$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: MxOchjBLZsYeD44nGz0lCrO3e9Xfevo1pmhd6UCnPNw= Subject key identifier: 4E:5B:EF:79:9D:D5:FE:B8:12:79:5F:45:84:CF:91:95:AE:70:D7:66 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0DE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D90 Signing time: Tue 06 Oct 2026 18:12:17 +0000 Manifest this update: Tue 06 Oct 2026 18:12:16 +0000 Manifest next update: Tue 13 Oct 2026 18:12:16 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: lGGntqneQNoZjI9Cd9MKq3m6TblczN7XR8KVvEK7w0E=) 2: 72F244BEABA811F1826B2D015111F970.roa (hash: hsukBQ93b6WQF6W2mBCSw7TZemUo6Noun4GYm6N6B2A=) 3: 1801BD8CAB9411F1B59574584A11F970.roa (hash: 0hB7c5DdDlcRXfyZKhbTfTsymtv8P4mwAwktu4W3r0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Oct 6 18:12:16 2026 GMT Not After : Oct 13 18:12:16 2026 GMT Subject: CN=6ac53a00-0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:4e:3a:00:41:82:3a:4d:1a:86:b6:b3:6a: 34:11:da:fa:18:4a:24:e4:7b:6a:50:cf:20:e5:64: 62:0d:26:61:51:63:cd:8b:04:23:aa:56:d6:a4:19: 18:62:33:f2:87:3f:e1:c3:e7:46:0d:d7:e0:9c:53: 39:21:aa:3a:23:36:6e:26:6e:f6:98:05:a8:cb:af: 47:03:e4:21:c3:b4:35:23:0f:f3:1a:89:8d:57:67: be:ff:63:af:93:2f:2f:59:80:d6:f3:65:74:a7:38: c6:a7:3b:bc:3b:4d:85:31:07:99:7c:06:7b:41:3e: d8:fc:f3:e8:57:29:17:98:c2:b0:9e:73:72:49:8b: b2:57:0a:82:81:e7:ea:64:c4:3e:27:ce:f0:44:d2: fe:ca:61:01:88:e5:3b:47:23:1d:30:12:a3:ac:60: 06:12:a2:47:17:b0:b0:15:5a:77:d9:5c:49:d3:64: 54:1a:2d:2c:86:17:f5:36:fe:15:7d:34:98:66:d5: 9a:62:79:60:f8:42:42:24:46:a4:8b:ca:49:33:82: df:ff:3b:bb:eb:68:36:74:0a:de:d5:48:f9:60:66: 0c:55:ea:09:b0:c1:cd:26:72:72:27:80:c1:28:2b: 19:20:e7:84:ca:64:3f:f8:37:06:cc:66:9b:03:7f: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:EF:79:9D:D5:FE:B8:12:79:5F:45:84:CF:91:95:AE:70:D7:66 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a3:11:d0:8f:44:f7:e3:6b:74:bd:bf:8d:45:02:cb:68:80: a4:4f:1b:b3:43:1a:53:ec:d5:ef:38:38:85:e8:a7:69:6d:63: c7:e9:44:46:fb:4a:78:9c:d6:5f:6b:12:f2:ee:4f:63:eb:09: 83:04:bf:58:29:ca:dc:db:b8:35:b4:59:75:8c:eb:a0:10:17: c8:be:0a:80:26:71:05:4a:08:33:18:cb:bd:21:6a:c0:c4:8f: 88:87:dd:9e:70:f0:82:25:69:fb:d4:af:0d:ff:35:c8:55:5f: 27:0d:e5:23:3d:af:0b:a1:6d:2b:26:3c:0b:20:cd:62:20:5b: 2a:70:cb:35:f1:f1:5d:94:63:7d:24:ab:b1:21:e3:ac:a1:e3: fd:ff:94:44:b8:bb:93:ed:da:58:f9:fc:01:1b:16:45:a4:61: 0e:3d:ec:b0:d7:7c:e2:ae:d6:9d:22:bc:06:76:11:16:8e:9c: f2:f9:38:cf:90:06:61:03:e6:74:9b:9a:c9:dc:aa:b0:4f:48: 04:a1:8b:a2:c8:9d:e0:5b:b6:4c:5b:3b:16:ec:77:17:0f:c7: 51:cb:bc:5f:ea:21:0d:87:3d:e4:87:e6:2d:2b:26:a4:90:bd: dd:d5:48:05:62:b0:aa:ee:60:79:59:cb:a0:e4:91:3c:6b:6a: 36:b3:80:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYxMDA2MTgxMjE2WhcNMjYxMDEzMTgxMjE2WjAYMRYwFAYD VQQDEw02YWM1M2EwMC0wMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArABOOgBBgjpNGoa2s2o0Edr6GEok5HtqUM8g5WRiDSZhUWPNiwQjqlbWpBkY YjPyhz/hw+dGDdfgnFM5Iao6IzZuJm72mAWoy69HA+Qhw7Q1Iw/zGomNV2e+/2Ov ky8vWYDW82V0pzjGpzu8O02FMQeZfAZ7QT7Y/PPoVykXmMKwnnNySYuyVwqCgefq ZMQ+J87wRNL+ymEBiOU7RyMdMBKjrGAGEqJHF7CwFVp32VxJ02RUGi0shhf1Nv4V fTSYZtWaYnlg+EJCJEaki8pJM4Lf/zu762g2dAre1Uj5YGYMVeoJsMHNJnJyJ4DB KCsZIOeEymQ/+DcGzGabA3/OaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5b73md 1f64EnlfRYTPkZWucNdmMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfaMR0I9E9+NrdL2/jUUCy2iApE8bs0MaU+zV7zg4heinaW1jx+lERvtKeJzW X2sS8u5PY+sJgwS/WCnK3Nu4NbRZdYzroBAXyL4KgCZxBUoIMxjLvSFqwMSPiIfd nnDwgiVp+9SvDf81yFVfJw3lIz2vC6FtKyY8CyDNYiBbKnDLNfHxXZRjfSSrsSHj rKHj/f+URLi7k+3aWPn8ARsWRaRhDj3ssNd84q7WnSK8BnYRFo6c8vk4z5AGYQPm dJuaydyqsE9IBKGLosid4Fu2TFs7Fux3Fw/HUcu8X+ohDYc95IfmLSsmpJC93dVI BWKwqu5geVnLoOSRPGtqNrOA0w== -----END CERTIFICATE-----Generated at Thu Oct 8 05:24:00 2026 by rpki-client