$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: 8NzzO0RrH2lLHYCMY75ee0LVRDIWc5KrLsO0pqT92BA= Subject key identifier: FC:12:41:8B:1F:68:32:51:1A:CC:70:AE:F0:9E:87:DD:32:A0:D7:0E Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 08C5 Signing time: Fri 02 Oct 2026 20:46:10 +0000 Manifest this update: Fri 02 Oct 2026 20:46:09 +0000 Manifest next update: Fri 09 Oct 2026 20:46:09 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: LpAS27m5SeLxc4L/5RWxgoY72TN10DzdQKIe0Jd+r9E=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Oct 2 20:46:09 2026 GMT Not After : Oct 9 20:46:09 2026 GMT Subject: CN=6ac01812-beee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:3b:fb:d0:f3:9c:fa:be:e7:dc:22:44:47: 57:8c:94:fb:aa:d4:22:c3:53:15:2d:5d:f0:42:b6: ea:b8:f4:3e:f9:4e:48:be:03:9a:b2:ac:a1:d1:d7: d6:79:ec:d5:95:f7:ca:41:61:d9:27:62:03:54:3c: 37:4c:3a:c0:a0:b0:e9:e1:5c:d9:59:52:d2:7c:39: d8:b7:df:88:20:c1:e2:62:50:a2:ae:1c:40:53:a8: 55:62:00:0a:fd:a0:c1:4d:4a:72:a0:39:7d:ea:49: 35:66:2a:e9:34:85:a8:7f:a6:5b:40:2d:07:53:2d: 84:cb:f0:f4:43:69:d5:81:95:2f:88:4e:65:6e:74: 39:33:f3:12:79:b4:27:85:a9:85:4a:92:f8:6a:6d: 79:a0:9d:be:3b:0c:29:11:f4:1b:6d:77:85:d6:44: bf:84:df:44:03:f2:42:c4:4d:52:38:0a:ef:c3:de: 08:e4:f4:de:6f:ee:11:f0:f5:af:13:12:38:fc:ad: 0c:ca:78:fa:c3:fd:a8:cf:d7:2e:c0:60:14:d8:4c: ca:bd:c0:6a:6b:12:dc:ee:b8:d1:c2:33:14:6c:04: 4d:57:b1:12:6a:3a:03:49:41:87:61:ca:f1:bb:54: 4e:a0:bb:49:a8:d7:d4:f4:38:03:ac:bc:54:06:b2: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:41:8B:1F:68:32:51:1A:CC:70:AE:F0:9E:87:DD:32:A0:D7:0E X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:df:01:0a:bf:c4:75:b7:80:28:9b:df:ae:94:71:a1:8d:9d: f7:2b:dd:f0:f8:9a:d2:ee:fb:7d:c3:41:f4:a8:4d:3b:8c:c8: 91:55:ee:e7:4f:b9:a3:83:4f:ca:d3:b8:d0:19:b9:dc:7e:71: 0f:3d:2b:1d:5e:0a:81:45:0d:df:61:22:c7:f1:9f:4b:72:cd: 84:6a:13:24:c0:9d:fe:b7:f2:63:2a:5e:ff:72:5f:0c:50:96: 62:2a:22:49:15:20:a9:4b:af:f7:4b:d3:22:68:d8:c4:55:97: b8:a8:31:d3:27:1c:21:df:e5:1f:82:19:d1:e3:d6:ae:52:53: d8:42:cb:27:ed:52:b5:f6:4c:72:09:55:63:e4:9b:86:1e:f3: b1:21:f9:6d:c4:be:ba:e7:9f:5b:44:e8:0c:2b:86:54:d5:32: bd:f1:91:7d:6c:69:25:96:82:d1:2c:c7:ac:a5:e1:1a:df:4d: 2b:4b:02:16:d9:6f:e5:13:2b:5f:0d:46:1d:0a:7b:35:17:35: 89:5b:c2:c1:b5:43:cf:ab:57:9f:23:a4:a1:59:69:20:28:42: ea:34:e3:cb:c8:9d:e9:42:ca:04:6a:90:08:07:a4:59:25:5f: e6:b3:1e:a4:97:ed:57:c1:4c:3b:a6:ca:36:ed:5b:9b:e1:48: 48:48:25:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjYxMDAyMjA0NjA5WhcNMjYxMDA5MjA0NjA5WjAYMRYwFAYD VQQDEw02YWMwMTgxMi1iZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyE7+9DznPq+59wiREdXjJT7qtQiw1MVLV3wQrbquPQ++U5IvgOasqyh0dfW eezVlffKQWHZJ2IDVDw3TDrAoLDp4VzZWVLSfDnYt9+IIMHiYlCirhxAU6hVYgAK /aDBTUpyoDl96kk1ZirpNIWof6ZbQC0HUy2Ey/D0Q2nVgZUviE5lbnQ5M/MSebQn hamFSpL4am15oJ2+OwwpEfQbbXeF1kS/hN9EA/JCxE1SOArvw94I5PTeb+4R8PWv ExI4/K0Mynj6w/2oz9cuwGAU2EzKvcBqaxLc7rjRwjMUbARNV7ESajoDSUGHYcrx u1ROoLtJqNfU9DgDrLxUBrKubQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwSQYsf aDJRGsxwrvCeh90yoNcOMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvd8BCr/EdbeAKJvfrpRxoY2d9yvd8Pia0u77fcNB9KhNO4zIkVXu50+5o4NP ytO40Bm53H5xDz0rHV4KgUUN32Eix/GfS3LNhGoTJMCd/rfyYype/3JfDFCWYioi SRUgqUuv90vTImjYxFWXuKgx0yccId/lH4IZ0ePWrlJT2ELLJ+1StfZMcglVY+Sb hh7zsSH5bcS+uuefW0ToDCuGVNUyvfGRfWxpJZaC0SzHrKXhGt9NK0sCFtlv5RMr Xw1GHQp7NRc1iVvCwbVDz6tXnyOkoVlpIChC6jTjy8id6ULKBGqQCAekWSVf5rMe pJftV8FMO6bKNu1bm+FISEglCQ== -----END CERTIFICATE-----Generated at Sun Oct 4 08:16:43 2026 by rpki-client