$ rpki-client -vvvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: xBxVs0/2KZVFxfl85YdDijaFX6G6pJCAQ7iibTeDgEs= Subject key identifier: F0:93:03:48:04:26:16:CE:D8:D6:A5:EC:B3:B3:4F:22:64:6C:F2:49 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0FE2 Signing time: Mon 12 Oct 2026 17:33:20 +0000 Manifest this update: Mon 12 Oct 2026 17:33:20 +0000 Manifest next update: Mon 19 Oct 2026 17:33:20 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: YEoTnCulxVpiJ+6vEaIp+TC82C4lxlJ9GcsLXZDRbJc=) 2: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: zengMqzamhy3k/MINQnSuOnwDcuJ1EU7xFTtREN2cGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4089 (0xff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Oct 12 17:33:20 2026 GMT Not After : Oct 19 17:33:20 2026 GMT Subject: CN=6acd19e0-60e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:90:7c:2a:a8:1f:94:be:38:c6:e8:db:07: 36:c3:a9:2c:bd:b5:83:12:01:84:ea:23:83:c8:25: 05:18:7e:d4:f9:ea:c5:b1:9e:e8:33:ff:4c:fe:96: 8b:cd:80:6e:7d:22:65:a4:37:f4:c2:90:17:10:8a: 92:9d:22:69:bb:88:64:47:0f:dc:9d:9e:b3:6f:5b: ba:5d:b5:9c:20:d5:57:7b:0f:d3:46:77:2a:0a:1d: eb:49:9a:db:46:bb:f1:74:84:c4:c3:35:94:7f:98: ca:ca:09:ef:1b:92:e4:ee:d6:48:4a:f8:90:f9:19: 56:06:43:77:07:a4:e7:18:a3:91:be:d8:04:73:59: eb:c4:a7:21:08:b4:e9:5e:56:37:c1:c1:72:a0:f8: 55:d8:8e:c1:14:b4:3b:d5:25:d4:70:5d:b9:05:cd: d0:35:39:76:6c:e4:5e:67:53:98:cc:a7:b4:b0:64: 63:cb:49:49:6a:6b:47:54:bd:24:9c:61:bf:b4:cf: c5:f2:56:7f:ce:ed:06:f1:8b:91:bc:1c:5b:97:03: a6:25:8f:c9:03:28:f6:c6:4c:da:e2:64:2f:cb:a6: 12:0b:4c:5d:35:b0:f4:0e:d9:7f:be:d3:e6:33:6e: 84:28:6a:7f:f9:36:8a:22:b2:4d:1d:2f:5b:61:45: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:93:03:48:04:26:16:CE:D8:D6:A5:EC:B3:B3:4F:22:64:6C:F2:49 X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:09:2b:9f:f3:14:6b:52:e6:49:ab:17:7a:6a:50:54:6a:27: 8f:9c:fc:f4:52:32:23:45:82:67:ea:7e:75:11:e7:8e:aa:21: fb:48:cb:e5:76:e9:de:b3:62:12:91:0a:09:65:ce:b5:3c:92: 95:cf:98:e2:6f:1d:99:2d:68:67:9a:50:b7:87:8c:ed:8b:62: 65:1b:18:d7:39:0f:9a:95:b8:ea:25:1a:da:c2:1c:cc:17:a9: c7:19:10:f4:80:84:2f:1d:eb:06:44:8d:6a:ae:95:f1:5c:13: 11:69:01:c2:ef:38:93:c7:d6:a2:65:4a:2f:ea:56:5d:05:f3: 21:34:8e:f1:d5:ba:ff:88:71:84:2e:a7:7a:e3:78:91:e0:c1: ca:93:df:8d:27:c7:62:b3:02:69:cc:7b:ff:a9:09:85:db:78: e3:90:b9:b2:1d:68:e2:ed:7c:cf:dd:20:94:ea:a3:3a:54:9d: bb:33:f9:63:f6:ca:be:2f:b2:ab:4c:7d:36:2c:ab:d5:78:61: e1:7b:7c:03:8c:52:9f:d3:74:ea:44:ec:cc:f5:21:1b:60:0c: 1e:7d:3d:c7:d1:7c:c2:0c:c3:31:35:6d:36:8d:91:57:d0:7b: 4f:61:5f:2f:4d:fa:b6:35:cd:5a:07:5a:47:ea:34:a9:87:be: 91:c6:7a:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjYxMDEyMTczMzIwWhcNMjYxMDE5MTczMzIwWjAYMRYwFAYD VQQDEw02YWNkMTllMC02MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntKQfCqoH5S+OMbo2wc2w6ksvbWDEgGE6iODyCUFGH7U+erFsZ7oM/9M/paL zYBufSJlpDf0wpAXEIqSnSJpu4hkRw/cnZ6zb1u6XbWcINVXew/TRncqCh3rSZrb RrvxdITEwzWUf5jKygnvG5Lk7tZISviQ+RlWBkN3B6TnGKORvtgEc1nrxKchCLTp XlY3wcFyoPhV2I7BFLQ71SXUcF25Bc3QNTl2bOReZ1OYzKe0sGRjy0lJamtHVL0k nGG/tM/F8lZ/zu0G8YuRvBxblwOmJY/JAyj2xkza4mQvy6YSC0xdNbD0Dtl/vtPm M26EKGp/+TaKIrJNHS9bYUUXUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCTA0gE JhbO2Nal7LOzTyJkbPJJMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQwkrn/MUa1LmSasXempQVGonj5z89FIyI0WCZ+p+dRHnjqoh+0jL5Xbp3rNi EpEKCWXOtTySlc+Y4m8dmS1oZ5pQt4eM7YtiZRsY1zkPmpW46iUa2sIczBepxxkQ 9ICELx3rBkSNaq6V8VwTEWkBwu84k8fWomVKL+pWXQXzITSO8dW6/4hxhC6neuN4 keDBypPfjSfHYrMCacx7/6kJhdt445C5sh1o4u18z90glOqjOlSduzP5Y/bKvi+y q0x9Niyr1Xhh4Xt8A4xSn9N06kTszPUhG2AMHn09x9F8wgzDMTVtNo2RV9B7T2Ff L036tjXNWgdaR+o0qYe+kcZ61Q== -----END CERTIFICATE-----Generated at Tue Oct 13 05:43:55 2026 by rpki-client