$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: lcCbSHA0GAn+/pM2jAapNtrXLQD+MeO4JrtWRrCVuwk= Subject key identifier: 2D:C9:32:7D:EB:A1:AD:58:F2:6F:A7:53:11:EB:F5:18:AB:75:F7:74 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 0139 Signing time: Sat 03 Oct 2026 06:15:11 +0000 Manifest this update: Sat 03 Oct 2026 06:15:10 +0000 Manifest next update: Sat 10 Oct 2026 06:15:10 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: 2EU9ZcuR8IupLCWf6kpJ307dAoCdXTgF/9pfA6cd4O4=) 2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=) 3: rRNC3E6JI7CmofOfGt02r2GAoY0.asa (hash: mve2brL6PCCHO6LyVKWicopf+XDXh9VmQdiQHp/iWo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Oct 3 06:15:10 2026 GMT Not After : Oct 10 06:15:10 2026 GMT Subject: CN=6ac09d6f-7c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:6c:08:d4:2e:b2:4c:33:2b:bf:b3:e5:0c: cf:8e:e5:32:8d:8f:5e:3e:07:2c:2d:c3:93:1e:8d: b1:67:95:67:a1:af:40:dd:22:f1:b9:20:7e:b3:a5: 7e:ac:48:c1:03:df:09:2e:05:7e:29:16:a0:85:27: 51:9f:36:3f:04:6c:cd:c1:99:e5:fb:a8:f2:a8:a1: ac:13:0c:55:8b:42:1b:3d:dd:4a:72:a9:7c:a3:cb: 18:d9:7d:5d:8b:56:15:b5:b8:67:7a:a8:b4:0b:80: 13:da:dd:a3:2f:43:31:e1:9e:8a:ed:c8:46:e7:d8: c7:58:88:5f:12:1d:1b:ad:82:c5:b2:b6:1e:ac:48: ef:c5:4b:a2:99:7b:5b:e3:4e:99:ec:99:51:c0:fe: b6:b6:8c:0b:ba:d1:a5:24:c0:8c:1a:bc:f2:57:f5: 7d:74:9b:0d:1d:2a:8d:5b:49:05:d5:42:8f:67:58: be:17:c7:ac:2c:2d:66:4f:61:1f:52:b8:21:59:97: f8:6c:a9:3c:5c:e1:17:b8:25:5c:06:e2:94:81:1f: ba:c4:40:73:78:c6:54:ae:e0:bd:32:8f:b8:b7:5a: 73:cf:31:5c:8f:db:c0:7e:26:de:14:35:57:c7:db: 01:46:73:ef:7f:23:59:61:ad:7d:72:db:c7:8e:ad: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C9:32:7D:EB:A1:AD:58:F2:6F:A7:53:11:EB:F5:18:AB:75:F7:74 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:75:63:b6:e2:57:72:14:72:34:3b:39:d8:2b:49:79:c9:2a: b2:b1:81:cc:52:86:17:9a:54:78:fe:9c:76:01:ea:ef:a0:9f: c3:51:4a:26:61:10:23:b7:84:6c:43:9a:86:c8:ff:5b:c6:db: 3f:7b:1e:26:59:ac:6b:f4:d4:e0:11:72:ec:18:76:64:f2:56: 42:75:e9:17:b2:35:2b:13:ec:8a:3a:0d:07:00:f7:4b:fd:85: 9d:91:57:c5:83:1b:51:98:f8:2e:c2:54:f9:dc:f4:f8:4f:03: d8:27:a8:be:cf:6f:c4:74:b0:3e:5e:55:45:7e:51:16:74:78: 2c:5f:8d:e0:bc:79:6d:64:dc:34:f8:b0:84:74:26:d9:7e:f3: 27:c7:99:82:77:fe:f4:42:25:6a:c3:87:5a:fd:7f:6c:52:ba: 38:99:81:f3:b8:6e:32:15:64:05:6f:b2:c1:ec:00:af:ee:2b: 88:6d:6c:2f:dd:96:9a:5a:a2:4b:8b:85:21:34:a9:bf:b3:1d: 8d:b7:d7:fb:99:bb:b5:d3:da:b2:b3:3d:32:86:bc:3d:b1:23: b7:4f:85:57:d9:87:05:8e:14:56:f6:8a:ff:7a:d5:4d:c3:9c: 83:f2:b8:d4:fd:01:44:f6:ee:d4:9f:70:ff:00:e9:02:c5:c0: 6f:07:b7:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjYxMDAzMDYxNTEwWhcNMjYxMDEwMDYxNTEwWjAYMRYwFAYD VQQDEw02YWMwOWQ2Zi03YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4BsCNQuskwzK7+z5QzPjuUyjY9ePgcsLcOTHo2xZ5Vnoa9A3SLxuSB+s6V+ rEjBA98JLgV+KRaghSdRnzY/BGzNwZnl+6jyqKGsEwxVi0IbPd1Kcql8o8sY2X1d i1YVtbhneqi0C4AT2t2jL0Mx4Z6K7chG59jHWIhfEh0brYLFsrYerEjvxUuimXtb 406Z7JlRwP62towLutGlJMCMGrzyV/V9dJsNHSqNW0kF1UKPZ1i+F8esLC1mT2Ef UrghWZf4bKk8XOEXuCVcBuKUgR+6xEBzeMZUruC9Mo+4t1pzzzFcj9vAfibeFDVX x9sBRnPvfyNZYa19ctvHjq2zJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3JMn3r oa1Y8m+nUxHr9Rirdfd0MB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAonVjtuJXchRyNDs52CtJeckqsrGBzFKGF5pUeP6cdgHq76Cfw1FKJmEQI7eE bEOahsj/W8bbP3seJlmsa/TU4BFy7Bh2ZPJWQnXpF7I1KxPsijoNBwD3S/2FnZFX xYMbUZj4LsJU+dz0+E8D2Ceovs9vxHSwPl5VRX5RFnR4LF+N4Lx5bWTcNPiwhHQm 2X7zJ8eZgnf+9EIlasOHWv1/bFK6OJmB87huMhVkBW+ywewAr+4riG1sL92Wmlqi S4uFITSpv7MdjbfX+5m7tdPasrM9Moa8PbEjt0+FV9mHBY4UVvaK/3rVTcOcg/K4 1P0BRPbu1J9w/wDpAsXAbwe3Mg== -----END CERTIFICATE-----Generated at Sun Oct 4 16:57:43 2026 by rpki-client