$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: RYiAbh54sIdiIPJEaxW3PmRk4gP9gLLB6LxOaOVgU94= Subject key identifier: FA:49:0D:42:3D:C7:28:25:EC:03:D9:DF:96:75:76:64:1D:14:71:8E Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0D66 Signing time: Sun 04 Oct 2026 18:06:04 +0000 Manifest this update: Sun 04 Oct 2026 18:06:03 +0000 Manifest next update: Sun 11 Oct 2026 18:06:03 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: A/mHXen7jGObjbaxCBMzBaHCbMBDzz2ywLKRexWIqZI=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Oct 4 18:06:03 2026 GMT Not After : Oct 11 18:06:03 2026 GMT Subject: CN=6ac2958c-392a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:a1:1d:6b:fd:cb:8e:24:fe:0d:b4:56:a1: 56:fb:3c:c4:a1:73:a2:52:a9:df:00:7a:e7:e5:ec: 86:40:3d:41:a7:62:d5:1e:9d:53:23:e4:69:23:92: ac:bb:a3:d8:ec:55:aa:5e:00:1a:b3:c4:3b:88:c8: 2a:27:a2:c3:d3:3d:30:fa:ef:42:eb:4b:be:83:e8: 61:d7:29:d0:d2:c9:56:f4:fb:76:2a:d4:88:52:91: cc:ac:1c:46:00:d2:48:26:59:b2:c7:83:84:dc:48: 5a:41:46:d8:41:16:a9:45:51:89:32:1a:0b:9e:70: 45:02:61:24:59:da:af:3f:74:95:f5:89:b5:f7:d9: 2a:ce:ce:55:83:ea:61:25:d0:e2:c6:43:e2:26:da: e9:ec:db:75:5a:00:fa:9c:7a:4c:16:52:23:8d:2e: 09:25:09:c3:ca:26:15:96:bd:0a:79:1e:b1:d1:55: bb:32:23:44:5e:f3:b2:ab:2b:33:d2:08:01:0e:31: fe:8e:8b:57:a2:59:09:93:f9:17:44:20:8c:3b:fd: c0:05:f9:22:76:9c:b3:4a:ff:71:44:ab:50:55:00: 76:40:58:74:5b:75:f0:d4:26:cc:22:ca:65:2e:d2: 9f:21:6c:42:51:dc:49:3e:0e:63:cd:52:d4:a3:24: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:0D:42:3D:C7:28:25:EC:03:D9:DF:96:75:76:64:1D:14:71:8E X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1d:f6:c3:fc:58:c4:3c:68:77:68:6a:c2:23:76:54:11:a3: f2:52:95:41:65:63:53:cd:e2:28:da:51:9f:3a:d0:ef:14:4e: ce:ea:3f:f9:d5:05:f8:39:fd:81:0d:32:af:c8:e5:d1:09:c7: 46:b3:b6:40:cd:99:48:72:71:08:1e:99:d7:a3:25:18:2d:fe: a2:12:29:af:85:cd:d5:8c:30:4e:ff:88:bb:8d:6b:96:d3:4c: 2e:b7:20:82:d8:25:7b:3a:f5:63:91:ca:2b:44:8e:f0:5b:29: 02:6c:4b:26:05:59:71:6b:1e:f8:3d:4e:39:0d:5f:ef:ba:dd: 53:8c:82:a6:f6:67:f1:50:32:26:a1:9c:71:29:7e:e6:27:83: 64:50:6c:ca:b5:fe:b9:bf:4f:cc:de:eb:53:c8:22:e4:ec:7d: c6:7c:09:54:46:e4:b4:7f:ba:f9:e5:64:82:b1:ec:7d:47:19: c0:5b:08:23:ba:31:83:ab:46:fa:c8:b1:36:b0:ec:6e:d3:28: a9:5e:7d:08:7b:ca:6d:71:75:a8:03:a5:6c:d3:cc:be:5d:bf: 60:60:74:a9:72:d2:e9:df:5c:b1:e3:54:16:2e:9a:04:74:f1: 93:c7:1d:ae:12:49:76:28:21:e6:57:34:94:62:e6:cc:f3:8c: 48:15:99:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjYxMDA0MTgwNjAzWhcNMjYxMDExMTgwNjAzWjAYMRYwFAYD VQQDEw02YWMyOTU4Yy0zOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1yhHWv9y44k/g20VqFW+zzEoXOiUqnfAHrn5eyGQD1Bp2LVHp1TI+RpI5Ks u6PY7FWqXgAas8Q7iMgqJ6LD0z0w+u9C60u+g+hh1ynQ0slW9Pt2KtSIUpHMrBxG ANJIJlmyx4OE3EhaQUbYQRapRVGJMhoLnnBFAmEkWdqvP3SV9Ym199kqzs5Vg+ph JdDixkPiJtrp7Nt1WgD6nHpMFlIjjS4JJQnDyiYVlr0KeR6x0VW7MiNEXvOyqysz 0ggBDjH+jotXolkJk/kXRCCMO/3ABfkidpyzSv9xRKtQVQB2QFh0W3Xw1CbMIspl LtKfIWxCUdxJPg5jzVLUoySwWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpJDUI9 xygl7APZ35Z1dmQdFHGOMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJx32w/xYxDxod2hqwiN2VBGj8lKVQWVjU83iKNpRnzrQ7xROzuo/+dUF+Dn9 gQ0yr8jl0QnHRrO2QM2ZSHJxCB6Z16MlGC3+ohIpr4XN1YwwTv+Iu41rltNMLrcg gtglezr1Y5HKK0SO8FspAmxLJgVZcWse+D1OOQ1f77rdU4yCpvZn8VAyJqGccSl+ 5ieDZFBsyrX+ub9PzN7rU8gi5Ox9xnwJVEbktH+6+eVkgrHsfUcZwFsII7oxg6tG +sixNrDsbtMoqV59CHvKbXF1qAOlbNPMvl2/YGB0qXLS6d9cseNUFi6aBHTxk8cd rhJJdigh5lc0lGLmzPOMSBWZHw== -----END CERTIFICATE-----Generated at Tue Oct 6 01:28:33 2026 by rpki-client