$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: GzSWpthEwasJE7iMIXr+UzNnwP3bnIGLCG35g28acA4= Subject key identifier: 55:22:A3:A7:13:45:EF:8A:CD:E8:09:F8:42:FF:CC:C8:46:02:72:70 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 7A Signing time: Thu 03 Sep 2026 08:01:17 +0000 Manifest this update: Thu 03 Sep 2026 08:01:16 +0000 Manifest next update: Thu 10 Sep 2026 08:01:16 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: bX4jPJbyjOTRFR7JoSac7Hzfd0bnEDvLo3vtlJjc3Fw=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Sep 3 08:01:16 2026 GMT Not After : Sep 10 08:01:16 2026 GMT Subject: CN=6a99294c-6eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:2a:2f:19:ca:de:75:e1:0c:00:73:e4:8e: 2b:8e:72:96:31:78:97:5e:8a:3c:d3:3d:88:9d:6a: e9:8e:79:51:97:19:68:5a:57:d4:f5:0a:e6:03:cc: 4d:af:b9:3d:3b:5f:0f:49:75:ab:f1:b0:a0:7a:b6: e5:14:85:04:23:fa:f5:e1:19:2a:7b:1e:5f:a7:f4: 1c:3b:30:39:8d:39:99:d5:91:77:2f:5c:06:53:45: 7a:0c:4a:6f:54:0c:c2:4f:20:85:00:51:6c:cf:7c: 81:cd:85:42:56:93:31:7b:94:c7:f3:2b:a6:14:ec: 4b:8a:36:09:2c:5f:e1:13:cd:82:28:b4:5e:16:99: 52:b8:3f:e6:3a:ab:13:7d:e9:cb:05:61:36:0d:73: 7f:24:c7:37:eb:46:8a:a3:52:6a:b2:2b:56:d3:15: e5:51:53:c7:33:95:79:ec:fd:9f:6d:23:c8:c1:bf: 73:2f:48:0e:5f:ee:ba:c7:6e:00:38:b8:58:26:7c: e0:df:51:5f:a5:b9:29:94:35:1a:0f:02:28:b2:1e: 65:67:d3:2f:32:a9:04:c2:e2:8f:57:24:da:58:0d: ea:4b:0c:b0:87:c7:17:41:de:fb:ec:48:a9:03:af: a8:a5:51:a0:c7:b3:8b:b5:fc:68:8f:45:f5:eb:75: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:22:A3:A7:13:45:EF:8A:CD:E8:09:F8:42:FF:CC:C8:46:02:72:70 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:9b:c9:0c:11:47:b0:1d:3b:b8:e3:9a:81:74:4e:64:4e:3f: 03:24:70:76:ac:fc:26:88:79:29:3d:fb:27:ac:8c:e0:c3:92: 90:4d:f2:a6:5e:0b:a5:9f:7c:05:a6:92:dc:3b:df:66:75:76: c2:df:54:b8:fb:ce:a2:83:ca:83:aa:18:7a:97:33:a9:cb:4e: 90:3a:2f:54:af:f7:ae:0c:0b:33:93:bb:4f:0e:d3:6f:f5:7e: f5:3b:34:84:76:2c:d5:1e:0e:0f:f0:2b:df:1a:4e:cc:7f:05: 97:43:ec:89:9e:52:22:a7:0e:0a:f8:4e:1a:16:65:56:db:98: 74:2d:f6:b6:be:59:7b:fc:31:18:92:6e:16:21:9a:86:df:c4: 55:9e:e0:fc:1d:37:0b:6e:17:f7:fb:bf:50:bf:9b:fc:ea:1b: c8:b3:41:86:c2:0e:a1:6d:ed:e4:6e:e3:9a:3f:53:68:24:6f: 16:2d:5d:4b:10:f1:c1:77:1d:6d:49:77:30:52:2d:44:e9:b1: 67:93:b6:d7:c1:ef:18:45:fc:f0:de:f0:77:82:08:57:df:a3: fa:6a:03:43:05:ef:19:d7:15:81:88:4a:b6:0a:d3:aa:2f:10: 42:bb:cc:88:e2:e1:ff:a4:1b:a2:45:0a:63:46:c9:2e:fb:1f: cb:a8:ea:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjA5MDMwODAxMTZaFw0yNjA5MTAwODAxMTZaMBgxFjAUBgNV BAMTDTZhOTkyOTRjLTZlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdcCovGcredeEMAHPkjiuOcpYxeJdeijzTPYidaumOeVGXGWhaV9T1CuYDzE2v uT07Xw9JdavxsKB6tuUUhQQj+vXhGSp7Hl+n9Bw7MDmNOZnVkXcvXAZTRXoMSm9U DMJPIIUAUWzPfIHNhUJWkzF7lMfzK6YU7EuKNgksX+ETzYIotF4WmVK4P+Y6qxN9 6csFYTYNc38kxzfrRoqjUmqyK1bTFeVRU8czlXns/Z9tI8jBv3MvSA5f7rrHbgA4 uFgmfODfUV+luSmUNRoPAiiyHmVn0y8yqQTC4o9XJNpYDepLDLCHxxdB3vvsSKkD r6ilUaDHs4u1/GiPRfXrddMdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVSKjpxNF 74rN6An4Qv/MyEYCcnAwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDSm8kMEUewHTu445qBdE5kTj8DJHB2rPwmiHkpPfsnrIzgw5KQTfKmXguln3wF ppLcO99mdXbC31S4+86ig8qDqhh6lzOpy06QOi9Ur/euDAszk7tPDtNv9X71OzSE dizVHg4P8CvfGk7MfwWXQ+yJnlIipw4K+E4aFmVW25h0Lfa2vll7/DEYkm4WIZqG 38RVnuD8HTcLbhf3+79Qv5v86hvIs0GGwg6hbe3kbuOaP1NoJG8WLV1LEPHBdx1t SXcwUi1E6bFnk7bXwe8YRfzw3vB3gghX36P6agNDBe8Z1xWBiEq2CtOqLxBCu8yI 4uH/pBuiRQpjRsku+x/LqOpP -----END CERTIFICATE-----Generated at Fri Sep 4 22:53:16 2026 by rpki-client