$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: mAHppbpPt0WZjfn3nXTa+Gq0OlKz0BFPGWKOiJjejMg= Subject key identifier: 49:72:97:ED:E4:B2:3B:B3:11:0E:98:BB:7F:28:31:36:4E:77:71:15 Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1C3F Signing time: Tue 06 Oct 2026 16:14:14 +0000 Manifest this update: Tue 06 Oct 2026 16:14:13 +0000 Manifest next update: Tue 13 Oct 2026 16:14:13 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: 3CuYCNKvkuTdUJo/80k6Uhy67JQlKdGXp2r8pqPrCZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7272 (0x1c68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: Oct 6 16:14:13 2026 GMT Not After : Oct 13 16:14:13 2026 GMT Subject: CN=6ac51e55-ddcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:ec:eb:95:7a:8f:a9:ed:e9:e1:7c:31:9f: 9d:4a:a2:58:32:36:8e:65:2b:ae:89:cb:55:3d:0f: e1:d6:eb:df:13:9c:d6:28:e8:6a:ea:ef:02:78:64: 55:91:27:59:1d:5a:23:0c:05:dc:2d:86:1e:e9:48: d0:38:37:1a:6d:42:33:7e:68:49:82:0a:69:61:37: 66:38:2f:32:81:20:4d:e6:6b:14:a3:49:10:50:be: bf:e9:ed:37:cf:37:39:47:4e:a0:9a:3d:64:1f:86: 31:f3:0d:10:ed:d2:13:94:39:54:17:99:01:06:4c: f7:bd:5a:93:c4:e3:2b:ed:62:7f:12:c9:33:b3:36: 72:d7:c5:e3:c6:4e:ce:ea:91:16:13:be:90:2e:f3: 55:5e:e8:22:d6:e5:72:82:f5:f4:16:e4:7f:f3:a7: 2b:1e:fb:dc:60:da:14:d2:e3:22:ac:9c:19:00:e7: 3d:57:df:46:7d:5f:ff:7b:84:02:b5:21:d4:55:34: ca:6c:04:46:e1:b8:4b:d2:1c:da:19:70:b4:7c:2f: 8f:13:dc:4f:5c:ad:21:bd:2d:3b:88:ca:26:7c:b4: 59:f1:07:0c:f4:b4:3b:6b:e3:43:f2:bf:a6:be:f6: 25:8a:aa:d3:7b:74:82:8f:b9:29:bc:2f:b8:ab:9e: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:72:97:ED:E4:B2:3B:B3:11:0E:98:BB:7F:28:31:36:4E:77:71:15 X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b6:09:cd:45:dd:4c:19:34:0b:2c:49:9c:ca:6e:e8:4d:aa: 12:50:73:37:ff:69:be:20:bc:bb:71:e1:94:2e:41:fd:de:38: c7:af:3e:4b:86:9b:3a:fc:ac:f2:c0:ba:1a:db:b3:1f:83:28: 1a:f1:95:05:71:12:6b:6b:2d:ff:14:51:c9:44:d8:8d:9a:4b: ec:5b:93:13:df:ed:f8:00:cd:c9:38:f9:9b:35:e3:17:25:3d: e2:4a:c4:5f:7c:d8:bd:eb:97:33:5a:c6:3c:57:ac:55:88:52: 47:8d:45:0c:26:70:86:75:db:76:b7:f0:d2:c8:56:b8:2f:a3: 78:05:d2:94:8b:dc:33:88:e4:f0:43:e5:7b:1e:bc:d0:a8:23: a9:bb:50:90:73:38:77:82:8e:19:7f:8b:ce:a1:1c:d2:23:a1: e6:dc:9d:dd:27:d0:a3:29:37:c2:b5:15:44:47:87:bd:06:59: f3:f5:35:36:56:7f:b7:ad:7e:0c:d2:39:73:57:91:f0:de:a4: b3:18:13:d3:ce:da:00:c9:f0:15:61:09:76:e7:d6:1f:fc:5e: e5:af:31:36:c1:2e:d9:75:0f:dd:80:bd:45:2c:d3:7b:20:26: 34:12:b8:de:0c:df:65:8a:c3:10:d8:ae:c2:f7:0f:3f:75:09: 56:0f:0d:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjYxMDA2MTYxNDEzWhcNMjYxMDEzMTYxNDEzWjAYMRYwFAYD VQQDEw02YWM1MWU1NS1kZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9js65V6j6nt6eF8MZ+dSqJYMjaOZSuuictVPQ/h1uvfE5zWKOhq6u8CeGRV kSdZHVojDAXcLYYe6UjQODcabUIzfmhJggppYTdmOC8ygSBN5msUo0kQUL6/6e03 zzc5R06gmj1kH4Yx8w0Q7dITlDlUF5kBBkz3vVqTxOMr7WJ/EskzszZy18Xjxk7O 6pEWE76QLvNVXugi1uVygvX0FuR/86crHvvcYNoU0uMirJwZAOc9V99GfV//e4QC tSHUVTTKbARG4bhL0hzaGXC0fC+PE9xPXK0hvS07iMomfLRZ8QcM9LQ7a+ND8r+m vvYliqrTe3SCj7kpvC+4q55HYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElyl+3k sjuzEQ6Yu38oMTZOd3EVMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxLYJzUXdTBk0CyxJnMpu6E2qElBzN/9pviC8u3HhlC5B/d44x68+S4abOvys 8sC6GtuzH4MoGvGVBXESa2st/xRRyUTYjZpL7FuTE9/t+ADNyTj5mzXjFyU94krE X3zYveuXM1rGPFesVYhSR41FDCZwhnXbdrfw0shWuC+jeAXSlIvcM4jk8EPlex68 0KgjqbtQkHM4d4KOGX+LzqEc0iOh5tyd3SfQoyk3wrUVREeHvQZZ8/U1NlZ/t61+ DNI5c1eR8N6ksxgT087aAMnwFWEJdufWH/xe5a8xNsEu2XUP3YC9RSzTeyAmNBK4 3gzfZYrDENiuwvcPP3UJVg8NRw== -----END CERTIFICATE-----Generated at Wed Oct 7 07:41:02 2026 by rpki-client