$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: Rn/jTb/PwhmyCkK/RNjnRRF8DHZzP88si81G3usYMqo= Subject key identifier: 90:A9:38:05:83:EF:ED:D3:E7:DE:A6:24:55:22:46:20:7C:F8:95:7A Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 93 Signing time: Wed 21 Oct 2026 08:04:14 +0000 Manifest this update: Wed 21 Oct 2026 08:04:14 +0000 Manifest next update: Wed 28 Oct 2026 08:04:14 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: +iVKWsumL2SOaNljSysag6wYgrDAtSoKFGBq/nnayDw=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) 3: 595243D0C5A511F1B972A1726711F970.roa (hash: 7iprnF8IY135rI3w3poOtG6hUUsQfRjd/b07esKfOMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 08:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Oct 21 08:04:14 2026 GMT Not After : Oct 28 08:04:14 2026 GMT Subject: CN=6ad871fe-b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:4c:54:ff:ea:99:3c:ed:e0:a2:7c:ae:d4: 77:dc:d8:cd:35:64:5d:1b:49:c2:9d:92:9b:78:f0: 04:90:2e:2e:85:2c:6e:7a:da:50:eb:a0:e6:02:15: e0:2b:f6:28:f3:87:d1:ec:ef:65:cd:89:aa:f4:44: f3:f0:57:d1:8a:ce:6c:42:34:d5:87:55:83:d3:54: 42:6e:43:c5:60:04:08:a4:4f:6e:77:ec:90:2b:5d: 24:a2:1b:18:dd:da:ce:ab:1c:e8:91:53:07:86:db: fd:f2:9b:72:cb:51:83:e0:3b:70:ee:53:66:9a:bf: 62:bc:da:3e:9c:3b:f4:d8:bf:b1:fc:e8:09:b8:9d: 58:d8:17:52:1c:7f:4b:cc:35:4f:d0:2a:34:bd:4f: f5:5e:05:f5:e4:d7:77:5a:76:e4:0b:4e:0a:71:cc: 84:8f:c3:f6:8e:60:82:72:fc:57:1a:46:69:9b:31: d2:1b:25:e2:6e:fd:b7:d1:25:ab:00:89:8a:e2:54: 66:dd:30:90:48:43:61:5f:3e:aa:fe:a0:95:09:82: 1d:27:79:c2:9f:9b:39:24:af:75:2f:6d:ac:2e:90: 9e:26:11:55:46:3a:1b:e6:18:76:30:51:13:51:c9: 82:e6:6b:a0:74:4a:76:26:b1:1b:f8:dd:43:b0:37: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:38:05:83:EF:ED:D3:E7:DE:A6:24:55:22:46:20:7C:F8:95:7A X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:86:cb:1b:d0:44:d0:05:a7:02:2c:1c:1c:77:81:38:ec:2b: 7d:33:cd:aa:aa:9a:ac:e1:90:be:94:76:20:b6:23:0f:22:79: 14:7f:cb:18:8f:1e:b2:7f:1e:52:e3:1b:96:8c:5e:ec:ec:16: 52:c8:0a:56:ab:fd:98:97:38:1b:15:60:e3:2d:bc:c5:7c:c5: 65:7b:ab:ba:15:7d:ae:72:5c:25:b5:7a:a0:29:32:7c:60:51: e4:61:e4:c7:cc:26:ca:99:36:99:18:56:f6:73:c8:ae:e5:0b: ed:6d:4d:db:22:ae:76:86:ac:a2:a3:79:6f:61:22:69:87:a3: fc:80:19:ee:d0:e9:16:4d:49:dd:1c:44:85:f0:a8:ef:73:20: 66:25:18:d9:2e:cf:a0:1a:30:d1:9d:41:86:ac:b5:20:2c:f9: f8:03:8c:85:ff:4e:dd:d9:c7:b2:3c:b3:81:ee:43:91:02:7a: 4a:6b:b6:73:ee:9e:e7:26:2f:d8:1f:19:41:cc:86:d5:7f:63: 61:1a:52:9d:57:9a:a8:ca:fb:d7:ee:8a:db:37:d2:9b:68:4b: cb:fe:bf:78:c3:4d:1f:75:49:e1:7b:bc:33:a5:29:7b:22:1d: 03:dc:00:29:13:e4:b5:e4:ec:0e:35:03:8d:b7:94:67:1d:4e: e8:1a:1c:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDRjUxMTAvBgNVBAUTKERGMEQ1MEM3RUUyQjExNzZENThEMThEODVEMjU5Mjkz NkFEN0IyNDYwHhcNMjYxMDIxMDgwNDE0WhcNMjYxMDI4MDgwNDE0WjAYMRYwFAYD VQQDEw02YWQ4NzFmZS1iNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+NMVP/qmTzt4KJ8rtR33NjNNWRdG0nCnZKbePAEkC4uhSxuetpQ66DmAhXg K/Yo84fR7O9lzYmq9ETz8FfRis5sQjTVh1WD01RCbkPFYAQIpE9ud+yQK10kohsY 3drOqxzokVMHhtv98ptyy1GD4Dtw7lNmmr9ivNo+nDv02L+x/OgJuJ1Y2BdSHH9L zDVP0Co0vU/1XgX15Nd3WnbkC04KccyEj8P2jmCCcvxXGkZpmzHSGyXibv230SWr AImK4lRm3TCQSENhXz6q/qCVCYIdJ3nCn5s5JK91L22sLpCeJhFVRjob5hh2MFET UcmC5mugdEp2JrEb+N1DsDfuDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCpOAWD 7+3T596mJFUiRiB8+JV6MB8GA1UdIwQYMBaAFN8NUMfuKxF21Y0Y2F0lkpNq17JG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENGNS83NUZFNkY0QUYx RTMxMUYwQkRFQzcyQjU0MTZGNTZCQy8zdzFReC00ckVYYlZqUmpZWFNXU2syclhz a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENGNS83NUZFNkY0QUYxRTMxMUYwQkRFQzcyQjU0MTZGNTZCQy8zdzFReC00ckVY YlZqUmpZWFNXU2syclhza1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG4bLG9BE0AWnAiwcHHeBOOwrfTPNqqqarOGQvpR2ILYjDyJ5FH/LGI8esn8e UuMbloxe7OwWUsgKVqv9mJc4GxVg4y28xXzFZXuruhV9rnJcJbV6oCkyfGBR5GHk x8wmypk2mRhW9nPIruUL7W1N2yKudoasoqN5b2EiaYej/IAZ7tDpFk1J3RxEhfCo 73MgZiUY2S7PoBow0Z1Bhqy1ICz5+AOMhf9O3dnHsjyzge5DkQJ6Smu2c+6e5yYv 2B8ZQcyG1X9jYRpSnVeaqMr71+6K2zfSm2hLy/6/eMNNH3VJ4Xu8M6UpeyIdA9wA KRPkteTsDjUDjbeUZx1O6BocTg== -----END CERTIFICATE-----Generated at Fri Oct 23 07:29:02 2026 by rpki-client