$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: sD+YQFj4LrUMXBk+FAT7WV9xG5aHKyOFFRy6ehy9vJk= Subject key identifier: 36:CD:13:31:C6:3A:A7:D0:F0:D7:B0:75:25:4A:FE:4E:5E:37:C0:A9 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 025C Signing time: Fri 11 Sep 2026 02:21:28 +0000 Manifest this update: Fri 11 Sep 2026 02:21:28 +0000 Manifest next update: Fri 18 Sep 2026 02:21:28 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: xrnI4ZaYfudkN8UyM7MtORuX74dtM/b8/HuDltEJ/zA=) 2: 79FC546E326611F08478D72AC4F9AE02.roa (hash: mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=) 3: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Sep 11 02:21:28 2026 GMT Not After : Sep 18 02:21:28 2026 GMT Subject: CN=6aa365a8-799d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:b8:08:a1:18:63:83:3c:be:e2:2c:16:cb: e2:a2:23:78:7a:51:42:61:21:f0:dc:ad:41:2a:f9: 78:b3:2e:25:81:f6:74:61:e6:0b:61:4e:f9:58:61: 07:70:7b:15:65:80:64:2c:b3:61:26:07:25:50:4a: 22:d7:97:64:30:51:90:85:e2:0b:01:01:c7:4a:4c: 9a:3d:58:ef:c8:03:4a:4c:6a:63:15:9d:ee:a0:90: d6:51:a7:e4:26:98:6b:f9:73:3a:f4:f2:99:c8:45: 71:0a:c2:0d:32:c7:3b:f4:02:c9:2c:a4:57:5e:1a: a0:38:50:ec:86:05:29:e3:e2:6e:fc:bc:5c:cd:9f: 4d:74:51:7c:06:16:3e:28:17:3b:50:5d:22:28:fb: 4f:35:c5:be:24:5b:74:52:04:12:8a:ed:33:fc:96: 7a:7d:16:30:4b:4b:5e:aa:be:8c:8d:51:94:d1:90: 06:ef:53:01:df:fd:d3:07:c0:c4:7b:a0:f6:c7:77: 9a:c3:37:c7:fc:fc:ed:cc:44:f8:ee:19:2f:56:6a: 9e:3b:b5:aa:9f:e0:d4:7f:24:c5:6f:f7:4d:8b:72: 1b:09:53:d8:60:f5:0b:56:98:fb:d0:52:4f:df:31: a5:42:e4:92:41:1e:bd:3c:14:bc:96:80:46:cf:a9: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CD:13:31:C6:3A:A7:D0:F0:D7:B0:75:25:4A:FE:4E:5E:37:C0:A9 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a2:a8:94:ec:4e:9b:75:f7:5b:b4:d1:6f:c8:ad:93:03:d9: 50:96:7a:44:79:73:57:47:86:b4:d0:e8:04:80:73:3a:e4:ae: ea:e7:7f:3a:dc:ba:b9:af:66:3e:bf:d1:6f:70:17:16:27:03: b8:d0:f2:68:c3:07:6c:44:50:82:9d:9a:1d:41:9c:ed:13:20: 6a:3d:a4:8c:49:28:41:56:22:4a:22:fb:96:89:51:f8:43:68: 90:6b:70:3c:73:70:44:a4:23:20:10:e3:d0:9d:14:5f:04:ea: bc:99:69:41:c7:9c:23:22:41:67:19:a6:6f:ec:83:e1:80:a4: c8:37:81:48:c2:75:dd:c7:23:ff:6c:d8:fa:76:0a:b3:f2:f3: b2:84:8b:3f:16:4d:07:ac:f8:27:68:ad:33:79:0c:34:db:40: 40:6f:e9:76:fb:fb:c2:27:d4:38:57:f4:db:16:8d:9b:e7:3e: 09:ce:4d:b9:01:f8:f6:88:1f:37:d0:d2:1c:91:68:50:0c:9a: f5:05:70:8f:53:5a:30:6d:57:48:17:18:4d:e9:96:55:ef:15: 74:ed:f8:82:f6:be:39:46:dc:d4:6e:56:81:e1:74:19:3b:dc: 05:34:67:ea:32:0b:2c:cc:f6:a4:2b:70:27:f9:da:67:03:e3: 13:28:67:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYwOTExMDIyMTI4WhcNMjYwOTE4MDIyMTI4WjAYMRYwFAYD VQQDEw02YWEzNjVhOC03OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7C4CKEYY4M8vuIsFsvioiN4elFCYSHw3K1BKvl4sy4lgfZ0YeYLYU75WGEH cHsVZYBkLLNhJgclUEoi15dkMFGQheILAQHHSkyaPVjvyANKTGpjFZ3uoJDWUafk Jphr+XM69PKZyEVxCsINMsc79ALJLKRXXhqgOFDshgUp4+Ju/LxczZ9NdFF8BhY+ KBc7UF0iKPtPNcW+JFt0UgQSiu0z/JZ6fRYwS0teqr6MjVGU0ZAG71MB3/3TB8DE e6D2x3eawzfH/PztzET47hkvVmqeO7Wqn+DUfyTFb/dNi3IbCVPYYPULVpj70FJP 3zGlQuSSQR69PBS8loBGz6nTWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbNEzHG OqfQ8NewdSVK/k5eN8CpMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6KolOxOm3X3W7TRb8itkwPZUJZ6RHlzV0eGtNDoBIBzOuSu6ud/Oty6ua9m Pr/Rb3AXFicDuNDyaMMHbERQgp2aHUGc7RMgaj2kjEkoQVYiSiL7lolR+ENokGtw PHNwRKQjIBDj0J0UXwTqvJlpQcecIyJBZxmmb+yD4YCkyDeBSMJ13ccj/2zY+nYK s/LzsoSLPxZNB6z4J2itM3kMNNtAQG/pdvv7wifUOFf02xaNm+c+Cc5NuQH49ogf N9DSHJFoUAya9QVwj1NaMG1XSBcYTemWVe8VdO34gva+OUbc1G5WgeF0GTvcBTRn 6jILLMz2pCtwJ/naZwPjEyhngg== -----END CERTIFICATE-----Generated at Fri Sep 11 11:27:44 2026 by rpki-client