$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: CMINHi8AMP/z6j33glXN2aBMu2jXvnxT5QHMMvdgajw= Subject key identifier: F3:9A:4F:1B:96:F1:F5:5F:A2:A8:62:90:9D:EB:BD:43:9A:90:39:FF Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0265 Signing time: Wed 23 Sep 2026 02:01:37 +0000 Manifest this update: Wed 23 Sep 2026 02:01:36 +0000 Manifest next update: Wed 30 Sep 2026 02:01:36 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: THM5uRYosS/7egQXGTLve5EIjdIjWzfX5D2b8bVKvUs=) 2: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: SBltuM012OqLYqnXdql69mBi1G/BqnKOStfJ8Z81tqY=) 3: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: hsA4dzDqhKvp9cdCvi5E/QiWDK70tsjIjm1pqpZGIzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Sep 23 02:01:36 2026 GMT Not After : Sep 30 02:01:36 2026 GMT Subject: CN=6ab33301-f732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:98:42:4b:a7:9f:7f:40:49:31:5c:c0:85: f6:10:a6:48:df:b7:fd:ac:d3:23:03:f1:50:44:73: 32:f2:f2:6e:64:2e:cf:e8:3e:f0:3e:87:40:01:a7: 49:aa:ec:a2:29:d5:9f:d2:1d:26:90:88:99:69:8b: f4:e7:fb:f0:12:3f:bb:1f:a4:2a:b9:14:35:1d:77: 54:f4:72:4c:a8:b7:44:ae:51:74:6f:7c:2f:bb:08: 63:b6:5f:be:2c:5d:6c:0e:9a:d2:3e:05:ec:1a:b7: ce:54:64:c3:14:7d:07:3c:3e:a4:a8:8e:bc:4b:42: f2:1b:af:9a:11:0c:38:1e:6d:22:85:81:3b:1c:ab: 95:13:f6:55:17:0e:2f:29:34:2c:49:a0:b0:f7:7a: 8d:1e:cb:b0:87:b0:b1:cb:d9:0c:5a:a1:14:98:a5: 43:e2:17:fa:11:56:27:07:ae:e1:d2:77:d6:d0:bd: 4b:a9:c7:72:1f:76:a6:af:ce:3a:a9:b0:f1:a9:a6: 95:b7:78:28:97:97:2d:60:4e:8e:7b:5a:1d:1a:5a: 64:45:fa:83:f9:67:d9:e5:49:da:2a:0d:98:05:24: 8f:1d:89:5d:11:9e:3f:6e:85:9c:94:a1:c2:c0:20: e9:67:b0:b4:c3:98:87:19:34:91:fe:90:33:09:73: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:4F:1B:96:F1:F5:5F:A2:A8:62:90:9D:EB:BD:43:9A:90:39:FF X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:b7:d4:f3:08:30:21:be:87:f4:db:a6:4b:eb:cf:a2:d9: e8:ee:a0:a7:74:1b:29:48:62:ba:f9:56:cd:23:2b:4e:31:99: c1:27:91:ce:ef:90:48:d9:65:1b:f8:40:83:5d:e6:7b:cd:b7: 1a:b7:0e:65:31:11:22:9c:aa:aa:7c:42:b4:5f:02:ba:f8:01: d1:d1:6f:f1:c7:63:bf:62:bb:c7:5e:de:a9:58:aa:e0:a4:0a: 44:3a:25:b3:f9:14:49:29:b3:9f:1c:10:d8:01:c2:38:86:3b: 48:8e:3e:96:2a:8e:df:ff:58:44:eb:ce:a2:cf:63:7e:a2:0a: e9:0b:81:5d:cd:9e:75:83:64:9c:db:90:f7:a0:c3:b1:d1:90: ab:0a:cf:06:ff:20:ba:fa:7e:2c:3a:56:d4:3f:28:c2:d2:61: 65:6c:fb:d1:31:97:52:6b:b9:b1:79:62:cc:bc:6f:27:29:d3: 60:5e:ea:f3:65:8e:d4:1e:4e:90:19:cc:ae:cc:14:83:18:6f: b8:97:31:67:4f:a1:1c:fc:e5:bf:56:1c:4a:35:30:8a:bc:86: 8b:f3:db:f7:a8:c8:8c:1d:37:44:05:a1:e9:e9:93:dc:42:45: 78:87:8a:99:a4:44:bb:69:c0:e5:51:ff:2c:c3:76:c2:94:c9: bf:6c:c0:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwOTIzMDIwMTM2WhcNMjYwOTMwMDIwMTM2WjAYMRYwFAYD VQQDEw02YWIzMzMwMS1mNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl6YQkunn39ASTFcwIX2EKZI37f9rNMjA/FQRHMy8vJuZC7P6D7wPodAAadJ quyiKdWf0h0mkIiZaYv05/vwEj+7H6QquRQ1HXdU9HJMqLdErlF0b3wvuwhjtl++ LF1sDprSPgXsGrfOVGTDFH0HPD6kqI68S0LyG6+aEQw4Hm0ihYE7HKuVE/ZVFw4v KTQsSaCw93qNHsuwh7Cxy9kMWqEUmKVD4hf6EVYnB67h0nfW0L1LqcdyH3amr846 qbDxqaaVt3gol5ctYE6Oe1odGlpkRfqD+WfZ5UnaKg2YBSSPHYldEZ4/boWclKHC wCDpZ7C0w5iHGTSR/pAzCXPMbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOaTxuW 8fVfoqhikJ3rvUOakDn/MB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARq631PMIMCG+h/Tbpkvrz6LZ6O6gp3QbKUhiuvlWzSMrTjGZwSeRzu+QSNll G/hAg13me823GrcOZTERIpyqqnxCtF8CuvgB0dFv8cdjv2K7x17eqViq4KQKRDol s/kUSSmznxwQ2AHCOIY7SI4+liqO3/9YROvOos9jfqIK6QuBXc2edYNknNuQ96DD sdGQqwrPBv8guvp+LDpW1D8owtJhZWz70TGXUmu5sXlizLxvJynTYF7q82WO1B5O kBnMrswUgxhvuJcxZ0+hHPzlv1YcSjUwiryGi/Pb96jIjB03RAWh6emT3EJFeIeK maREu2nA5VH/LMN2wpTJv2zAiw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:26:40 2026 by rpki-client