$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: HEVyWJ1HVYyJ83cOYnVRIzyj3LT0sdCOjlxA+gMwrj4= Subject key identifier: 4E:48:D1:95:5A:02:4B:93:77:76:4C:59:87:E1:6A:AC:9A:91:F4:EF Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 017A Signing time: Sun 25 Oct 2026 05:18:26 +0000 Manifest this update: Sun 25 Oct 2026 05:18:25 +0000 Manifest next update: Sun 01 Nov 2026 05:18:25 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: iLyl9ysQ13580i9qco+TnKfbiQnhM2ucJ/y9Y794ePo=) 2: 1E388DB49A2511F1832A4CB45711F970.roa (hash: TiT9lGln0Eh4KjjUpQfi3tArVwegKeJ1yIafSY4m8LM=) 3: E8E690809A2811F1AC58E4345911F970.roa (hash: m9m0P1oed7W/3ZAbI8jvAxoQb72mghkUJhemhrbvgNI=) 4: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Oct 25 05:18:25 2026 GMT Not After : Nov 1 05:18:25 2026 GMT Subject: CN=6add9122-a40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:e7:75:b8:0a:a6:e3:95:c3:d9:6f:ad:b9: c5:09:71:c3:91:d4:52:c0:07:03:71:72:93:28:3d: 19:c4:3e:b1:58:1c:69:0f:2b:a8:a1:01:e7:5c:ca: a0:6f:79:8d:be:92:4d:a5:dd:46:3b:9b:20:6c:b9: 31:73:85:62:4a:53:34:0f:29:43:6d:da:fe:6f:e7: c8:07:a5:01:c8:77:06:c0:5d:aa:43:80:af:b1:25: 14:98:5c:80:44:b3:a3:d3:e4:92:97:eb:56:f5:f5: 48:56:12:ab:22:98:fa:30:35:96:59:2a:79:f7:71: b5:39:ec:45:fe:67:1b:03:c5:15:ff:72:82:65:12: 39:c1:6d:fc:d4:1f:78:2c:e3:07:36:e7:de:d5:00: d7:96:48:79:e5:9f:a2:1a:51:0d:45:dc:75:56:bf: 20:db:f8:5b:4a:10:ee:33:85:1e:82:7a:09:18:f4: 6a:e2:a1:6d:92:2b:79:77:03:b9:d2:cb:45:95:75: ee:4c:9e:38:06:57:8c:c2:01:cc:21:b3:d2:60:bc: 1b:2f:6b:cf:4e:9c:b2:7f:47:4b:4b:e2:6b:d4:a8: e1:a8:84:f8:5c:94:fd:31:b4:40:17:61:ae:d2:f6: ea:b3:d7:b7:be:26:a0:0e:42:e0:62:d0:5a:a3:37: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:D1:95:5A:02:4B:93:77:76:4C:59:87:E1:6A:AC:9A:91:F4:EF X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:51:62:a1:1e:e6:a6:77:db:0d:fd:ef:22:0a:aa:ad:66:6d: 1b:8c:fc:34:8a:19:37:49:68:3b:fc:d4:4a:31:ec:ac:58:98: 53:a5:ec:28:6b:87:77:94:8b:7d:06:a4:9c:b6:4f:0f:bd:c4: d9:e4:ca:3c:93:b4:ac:d6:7a:5f:cf:bc:05:df:9a:ac:55:7e: 04:e7:db:aa:d4:06:04:80:9f:9f:a0:21:3d:c0:4b:7d:e6:4c: 54:aa:bf:34:7b:10:a9:fc:e4:12:22:47:3a:d2:05:22:60:d4: 88:ca:73:73:f6:84:cd:f8:91:5f:81:30:ed:ac:fa:2b:9e:56: a1:bc:b1:aa:d9:65:3e:fa:f9:6f:b5:13:81:42:f9:c4:62:9f: 1f:37:b7:67:f7:20:19:95:77:0a:cf:fd:24:94:18:3b:eb:a3: 30:be:55:a2:92:08:db:0f:af:b1:36:1a:cd:4e:6e:4c:8f:9b: 40:c6:6d:69:99:86:51:25:d8:37:7d:f9:66:77:de:73:29:2d: 96:2a:2d:b2:a6:ed:5d:2a:47:de:bc:67:eb:ac:99:e9:94:07: 31:8f:f6:71:07:c8:f3:ee:ca:79:b1:98:1e:f5:65:17:ef:81: 77:ed:95:b5:5b:4d:bb:4c:4b:75:b0:48:ef:ae:4c:0e:e8:ef: 6e:3c:27:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjYxMDI1MDUxODI1WhcNMjYxMTAxMDUxODI1WjAYMRYwFAYD VQQDEw02YWRkOTEyMi1hNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1XndbgKpuOVw9lvrbnFCXHDkdRSwAcDcXKTKD0ZxD6xWBxpDyuooQHnXMqg b3mNvpJNpd1GO5sgbLkxc4ViSlM0DylDbdr+b+fIB6UByHcGwF2qQ4CvsSUUmFyA RLOj0+SSl+tW9fVIVhKrIpj6MDWWWSp593G1OexF/mcbA8UV/3KCZRI5wW381B94 LOMHNufe1QDXlkh55Z+iGlENRdx1Vr8g2/hbShDuM4UegnoJGPRq4qFtkit5dwO5 0stFlXXuTJ44BleMwgHMIbPSYLwbL2vPTpyyf0dLS+Jr1KjhqIT4XJT9MbRAF2Gu 0vbqs9e3viagDkLgYtBaozd03QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5I0ZVa AkuTd3ZMWYfhaqyakfTvMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVFioR7mpnfbDf3vIgqqrWZtG4z8NIoZN0loO/zUSjHsrFiYU6XsKGuHd5SL fQaknLZPD73E2eTKPJO0rNZ6X8+8Bd+arFV+BOfbqtQGBICfn6AhPcBLfeZMVKq/ NHsQqfzkEiJHOtIFImDUiMpzc/aEzfiRX4Ew7az6K55WobyxqtllPvr5b7UTgUL5 xGKfHze3Z/cgGZV3Cs/9JJQYO+ujML5VopII2w+vsTYazU5uTI+bQMZtaZmGUSXY N335ZnfecyktliotsqbtXSpH3rxn66yZ6ZQHMY/2cQfI8+7KebGYHvVlF++Bd+2V tVtNu0xLdbBI765MDujvbjwnHw== -----END CERTIFICATE-----Generated at Sun Oct 25 14:29:59 2026 by rpki-client