$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json) Hash identifier: vmrvNCu87PPC8V4ILSiMDFYUHUmfiKptB0VIM2DuwnY= Subject key identifier: 58:FB:A1:64:93:0B:F9:03:E6:B7:39:5B:F4:8E:56:36:D5:B9:A1:85 Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft Manifest number: 0192 Signing time: Sat 03 Oct 2026 05:08:16 +0000 Manifest this update: Sat 03 Oct 2026 05:08:16 +0000 Manifest next update: Sat 10 Oct 2026 05:08:16 +0000 Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: RGE9FHdwqOreGQvfGOSWIzP2cciPbw1O7WkCtBQ7tdg=) 2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: Qj2e8JFy3G1Ijnc1ybFXUNaXhlpo6NRhbWYoFliMA3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Validity Not Before: Oct 3 05:08:16 2026 GMT Not After : Oct 10 05:08:16 2026 GMT Subject: CN=6ac08dc0-7fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:47:0e:7e:83:05:f7:3a:12:77:10:6c:d6:ca: d3:52:a3:b0:2b:88:78:d2:12:a7:16:b7:bf:03:4e: db:c7:50:cd:64:47:cf:ac:d5:5d:5c:90:a7:3a:e6: 02:7c:e7:39:ef:f5:20:12:63:30:9f:26:03:9d:b1: ad:65:8f:74:98:0d:5a:79:87:1f:2b:f8:22:b8:cf: 08:fb:05:fa:4a:b7:c3:70:44:9e:cf:5a:1f:35:12: c3:35:18:31:91:2c:86:f3:e1:65:07:0c:3c:06:4e: 56:cd:84:62:2d:54:57:8d:6d:7a:00:b7:99:d5:1d: 6a:ed:51:09:02:37:86:b2:27:ac:f5:fb:45:74:5b: 76:4b:1a:d2:82:93:b3:6a:f1:2f:ef:58:01:ab:e0: f5:ec:ad:42:15:8b:0e:7a:fb:c4:9c:16:f4:5e:c7: bb:2a:a0:de:65:90:6d:bf:54:ea:97:bb:23:73:07: a5:fe:89:a9:f8:3a:83:1f:29:cc:df:f0:9d:cb:46: ff:b1:cb:a1:a1:4b:33:b8:83:13:9b:4e:9e:49:1b: ee:45:8a:94:00:c8:ba:0c:5c:10:fd:7a:09:78:de: 12:d5:48:8f:5e:e3:31:ca:46:c0:d8:bd:05:70:09: 7e:f2:6d:4d:94:a0:e9:c4:5d:e7:1c:0c:f0:6c:e9: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:A1:64:93:0B:F9:03:E6:B7:39:5B:F4:8E:56:36:D5:B9:A1:85 X509v3 Authority Key Identifier: keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ff:c9:48:46:c2:95:44:8e:ce:79:45:5c:8a:fc:fa:b6:60: d3:12:9e:52:9e:14:57:8c:ed:c8:1d:e4:7a:18:b9:8d:54:e4: 57:fa:38:85:83:a8:23:a2:96:7b:e8:f1:7a:6f:43:c9:38:15: 15:c6:25:91:db:11:40:2e:c8:c5:65:d0:db:2d:db:bb:55:14: 82:70:ad:30:79:34:2b:78:40:dd:a5:5e:ee:ee:ec:dd:a5:44: dd:90:de:0a:c5:72:2d:29:a1:d1:51:10:09:15:cd:bd:e5:f3: 1d:32:50:55:9a:82:3d:04:1e:5d:e7:d0:78:91:d0:6e:29:3b: fd:54:b3:39:d5:9e:09:00:97:eb:2e:ce:7f:33:41:74:88:54: ba:10:32:ac:57:e9:65:21:96:57:5f:a0:19:ac:22:3e:53:09: 81:b2:34:04:df:2b:80:42:1a:58:08:07:18:e6:c6:60:34:34: 80:ba:7f:30:00:d9:23:11:57:c1:46:7a:7c:9a:bb:fa:32:f7: 13:e6:b0:3e:05:ef:b7:c3:e0:c8:47:6c:ff:a4:83:14:a5:6a: 95:b6:be:f3:4b:1e:af:ae:48:8f:4e:42:1c:0f:ff:4f:1b:29: ff:1e:51:8f:62:e5:1e:4c:a4:a7:5d:92:2a:bc:b8:ae:90:47: 25:17:f6:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKDUzN0IxQkExQzAxQjQ4NjM0NzM4QUExMTU5QUUyQjk1 NTkwREREOTEwHhcNMjYxMDAzMDUwODE2WhcNMjYxMDEwMDUwODE2WjAYMRYwFAYD VQQDEw02YWMwOGRjMC03ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70cOfoMF9zoSdxBs1srTUqOwK4h40hKnFre/A07bx1DNZEfPrNVdXJCnOuYC fOc57/UgEmMwnyYDnbGtZY90mA1aeYcfK/giuM8I+wX6SrfDcESez1ofNRLDNRgx kSyG8+FlBww8Bk5WzYRiLVRXjW16ALeZ1R1q7VEJAjeGsies9ftFdFt2SxrSgpOz avEv71gBq+D17K1CFYsOevvEnBb0Xse7KqDeZZBtv1Tql7sjcwel/omp+DqDHynM 3/Cdy0b/scuhoUszuIMTm06eSRvuRYqUAMi6DFwQ/XoJeN4S1UiPXuMxykbA2L0F cAl+8m1NlKDpxF3nHAzwbOnrmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFj7oWST C/kD5rc5W/SOVjbVuaGFMB8GA1UdIwQYMBaAFFN7G6HAG0hjRziqEVmuK5VZDd2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9EMEU5QjFFRTYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNHTkhPS29SV2E0cmxWa04z WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Uzc2JvY0FiU0dOSE9Lb1JXYTRybFZrTjNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9EMEU5QjFFRTYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNH TkhPS29SV2E0cmxWa04zWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFP/JSEbClUSOznlFXIr8+rZg0xKeUp4UV4ztyB3kehi5jVTkV/o4hYOoI6KW e+jxem9DyTgVFcYlkdsRQC7IxWXQ2y3bu1UUgnCtMHk0K3hA3aVe7u7s3aVE3ZDe CsVyLSmh0VEQCRXNveXzHTJQVZqCPQQeXefQeJHQbik7/VSzOdWeCQCX6y7OfzNB dIhUuhAyrFfpZSGWV1+gGawiPlMJgbI0BN8rgEIaWAgHGObGYDQ0gLp/MADZIxFX wUZ6fJq7+jL3E+awPgXvt8PgyEds/6SDFKVqlba+80ser65Ij05CHA//Txsp/x5R j2LlHkykp12SKry4rpBHJRf2oA== -----END CERTIFICATE-----Generated at Sun Oct 4 06:51:00 2026 by rpki-client