$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: I+7ioLmyQgYaeF8wa8dfj5HQBfpwMIccmDns771omcg= Subject key identifier: F0:AD:B0:86:6E:C8:83:A7:A6:E1:03:E8:04:BE:10:38:DC:FC:9D:CA Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 02A8 Signing time: Mon 05 Oct 2026 02:18:35 +0000 Manifest this update: Mon 05 Oct 2026 02:18:35 +0000 Manifest next update: Mon 12 Oct 2026 02:18:35 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: uDZGCHFZJ9m6cZdqcvj0HDtCA/0WisXoK6bT1T0yXaA=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 5qvqzmsbRW5LBUnnBo5pzofLXlPjmeRE2wzoeLfm3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Oct 5 02:18:35 2026 GMT Not After : Oct 12 02:18:35 2026 GMT Subject: CN=6ac308fb-f7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:3a:4b:1a:73:16:0d:ef:15:1b:c1:d2:57: 35:49:ab:ed:b1:72:a2:bc:38:88:a8:11:3f:62:40: 26:ae:b1:7e:7a:13:e3:36:cc:37:ae:de:0f:31:a8: 2a:ef:14:9b:f5:38:24:c1:50:7d:ac:6d:af:3e:7b: c5:41:3d:2d:fd:e4:0a:e6:4a:c8:68:ee:bc:22:0f: 42:15:58:e9:d3:c8:42:5a:d1:ee:6d:07:44:4f:63: 6a:08:31:a5:9c:a9:60:b8:09:3f:0f:71:36:4e:ee: 6f:1d:44:12:49:f6:f1:48:f0:47:64:64:8f:5d:d6: f0:ea:69:d3:54:5f:03:e1:c7:59:1e:d6:d7:5f:86: 70:7a:a5:f8:83:f1:33:12:75:09:aa:f9:d4:d2:df: 47:d1:d5:89:0e:c1:f1:32:8b:dd:83:ea:47:58:29: 8d:1c:8f:a2:9e:87:f7:97:a2:43:0a:36:0d:11:e7: 9f:5f:e6:4d:9b:1b:80:9f:c7:48:77:5a:2a:2e:cd: 18:13:21:3a:ea:6e:e1:17:57:bc:52:d8:29:f3:5d: f7:f6:ca:e5:53:45:71:ca:22:89:1a:4d:f5:d2:51: 6b:7b:3b:be:88:3d:26:fc:17:37:61:ac:23:45:28: 32:e4:cb:d2:5a:cb:0c:21:cb:e6:fa:d9:4c:06:25: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AD:B0:86:6E:C8:83:A7:A6:E1:03:E8:04:BE:10:38:DC:FC:9D:CA X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d0:b5:74:d1:ec:a6:67:5e:77:08:ea:e6:58:f5:59:f8:c8: 61:23:3c:bb:4b:cd:84:81:e4:0d:72:51:ee:98:8f:63:49:2a: e1:3d:af:87:5f:8f:e6:ba:d7:8f:0c:1e:e5:e2:17:8e:99:04: dd:b2:8b:78:75:de:af:0b:5e:0b:fc:c2:40:e2:4b:30:90:17: c2:9d:df:5a:cb:f1:7c:7f:ac:6c:cb:31:07:19:5d:6b:06:75: b7:84:28:61:e6:9a:4d:77:e9:11:67:3a:19:35:79:45:83:71: 17:f1:68:40:c3:67:5e:82:5d:bf:96:b8:c7:65:0b:30:94:dc: 34:3c:3f:c8:ed:ed:5c:d7:85:59:cd:b9:7f:e3:b2:6a:00:d2: 22:08:11:8a:72:0e:f4:be:60:7a:f0:ef:00:7f:f5:9c:e8:f1: 45:ff:f7:5b:17:41:bf:d0:75:03:5f:a1:88:a2:aa:b6:3d:7f: c0:dc:a7:01:cb:93:14:34:01:22:fb:af:e1:9d:5f:5a:4b:c9: 58:18:b4:71:f0:63:d0:2f:59:cb:fa:71:ea:53:42:3f:60:d4: 30:41:1a:9e:9d:9f:4c:06:15:59:5d:44:d8:c4:ad:7f:e9:e2: 0f:bd:3f:b0:a3:78:4e:27:e3:97:c6:81:ea:56:df:be:6e:40: db:20:31:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjYxMDA1MDIxODM1WhcNMjYxMDEyMDIxODM1WjAYMRYwFAYD VQQDEw02YWMzMDhmYi1mN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h46SxpzFg3vFRvB0lc1SavtsXKivDiIqBE/YkAmrrF+ehPjNsw3rt4PMagq 7xSb9TgkwVB9rG2vPnvFQT0t/eQK5krIaO68Ig9CFVjp08hCWtHubQdET2NqCDGl nKlguAk/D3E2Tu5vHUQSSfbxSPBHZGSPXdbw6mnTVF8D4cdZHtbXX4ZweqX4g/Ez EnUJqvnU0t9H0dWJDsHxMovdg+pHWCmNHI+inof3l6JDCjYNEeefX+ZNmxuAn8dI d1oqLs0YEyE66m7hF1e8Utgp81339srlU0VxyiKJGk310lFrezu+iD0m/Bc3Yawj RSgy5MvSWssMIcvm+tlMBiVRJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCtsIZu yIOnpuED6AS+EDjc/J3KMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAftC1dNHspmdedwjq5lj1WfjIYSM8u0vNhIHkDXJR7piPY0kq4T2vh1+P5rrX jwwe5eIXjpkE3bKLeHXerwteC/zCQOJLMJAXwp3fWsvxfH+sbMsxBxldawZ1t4Qo YeaaTXfpEWc6GTV5RYNxF/FoQMNnXoJdv5a4x2ULMJTcNDw/yO3tXNeFWc25f+Oy agDSIggRinIO9L5gevDvAH/1nOjxRf/3WxdBv9B1A1+hiKKqtj1/wNynAcuTFDQB Ivuv4Z1fWkvJWBi0cfBj0C9Zy/px6lNCP2DUMEEanp2fTAYVWV1E2MStf+niD70/ sKN4Tifjl8aB6lbfvm5A2yAx3g== -----END CERTIFICATE-----Generated at Tue Oct 6 20:28:10 2026 by rpki-client