$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: v7BEf4G5mrDNvyV8528Iw66u66Md5awSDqIju7C2td0= Subject key identifier: 27:E4:72:58:D8:F2:D6:A5:E6:FB:A1:62:5A:CF:0D:C0:82:D5:51:43 Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 088A Signing time: Sun 04 Oct 2026 20:49:04 +0000 Manifest this update: Sun 04 Oct 2026 20:49:03 +0000 Manifest next update: Sun 11 Oct 2026 20:49:03 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: DJKrdbxuFuVDBWw0hF8kvwqC4wAauXFksLTVUL6L6eI=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: HLXn0y5saMGZHdBI1Bh2ImWIk/Xfj9Kl57imAxrALWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Oct 4 20:49:03 2026 GMT Not After : Oct 11 20:49:03 2026 GMT Subject: CN=6ac2bbc0-8ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:6a:38:db:f3:58:e4:0b:ba:4e:ba:9a:2f: 15:9b:58:33:4c:23:43:52:a9:9d:4f:77:7a:69:9c: c0:77:54:3a:37:eb:91:87:8a:fd:35:6b:d9:14:d7: b1:cd:b0:af:61:0b:8b:6b:87:63:e2:8c:b7:6b:03: ee:fd:8e:39:22:82:be:ad:bb:a7:9d:36:97:26:27: c8:3a:c2:60:b4:f4:f2:fd:dc:9c:f2:95:39:e5:d2: 36:8a:79:ea:70:cd:75:54:ee:ed:ad:27:6d:68:be: 49:10:db:3b:4d:3e:1a:0a:56:f1:2a:b4:66:6e:14: dd:2a:dc:ed:4d:4d:44:c4:37:f4:f5:82:b9:5d:31: b3:09:64:d4:0e:ad:75:c5:17:9a:30:b7:b1:63:81: c2:4a:7d:db:82:3e:e7:14:ae:55:97:22:8a:20:73: a0:74:a3:25:41:02:53:b8:e4:28:e6:3e:a0:4b:b9: 37:b5:11:33:a3:bf:01:a3:e6:6c:77:cb:bd:6c:be: 48:9c:12:71:20:cb:42:e9:34:66:26:48:03:12:50: 73:54:1f:c3:32:c3:21:1e:d6:87:df:6a:21:3d:6d: 72:99:5e:b0:03:e3:ba:4c:26:ef:16:2c:27:cd:4d: cd:d7:42:7b:e7:09:06:f4:a3:40:43:dd:be:b6:35: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:72:58:D8:F2:D6:A5:E6:FB:A1:62:5A:CF:0D:C0:82:D5:51:43 X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:39:03:b4:75:a6:64:80:1b:11:c9:f0:20:34:6b:0a:b6:4b: e4:9a:0f:7c:9c:7a:a9:d1:e2:29:1a:03:a1:ed:32:f0:24:2e: 7a:a4:47:1a:af:3b:55:59:7b:1a:16:36:1d:57:9f:df:f2:d4: 9b:f0:83:58:dc:c4:3c:c2:d5:67:a4:cd:f7:35:b2:ef:89:54: f2:4d:7a:98:f5:18:6b:0e:87:d5:83:15:43:48:3c:9c:ed:1b: 2e:39:20:a1:c7:cb:77:73:80:b6:93:27:a5:c1:29:bd:4e:fc: 92:89:55:25:e8:35:d1:fd:23:04:2c:32:e7:8a:ad:fd:f3:1a: f5:89:3f:e5:fc:e5:7d:be:96:76:c6:a3:ce:9c:15:ef:a2:89: 7e:10:a1:41:06:d4:76:2a:7a:a5:88:30:22:a0:d2:42:b2:3f: 00:f8:c6:14:d2:75:37:bb:b5:db:fd:81:0a:b2:45:15:f7:4b: fb:03:c9:65:04:8d:19:46:94:92:be:fe:ef:77:2a:e5:13:0f: d2:19:88:33:1b:1c:89:cf:03:d6:b8:ac:30:2c:16:aa:11:fd: b5:28:05:96:15:f9:70:9b:d8:62:12:62:6d:59:2f:69:b7:6c: 2f:78:5a:a8:a7:8e:49:5d:f1:f8:23:1c:9d:e5:93:cd:62:23: fa:28:b9:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjYxMDA0MjA0OTAzWhcNMjYxMDExMjA0OTAzWjAYMRYwFAYD VQQDEw02YWMyYmJjMC04Y2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi29qONvzWOQLuk66mi8Vm1gzTCNDUqmdT3d6aZzAd1Q6N+uRh4r9NWvZFNex zbCvYQuLa4dj4oy3awPu/Y45IoK+rbunnTaXJifIOsJgtPTy/dyc8pU55dI2innq cM11VO7trSdtaL5JENs7TT4aClbxKrRmbhTdKtztTU1ExDf09YK5XTGzCWTUDq11 xReaMLexY4HCSn3bgj7nFK5VlyKKIHOgdKMlQQJTuOQo5j6gS7k3tREzo78Bo+Zs d8u9bL5InBJxIMtC6TRmJkgDElBzVB/DMsMhHtaH32ohPW1ymV6wA+O6TCbvFiwn zU3N10J75wkG9KNAQ92+tjUW3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfkcljY 8tal5vuhYlrPDcCC1VFDMB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlDkDtHWmZIAbEcnwIDRrCrZL5JoPfJx6qdHiKRoDoe0y8CQueqRHGq87VVl7 GhY2HVef3/LUm/CDWNzEPMLVZ6TN9zWy74lU8k16mPUYaw6H1YMVQ0g8nO0bLjkg ocfLd3OAtpMnpcEpvU78kolVJeg10f0jBCwy54qt/fMa9Yk/5fzlfb6WdsajzpwV 76KJfhChQQbUdip6pYgwIqDSQrI/APjGFNJ1N7u12/2BCrJFFfdL+wPJZQSNGUaU kr7+73cq5RMP0hmIMxscic8D1risMCwWqhH9tSgFlhX5cJvYYhJibVkvabdsL3ha qKeOSV3x+CMcneWTzWIj+ii5+A== -----END CERTIFICATE-----Generated at Mon Oct 5 06:43:17 2026 by rpki-client