$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: UcXeUW4wbN44aJli92XVlDgv7qSAqXslhHkfdcmaYDI= Subject key identifier: F0:97:BC:D9:8E:44:8B:96:8A:17:39:20:7B:D5:F9:79:5E:92:11:DB Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 358A Signing time: Tue 06 Oct 2026 14:50:55 +0000 Manifest this update: Tue 06 Oct 2026 14:50:54 +0000 Manifest next update: Tue 13 Oct 2026 14:50:54 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: 78zxTamFpbJ4ESlyEq6ACwEI9MJf1ssRriQEk2CuXHA=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Oct 6 14:50:54 2026 GMT Not After : Oct 13 14:50:54 2026 GMT Subject: CN=6ac50acf-6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:f8:83:f9:9f:61:eb:08:62:b0:30:ce:28: 37:5d:a7:e8:4e:58:3a:36:ee:e8:9a:cc:24:b8:f2: ad:9b:34:5b:50:1b:61:b2:d9:11:15:f4:27:26:54: 0c:c4:7f:51:d7:b7:50:ae:4e:24:2e:43:7a:21:ba: e4:4b:c4:75:d5:d6:4e:7a:2e:c8:5f:c3:8a:e6:5a: 3e:8d:3c:a0:77:78:18:a8:76:02:01:c7:90:09:e6: 98:f5:59:f2:19:f5:eb:26:4a:7c:25:99:16:cf:51: 08:58:e2:75:40:c5:5f:a0:6d:85:75:98:f3:0c:be: 8d:87:3a:24:c8:0b:a1:42:2d:6e:bb:52:f6:93:88: 7a:58:2d:20:09:42:d7:6f:51:86:f5:4c:d6:ce:5b: 78:12:e5:3e:7a:b8:76:3b:0c:79:b1:78:7a:6e:7e: db:f4:c9:bf:e9:d2:b4:8e:0a:b5:2c:ad:da:d7:62: 6e:b1:a1:ee:18:2c:59:9b:85:fe:be:76:ae:5a:af: dc:8d:06:b5:7f:24:19:9d:2b:5c:e2:3c:e8:59:08: 37:a0:a2:ed:35:dc:be:89:33:b4:8c:b2:4c:a4:33: f2:0d:4f:f1:5f:74:10:87:74:03:b0:b8:89:1f:fc: 4c:d7:45:06:33:8e:d2:a9:4d:53:aa:2b:7a:2c:99: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:BC:D9:8E:44:8B:96:8A:17:39:20:7B:D5:F9:79:5E:92:11:DB X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:32:a4:da:11:40:ee:ac:0d:78:a4:92:8f:93:ab:4c:8c:c2: ff:16:b5:c2:32:c6:82:de:72:b6:80:91:78:3e:54:95:72:f5: cf:7c:ae:bd:da:b4:70:ee:06:82:23:02:c3:18:b3:66:f2:7c: ea:01:6f:58:71:7f:d3:50:99:00:35:78:7d:2e:66:ad:3f:c5: cf:8d:fb:a3:ee:4d:2b:5a:4f:bd:a1:60:96:c0:a5:9f:a4:48: 30:5b:45:87:6b:cf:07:d7:29:0e:12:e9:4e:19:35:f1:77:22: 07:13:1e:01:dc:0d:ff:71:38:f9:6f:33:40:90:9f:ec:eb:fa: b5:0f:86:20:52:21:d2:4f:3c:ec:a6:6f:27:bc:ab:57:21:df: bd:70:db:74:dc:36:38:37:c6:bc:28:bb:48:e6:46:89:2e:fd: 8d:e9:f8:f3:da:69:89:5a:71:5a:6e:b1:97:23:2b:d8:e0:4e: c8:6f:24:c7:47:41:9f:fc:9b:91:72:39:4f:61:a9:a1:ee:98: 2d:ac:55:7b:57:29:7a:f3:b8:39:1d:20:0f:12:e7:d0:de:3d: e4:dc:b2:d9:97:b9:f9:1e:6b:1c:a6:3c:e2:73:42:28:df:52: 48:62:b1:6a:1a:c3:72:5d:c3:70:99:e5:7f:a1:b9:06:7a:52: 16:89:b6:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYxMDA2MTQ1MDU0WhcNMjYxMDEzMTQ1MDU0WjAYMRYwFAYD VQQDEw02YWM1MGFjZi02Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdH4g/mfYesIYrAwzig3XafoTlg6Nu7omswkuPKtmzRbUBthstkRFfQnJlQM xH9R17dQrk4kLkN6IbrkS8R11dZOei7IX8OK5lo+jTygd3gYqHYCAceQCeaY9Vny GfXrJkp8JZkWz1EIWOJ1QMVfoG2FdZjzDL6NhzokyAuhQi1uu1L2k4h6WC0gCULX b1GG9UzWzlt4EuU+erh2Owx5sXh6bn7b9Mm/6dK0jgq1LK3a12JusaHuGCxZm4X+ vnauWq/cjQa1fyQZnStc4jzoWQg3oKLtNdy+iTO0jLJMpDPyDU/xX3QQh3QDsLiJ H/xM10UGM47SqU1Tqit6LJluDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCXvNmO RIuWihc5IHvV+XlekhHbMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFzKk2hFA7qwNeKSSj5OrTIzC/xa1wjLGgt5ytoCReD5UlXL1z3yuvdq0cO4G giMCwxizZvJ86gFvWHF/01CZADV4fS5mrT/Fz437o+5NK1pPvaFglsCln6RIMFtF h2vPB9cpDhLpThk18XciBxMeAdwN/3E4+W8zQJCf7Ov6tQ+GIFIh0k887KZvJ7yr VyHfvXDbdNw2ODfGvCi7SOZGiS79jen489ppiVpxWm6xlyMr2OBOyG8kx0dBn/yb kXI5T2Gpoe6YLaxVe1cpevO4OR0gDxLn0N495Nyy2Ze5+R5rHKY84nNCKN9SSGKx ahrDcl3DcJnlf6G5BnpSFom23A== -----END CERTIFICATE-----Generated at Thu Oct 8 09:19:21 2026 by rpki-client