$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: l5Dk2S8LiXXC2io72lSUPbapM3EbW5b9hWH6rPW9rNE= Subject key identifier: 86:3C:0A:81:25:EC:49:97:C1:54:D5:F1:55:47:B2:BE:9B:A6:14:17 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 89 Signing time: Fri 23 Oct 2026 08:17:05 +0000 Manifest this update: Fri 23 Oct 2026 08:17:05 +0000 Manifest next update: Fri 30 Oct 2026 08:17:05 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: qitnDhVRhBB+oueG20NT8HvHBmkcxD2yGc9wQKsfZfY=) 2: 431B027EB7F311F1AEB843C36D11F970.roa (hash: 0hTMdW5wS3Vz6x9QNUuQtirwjm/NcLyUU1762lAE4ac=) 3: 24E2E6B8B80311F1980856933211F970.roa (hash: s2IG2HROrlnBpy6KVlCaHxXPWt4gxfRcFO0V6qc98D0=) 4: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Oct 23 08:17:05 2026 GMT Not After : Oct 30 08:17:05 2026 GMT Subject: CN=6adb1801-1e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c3:f8:61:23:78:45:7c:34:b9:74:ee:aa:d9: c0:83:5b:5b:09:2f:54:00:91:8d:e7:51:b3:48:d9: b8:d4:bb:e2:3c:2a:0b:49:f0:c4:f8:2e:9a:30:b2: 97:06:91:a9:05:2d:fa:5f:f3:a7:97:4e:93:9a:cf: f3:50:45:9b:97:da:12:ae:71:01:16:8d:f7:1a:cf: 1d:cd:74:11:cd:66:f2:13:6f:91:27:5d:89:1a:ee: d1:7f:fc:8f:7f:00:1a:03:b7:25:d7:5c:10:f1:59: 09:04:dc:f8:70:dc:12:b5:e4:85:b7:0c:d1:af:89: c6:b3:3d:60:20:d5:90:c4:a4:ed:16:d3:a7:79:ab: 99:14:4f:2f:13:ed:4e:59:ae:bd:f6:99:f4:15:54: 26:d2:af:32:f2:21:3e:27:4f:a5:8d:5c:69:13:4d: bf:65:5b:7a:b1:df:05:d8:7e:a5:bb:01:5d:e8:5f: f6:66:ba:8e:eb:2c:2c:c4:09:ec:1a:7c:bb:37:03: 3c:22:f3:9c:0f:41:92:99:19:3f:0d:c6:2b:8d:be: 71:08:87:46:a1:8e:9d:f8:01:25:f9:41:93:15:a4: 03:c0:c5:ab:ce:5f:d1:f7:48:df:9e:75:7a:1f:2a: c0:e3:8f:0e:1b:23:64:b2:55:6a:c4:ba:27:cb:07: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:0A:81:25:EC:49:97:C1:54:D5:F1:55:47:B2:BE:9B:A6:14:17 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:45:ca:c5:21:48:08:3c:69:d6:60:b6:e8:d9:0d:f6:94:19: 4e:52:7d:37:b5:95:a6:4b:05:2b:fd:db:4d:01:0c:a1:4e:15: b5:fd:35:36:d6:53:59:4e:ad:ee:8b:64:f5:6f:c1:d2:b1:bd: 99:3d:a0:79:56:ec:8d:76:32:79:71:72:99:3f:b0:45:f1:cc: 32:28:ab:c7:08:cd:bb:25:53:01:7d:7e:1e:3f:3c:c0:f0:d8: ad:75:f9:39:f5:ae:6f:e1:ee:0c:cf:ee:68:29:3e:e0:7d:9f: 17:ff:e9:c0:87:68:8b:a8:f8:dc:49:95:95:a8:ae:4a:21:7d: 11:aa:a7:87:c5:60:a8:cd:46:36:16:d0:e6:94:e7:be:9f:26: 4b:f8:4f:cf:8b:2f:17:b2:2d:fe:73:07:94:77:6a:d9:ae:a2: 60:96:5f:7d:57:0e:31:75:ce:8b:00:1e:22:93:d0:fe:1c:50: 3e:cc:d7:d8:e1:77:ab:ef:c2:8a:0f:9d:88:f8:68:09:4b:d9: 4e:bd:03:58:f0:ac:a1:6c:04:e7:9c:d1:84:5d:0a:d7:cb:76: b0:2f:f2:39:be:d1:f3:7e:5b:49:0f:e4:47:f0:b9:c2:15:53: cf:6b:36:bc:49:fd:86:91:64:d7:69:e6:9e:44:3b:21:5d:72: e3:de:2a:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzMTQxMTAvBgNVBAUTKERFMjY2RDZBRjBCOTNERTlDODY5MjczMjBBMkU5REJC QzlDRjlDQzIwHhcNMjYxMDIzMDgxNzA1WhcNMjYxMDMwMDgxNzA1WjAYMRYwFAYD VQQDEw02YWRiMTgwMS0xZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78P4YSN4RXw0uXTuqtnAg1tbCS9UAJGN51GzSNm41LviPCoLSfDE+C6aMLKX BpGpBS36X/Onl06Tms/zUEWbl9oSrnEBFo33Gs8dzXQRzWbyE2+RJ12JGu7Rf/yP fwAaA7cl11wQ8VkJBNz4cNwSteSFtwzRr4nGsz1gINWQxKTtFtOneauZFE8vE+1O Wa699pn0FVQm0q8y8iE+J0+ljVxpE02/ZVt6sd8F2H6luwFd6F/2ZrqO6ywsxAns Gny7NwM8IvOcD0GSmRk/DcYrjb5xCIdGoY6d+AEl+UGTFaQDwMWrzl/R90jfnnV6 HyrA448OGyNkslVqxLonyweShwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIY8CoEl 7EmXwVTV8VVHsr6bphQXMB8GA1UdIwQYMBaAFN4mbWrwuT3pyGknMgounbvJz5zC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDMxNC8zNjU5NzRDNjA5 N0ExMUYxODA0RjVFQTExMDNEOEM2Ny8zaVp0YXZDNVBlbklhU2N5Q2k2ZHU4blBu TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDMxNC8zNjU5NzRDNjA5N0ExMUYxODA0RjVFQTExMDNEOEM2Ny8zaVp0YXZDNVBl bklhU2N5Q2k2ZHU4blBuTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkXKxSFICDxp1mC26NkN9pQZTlJ9N7WVpksFK/3bTQEMoU4Vtf01NtZTWU6t 7otk9W/B0rG9mT2geVbsjXYyeXFymT+wRfHMMiirxwjNuyVTAX1+Hj88wPDYrXX5 OfWub+HuDM/uaCk+4H2fF//pwIdoi6j43EmVlaiuSiF9Eaqnh8VgqM1GNhbQ5pTn vp8mS/hPz4svF7It/nMHlHdq2a6iYJZffVcOMXXOiwAeIpPQ/hxQPszX2OF3q+/C ig+diPhoCUvZTr0DWPCsoWwE55zRhF0K18t2sC/yOb7R835bSQ/kR/C5whVTz2s2 vEn9hpFk12nmnkQ7IV1y494qnw== -----END CERTIFICATE-----Generated at Sat Oct 24 08:28:11 2026 by rpki-client