$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft File: 3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json) Hash identifier: IiFcg8Y9SJ1ocuOR9SmaiV2sNmFKWWpWZ+HLb41IoxY= Subject key identifier: 79:86:B8:16:7E:4C:B7:7B:97:70:8A:3C:38:8E:F5:BF:B9:BC:D6:50 Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F Certificate issuer: /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft Manifest number: 88 Signing time: Thu 05 Nov 2026 08:35:37 +0000 Manifest this update: Thu 05 Nov 2026 08:35:36 +0000 Manifest next update: Thu 12 Nov 2026 08:35:36 +0000 Files and hashes: 1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: Mv3LD3Ri0TxsD8kbSCRe10wZlr4sqqi5l0xwTP7o5Pg=) 2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 08:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Validity Not Before: Nov 5 08:35:36 2026 GMT Not After : Nov 12 08:35:36 2026 GMT Subject: CN=6aec3fd9-5762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:4d:ab:50:fc:2e:e8:16:74:1a:66:3a:c8: e4:56:ef:aa:e0:c9:96:45:d7:8f:80:94:8e:37:67: 99:3d:cc:d4:87:ea:39:07:d4:cd:6a:d2:f5:bf:19: 1c:4f:a1:b9:e7:93:08:3a:de:05:f7:04:72:d8:34: 54:85:ff:aa:85:1c:1d:ae:66:42:a4:54:11:64:3e: aa:a2:84:d7:c0:ce:4d:dc:a1:fe:63:e4:da:db:3f: 98:f0:19:b5:3c:a6:a8:0a:ac:a2:2f:1c:46:24:e3: 7c:57:9e:c8:2c:69:87:d0:21:98:a9:2c:84:d2:49: 32:d4:5b:4d:d6:e0:11:94:30:2c:99:8f:13:42:71: ed:d1:bb:c4:8e:85:4d:20:19:96:75:c7:d7:95:91: 15:81:b7:35:ef:4a:a3:e7:2f:fd:65:17:4e:be:7d: 66:db:6e:62:85:55:2e:95:db:9b:51:e2:bc:65:c4: 6d:dd:6d:69:3c:d7:fc:16:f0:4d:bd:d4:c4:d5:53: 92:9a:a1:72:e2:61:18:64:e2:6f:ec:1a:0d:3f:44: e4:11:a8:a4:31:c9:83:39:e6:10:3a:75:3e:f0:a0: 61:19:6b:41:d4:4e:47:39:9b:23:85:38:a1:ec:e5: b8:ca:35:63:b1:70:e1:67:b0:b2:05:be:d7:6a:3f: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:86:B8:16:7E:4C:B7:7B:97:70:8A:3C:38:8E:F5:BF:B9:BC:D6:50 X509v3 Authority Key Identifier: keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:96:6b:ec:58:07:98:93:6f:90:9a:48:19:8c:80:91:d4:2b: fe:06:b8:b4:ed:91:30:74:f7:67:ca:01:95:2a:89:20:28:4a: 49:b8:75:bf:69:ca:3f:42:bd:40:39:0c:8d:62:ec:90:6a:2b: 8f:65:d4:57:ae:23:56:72:52:52:2d:93:4c:10:9f:ea:48:7e: 75:fb:ad:e2:6a:d9:59:cd:45:dc:13:bb:19:32:54:f7:f5:ed: 97:03:36:c1:7c:b5:b2:d0:e1:63:0b:31:6a:f5:fa:50:43:6d: 50:76:bc:d7:ad:da:36:5d:be:20:dc:da:7f:11:70:db:81:c2: 6d:a5:8d:54:27:d3:8b:2d:9c:55:32:00:23:68:1d:0c:13:42: ec:e6:f5:7f:c5:6e:3d:30:29:f0:8c:35:99:b7:30:b0:b4:af: 1d:dd:64:25:b4:c9:cb:9f:54:11:ec:c4:c4:75:c6:04:0d:dd: 2b:15:87:e9:0b:ee:c2:d7:27:d3:6d:10:f8:27:0a:cb:c1:d4: 7c:a1:29:29:73:6a:13:e9:cc:89:86:aa:c1:71:d2:17:db:9c: dc:76:01:a0:d7:25:5e:c8:cc:f0:09:f7:0e:3e:33:cc:80:80: e3:4a:2c:59:ef:3e:8a:5c:db:34:7b:11:3e:30:3f:8c:d2:3e: 6f:ef:31:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY4MUExMTAvBgNVBAUTKERERTQyOEZBQkIxNkIyNDJEMUUzQTFBNkYwMEZENUUz QzM4QUE1OEYwHhcNMjYxMTA1MDgzNTM2WhcNMjYxMTEyMDgzNTM2WjAYMRYwFAYD VQQDEw02YWVjM2ZkOS01NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GtNq1D8LugWdBpmOsjkVu+q4MmWRdePgJSON2eZPczUh+o5B9TNatL1vxkc T6G555MIOt4F9wRy2DRUhf+qhRwdrmZCpFQRZD6qooTXwM5N3KH+Y+Ta2z+Y8Bm1 PKaoCqyiLxxGJON8V57ILGmH0CGYqSyE0kky1FtN1uARlDAsmY8TQnHt0bvEjoVN IBmWdcfXlZEVgbc170qj5y/9ZRdOvn1m225ihVUuldubUeK8ZcRt3W1pPNf8FvBN vdTE1VOSmqFy4mEYZOJv7BoNP0TkEaikMcmDOeYQOnU+8KBhGWtB1E5HOZsjhTih 7OW4yjVjsXDhZ7CyBb7Xaj+fBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmGuBZ+ TLd7l3CKPDiO9b+5vNZQMB8GA1UdIwQYMBaAFN3kKPq7FrJC0eOhpvAP1ePDiqWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjgxQS9DQzAzMTk0MjBC RTAxMUYxOUExODYzQTUzMTNEOEM2Ny8zZVFvLXJzV3NrTFI0NkdtOEFfVjQ4T0tw WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNlUW8tcnNXc2tMUjQ2R204QV9WNDhPS3BZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjgxQS9DQzAzMTk0MjBCRTAxMUYxOUExODYzQTUzMTNEOEM2Ny8zZVFvLXJzV3Nr TFI0NkdtOEFfVjQ4T0twWTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5Zr7FgHmJNvkJpIGYyAkdQr/ga4tO2RMHT3Z8oBlSqJIChKSbh1v2nKP0K9 QDkMjWLskGorj2XUV64jVnJSUi2TTBCf6kh+dfut4mrZWc1F3BO7GTJU9/XtlwM2 wXy1stDhYwsxavX6UENtUHa8163aNl2+INzafxFw24HCbaWNVCfTiy2cVTIAI2gd DBNC7Ob1f8VuPTAp8Iw1mbcwsLSvHd1kJbTJy59UEezExHXGBA3dKxWH6Qvuwtcn 020Q+CcKy8HUfKEpKXNqE+nMiYaqwXHSF9uc3HYBoNclXsjM8An3Dj4zzICA40os We8+ilzbNHsRPjA/jNI+b+8xjQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:12 2026 by rpki-client