$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: 22k2L1R7dO5WmFb/fGhJGuN9YEpwcinsuWVwZwv3PNI= Subject key identifier: 33:E9:BD:D5:E9:87:F8:AE:07:28:69:EA:5D:B2:8B:9F:06:5E:4A:2A Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 35B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 359A Signing time: Sun 04 Oct 2026 14:34:53 +0000 Manifest this update: Sun 04 Oct 2026 14:34:52 +0000 Manifest next update: Sun 11 Oct 2026 14:34:52 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: M14jMQVX3wLwwaGtqS7XSmxFqi5JEzii7PEP19UpmB0=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13744 (0x35b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Oct 4 14:34:52 2026 GMT Not After : Oct 11 14:34:52 2026 GMT Subject: CN=6ac2640d-b6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:18:21:2a:8e:d6:0e:bf:08:4d:db:98:a3: 47:8e:37:81:39:8e:64:87:f1:25:ea:52:4f:82:e7: 3d:55:c1:da:b4:8f:ed:c8:94:2b:f6:22:02:a8:b2: 48:60:d2:8e:2a:65:44:3c:b6:77:79:4c:66:1f:7c: a2:d1:62:32:05:d0:d8:57:86:2f:08:0f:74:31:92: fc:4f:f8:27:5b:d2:95:b4:db:b1:24:e7:8a:75:93: 95:1d:ff:7f:51:80:f9:a2:7f:4d:87:23:e6:b7:2d: 76:5e:0f:59:38:3d:00:b8:e8:cf:c4:d9:65:8a:cc: 2f:8a:af:16:23:c8:a0:2c:21:35:d0:e9:55:13:d6: c3:98:9f:05:c6:a8:39:16:56:95:eb:94:57:f3:4a: 25:08:ae:85:e6:72:84:d7:a9:58:0c:03:58:fb:69: 92:03:c5:d4:fe:28:64:d4:ae:11:bc:2d:df:9a:1a: b2:4c:3f:4b:14:1f:10:b1:15:67:ac:89:5e:0a:20: 73:9d:a2:c5:8e:7c:d2:8f:05:96:62:21:d2:a4:34: 96:55:7b:4a:4a:be:13:ba:42:a7:03:70:00:5f:dc: 7b:6e:96:5a:02:ec:5d:d0:4f:f4:84:1e:c7:7b:17: b5:db:9b:c8:0a:56:b7:73:3e:f9:2d:98:2b:56:35: 0d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E9:BD:D5:E9:87:F8:AE:07:28:69:EA:5D:B2:8B:9F:06:5E:4A:2A X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:94:cd:f7:c9:74:5d:37:20:6c:28:eb:04:5e:7c:b6:89:49: 3c:02:a1:a8:6e:85:4d:8c:83:0b:bd:56:74:70:39:81:d8:40: 0c:52:a2:9b:14:09:83:92:14:16:16:cd:c7:e2:23:36:b1:b3: 0c:59:73:6f:77:b0:79:67:2d:6e:a9:4c:b3:1d:2e:5f:53:27: 66:fb:87:42:33:9f:f3:d9:6d:e6:ad:c1:01:aa:f1:e1:52:f0: 8a:dd:51:da:1c:d6:c0:6e:65:4b:7f:05:d4:7e:73:51:1c:ef: ab:87:0e:d8:28:1c:d6:06:6b:ea:ae:15:71:14:1f:86:6a:6d: 57:89:c9:ac:41:a6:79:ff:f6:6f:61:ff:28:b2:10:a2:b1:76: 09:fe:46:20:7c:7e:f6:ea:92:3b:c0:07:4d:c1:d9:a8:74:99: 04:2d:15:43:3b:06:3d:f2:1b:cd:78:e5:90:12:11:43:ba:06: 97:91:4c:a5:3a:4f:11:1e:d9:a0:1e:d4:ca:09:6e:33:5c:4a: 6b:b6:6e:59:ae:bb:10:dc:3c:11:71:33:46:1a:2b:cd:95:cc: cc:69:f2:13:30:fc:58:0c:14:d6:aa:dd:62:5f:1c:8a:7f:7c: 7e:6d:b9:4b:c0:d9:a9:7a:ab:c6:ce:b4:34:1f:5f:6e:97:1b: 6e:1c:55:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYxMDA0MTQzNDUyWhcNMjYxMDExMTQzNDUyWjAYMRYwFAYD VQQDEw02YWMyNjQwZC1iNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jwYISqO1g6/CE3bmKNHjjeBOY5kh/El6lJPguc9VcHatI/tyJQr9iICqLJI YNKOKmVEPLZ3eUxmH3yi0WIyBdDYV4YvCA90MZL8T/gnW9KVtNuxJOeKdZOVHf9/ UYD5on9NhyPmty12Xg9ZOD0AuOjPxNlliswviq8WI8igLCE10OlVE9bDmJ8Fxqg5 FlaV65RX80olCK6F5nKE16lYDANY+2mSA8XU/ihk1K4RvC3fmhqyTD9LFB8QsRVn rIleCiBznaLFjnzSjwWWYiHSpDSWVXtKSr4TukKnA3AAX9x7bpZaAuxd0E/0hB7H exe125vICla3cz75LZgrVjUN0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPpvdXp h/iuByhp6l2yi58GXkoqMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbpTN98l0XTcgbCjrBF58tolJPAKhqG6FTYyDC71WdHA5gdhADFKimxQJg5IU FhbNx+IjNrGzDFlzb3eweWctbqlMsx0uX1MnZvuHQjOf89lt5q3BAarx4VLwit1R 2hzWwG5lS38F1H5zURzvq4cO2Cgc1gZr6q4VcRQfhmptV4nJrEGmef/2b2H/KLIQ orF2Cf5GIHx+9uqSO8AHTcHZqHSZBC0VQzsGPfIbzXjlkBIRQ7oGl5FMpTpPER7Z oB7UygluM1xKa7ZuWa67ENw8EXEzRhorzZXMzGnyEzD8WAwU1qrdYl8cin98fm25 S8DZqXqrxs60NB9fbpcbbhxVYA== -----END CERTIFICATE-----Generated at Tue Oct 6 13:16:03 2026 by rpki-client