1fzH5QCz8=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: hsA4dzDqhKvp9cdCvi5E/QiWDK70tsjIjm1pqpZGIzQ=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: SBltuM012OqLYqnXdql69mBi1G/BqnKOStfJ8Z81tqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Oct 27 02:12:45 2026 GMT Not After : Nov 3 02:12:45 2026 GMT Subject: CN=6ae0089d-319d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:87:d8:24:c8:10:98:c9:7a:2c:19:35:18: ed:23:92:f8:eb:4c:f7:a9:cf:84:2b:bf:98:b7:48: 11:1e:e4:b8:c3:8d:38:88:cd:3e:ca:e7:9a:c9:05: 26:54:25:9d:bb:e7:c1:55:69:bd:88:f7:6e:08:b8: 90:c9:ed:39:cd:eb:61:a9:49:d5:0d:01:ce:c0:4f: 65:dd:74:ca:e7:0d:c7:c4:7c:52:2c:7d:14:a0:c0: 09:3c:91:25:a8:b9:5f:f5:ff:40:3e:4e:6c:19:b0: c5:90:fe:9f:d3:10:b8:55:85:ee:d1:3c:dc:cf:8f: 7b:95:ed:7f:45:5f:1c:40:11:9f:cb:4e:54:b3:c4: 6b:89:1f:f7:ca:b8:6b:48:29:78:98:92:c1:4a:4d: 71:5a:0e:9b:ff:13:a2:26:29:4c:54:c8:e3:c1:e4: 7f:75:4d:15:fa:0b:6c:c4:bb:98:74:36:d8:8a:28: f8:85:ea:8e:d7:cc:86:ab:cc:5a:6f:14:b4:6a:3b: d3:a4:04:39:ff:7f:25:59:20:07:7e:4c:c4:e1:8b: 3b:1f:6c:11:ac:be:cd:07:de:fe:cf:aa:5e:bc:2f: 47:c2:53:78:d8:4b:6a:29:da:f4:23:7c:6b:00:e1: 74:75:48:2d:a7:23:70:c0:b6:38:63:2b:6c:70:9d: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AC:CB:7C:02:C8:7E:D2:B8:08:95:0F:61:5E:A9:CE:06:E2:1C:B0 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9e:ea:97:0a:bc:a8:5c:cb:6a:49:73:24:62:29:11:bf:b2: 74:38:25:96:86:87:b8:5a:4f:5e:02:65:88:d3:37:f6:01:db: 0b:65:a7:c9:61:50:9c:fa:74:b3:9e:3f:cc:ea:91:34:25:38: 47:5c:f7:6c:45:71:a5:a6:8e:81:da:35:53:b6:7b:65:af:eb: 2b:02:a9:55:89:f7:be:5b:d0:0f:fa:84:da:a8:14:c1:3b:c9: d3:ca:ec:a0:b0:9a:9a:25:ea:94:f2:ae:14:1a:7d:04:8c:2c: 99:1a:33:4d:c6:20:6e:ed:9b:ba:55:a6:f8:64:e4:ab:4e:e6: 63:7c:80:9c:30:66:c8:ed:91:b9:97:5e:e3:6e:0b:51:0f:04: ae:71:fd:d5:b7:a6:27:46:1f:66:4e:05:3e:f7:b4:26:cb:ba: 7b:b5:49:2e:d5:3f:5f:2a:12:1e:d8:60:18:f1:85:c2:b9:6f: c8:41:6a:98:e8:e9:1b:5e:f2:63:76:da:20:47:77:f0:ec:a1: a9:61:39:f2:8c:fd:de:64:c5:c0:c1:9d:dd:c5:e5:ed:9d:6b: 2d:6f:7e:3a:f2:f4:be:3c:d4:99:8e:05:76:ba:b3:76:ca:23: b2:d0:de:ae:aa:f4:47:e7:48:54:c4:2b:aa:3f:25:55:c0:d1: 2b:6a:39:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYxMDI3MDIxMjQ1WhcNMjYxMTAzMDIxMjQ1WjAYMRYwFAYD VQQDEw02YWUwMDg5ZC0zMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbCH2CTIEJjJeiwZNRjtI5L460z3qc+EK7+Yt0gRHuS4w404iM0+yueayQUm VCWdu+fBVWm9iPduCLiQye05zethqUnVDQHOwE9l3XTK5w3HxHxSLH0UoMAJPJEl qLlf9f9APk5sGbDFkP6f0xC4VYXu0Tzcz497le1/RV8cQBGfy05Us8RriR/3yrhr SCl4mJLBSk1xWg6b/xOiJilMVMjjweR/dU0V+gtsxLuYdDbYiij4heqO18yGq8xa bxS0ajvTpAQ5/38lWSAHfkzE4Ys7H2wRrL7NB97+z6pevC9HwlN42EtqKdr0I3xr AOF0dUgtpyNwwLY4YytscJ0Q8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOsy3wC yH7SuAiVD2Feqc4G4hywMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApp7qlwq8qFzLaklzJGIpEb+ydDglloaHuFpPXgJliNM39gHbC2WnyWFQnPp0 s54/zOqRNCU4R1z3bEVxpaaOgdo1U7Z7Za/rKwKpVYn3vlvQD/qE2qgUwTvJ08rs oLCamiXqlPKuFBp9BIwsmRozTcYgbu2bulWm+GTkq07mY3yAnDBmyO2RuZde424L UQ8ErnH91bemJ0YfZk4FPve0Jsu6e7VJLtU/XyoSHthgGPGFwrlvyEFqmOjpG17y Y3baIEd38OyhqWE58oz93mTFwMGd3cXl7Z1rLW9+OvL0vjzUmY4FdrqzdsojstDe rqr0R+dIVMQrqj8lVcDRK2o5Ow== -----END CERTIFICATE-----Generated at Wed Oct 28 20:58:59 2026 by rpki-client