$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft File: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft (raw, json) Hash identifier: 8wqygQxex4GfeDcUdTd5VdzmBZD6YdtEZjNHeMKPEEU= Subject key identifier: 0B:60:92:7A:4B:5F:C4:6A:B9:92:41:E6:62:44:B0:A5:54:52:2E:44 Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 Certificate issuer: /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft Manifest number: 0D Signing time: Sat 03 Oct 2026 09:57:03 +0000 Manifest this update: Sat 03 Oct 2026 09:57:03 +0000 Manifest next update: Sat 10 Oct 2026 09:57:03 +0000 Files and hashes: 1: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl (hash: vdaOVVWU4uZM9GQ8EtpvMYl9A9xgpVDCBOvNJy29Y4M=) 2: y1g0K3BpCtGdwmwVYGz416Ro37A.asa (hash: 14Kb56nmcCqX1/aGgMSOO20n7FfaDrbKczoyK0CGkuA=) 3: A39294F2B31911F1AD8137FA6511F970.roa (hash: Zma4t38tztu49pqbn5EJV9Y/LliEvIBeR5nXDKoUMC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Validity Not Before: Oct 3 09:57:03 2026 GMT Not After : Oct 10 09:57:03 2026 GMT Subject: CN=6ac0d16f-71e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:91:9e:ed:95:30:89:47:10:0f:b7:6a:b0: f4:b8:c8:dd:a3:1f:54:15:07:d9:30:47:12:57:f8: f9:14:1d:58:f4:73:3a:fd:f7:41:b3:38:4d:8b:e5: ec:f5:a0:d2:7c:18:7f:0a:05:b9:c2:01:2b:d8:dd: f1:13:03:50:94:03:1a:58:26:14:55:43:dd:3d:e4: 78:20:db:e1:ad:ba:08:49:c2:7c:0a:ee:7c:ee:0d: a5:f9:f6:e6:2f:5f:c6:90:76:b5:5d:2b:e7:73:16: 76:d3:9e:bc:a2:a2:48:8f:63:c4:fd:b3:09:8a:fa: 57:49:9a:f1:c3:6d:70:66:ab:33:b5:de:50:34:e8: 36:66:9a:a9:5c:43:d2:d7:3b:48:ba:a0:69:fa:35: 6c:95:09:be:f5:e4:1f:bd:66:7c:d8:08:ee:60:4c: 5e:f3:e5:e4:48:45:8c:aa:b1:60:e7:11:51:3c:78: bb:5b:eb:68:4c:b3:a9:83:b6:f6:77:4a:60:67:62: c5:a7:08:82:8d:98:d1:67:2b:4d:86:d0:78:47:f2: 04:cc:86:e9:44:d3:55:c8:cd:69:9f:0c:b6:b3:2b: 85:0e:82:b7:26:46:0b:f6:59:a1:4c:a4:9d:8a:5e: 3a:b6:c9:5f:2f:ec:63:66:b7:da:8d:74:18:9e:ba: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:60:92:7A:4B:5F:C4:6A:B9:92:41:E6:62:44:B0:A5:54:52:2E:44 X509v3 Authority Key Identifier: keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b4:ee:0f:df:17:9a:d3:79:35:be:a9:f2:7c:39:d1:bc:7b: 02:34:6c:e1:79:6e:93:35:71:3e:8d:6f:de:29:c1:7e:cc:49: db:a7:45:35:2b:61:1f:24:81:9b:61:ed:d6:73:fd:3b:ba:49: af:77:95:d7:e9:db:17:d6:6f:fb:ea:ac:48:30:9b:c9:b2:78: 32:cb:d4:bd:17:72:62:a6:5c:d5:6a:1e:de:57:8b:51:de:cf: 17:e2:24:ad:1b:81:64:e9:1b:f0:8c:86:95:8e:24:cb:b7:38: f4:ef:aa:ce:6c:dc:90:c2:54:a7:ad:e3:ce:27:81:71:23:5b: 2f:d9:31:3a:db:6b:06:a3:a7:ec:1c:de:5d:59:c8:2d:78:97: 99:15:e7:f6:43:84:bb:44:bf:ad:a5:dd:9a:d0:f2:a3:c6:13: c9:af:87:e5:dc:fd:a1:93:5a:2a:59:f7:97:9e:59:57:cc:5c: 84:95:0d:27:70:d1:79:54:5b:35:a5:c3:8f:96:6f:f1:2a:89: 3c:90:62:08:33:fa:a2:f5:09:74:87:a4:bf:64:51:b6:b7:4d: e0:36:e2:4e:19:2b:10:43:d4:9f:e5:8c:f5:90:96:d1:48:a0: 7d:7f:f6:67:57:67:83:9d:68:40:c4:5e:0e:ee:bd:9b:02:56: c5:d7:6e:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxRDExMC8GA1UEBRMoREREQzcxMDJBRDkyRDlEODFBNjBDNDNBNEY2QjQyOTM0 RDUxMUJBMjAeFw0yNjEwMDMwOTU3MDNaFw0yNjEwMTAwOTU3MDNaMBgxFjAUBgNV BAMTDTZhYzBkMTZmLTcxZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3kpGe7ZUwiUcQD7dqsPS4yN2jH1QVB9kwRxJX+PkUHVj0czr990GzOE2L5ez1 oNJ8GH8KBbnCASvY3fETA1CUAxpYJhRVQ9095Hgg2+GtughJwnwK7nzuDaX59uYv X8aQdrVdK+dzFnbTnryiokiPY8T9swmK+ldJmvHDbXBmqzO13lA06DZmmqlcQ9LX O0i6oGn6NWyVCb715B+9ZnzYCO5gTF7z5eRIRYyqsWDnEVE8eLtb62hMs6mDtvZ3 SmBnYsWnCIKNmNFnK02G0HhH8gTMhulE01XIzWmfDLazK4UOgrcmRgv2WaFMpJ2K Xjq2yV8v7GNmt9qNdBieummJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC2CSektf xGq5kkHmYkSwpVRSLkQwHwYDVR0jBBgwFoAU3dxxAq2S2dgaYMQ6T2tCk01RG6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzdGODYwQ0U4QjIx RTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRnYVlNUTZUMnRDazAxUkc2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R4eEFxMlMyZGdhWU1RNlQydENrMDFSRzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTFELzdGODYwQ0U4QjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRn YVlNUTZUMnRDazAxUkc2SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBStO4P3xea03k1vqnyfDnRvHsCNGzheW6TNXE+jW/eKcF+zEnbp0U1K2EfJIGb Ye3Wc/07ukmvd5XX6dsX1m/76qxIMJvJsngyy9S9F3JiplzVah7eV4tR3s8X4iSt G4Fk6RvwjIaVjiTLtzj076rObNyQwlSnrePOJ4FxI1sv2TE622sGo6fsHN5dWcgt eJeZFef2Q4S7RL+tpd2a0PKjxhPJr4fl3P2hk1oqWfeXnllXzFyElQ0ncNF5VFs1 pcOPlm/xKok8kGIIM/qi9Ql0h6S/ZFG2t03gNuJOGSsQQ9Sf5Yz1kJbRSKB9f/Zn V2eDnWhAxF4O7r2bAlbF127n -----END CERTIFICATE-----Generated at Sun Oct 4 01:10:02 2026 by rpki-client