$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: 5mOBmCi960NnZ+xX1F0YGLaHIX7OIJfZWuq4h6iCD1Q= Subject key identifier: 10:91:66:0C:89:AA:D4:27:40:C3:E2:5E:DD:A7:F7:FA:35:14:A3:98 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 025F Signing time: Fri 11 Sep 2026 02:16:42 +0000 Manifest this update: Fri 11 Sep 2026 02:16:42 +0000 Manifest next update: Fri 18 Sep 2026 02:16:42 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: JlvaprbXTeFQv8nX4Qqo4ephGBUYV4hLNU8Lovk8KSQ=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: hsA4dzDqhKvp9cdCvi5E/QiWDK70tsjIjm1pqpZGIzQ=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: SBltuM012OqLYqnXdql69mBi1G/BqnKOStfJ8Z81tqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Sep 11 02:16:42 2026 GMT Not After : Sep 18 02:16:42 2026 GMT Subject: CN=6aa3648a-fe69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:1a:7a:f7:9c:ee:f9:1f:d2:dd:76:79:c7: 77:a6:5b:f0:8b:44:42:19:70:fb:74:40:0f:e4:70: 73:2f:40:17:05:c0:38:cb:cf:1f:c6:d8:f0:c8:86: 60:68:45:0e:c8:b8:d2:fb:8a:e0:f6:69:55:42:81: 2a:43:1d:65:15:0f:9b:da:96:f1:c5:02:2b:c9:d8: fc:e4:be:78:2a:ce:f9:b2:f4:ea:fc:1c:6f:98:0d: ae:a7:7c:a3:cb:91:e5:02:de:c4:09:0d:3f:4a:a4: c1:f6:ca:35:9c:42:fd:82:fd:99:00:c3:c2:1f:ff: 79:20:2d:f7:cb:25:44:0c:15:3e:69:65:2c:c3:22: dc:0f:31:7f:4d:cd:8c:67:b3:d5:16:aa:49:29:c7: 8d:58:b2:ee:c9:4e:cc:96:c8:dc:56:db:a3:fc:76: af:28:5f:60:66:b1:62:d9:ef:b6:41:99:b6:88:15: 51:27:94:c7:13:6f:ed:f7:f1:94:7b:95:fe:50:70: a2:c4:5f:95:15:7d:f8:26:ab:4b:d4:3a:c9:8f:de: 4d:a0:d7:8e:11:47:1e:6b:fc:49:ea:8b:e5:32:57: 89:ac:e9:a5:5c:61:67:19:2f:2d:3a:d8:97:bc:a7: fb:cc:10:95:87:19:85:a1:04:eb:b9:40:ca:a7:86: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:66:0C:89:AA:D4:27:40:C3:E2:5E:DD:A7:F7:FA:35:14:A3:98 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:58:c7:7b:62:9a:43:07:14:8c:8f:7e:08:f6:fc:a4:c9:a1: e1:a5:ea:3a:12:94:a1:2b:c7:ff:eb:81:c9:3f:25:0f:e3:e5: eb:78:1c:76:34:89:00:95:e0:cf:a7:22:de:21:e8:3b:f7:26: 41:77:8b:48:6b:40:27:bd:07:91:cf:ad:27:d7:02:9d:b8:5a: 4d:bc:e4:5f:37:0b:e4:c9:c3:75:74:46:87:0a:b0:46:5c:ad: 5b:ea:3c:95:44:f6:60:32:22:5b:78:21:5f:4b:53:e0:a4:60: 5b:c8:64:3a:fe:65:67:38:a0:2e:c2:6a:8b:4f:a8:90:8a:42: 35:20:9d:bb:89:ff:bd:51:90:e8:39:43:d5:5e:ed:3d:54:2a: 82:c7:af:50:59:18:e8:54:bd:a8:d0:08:46:ca:3c:da:e7:61: 28:d4:ab:7f:04:ac:14:c9:f8:53:8c:ce:5b:72:7c:e6:3d:7d: db:c4:04:45:5e:ad:ef:53:cd:95:87:00:65:8a:3a:30:bd:e4: 29:22:3a:6b:a8:3e:a1:51:f6:4a:a3:c4:e5:b7:de:fa:d2:e0: 7c:73:a2:6e:74:e1:d0:08:f0:ed:6f:01:86:7a:51:e7:3a:14: ca:4a:47:c1:22:fd:dc:ad:4a:81:aa:59:dc:7d:91:75:e9:8b: d6:7e:91:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwOTExMDIxNjQyWhcNMjYwOTE4MDIxNjQyWjAYMRYwFAYD VQQDEw02YWEzNjQ4YS1mZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Qaevec7vkf0t12ecd3plvwi0RCGXD7dEAP5HBzL0AXBcA4y88fxtjwyIZg aEUOyLjS+4rg9mlVQoEqQx1lFQ+b2pbxxQIrydj85L54Ks75svTq/BxvmA2up3yj y5HlAt7ECQ0/SqTB9so1nEL9gv2ZAMPCH/95IC33yyVEDBU+aWUswyLcDzF/Tc2M Z7PVFqpJKceNWLLuyU7MlsjcVtuj/HavKF9gZrFi2e+2QZm2iBVRJ5THE2/t9/GU e5X+UHCixF+VFX34JqtL1DrJj95NoNeOEUcea/xJ6ovlMleJrOmlXGFnGS8tOtiX vKf7zBCVhxmFoQTruUDKp4aodwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCRZgyJ qtQnQMPiXt2n9/o1FKOYMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU1jHe2KaQwcUjI9+CPb8pMmh4aXqOhKUoSvH/+uByT8lD+Pl63gcdjSJAJXg z6ci3iHoO/cmQXeLSGtAJ70Hkc+tJ9cCnbhaTbzkXzcL5MnDdXRGhwqwRlytW+o8 lUT2YDIiW3ghX0tT4KRgW8hkOv5lZzigLsJqi0+okIpCNSCdu4n/vVGQ6DlD1V7t PVQqgsevUFkY6FS9qNAIRso82udhKNSrfwSsFMn4U4zOW3J85j1928QERV6t71PN lYcAZYo6ML3kKSI6a6g+oVH2SqPE5bfe+tLgfHOibnTh0Ajw7W8BhnpR5zoUykpH wSL93K1KgapZ3H2RdemL1n6Rdw== -----END CERTIFICATE-----Generated at Fri Sep 11 06:15:59 2026 by rpki-client