$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: J9WXMeGpl3Pgst7CsyfVY4yy62lYGLxY7nZHvILTAcU= Subject key identifier: A8:DF:6F:A5:B3:1C:66:47:E7:40:CA:3B:DE:63:54:30:13:D6:0C:28 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0273 Signing time: Tue 27 Oct 2026 02:17:25 +0000 Manifest this update: Tue 27 Oct 2026 02:17:24 +0000 Manifest next update: Tue 03 Nov 2026 02:17:24 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: 71semln5Jv+a4kmgCBCbpjwsVL3ddpFnPLC7K3q9hLY=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Oct 27 02:17:24 2026 GMT Not After : Nov 3 02:17:24 2026 GMT Subject: CN=6ae009b5-5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:6e:61:ef:2f:7e:84:74:06:80:e4:99:7e: 79:ff:3c:84:19:52:59:f1:99:dd:5f:d2:8a:9d:15: fa:85:e9:5c:75:40:09:48:b2:7a:7e:9e:70:b0:e1: 44:4b:81:29:34:33:9a:05:37:ce:10:ec:27:d2:7f: 29:7f:9d:aa:96:1b:f1:c7:0d:a3:d9:51:10:cc:66: 30:c0:f9:ea:8f:48:c5:5c:c8:42:aa:4e:7e:af:c8: f0:7d:73:41:5e:2e:d8:63:01:e0:4a:a9:ae:2d:90: 96:cf:34:12:7f:0a:5b:68:36:85:05:9e:29:86:5b: 98:cd:31:7b:7e:44:3c:24:09:f1:11:2e:90:18:ff: 59:5c:17:2d:0f:90:8b:07:62:b8:02:e0:3c:d3:e4: b1:74:9a:0e:48:eb:b6:fd:a0:d2:58:06:16:7f:57: 8a:55:4b:9c:12:9c:df:51:e6:2a:82:9a:1b:fc:e5: 23:a5:66:40:0d:e0:5e:e7:05:62:bf:19:0f:33:0e: 46:9c:cb:4c:31:e5:12:b8:92:45:c0:3b:65:ab:7b: f4:16:f7:db:a2:a3:b1:3a:e6:78:a8:4e:80:b6:64: 15:18:e0:6f:2f:5c:7a:7d:a1:0e:54:83:3a:fd:11: 03:7e:85:22:95:29:94:50:e1:d0:d4:b6:53:c6:b2: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:6F:A5:B3:1C:66:47:E7:40:CA:3B:DE:63:54:30:13:D6:0C:28 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a7:e3:60:3d:30:5d:71:b1:46:ae:c6:4c:80:bd:2e:68:7a: 4b:d1:69:87:0f:89:f8:ef:ca:22:19:26:53:c8:70:ff:5c:8d: a0:a5:36:46:a3:38:d2:f3:eb:a9:14:d2:53:3b:e0:48:68:91: fc:56:05:e6:14:16:d0:d0:a1:0b:e6:3f:b9:65:e2:1c:22:c9: 51:ce:6b:54:41:da:c6:84:5a:1d:4c:ba:ac:79:1f:b7:82:1a: 68:74:ec:93:05:3e:22:ab:fb:1c:b9:90:bc:4f:d7:70:59:67: 53:93:0a:25:27:8a:f6:78:a7:f8:48:ee:38:24:0a:86:57:14: 6a:dc:6a:a0:42:11:bd:e2:1c:2f:a2:44:82:bf:44:11:e1:32: d2:4a:c7:cf:73:cd:1d:3a:2c:0a:bf:a1:7a:47:6f:9c:ae:1a: b3:d5:fc:e9:19:b7:35:5f:de:e6:c7:f4:e8:12:cd:86:32:40: c8:7a:d3:84:fc:c9:bf:f7:84:bb:ed:79:cb:13:4c:74:64:ff: 6e:6a:dd:34:d2:5a:00:77:bf:19:56:77:16:39:23:93:92:96: 15:25:dd:06:1d:63:dc:dc:da:da:08:45:8c:ec:e6:4a:a2:fd: ae:cb:98:cf:9a:8f:a1:a1:53:76:0f:98:eb:bc:2f:68:31:07: f9:27:34:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYxMDI3MDIxNzI0WhcNMjYxMTAzMDIxNzI0WjAYMRYwFAYD VQQDEw02YWUwMDliNS01YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZZuYe8vfoR0BoDkmX55/zyEGVJZ8ZndX9KKnRX6helcdUAJSLJ6fp5wsOFE S4EpNDOaBTfOEOwn0n8pf52qlhvxxw2j2VEQzGYwwPnqj0jFXMhCqk5+r8jwfXNB Xi7YYwHgSqmuLZCWzzQSfwpbaDaFBZ4phluYzTF7fkQ8JAnxES6QGP9ZXBctD5CL B2K4AuA80+SxdJoOSOu2/aDSWAYWf1eKVUucEpzfUeYqgpob/OUjpWZADeBe5wVi vxkPMw5GnMtMMeUSuJJFwDtlq3v0FvfboqOxOuZ4qE6AtmQVGOBvL1x6faEOVIM6 /REDfoUilSmUUOHQ1LZTxrJq9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjfb6Wz HGZH50DKO95jVDAT1gwoMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxafjYD0wXXGxRq7GTIC9Lmh6S9Fphw+J+O/KIhkmU8hw/1yNoKU2RqM40vPr qRTSUzvgSGiR/FYF5hQW0NChC+Y/uWXiHCLJUc5rVEHaxoRaHUy6rHkft4IaaHTs kwU+Iqv7HLmQvE/XcFlnU5MKJSeK9nin+EjuOCQKhlcUatxqoEIRveIcL6JEgr9E EeEy0krHz3PNHTosCr+hekdvnK4as9X86Rm3NV/e5sf06BLNhjJAyHrThPzJv/eE u+15yxNMdGT/bmrdNNJaAHe/GVZ3Fjkjk5KWFSXdBh1j3Nza2ghFjOzmSqL9rsuY z5qPoaFTdg+Y67wvaDEH+Sc0OA== -----END CERTIFICATE-----Generated at Wed Oct 28 22:53:16 2026 by rpki-client