$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: Hv+U+qXvrgGk8Zw0bKtFA5KvO11UIox8ABUDUyVSMKY= Subject key identifier: 75:5A:55:31:65:C2:68:18:C3:79:4D:03:4F:4A:75:27:61:E0:14:0D Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 0190 Signing time: Mon 21 Sep 2026 04:25:40 +0000 Manifest this update: Mon 21 Sep 2026 04:25:40 +0000 Manifest next update: Mon 28 Sep 2026 04:25:40 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: qoR1R27t0+RyEqvmYzcW6pXtYcT6rjyd9F9lFK+j7x0=) 2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=) 3: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Sep 21 04:25:40 2026 GMT Not After : Sep 28 04:25:40 2026 GMT Subject: CN=6ab0b1c4-1963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:2f:ce:05:94:1c:57:7e:81:0b:af:50:12: 07:52:b1:98:fc:cd:4c:1a:24:2b:7a:24:3e:90:fc: 25:b0:6c:41:10:e6:18:10:41:f2:e7:fd:fa:02:c6: 75:23:f6:8e:e6:c6:24:d9:02:ab:e5:b7:21:4e:33: f0:3f:19:e5:cf:f7:d2:2e:49:d6:f2:e6:f8:dc:74: 6b:56:02:2b:39:f6:13:29:aa:a1:a0:1e:0b:66:2c: e4:65:85:3c:df:f3:19:93:70:09:88:7b:da:11:06: e8:27:95:94:93:cc:8e:d6:21:68:3c:c5:e7:06:06: ef:34:66:f9:24:94:36:a3:9c:2f:20:65:f7:78:13: b4:c7:01:d8:6d:f1:0b:83:4f:c6:9f:56:5f:e5:e2: cc:ea:e7:8a:ea:81:43:3b:21:8c:52:1a:b0:bb:90: 40:a9:35:2d:17:1e:b0:fe:24:68:75:4d:ae:04:de: e7:67:1c:3c:7a:6f:4f:67:75:83:d5:c8:ea:2e:2a: 41:8b:a3:53:2b:96:8a:90:b3:06:d0:de:12:90:10: f0:f4:14:87:a3:fe:d0:c6:d6:d1:65:e7:90:7c:ca: 19:2b:77:2a:fd:eb:bb:23:1d:c4:cd:99:46:79:f0: 7f:7a:6b:81:7d:01:d8:35:76:cb:f8:3c:34:fa:fa: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:55:31:65:C2:68:18:C3:79:4D:03:4F:4A:75:27:61:E0:14:0D X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3c:b6:58:f0:47:df:da:4b:af:b8:18:e4:c8:68:f3:bf:3d: 3e:4f:29:ce:76:79:b1:00:cb:d2:a2:33:c5:18:f6:de:d6:f3: da:b8:33:d2:25:9a:c0:64:76:38:c8:18:fc:03:26:2b:18:d7: 65:10:e2:62:0c:6b:79:23:83:25:fd:71:dc:cf:c3:b9:16:58: d9:65:25:c9:1c:00:66:ca:13:36:b7:6e:80:73:cb:79:6f:55: 7a:7f:ed:5c:0b:d0:b3:e5:2d:68:79:fd:90:e2:ee:24:08:7c: 19:0e:01:c0:31:13:09:dc:a4:c2:bd:fa:5e:38:67:e3:6c:92: 1e:4b:b3:30:0b:b1:f9:b5:90:aa:d9:c9:a4:0f:dd:a7:34:29: c5:b6:0d:62:4e:a9:37:9c:ff:af:f3:b8:c2:1c:42:9c:02:0d: d0:33:60:dd:93:50:4b:38:7d:82:58:e2:f9:c3:11:49:4d:37: cb:87:37:bd:ff:d8:e2:20:4d:d7:b4:e2:42:94:98:6a:74:af: ac:aa:50:35:df:8c:d6:1c:54:0b:09:c3:1b:85:59:2b:3c:2c: b0:bc:e0:12:dd:57:68:67:4c:84:78:8d:b5:14:11:c5:0a:8b: 9d:75:44:43:d6:00:40:27:ce:65:f3:0f:03:4b:b8:66:25:b1: 22:e2:4a:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjYwOTIxMDQyNTQwWhcNMjYwOTI4MDQyNTQwWjAYMRYwFAYD VQQDEw02YWIwYjFjNC0xOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMsvzgWUHFd+gQuvUBIHUrGY/M1MGiQreiQ+kPwlsGxBEOYYEEHy5/36AsZ1 I/aO5sYk2QKr5bchTjPwPxnlz/fSLknW8ub43HRrVgIrOfYTKaqhoB4LZizkZYU8 3/MZk3AJiHvaEQboJ5WUk8yO1iFoPMXnBgbvNGb5JJQ2o5wvIGX3eBO0xwHYbfEL g0/Gn1Zf5eLM6ueK6oFDOyGMUhqwu5BAqTUtFx6w/iRodU2uBN7nZxw8em9PZ3WD 1cjqLipBi6NTK5aKkLMG0N4SkBDw9BSHo/7QxtbRZeeQfMoZK3cq/eu7Ix3EzZlG efB/emuBfQHYNXbL+Dw0+vrUswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVaVTFl wmgYw3lNA09KdSdh4BQNMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAzy2WPBH39pLr7gY5Mho8789Pk8pznZ5sQDL0qIzxRj23tbz2rgz0iWawGR2 OMgY/AMmKxjXZRDiYgxreSODJf1x3M/DuRZY2WUlyRwAZsoTNrdugHPLeW9Ven/t XAvQs+UtaHn9kOLuJAh8GQ4BwDETCdykwr36Xjhn42ySHkuzMAux+bWQqtnJpA/d pzQpxbYNYk6pN5z/r/O4whxCnAIN0DNg3ZNQSzh9glji+cMRSU03y4c3vf/Y4iBN 17TiQpSYanSvrKpQNd+M1hxUCwnDG4VZKzwssLzgEt1XaGdMhHiNtRQRxQqLnXVE Q9YAQCfOZfMPA0u4ZiWxIuJKvQ== -----END CERTIFICATE-----Generated at Tue Sep 22 14:33:28 2026 by rpki-client