$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: eriw6GuNiT2zlMqNPDTCiwp4FJmXMv836wyrb4gyenI= Subject key identifier: 85:62:B6:52:F0:F0:D0:51:6D:2E:70:DC:7E:40:35:E1:18:CD:E2:9B Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0236 Signing time: Wed 07 Oct 2026 03:02:50 +0000 Manifest this update: Wed 07 Oct 2026 03:02:49 +0000 Manifest next update: Wed 14 Oct 2026 03:02:49 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: pCUPy9AHTWAXeJsNDzD8Mcf9epEamSHwSDq8EdOfhzY=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: S+Y8oP//RYaIR2kO19UxtIdNUz76sF0XE/tof0f/xOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Oct 7 03:02:49 2026 GMT Not After : Oct 14 03:02:49 2026 GMT Subject: CN=6ac5b65a-f639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:30:da:91:40:28:2b:b5:3b:d1:bf:b6:ba: d3:cb:fe:fc:ee:5b:84:3e:31:c9:ea:eb:92:f1:1f: 8a:a4:2f:25:63:68:03:1c:32:e6:00:dc:a9:28:49: ef:23:15:27:5a:3e:15:d4:73:5e:b6:7c:47:80:f8: d9:f2:a7:31:f1:e7:e6:47:c6:f0:a7:68:97:05:f0: 23:cc:82:30:cb:77:ca:c7:d5:c8:f7:1c:e4:15:29: 86:29:01:86:98:b5:ed:16:20:15:73:f6:22:61:bb: 1b:4a:c6:0f:f7:5b:84:2d:35:6e:48:95:95:1e:dc: 49:1e:62:49:76:67:3f:8e:2f:1a:07:be:c4:51:9a: 97:96:ee:ea:d9:31:dd:75:ed:ab:69:14:cc:1b:5b: bf:3e:93:ea:0c:7c:e5:ff:c7:03:d4:5e:7c:1d:64: f1:18:ca:c3:c6:5d:e4:81:0d:6a:0d:2a:2a:f8:b4: dc:d3:8a:1e:4a:54:09:bc:2a:d6:3b:e6:ba:97:c5: 60:ce:87:3c:c0:7d:3a:b5:d8:91:b2:f4:be:a6:b2: cb:de:55:3e:18:c9:63:78:ac:c5:50:43:a1:b9:4b: 17:b0:48:95:09:92:8f:e9:81:85:2c:45:53:af:37: 7b:5c:85:19:d1:48:33:06:3c:a8:4c:85:11:dc:71: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:B6:52:F0:F0:D0:51:6D:2E:70:DC:7E:40:35:E1:18:CD:E2:9B X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d0:b9:c7:69:72:f5:63:08:d7:7e:1e:bf:41:a3:94:a6:f4: 5f:a7:a2:4b:f8:3f:23:11:85:46:5c:7d:03:3b:69:48:06:c8: 34:ea:cf:89:41:d8:05:7e:6b:ec:a4:ac:18:0a:f9:45:e6:a0: 62:a1:e6:f3:c8:c0:f7:7d:98:49:33:b0:4f:27:2e:9c:13:f6: f7:b4:ca:ba:79:b1:ff:ad:7b:55:c3:70:58:6b:9c:a1:2b:a3: b5:4d:8b:d7:1c:9d:71:37:a5:73:a7:78:36:8e:f4:65:20:55: 29:ab:82:40:dc:ea:7a:51:fb:f6:97:68:67:ad:c1:26:0c:59: 37:04:fe:78:18:e6:e4:3e:04:fc:0b:8e:63:5b:b9:79:d9:9b: 15:cc:e6:01:3e:bc:4f:c4:60:e7:ef:2c:6d:73:33:26:eb:a2: ae:8e:59:47:18:79:09:4a:49:01:ad:d2:88:ac:d4:29:0a:c2: 89:d1:ef:af:bf:6b:96:a6:a6:cd:33:6e:83:33:14:da:9a:07: 49:dc:bf:d4:88:e3:f5:0d:90:4b:38:f3:c7:e5:d4:7b:40:f2: 19:f2:68:d4:d1:5e:a5:06:31:ff:0e:3c:87:43:74:3e:70:b9: 66:77:bc:c8:c3:0d:e6:7f:9e:a7:dd:14:63:30:48:ad:4b:35: e2:e7:6b:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYxMDA3MDMwMjQ5WhcNMjYxMDE0MDMwMjQ5WjAYMRYwFAYD VQQDEw02YWM1YjY1YS1mNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIUw2pFAKCu1O9G/trrTy/787luEPjHJ6uuS8R+KpC8lY2gDHDLmANypKEnv IxUnWj4V1HNetnxHgPjZ8qcx8efmR8bwp2iXBfAjzIIwy3fKx9XI9xzkFSmGKQGG mLXtFiAVc/YiYbsbSsYP91uELTVuSJWVHtxJHmJJdmc/ji8aB77EUZqXlu7q2THd de2raRTMG1u/PpPqDHzl/8cD1F58HWTxGMrDxl3kgQ1qDSoq+LTc04oeSlQJvCrW O+a6l8Vgzoc8wH06tdiRsvS+prLL3lU+GMljeKzFUEOhuUsXsEiVCZKP6YGFLEVT rzd7XIUZ0UgzBjyoTIUR3HFxZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVitlLw 8NBRbS5w3H5ANeEYzeKbMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdC5x2ly9WMI134ev0GjlKb0X6eiS/g/IxGFRlx9AztpSAbINOrPiUHYBX5r 7KSsGAr5ReagYqHm88jA932YSTOwTycunBP297TKunmx/617VcNwWGucoSujtU2L 1xydcTelc6d4No70ZSBVKauCQNzqelH79pdoZ63BJgxZNwT+eBjm5D4E/AuOY1u5 edmbFczmAT68T8Rg5+8sbXMzJuuiro5ZRxh5CUpJAa3SiKzUKQrCidHvr79rlqam zTNugzMU2poHSdy/1Ijj9Q2QSzjzx+XUe0DyGfJo1NFepQYx/w48h0N0PnC5Zne8 yMMN5n+ep90UYzBIrUs14udrBg== -----END CERTIFICATE-----Generated at Thu Oct 8 01:11:09 2026 by rpki-client