$ rpki-client -vvvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: JGTZrwwPy29gLAL2oU35sABxhJ+kGC7W761hPnX6G9k= Subject key identifier: 2A:4B:66:88:60:82:A9:2A:D6:DC:E4:87:65:C0:DD:DE:58:ED:D6:A9 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 161B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1611 Signing time: Tue 06 Oct 2026 16:45:06 +0000 Manifest this update: Tue 06 Oct 2026 16:45:05 +0000 Manifest next update: Tue 13 Oct 2026 16:45:05 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: mzLL3ipuByT7HGN0RgMq/SoqpVvhPQMtWgw9KA6/uTU=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5659 (0x161b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Oct 6 16:45:05 2026 GMT Not After : Oct 13 16:45:05 2026 GMT Subject: CN=6ac52592-f0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:6e:c7:65:e2:57:84:d4:03:b9:06:9a:1b: 93:bc:59:7e:c7:b8:f0:ab:97:44:42:bb:09:98:fb: ea:f8:1e:7e:6a:62:86:3a:ab:51:76:04:f2:0e:ed: 0a:2a:00:8c:aa:dc:44:dc:f3:3c:cc:b7:73:87:69: 40:ac:88:3b:77:e1:81:ed:11:65:b2:8f:f8:88:14: bd:ed:2d:c8:12:d0:28:c8:5b:a0:aa:3d:a5:d3:e7: 86:ae:8f:ed:23:4f:7f:bd:9b:71:a4:08:58:71:09: ae:7d:41:e6:3e:2a:53:25:b6:9f:d6:4e:ae:b7:93: 80:97:b1:02:d6:15:64:dc:94:51:24:ea:69:f8:5e: 0b:4e:2c:62:78:b3:a3:af:f5:69:8a:af:56:d7:2a: 09:d8:f0:63:be:d4:19:85:26:f4:19:cb:b2:52:53: 3c:38:57:00:c7:21:1e:d6:68:91:5b:75:f4:57:81: 03:04:77:2d:da:15:8f:39:b0:37:de:ff:29:bf:71: 04:8b:38:fe:83:2e:97:6a:d2:63:cb:19:2f:6d:8c: 4f:1e:6a:4b:46:b1:a8:6d:23:1c:3a:f3:0a:05:a9: 03:d3:79:8c:06:69:3f:6e:ee:6d:e7:b7:08:aa:46: 26:41:13:e8:06:f7:48:62:7a:d1:f6:35:c9:6e:42: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:66:88:60:82:A9:2A:D6:DC:E4:87:65:C0:DD:DE:58:ED:D6:A9 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1c:14:de:de:49:27:59:18:86:5a:8e:3f:80:9c:f3:25:0f: 01:78:2c:cc:14:b4:0c:0d:d3:03:00:bc:a8:94:55:ca:58:3c: 22:d7:f2:8b:ca:02:e2:62:6d:82:e0:4e:c2:5b:bd:f5:6a:a2: 20:3e:64:d8:8e:d5:c8:32:7b:26:c0:08:4e:23:81:b8:99:af: b2:b6:3f:c7:67:fd:6c:c6:4c:c1:5e:6c:f7:ca:a3:87:70:3c: 35:0f:c3:e6:b0:94:e7:2b:ea:a7:36:bc:6e:9b:49:fb:91:f0: 7b:ee:d8:34:b7:6f:72:09:58:e7:ba:9f:a9:ac:75:5f:4f:1e: 7d:ca:28:17:cb:4c:7e:e1:2d:5b:7e:b7:b6:72:a6:a2:58:93: b7:d1:d7:d3:32:c4:24:d6:25:d6:37:c4:d7:27:5c:1f:1f:2e: 12:e8:0b:85:d7:84:88:6d:36:7b:4c:77:e4:84:0e:92:3a:96: 0b:00:c9:d4:85:34:20:bf:a8:8e:ee:5b:3f:18:ef:a9:9b:e6: e9:51:e6:1f:8b:34:8e:6a:15:1f:fa:d4:ca:46:9f:fa:57:ed: 72:59:f4:70:50:b2:7b:dc:bd:c6:2f:45:ca:0d:b1:6d:b2:f8: ef:07:96:7e:fc:03:0a:90:d4:1b:a4:da:62:d2:a9:0b:9a:ba: 9e:8a:53:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjYxMDA2MTY0NTA1WhcNMjYxMDEzMTY0NTA1WjAYMRYwFAYD VQQDEw02YWM1MjU5Mi1mMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApslux2XiV4TUA7kGmhuTvFl+x7jwq5dEQrsJmPvq+B5+amKGOqtRdgTyDu0K KgCMqtxE3PM8zLdzh2lArIg7d+GB7RFlso/4iBS97S3IEtAoyFugqj2l0+eGro/t I09/vZtxpAhYcQmufUHmPipTJbaf1k6ut5OAl7EC1hVk3JRRJOpp+F4LTixieLOj r/Vpiq9W1yoJ2PBjvtQZhSb0GcuyUlM8OFcAxyEe1miRW3X0V4EDBHct2hWPObA3 3v8pv3EEizj+gy6XatJjyxkvbYxPHmpLRrGobSMcOvMKBakD03mMBmk/bu5t57cI qkYmQRPoBvdIYnrR9jXJbkKLrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpLZohg gqkq1tzkh2XA3d5Y7dapMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRwU3t5JJ1kYhlqOP4Cc8yUPAXgszBS0DA3TAwC8qJRVylg8Itfyi8oC4mJt guBOwlu99WqiID5k2I7VyDJ7JsAITiOBuJmvsrY/x2f9bMZMwV5s98qjh3A8NQ/D 5rCU5yvqpza8bptJ+5Hwe+7YNLdvcglY57qfqax1X08efcooF8tMfuEtW363tnKm oliTt9HX0zLEJNYl1jfE1ydcHx8uEugLhdeEiG02e0x35IQOkjqWCwDJ1IU0IL+o ju5bPxjvqZvm6VHmH4s0jmoVH/rUykaf+lftcln0cFCye9y9xi9Fyg2xbbL47weW fvwDCpDUG6TaYtKpC5q6nopT6A== -----END CERTIFICATE-----Generated at Thu Oct 8 12:47:23 2026 by rpki-client