$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: KwMvoEnjyWcvzPRgNyqTkPvEjkRod43s4XhwDtgKgIQ= Subject key identifier: 4A:EC:A9:AF:30:7D:F3:DC:91:D2:AF:0D:85:3B:79:B2:64:84:22:09 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0D52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0D48 Signing time: Sun 04 Oct 2026 18:09:01 +0000 Manifest this update: Sun 04 Oct 2026 18:09:00 +0000 Manifest next update: Sun 11 Oct 2026 18:09:00 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: q73gU94u7Ik61ufgqU6eVq7OVtuoT6QKOjHG6q4rG/o=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Oct 4 18:09:00 2026 GMT Not After : Oct 11 18:09:00 2026 GMT Subject: CN=6ac2963c-c2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:7a:4e:5e:80:29:25:c1:1c:98:e1:64:f7: e5:e5:1f:40:60:94:1e:21:44:ce:53:0b:aa:6d:0d: b4:60:61:43:53:37:5f:55:78:05:22:ec:11:20:3e: 10:b9:84:90:73:3d:d0:cd:7c:a0:f8:6a:65:98:22: d8:88:47:b5:3b:29:8d:4a:ad:60:86:d6:62:dc:58: a8:a4:11:3e:37:38:c9:6b:f6:65:71:8e:4b:36:fb: 51:1a:a5:96:be:17:eb:dd:59:de:6a:a5:36:32:29: 9f:d2:c0:d8:a4:1d:4e:ce:94:ec:eb:3b:58:80:79: 0c:92:59:2d:8b:07:41:3a:3d:bd:9b:77:54:bf:c5: 44:17:17:61:cd:b3:c2:6c:9e:57:ec:77:6b:88:94: d7:dc:25:b6:63:c9:4c:c7:42:bb:9a:14:9b:a3:cd: e6:ef:43:91:83:7a:3f:f9:2a:c2:a6:cd:65:5c:19: 47:bb:5f:96:e4:ee:82:86:69:d0:9e:3b:11:d0:0e: de:da:0d:12:c2:21:55:c2:96:90:a0:eb:45:37:21: e9:c0:6d:8f:7c:b7:d3:62:86:b1:89:e6:b3:39:2a: c4:84:c6:28:86:7e:31:4d:4e:96:ac:6f:05:43:e0: f9:ab:90:d4:61:04:18:73:a0:0e:dc:fd:dd:74:22: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:A9:AF:30:7D:F3:DC:91:D2:AF:0D:85:3B:79:B2:64:84:22:09 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:93:05:02:56:12:22:1e:ab:bf:4c:17:f4:1e:ad:87:b1: f8:03:15:6e:48:e0:65:9d:1f:e4:9b:4e:40:b9:4d:7f:cc:de: 2b:98:66:fb:62:9a:76:96:a1:79:e0:a8:a3:59:cc:4a:23:1e: 04:ce:c9:97:b8:58:7e:c1:f0:05:24:c9:96:1b:d1:71:76:5c: 9d:bb:bd:b9:5b:91:3e:e3:3e:23:1e:e6:3c:49:13:ba:ba:85: e4:49:7c:dc:d3:06:90:84:ed:6e:cb:73:e7:97:11:77:53:0a: 82:fd:12:52:fe:ba:1c:66:4b:83:6b:c3:ac:89:c0:0a:a3:18: f7:81:19:52:98:19:0f:f6:e3:65:6e:97:e2:81:77:3e:e0:24: 90:f7:13:31:a4:55:22:ef:62:c7:49:54:78:3a:bb:56:31:d0: 8c:a9:52:8f:9e:4a:dc:8b:e7:80:a4:63:87:a7:7d:f8:5f:22: 79:53:4c:31:fc:50:d2:4a:82:60:6f:1a:a5:45:4f:f6:55:79: ee:1b:35:fc:a2:0a:c9:35:bf:00:9b:33:23:63:28:5c:77:1f: 40:56:92:ab:4c:93:e0:7f:08:09:fd:4e:95:cc:92:d1:8f:f9: 91:14:c7:2d:f2:47:1b:47:42:2a:70:12:6d:25:47:66:c6:3a: ac:5b:0c:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjYxMDA0MTgwOTAwWhcNMjYxMDExMTgwOTAwWjAYMRYwFAYD VQQDEw02YWMyOTYzYy1jMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCh6Tl6AKSXBHJjhZPfl5R9AYJQeIUTOUwuqbQ20YGFDUzdfVXgFIuwRID4Q uYSQcz3QzXyg+GplmCLYiEe1OymNSq1ghtZi3FiopBE+NzjJa/ZlcY5LNvtRGqWW vhfr3VneaqU2Mimf0sDYpB1OzpTs6ztYgHkMklktiwdBOj29m3dUv8VEFxdhzbPC bJ5X7HdriJTX3CW2Y8lMx0K7mhSbo83m70ORg3o/+SrCps1lXBlHu1+W5O6ChmnQ njsR0A7e2g0SwiFVwpaQoOtFNyHpwG2PfLfTYoaxieazOSrEhMYohn4xTU6WrG8F Q+D5q5DUYQQYc6AO3P3ddCKC0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErsqa8w ffPckdKvDYU7ebJkhCIJMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD7uTBQJWEiIeq79MF/QerYex+AMVbkjgZZ0f5JtOQLlNf8zeK5hm+2Kadpah eeCoo1nMSiMeBM7Jl7hYfsHwBSTJlhvRcXZcnbu9uVuRPuM+Ix7mPEkTurqF5El8 3NMGkITtbstz55cRd1MKgv0SUv66HGZLg2vDrInACqMY94EZUpgZD/bjZW6X4oF3 PuAkkPcTMaRVIu9ix0lUeDq7VjHQjKlSj55K3IvngKRjh6d9+F8ieVNMMfxQ0kqC YG8apUVP9lV57hs1/KIKyTW/AJszI2MoXHcfQFaSq0yT4H8ICf1OlcyS0Y/5kRTH LfJHG0dCKnASbSVHZsY6rFsMxA== -----END CERTIFICATE-----Generated at Tue Oct 6 11:34:40 2026 by rpki-client