$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft File: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft (raw, json) Hash identifier: NLSYh8zKx26zcFCnTWrhashfu8EDMNo7Pa5GG5kI5nU= Subject key identifier: D7:67:F0:AD:5D:1A:3F:29:3E:23:28:D1:1E:64:98:4F:1F:4B:D9:EC Authority key identifier: DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57 Certificate issuer: /CN=A91731A3/serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft Manifest number: 2D Signing time: Tue 03 Nov 2026 09:49:59 +0000 Manifest this update: Tue 03 Nov 2026 09:49:59 +0000 Manifest next update: Tue 10 Nov 2026 09:49:59 +0000 Files and hashes: 1: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl (hash: +ZMkmnqUbLsdPn8Th1FGJYEUTSVqak+1IFlnFFrS8lE=) 2: FE48721A979211F1B1FF570F5011F970.roa (hash: FMkg1uv3vBHeUlhEXwmbBwkyuLXm5T/S60PVC3PzM9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731A3, serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57 Validity Not Before: Nov 3 09:49:59 2026 GMT Not After : Nov 10 09:49:59 2026 GMT Subject: CN=6ae9ae47-db02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:3f:73:11:0f:cf:7d:ac:7a:d9:72:fc:f5: f3:b5:64:26:35:cd:72:da:5f:b8:9a:ec:22:d4:a7: b7:6c:17:ff:3a:4f:19:2e:ab:0a:96:ab:d7:98:2e: 10:ef:6c:81:ce:bc:30:c1:f1:48:dc:6f:9d:b9:7c: bf:01:7b:9b:8a:0d:97:81:a9:d2:2d:b3:e4:ab:89: 2f:1c:ce:fc:2f:d2:01:7e:97:3f:0b:ee:69:11:b6: c9:f1:a6:90:7e:c2:d3:37:19:33:f5:b2:4c:9d:0e: e1:83:36:44:02:46:82:5a:a0:80:16:a7:72:f7:ea: 30:f5:42:0e:8f:5c:e3:ee:0f:1f:0a:6e:c3:7c:f5: 0c:f2:c1:59:22:7e:24:6a:3e:55:18:69:78:93:8a: 63:98:1b:3f:33:13:63:d5:b8:ee:5e:43:c5:ef:83: 89:33:aa:96:e8:eb:4f:0e:50:75:b7:de:b4:52:42: de:54:8e:0b:f7:dd:9c:ad:a9:e7:48:91:60:12:a6: 54:39:e8:65:fd:ab:83:47:9a:5c:f3:37:11:ee:07: b6:d1:58:f2:f0:f2:19:de:0a:b9:74:41:bc:9a:96: 39:87:86:bf:18:cb:09:cc:72:47:61:2d:18:d3:dd: 15:db:4b:ed:1e:ca:ed:be:b7:4a:d4:30:54:3c:4d: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:F0:AD:5D:1A:3F:29:3E:23:28:D1:1E:64:98:4F:1F:4B:D9:EC X509v3 Authority Key Identifier: keyid:DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:55:80:6d:3f:f2:61:d4:2f:2d:af:d1:d0:04:03:93:61:dd: 71:79:41:5e:52:72:b0:1d:3e:09:6c:78:36:46:42:70:78:02: b0:fa:84:e7:ad:d7:a4:16:8e:ce:c6:b8:03:fc:cf:83:1f:29: 44:61:3c:10:fd:78:a1:06:b1:81:d5:58:58:03:e9:b5:a6:6a: 1e:ce:c6:df:2b:39:90:7b:d0:9d:fa:63:0e:f9:86:d9:a5:aa: 8d:ba:de:47:2a:54:cd:a6:22:eb:17:60:2d:d9:fc:57:79:09: 6c:c9:09:1d:d5:9b:b5:6a:80:dc:81:e4:a4:55:a4:e9:9a:b2: ea:e5:75:b6:46:8a:82:4e:90:54:aa:47:02:f5:ad:f2:1f:db: a6:7f:bc:24:9a:64:a7:97:33:5f:d6:1d:c6:06:04:49:af:a4: 36:0c:b6:df:8d:14:a7:86:25:9e:be:ce:3c:e1:c6:89:95:7c: f5:1c:4a:e7:27:75:58:0e:f5:32:58:5f:18:95:17:bf:db:ed: ef:a7:7b:d7:9b:19:a7:4e:9d:eb:c1:bd:05:60:66:41:3d:16: f6:91:34:a6:63:c7:54:f1:f5:6b:42:bf:fd:ad:81:92:19:37: 7c:56:17:b6:5c:90:86:5e:c1:65:90:32:57:44:6a:37:e3:72: 16:4f:d7:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBMzExMC8GA1UEBRMoRENGQjcyQzZGNkQwMzk1QzQ1OTdGMzJGODI0QkQ2ODk2 REIzN0I1NzAeFw0yNjExMDMwOTQ5NTlaFw0yNjExMTAwOTQ5NTlaMBgxFjAUBgNV BAMTDTZhZTlhZTQ3LWRiMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV8T9zEQ/Pfax62XL89fO1ZCY1zXLaX7ia7CLUp7dsF/86TxkuqwqWq9eYLhDv bIHOvDDB8Ujcb525fL8Be5uKDZeBqdIts+SriS8czvwv0gF+lz8L7mkRtsnxppB+ wtM3GTP1skydDuGDNkQCRoJaoIAWp3L36jD1Qg6PXOPuDx8KbsN89QzywVkifiRq PlUYaXiTimOYGz8zE2PVuO5eQ8Xvg4kzqpbo608OUHW33rRSQt5Ujgv33ZytqedI kWASplQ56GX9q4NHmlzzNxHuB7bRWPLw8hneCrl0QbyaljmHhr8YywnMckdhLRjT 3RXbS+0eyu2+t0rUMFQ8TbgrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU12fwrV0a Pyk+IyjRHmSYTx9L2ewwHwYDVR0jBBgwFoAU3PtyxvbQOVxFl/MvgkvWiW2ze1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUEzLzk2NUQ2RDJDOTc5 MjExRjFCNDI1NDdFQzRGMTFGOTcwLzNQdHl4dmJRT1Z4RmxfTXZna3ZXaVcyemUx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1B0eXh2YlFPVnhGbF9NdmdrdldpVzJ6ZTFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUEzLzk2NUQ2RDJDOTc5MjExRjFCNDI1NDdFQzRGMTFGOTcwLzNQdHl4dmJRT1Z4 RmxfTXZna3ZXaVcyemUxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8VYBtP/Jh1C8tr9HQBAOTYd1xeUFeUnKwHT4JbHg2RkJweAKw+oTnrdekFo7O xrgD/M+DHylEYTwQ/XihBrGB1VhYA+m1pmoezsbfKzmQe9Cd+mMO+YbZpaqNut5H KlTNpiLrF2At2fxXeQlsyQkd1Zu1aoDcgeSkVaTpmrLq5XW2RoqCTpBUqkcC9a3y H9umf7wkmmSnlzNf1h3GBgRJr6Q2DLbfjRSnhiWevs484caJlXz1HErnJ3VYDvUy WF8YlRe/2+3vp3vXmxmnTp3rwb0FYGZBPRb2kTSmY8dU8fVrQr/9rYGSGTd8Vhe2 XJCGXsFlkDJXRGo343IWT9c1 -----END CERTIFICATE-----Generated at Thu Nov 5 07:09:17 2026 by rpki-client