$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: nZ+6YuCss48pphVhXY2gAYk0yOZR5nkgWg5jS+dE5Zw= Subject key identifier: BB:6C:69:4C:2C:64:86:70:C6:98:C6:A8:E3:AF:67:FC:A7:1B:13:09 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0877 Signing time: Thu 24 Sep 2026 20:45:07 +0000 Manifest this update: Thu 24 Sep 2026 20:45:06 +0000 Manifest next update: Thu 01 Oct 2026 20:45:06 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: 1qAgmo5kmTmtlFWhPIbJJXtaxdn6aTPC07uty0uv2tc=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Sep 24 20:45:06 2026 GMT Not After : Oct 1 20:45:06 2026 GMT Subject: CN=6ab58bd2-91da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:d6:d2:16:2e:8b:e9:34:4b:b8:53:1d:05: 85:8e:05:ae:ee:3a:43:f2:5d:6d:bf:41:87:5e:a9: 45:9e:80:c3:c5:a8:cc:35:be:25:32:fb:19:4c:6e: 0a:1b:3e:9e:59:1c:d6:c1:82:13:c2:38:5a:2d:3f: db:5e:bc:3f:07:97:ef:ff:14:e0:da:fc:46:e5:ad: 0c:a0:73:53:ad:ab:78:93:b1:9e:24:42:ca:33:4d: d6:90:92:96:a8:f9:4e:bd:14:fe:79:d0:21:6b:9d: bc:f5:bf:24:e8:df:50:86:5c:f5:1f:78:c1:53:b1: 7c:9b:fb:dc:43:ab:f6:51:11:56:a9:88:6a:c9:3f: c6:5b:cd:e8:7e:92:cf:1b:28:90:bf:73:7a:be:d9: d8:13:e7:32:63:6d:02:7e:1b:e3:87:6b:21:4b:85: 61:9b:0d:9b:84:a1:5b:1b:e6:1c:8e:a6:29:0d:b8: e3:91:b0:93:9c:83:73:51:aa:13:b9:88:dd:b1:46: b9:33:eb:c2:4b:f2:56:78:2d:64:a2:53:c3:3c:5d: ec:10:0d:45:84:fd:95:7d:40:7b:b4:18:6f:61:ca: 87:0e:a0:ba:aa:6a:b2:ad:ce:1e:96:3e:24:70:bc: b3:6e:58:22:c8:26:2a:3d:b0:87:3f:5f:9e:f9:4b: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:69:4C:2C:64:86:70:C6:98:C6:A8:E3:AF:67:FC:A7:1B:13:09 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f3:01:51:e6:f8:96:73:7f:23:b2:95:7c:b9:3b:9d:e2:5e: 99:72:6b:81:b0:92:47:33:56:b6:99:1e:15:9b:ba:0a:52:4e: 4d:e8:62:df:ba:01:db:dd:c9:fe:92:16:8e:33:26:42:1d:d9: 45:4c:a8:04:6f:f5:8b:b3:62:0f:99:a6:e1:45:88:cd:30:0b: 7a:5b:53:87:40:41:62:d3:22:fb:7c:f5:04:65:93:32:68:9f: 7c:36:76:c2:d4:dc:07:08:0e:e4:7a:e2:ec:66:a4:3d:09:e2: 8d:9d:e4:64:a5:e3:71:29:ab:d7:f7:dc:e1:28:73:f2:36:d7: aa:c5:2a:49:86:ae:da:a8:4f:6d:ae:3a:fa:63:0a:01:95:e8: 3a:51:32:f7:bc:61:26:de:14:00:07:f1:d0:64:8e:16:87:95: 89:a8:70:d9:74:cc:3d:bb:bd:fb:04:68:02:b0:46:cf:e2:17: 4e:e8:ef:55:9c:f5:a7:e4:3e:62:d3:f0:3e:ec:57:ed:78:b1: 37:bd:27:2a:9a:52:a2:59:f2:01:ca:65:c6:dc:45:11:b5:03: 51:cb:ba:2c:c5:de:c5:25:71:a7:6a:3d:b4:d1:76:ca:c2:11: b9:97:a4:78:ae:40:07:03:30:14:77:e2:fa:51:b3:a2:93:d0: c9:92:ad:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwOTI0MjA0NTA2WhcNMjYxMDAxMjA0NTA2WjAYMRYwFAYD VQQDEw02YWI1OGJkMi05MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSrW0hYui+k0S7hTHQWFjgWu7jpD8l1tv0GHXqlFnoDDxajMNb4lMvsZTG4K Gz6eWRzWwYITwjhaLT/bXrw/B5fv/xTg2vxG5a0MoHNTrat4k7GeJELKM03WkJKW qPlOvRT+edAha5289b8k6N9Qhlz1H3jBU7F8m/vcQ6v2URFWqYhqyT/GW83ofpLP GyiQv3N6vtnYE+cyY20Cfhvjh2shS4Vhmw2bhKFbG+YcjqYpDbjjkbCTnINzUaoT uYjdsUa5M+vCS/JWeC1kolPDPF3sEA1FhP2VfUB7tBhvYcqHDqC6qmqyrc4elj4k cLyzblgiyCYqPbCHP1+e+UuMgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtsaUws ZIZwxpjGqOOvZ/ynGxMJMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvvMBUeb4lnN/I7KVfLk7neJemXJrgbCSRzNWtpkeFZu6ClJOTehi37oB293J /pIWjjMmQh3ZRUyoBG/1i7NiD5mm4UWIzTALeltTh0BBYtMi+3z1BGWTMmiffDZ2 wtTcBwgO5Hri7GakPQnijZ3kZKXjcSmr1/fc4Shz8jbXqsUqSYau2qhPba46+mMK AZXoOlEy97xhJt4UAAfx0GSOFoeViahw2XTMPbu9+wRoArBGz+IXTujvVZz1p+Q+ YtPwPuxX7XixN70nKppSolnyAcplxtxFEbUDUcu6LMXexSVxp2o9tNF2ysIRuZek eK5ABwMwFHfi+lGzopPQyZKtpA== -----END CERTIFICATE-----Generated at Fri Sep 25 21:23:02 2026 by rpki-client