$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json) Hash identifier: uFRwksN+kucYvpTPTyLHX6dqMH0qyLd7/LxfbheiOQI= Subject key identifier: B3:CA:EE:92:C6:77:B1:08:56:A4:90:EE:80:2B:C4:D4:1F:BD:F1:6E Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft Manifest number: 0112 Signing time: Mon 31 Aug 2026 06:29:36 +0000 Manifest this update: Mon 31 Aug 2026 06:29:35 +0000 Manifest next update: Mon 07 Sep 2026 06:29:35 +0000 Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: 8mTepNrWrIWBE+Ho+KF9y4jz/PdyuTNcqrL2WJnY0j4=) 2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 06:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Validity Not Before: Aug 31 06:29:35 2026 GMT Not After : Sep 7 06:29:35 2026 GMT Subject: CN=6a951f50-1090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:47:0b:9f:8a:24:d3:35:35:ef:18:49:89: d0:cd:b4:d9:7c:6d:a0:a6:ca:77:71:b7:0d:37:d0: 50:3a:2d:a0:81:5a:ac:dd:bb:ea:b3:5d:c6:b8:31: 38:9b:8b:24:4b:cd:0e:6e:57:44:f3:eb:de:c3:d2: 12:3c:a4:38:cf:36:2a:0b:1b:5b:f1:9f:37:1d:c3: 47:cf:3c:1b:d1:cc:b3:c5:9c:7b:8d:1f:eb:25:9f: 05:2c:e2:78:2f:c3:91:28:16:95:1c:f1:99:d5:1f: a2:a2:e5:6b:7a:99:45:2a:a8:b8:d9:c3:70:90:80: 26:44:27:3d:50:aa:c4:f8:b8:20:f9:45:19:61:2f: 33:25:20:9c:ee:a9:59:07:df:52:c5:f4:ee:20:6f: d2:ce:e1:45:5a:10:e7:d8:47:5d:1b:ed:5d:d5:25: 5b:45:92:fe:6d:80:90:cb:d2:e0:02:31:a2:01:bf: 6a:fa:3b:be:95:38:6d:db:75:0d:e4:6b:f4:5f:d6: 6c:a7:b0:ee:59:d7:73:75:f1:08:48:73:0f:0b:b2: 92:57:ea:93:40:5b:97:f3:3e:cd:8f:08:9a:29:e4: 2f:6c:bf:12:80:f5:aa:ee:45:88:72:6f:1d:e9:ae: 3a:a9:78:0a:2a:ba:ef:3f:ff:05:6f:ce:10:0a:bc: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CA:EE:92:C6:77:B1:08:56:A4:90:EE:80:2B:C4:D4:1F:BD:F1:6E X509v3 Authority Key Identifier: keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:70:bd:64:5c:fa:55:7d:4f:a1:4b:e8:80:60:ca:f6:54:a0: fb:1e:d4:3d:cc:b2:6e:02:b0:03:79:b6:c8:d7:ec:65:e6:5c: d9:f3:43:c9:5b:c2:18:88:fe:05:93:1d:d1:c9:83:de:c0:50: c8:1a:27:be:3f:39:db:34:17:ae:80:2e:71:3e:d5:26:9d:5e: 64:b2:e0:e9:68:5f:20:dc:e0:89:9b:bb:59:da:7a:7c:e3:d0: e2:45:e1:03:3f:08:80:40:95:d9:7c:01:bc:c8:e1:e5:d2:11: ef:d7:79:78:b4:a8:f1:54:08:ca:72:68:5f:3a:b6:af:9b:92: 78:84:75:7c:fa:41:e5:22:b6:01:f2:d7:79:91:ce:1c:84:37: c6:b7:74:d7:85:bc:d8:c5:91:96:1b:08:44:d5:66:20:b1:d8: e7:df:6d:98:2d:31:7d:0e:2c:c7:13:cc:10:5e:79:8f:36:c3: bc:24:b3:c8:ce:44:5d:47:fc:30:6a:d7:f1:74:16:c9:94:25: 22:59:f1:c5:56:c3:13:ab:e8:91:a5:fb:93:64:54:a1:10:cc: c0:8c:09:cc:8e:2b:02:6b:dd:c1:9e:22:b2:98:48:de:59:0f: 27:ce:ad:03:64:79:aa:8c:14:d7:67:57:3d:5e:16:98:39:b2: 7c:b1:24:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKERFQjRDMEI5MDdGQUNBMUM1RDM3NzZCRDQ5NDZGNEJB QThDQTZCMzAwHhcNMjYwODMxMDYyOTM1WhcNMjYwOTA3MDYyOTM1WjAYMRYwFAYD VQQDEw02YTk1MWY1MC0xMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs41HC5+KJNM1Ne8YSYnQzbTZfG2gpsp3cbcNN9BQOi2ggVqs3bvqs13GuDE4 m4skS80ObldE8+vew9ISPKQ4zzYqCxtb8Z83HcNHzzwb0cyzxZx7jR/rJZ8FLOJ4 L8ORKBaVHPGZ1R+iouVreplFKqi42cNwkIAmRCc9UKrE+Lgg+UUZYS8zJSCc7qlZ B99SxfTuIG/SzuFFWhDn2EddG+1d1SVbRZL+bYCQy9LgAjGiAb9q+ju+lTht23UN 5Gv0X9Zsp7DuWddzdfEISHMPC7KSV+qTQFuX8z7NjwiaKeQvbL8SgPWq7kWIcm8d 6a46qXgKKrrvP/8Fb84QCrwu2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPK7pLG d7EIVqSQ7oArxNQfvfFuMB8GA1UdIwQYMBaAFN60wLkH+socXTd2vUlG9Lqoymsw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CMTcwQzkxMjEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnloeGROM2E5U1ViMHVxakth ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNyVEF1UWY2eWh4ZE4zYTlTVWIwdXFqS2F6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CMTcwQzkxMjEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnlo eGROM2E5U1ViMHVxakthekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnC9ZFz6VX1PoUvogGDK9lSg+x7UPcyybgKwA3m2yNfsZeZc2fNDyVvCGIj+ BZMd0cmD3sBQyBonvj852zQXroAucT7VJp1eZLLg6WhfINzgiZu7Wdp6fOPQ4kXh Az8IgECV2XwBvMjh5dIR79d5eLSo8VQIynJoXzq2r5uSeIR1fPpB5SK2AfLXeZHO HIQ3xrd014W82MWRlhsIRNVmILHY599tmC0xfQ4sxxPMEF55jzbDvCSzyM5EXUf8 MGrX8XQWyZQlIlnxxVbDE6vokaX7k2RUoRDMwIwJzI4rAmvdwZ4isphI3lkPJ86t A2R5qowU12dXPV4WmDmyfLEkQw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:34:10 2026 by rpki-client