$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json) Hash identifier: bgthGa6760WkTgx6VlMxlu4+8rhTw6ddIER8+vkmKsk= Subject key identifier: EE:45:41:23:79:3C:03:FB:B3:41:1B:EE:31:AC:01:AC:CC:1C:67:A5 Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft Manifest number: 67 Signing time: Wed 19 Aug 2026 08:44:22 +0000 Manifest this update: Wed 19 Aug 2026 08:44:22 +0000 Manifest next update: Wed 26 Aug 2026 08:44:22 +0000 Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: H2EQRITevZsGXnp7O4eHs4J7x8i9rN1fCIx0cQf2R/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Validity Not Before: Aug 19 08:44:22 2026 GMT Not After : Aug 26 08:44:22 2026 GMT Subject: CN=6a856ce6-de51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:b2:c1:36:be:c0:76:b2:ff:1e:1d:2d:94: 6b:4e:17:9b:a1:a0:54:bb:ae:7b:ad:01:0b:55:37: 13:2d:39:6d:4e:64:73:7d:0c:3c:27:3a:ab:2e:ca: 74:6b:3a:11:92:85:7a:38:d8:0a:fe:93:c7:70:c0: ae:53:d3:14:32:bd:23:a5:8b:63:c8:5e:27:a6:9c: f5:20:88:e1:d4:aa:97:fb:13:63:77:84:86:6a:a9: 1d:7c:63:cc:c9:e9:e6:dd:3b:eb:62:86:c0:14:16: 6f:f0:65:ed:bc:f7:08:d3:22:3b:fa:0b:03:55:ed: 2b:58:6c:c4:0c:b4:5a:bf:6c:3f:1e:0f:3b:0a:35: 07:da:03:cb:47:e5:03:0e:70:9a:25:50:3a:49:2c: 2f:54:10:5b:18:15:11:79:a6:d0:82:2b:c3:c5:a6: bf:5e:c9:9c:e6:5a:d4:43:00:33:3e:cf:a8:f2:d5: f7:bb:6c:f3:57:cb:7b:38:62:77:22:b5:6a:05:62: 71:30:e3:e4:52:df:63:65:6d:a7:e0:d5:be:aa:b7: 15:b1:eb:c2:7d:df:17:5f:0a:d1:f5:fd:c0:5b:ef: b7:dc:83:24:f3:e6:e5:5b:7d:19:97:86:2d:ff:42: fa:3e:8e:35:c4:33:dc:b4:e3:2b:1b:a6:3f:58:3d: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:45:41:23:79:3C:03:FB:B3:41:1B:EE:31:AC:01:AC:CC:1C:67:A5 X509v3 Authority Key Identifier: keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:89:12:a6:0c:a4:f4:86:9e:cb:e2:79:b0:5e:6d:17:63:71: 2b:ca:c0:f7:69:5f:d3:ab:70:95:ec:4f:86:82:89:00:62:33: 7b:1c:c2:da:d3:05:e9:f4:87:84:bd:20:3d:1a:d7:cf:76:b1: 66:c1:7d:ce:84:64:f2:bc:9e:50:8a:9e:0d:9c:35:d8:a4:ea: 93:c7:67:0c:9f:74:3f:95:f7:7a:ba:1b:dd:97:44:e5:fa:3c: d2:b4:9f:22:f4:4a:29:ba:4c:1b:41:19:c2:1a:58:8c:7b:c2: 78:0a:d0:ef:c4:52:ec:9c:c0:fd:5a:c7:cf:be:e7:44:cc:46: ac:14:da:d6:a1:6b:4b:bf:12:3b:3a:95:23:ea:1f:07:da:bf: 61:b3:d7:63:39:7e:ce:d8:c0:89:21:61:19:94:c5:77:43:89: 00:0e:55:6d:4d:ad:cc:b0:74:e5:19:a5:54:2a:bc:52:93:3e: 68:98:a6:41:cf:03:ef:36:45:e6:ca:af:d2:7f:ec:96:15:67: 5b:5e:61:7f:08:be:0d:7d:4b:0a:49:f4:43:84:03:f8:5a:a6: 77:c9:0c:ae:ee:fb:12:59:a8:0c:14:65:2c:26:02:0f:f5:f5: d0:3a:71:45:47:5b:05:ce:c1:f4:ae:42:fa:fc:0a:4f:40:8f: 76:07:3e:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoREQwQUQyREU0QTc0NEQxQTMzQjExQkI2QUJEN0U2RUFD RUZEQzA4NTAeFw0yNjA4MTkwODQ0MjJaFw0yNjA4MjYwODQ0MjJaMBgxFjAUBgNV BAMTDTZhODU2Y2U2LWRlNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHPrLBNr7AdrL/Hh0tlGtOF5uhoFS7rnutAQtVNxMtOW1OZHN9DDwnOqsuynRr OhGShXo42Ar+k8dwwK5T0xQyvSOli2PIXiemnPUgiOHUqpf7E2N3hIZqqR18Y8zJ 6ebdO+tihsAUFm/wZe289wjTIjv6CwNV7StYbMQMtFq/bD8eDzsKNQfaA8tH5QMO cJolUDpJLC9UEFsYFRF5ptCCK8PFpr9eyZzmWtRDADM+z6jy1fe7bPNXy3s4Ynci tWoFYnEw4+RS32Nlbafg1b6qtxWx68J93xdfCtH1/cBb77fcgyTz5uVbfRmXhi3/ Qvo+jjXEM9y04ysbpj9YPVQ7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7kVBI3k8 A/uzQRvuMawBrMwcZ6UwHwYDVR0jBBgwFoAU3QrS3kp0TRozsRu2q9fm6s79wIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzY1MEQwMEY2MDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1FyUzNrcDBUUm96c1J1MnE5Zm02czc5d0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzY1MEQwMEY2MDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJv enNSdTJxOWZtNnM3OXdJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCriRKmDKT0hp7L4nmwXm0XY3ErysD3aV/Tq3CV7E+GgokAYjN7HMLa0wXp9IeE vSA9GtfPdrFmwX3OhGTyvJ5Qip4NnDXYpOqTx2cMn3Q/lfd6uhvdl0Tl+jzStJ8i 9EopukwbQRnCGliMe8J4CtDvxFLsnMD9WsfPvudEzEasFNrWoWtLvxI7OpUj6h8H 2r9hs9djOX7O2MCJIWEZlMV3Q4kADlVtTa3MsHTlGaVUKrxSkz5omKZBzwPvNkXm yq/Sf+yWFWdbXmF/CL4NfUsKSfRDhAP4WqZ3yQyu7vsSWagMFGUsJgIP9fXQOnFF R1sFzsH0rkL6/ApPQI92Bz4m -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:55 2026 by rpki-client