$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: NtRC5fKMfFaFjMsh2yZcX1Tc4oGSataHEqnikXRaeKI= Subject key identifier: 36:52:1E:3B:69:C1:CC:D0:0B:2F:02:98:2A:A8:45:54:5E:01:CA:D3 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 08C1 Signing time: Tue 20 Oct 2026 20:45:06 +0000 Manifest this update: Tue 20 Oct 2026 20:45:05 +0000 Manifest next update: Tue 27 Oct 2026 20:45:05 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: B/WEMbScRN48LhBxnlPzul8+Mg1RXwwHjnFZ3zCaLo0=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=) 4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Oct 20 20:45:05 2026 GMT Not After : Oct 27 20:45:05 2026 GMT Subject: CN=6ad7d2d2-3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:9f:25:cf:b1:01:b2:b4:5a:45:94:d1:56: 51:45:0e:f7:63:89:b3:99:95:f9:29:f9:46:b3:bf: 89:41:98:59:28:51:d5:04:e0:f7:8d:ac:c4:c2:0a: cb:1a:70:4a:58:bd:a4:81:c8:38:9a:a6:dc:d1:2f: 13:a7:fd:56:2d:f0:f2:f4:07:9e:74:ec:f7:5d:dd: e3:18:b7:ac:a7:18:1a:a2:d2:b5:df:a5:2c:6f:cd: 3a:78:e7:88:ad:73:5e:73:57:37:43:fa:e4:84:37: e7:27:94:f8:e2:5e:aa:25:40:24:90:21:2c:e6:2b: f0:fa:66:35:51:f7:d2:06:71:05:52:30:ac:37:86: dd:4c:fc:30:57:a0:1c:c3:59:6c:9d:54:99:67:c9: 83:31:97:9d:03:aa:4e:6e:6f:d0:74:92:49:53:5a: c6:79:57:76:80:d8:8c:1d:9e:30:ed:59:06:16:cf: af:28:6d:1b:c0:af:9e:67:0e:46:69:70:58:be:88: f9:f5:a2:5f:c2:e8:42:12:4b:37:8a:45:a9:58:5a: c6:2c:f4:2d:ba:22:67:f2:69:bc:b5:52:6d:d5:5b: bd:37:1c:5f:ff:94:06:8d:9d:48:82:17:c5:43:26: 1b:24:77:2b:9e:53:53:d0:40:2e:ac:c2:b8:18:3a: d3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:1E:3B:69:C1:CC:D0:0B:2F:02:98:2A:A8:45:54:5E:01:CA:D3 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9d:3a:5f:1b:6f:f8:57:ed:03:7b:c0:e6:28:22:0c:af:da: 85:68:f6:ad:93:61:ce:f1:eb:f8:f7:4b:ae:a2:ee:95:aa:89: e8:1e:b3:c0:db:82:87:ec:55:06:e0:00:82:40:5d:e0:d6:47: e5:42:94:64:9b:71:d9:0e:b2:5b:c3:bd:d5:38:01:71:92:e9: 58:50:6b:f6:3c:2e:0f:36:d5:51:32:40:f5:ee:96:1d:d6:2e: 59:47:26:7b:75:fd:43:c3:a9:d5:0c:ff:fe:dc:01:d9:3c:a2: b7:2b:ca:17:cc:d4:bb:2f:fe:7e:3f:7a:b2:83:77:e9:6f:93: ea:4c:5a:5b:8b:d7:b4:b9:53:21:59:4f:4e:6f:bc:a8:59:5f: a8:6f:29:5a:a6:d3:b7:e8:de:bf:96:61:e6:76:6d:94:1d:c3: 4d:97:f1:dd:5b:ea:e4:bb:34:d5:ba:8e:78:19:48:63:15:bf: aa:7a:44:18:4b:eb:7d:3b:bf:f5:d1:4c:27:e1:b1:f3:e0:db: 3e:03:bf:31:7b:b7:32:f8:5e:1f:ec:22:5b:59:9a:71:53:e9: c6:d6:32:c5:ef:70:27:e1:14:e5:49:f0:29:ab:a2:3b:5f:ea: c4:49:9a:ad:35:71:05:c8:0e:d7:85:cc:d6:13:b9:6b:cc:d0: d2:7c:07:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYxMDIwMjA0NTA1WhcNMjYxMDI3MjA0NTA1WjAYMRYwFAYD VQQDEw02YWQ3ZDJkMi0zMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6ufJc+xAbK0WkWU0VZRRQ73Y4mzmZX5KflGs7+JQZhZKFHVBOD3jazEwgrL GnBKWL2kgcg4mqbc0S8Tp/1WLfDy9AeedOz3Xd3jGLespxgaotK136Usb806eOeI rXNec1c3Q/rkhDfnJ5T44l6qJUAkkCEs5ivw+mY1UffSBnEFUjCsN4bdTPwwV6Ac w1lsnVSZZ8mDMZedA6pObm/QdJJJU1rGeVd2gNiMHZ4w7VkGFs+vKG0bwK+eZw5G aXBYvoj59aJfwuhCEks3ikWpWFrGLPQtuiJn8mm8tVJt1Vu9Nxxf/5QGjZ1IghfF QyYbJHcrnlNT0EAurMK4GDrTHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZSHjtp wczQCy8CmCqoRVReAcrTMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnp06Xxtv+FftA3vA5igiDK/ahWj2rZNhzvHr+PdLrqLulaqJ6B6zwNuCh+xV BuAAgkBd4NZH5UKUZJtx2Q6yW8O91TgBcZLpWFBr9jwuDzbVUTJA9e6WHdYuWUcm e3X9Q8Op1Qz//twB2TyityvKF8zUuy/+fj96soN36W+T6kxaW4vXtLlTIVlPTm+8 qFlfqG8pWqbTt+jev5Zh5nZtlB3DTZfx3Vvq5Ls01bqOeBlIYxW/qnpEGEvrfTu/ 9dFMJ+Gx8+DbPgO/MXu3MvheH+wiW1macVPpxtYyxe9wJ+EU5UnwKauiO1/qxEma rTVxBcgO14XM1hO5a8zQ0nwHpQ== -----END CERTIFICATE-----Generated at Wed Oct 21 04:57:48 2026 by rpki-client