$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 6NsfgSoFqPU+VTn/4clYateulL8OQ52tE919A8wbJI0= Subject key identifier: B3:13:16:C2:CC:1D:EC:9B:FD:83:11:D5:1A:6B:01:DE:E8:84:A6:9F Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0185 Signing time: Sat 17 Oct 2026 05:12:59 +0000 Manifest this update: Sat 17 Oct 2026 05:12:59 +0000 Manifest next update: Sat 24 Oct 2026 05:12:59 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: I/cBJBQ1dp8R/DtVcX3anuI8hw7l9CiF0Q9g0OOdTlY=) 2: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: +KoTQ16rmsCvgZ2Pyy2DQF2MUk4UZvRPjW/NqJyZSbs=) 3: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 0K6zv1EK++uMoh6F/Spr/G4br0Xlwrre8zBil+ziCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 05:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Oct 17 05:12:59 2026 GMT Not After : Oct 24 05:12:59 2026 GMT Subject: CN=6ad303db-4ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:16:54:d6:53:be:eb:a7:93:c1:3d:12:57: 60:b4:82:67:ff:d3:56:94:25:db:1d:e9:ca:74:42: 1a:15:5f:5f:6f:6b:04:68:6c:ab:28:79:14:4c:7a: 74:e0:b6:42:a7:6a:33:b3:fb:3f:35:3b:65:f1:d9: 09:9b:ea:02:63:90:17:fe:06:92:b0:9e:86:42:42: 47:03:ef:3d:ca:45:b2:cd:18:43:4a:03:04:03:24: cb:00:48:59:46:e5:21:32:88:09:92:ab:72:1d:79: 97:6b:d8:1e:67:8b:c6:c2:57:ce:75:f5:6b:67:0c: 41:8b:c6:0c:ce:32:8b:f2:f3:7f:9e:2c:a7:73:4a: ed:05:6e:07:36:8b:db:16:5e:f4:f0:7e:fa:91:aa: df:88:88:03:eb:9f:8d:34:91:c3:2f:69:10:fd:9a: f6:1a:e9:1c:31:d1:78:00:53:25:61:8e:f7:3a:0c: 02:35:5f:7a:b1:7d:31:63:5a:96:2b:ea:6b:fd:cd: d6:a7:1a:3f:69:26:e3:d0:cb:68:0f:ca:6c:0d:5b: 09:3d:64:d5:fa:b2:e9:e5:b0:be:24:f3:a3:a9:b8: 88:7c:2c:af:af:be:e1:52:8f:95:8a:fb:29:78:86: f8:01:3b:2f:96:71:17:55:b7:0c:3c:32:0e:3a:f4: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:13:16:C2:CC:1D:EC:9B:FD:83:11:D5:1A:6B:01:DE:E8:84:A6:9F X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d2:bf:6d:29:59:cd:04:54:33:7a:ef:bb:a6:1d:a0:f7:21: 5c:62:a4:a2:f2:c4:56:bc:2b:6a:4e:63:60:f1:58:5d:db:f6: b3:30:54:75:a0:ed:d3:80:05:3e:ae:28:82:9b:ec:68:27:03: 16:98:55:11:df:f4:95:74:f2:4e:9e:09:4b:a3:b2:d7:fc:e7: c2:36:7b:bd:dd:5a:0d:59:85:56:3b:c7:d0:6d:65:16:51:5d: 04:08:4f:c9:de:56:2b:62:b7:69:d2:69:1d:08:18:d5:f3:2d: 39:64:55:0d:30:73:d4:3b:82:2b:c3:8a:37:97:2d:9f:ed:57: 2b:5e:ba:0b:40:93:7a:99:c4:b2:c0:c7:c3:b9:ec:16:07:de: b4:b7:02:a8:0d:81:d7:8b:99:20:67:f4:6b:aa:83:4e:ea:7e: 17:1f:2a:78:a1:cd:55:12:4b:cf:78:5e:3e:96:3c:55:3b:28: f4:07:eb:25:c4:c3:8e:e5:a9:ea:a6:29:bd:38:2c:00:ae:b6: fa:8f:04:2b:25:f7:42:22:14:05:ca:97:24:ad:a3:c5:b8:8e: 5f:37:ee:37:9f:c6:22:fc:3c:8c:81:a9:98:e4:80:6c:94:63: 9c:5e:d3:00:ab:5f:45:df:a0:97:2f:11:c7:9d:fe:55:ad:e2: 57:79:2f:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYxMDE3MDUxMjU5WhcNMjYxMDI0MDUxMjU5WjAYMRYwFAYD VQQDEw02YWQzMDNkYi00ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NUWVNZTvuunk8E9EldgtIJn/9NWlCXbHenKdEIaFV9fb2sEaGyrKHkUTHp0 4LZCp2ozs/s/NTtl8dkJm+oCY5AX/gaSsJ6GQkJHA+89ykWyzRhDSgMEAyTLAEhZ RuUhMogJkqtyHXmXa9geZ4vGwlfOdfVrZwxBi8YMzjKL8vN/niync0rtBW4HNovb Fl708H76karfiIgD65+NNJHDL2kQ/Zr2GukcMdF4AFMlYY73OgwCNV96sX0xY1qW K+pr/c3Wpxo/aSbj0MtoD8psDVsJPWTV+rLp5bC+JPOjqbiIfCyvr77hUo+Vivsp eIb4ATsvlnEXVbcMPDIOOvTI8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMTFsLM Heyb/YMR1RprAd7ohKafMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc9K/bSlZzQRUM3rvu6YdoPchXGKkovLEVrwrak5jYPFYXdv2szBUdaDt04AF Pq4ogpvsaCcDFphVEd/0lXTyTp4JS6Oy1/znwjZ7vd1aDVmFVjvH0G1lFlFdBAhP yd5WK2K3adJpHQgY1fMtOWRVDTBz1DuCK8OKN5ctn+1XK166C0CTepnEssDHw7ns FgfetLcCqA2B14uZIGf0a6qDTup+Fx8qeKHNVRJLz3hePpY8VTso9AfrJcTDjuWp 6qYpvTgsAK62+o8EKyX3QiIUBcqXJK2jxbiOXzfuN5/GIvw8jIGpmOSAbJRjnF7T AKtfRd+gly8Rx53+Va3iV3kv5Q== -----END CERTIFICATE-----Generated at Sat Oct 17 23:50:00 2026 by rpki-client