$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: aOlnMo5SRxzqm/lXOqdQ6zfX71bi6+DaCCu/jbcaU9o= Subject key identifier: 84:4E:F3:84:57:A3:45:7A:5D:9F:DE:A6:0C:13:46:8D:87:0C:82:01 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 0133 Signing time: Mon 21 Sep 2026 05:38:29 +0000 Manifest this update: Mon 21 Sep 2026 05:38:28 +0000 Manifest next update: Mon 28 Sep 2026 05:38:28 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: DBe6kUC3s7fcnZDs8avVl31kOrfQn/QYWrCR1HI/W+k=) 2: rRNC3E6JI7CmofOfGt02r2GAoY0.asa (hash: mve2brL6PCCHO6LyVKWicopf+XDXh9VmQdiQHp/iWo8=) 3: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Sep 21 05:38:28 2026 GMT Not After : Sep 28 05:38:28 2026 GMT Subject: CN=6ab0c2d4-acbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:56:8c:65:04:3c:98:cd:c8:04:dd:ca:e0: ca:d6:12:92:f3:50:bb:ff:c6:a0:d4:b2:e1:71:b3: e2:4a:4a:6d:57:a2:e7:12:82:b6:68:b0:ce:ac:84: c2:28:f5:5b:71:78:d3:31:da:6d:cc:3f:91:0c:b9: 26:77:ee:ab:4b:8f:7d:11:14:19:70:98:8a:51:fd: e5:09:9b:8b:8e:3c:76:0f:b1:02:99:7a:df:c7:3f: 40:99:2e:6e:8d:4f:e0:04:43:9d:67:b9:fa:a8:3b: 9d:b6:67:a1:12:5e:65:0a:b9:02:55:dc:70:8b:d7: 9c:83:24:68:56:60:d3:58:25:6f:60:13:9f:08:df: 19:a7:ad:8f:1f:ac:4e:4b:3d:62:1c:f9:c2:bc:6e: 66:38:b7:7a:b3:2f:5b:d4:75:b6:f3:e3:f9:54:37: 9f:a6:cf:4d:57:db:88:8d:61:c8:81:aa:ee:6b:f1: c4:5a:08:37:92:47:98:6c:9a:e1:94:da:46:d7:28: 80:5d:b1:76:1d:65:30:51:4c:1e:38:54:63:ff:15: 8e:9a:34:42:2d:83:27:b5:4a:c9:86:20:10:2c:0c: 5b:71:af:6f:1a:ad:b0:8c:da:d9:09:ce:40:7b:47: 84:ad:cb:f2:6d:5d:df:f4:bb:41:00:95:22:06:e7: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:F3:84:57:A3:45:7A:5D:9F:DE:A6:0C:13:46:8D:87:0C:82:01 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:2a:13:ed:f3:3a:0b:fe:4d:e7:8b:e1:51:8b:0a:8e:d6: bb:23:74:7a:66:14:d3:e0:e6:dd:75:b2:2a:6f:aa:92:66:13: 6c:bd:ae:ca:32:6f:f0:4f:21:69:d1:cf:06:0e:3a:50:23:33: 4d:03:de:8e:cd:03:c6:54:1c:56:f1:1e:01:fa:d0:03:2f:bc: 64:d8:b9:18:d4:74:4f:f8:76:0f:fb:9c:78:e6:11:0f:df:2a: 5f:0e:46:3d:ac:bc:c0:82:6d:a6:76:4d:7f:d3:3e:fb:92:f8: 41:32:d0:18:4f:d5:ff:88:a5:8e:9c:f1:82:b1:66:3a:20:ac: d8:57:ac:dd:29:d3:48:72:a6:72:d0:0d:ac:07:b7:ea:84:b4: de:96:41:44:13:63:d3:9a:a2:f8:f0:6e:cc:71:15:10:10:c6: 6d:4e:19:b8:71:c0:e0:63:b4:39:06:e7:69:e0:21:58:e1:86: 03:14:4d:f2:a1:17:d9:fd:f5:af:b0:74:66:33:14:d8:12:72: 89:b2:01:b4:02:12:43:67:1f:56:f6:4e:40:65:e0:5f:66:f0: 45:5e:8f:1b:05:2f:f3:d9:24:f2:f0:42:86:0d:e4:ce:0c:09: c4:4b:1c:07:b3:3c:94:2c:20:57:84:b3:02:a4:24:f4:7e:17: e8:a6:df:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjYwOTIxMDUzODI4WhcNMjYwOTI4MDUzODI4WjAYMRYwFAYD VQQDEw02YWIwYzJkNC1hY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9dWjGUEPJjNyATdyuDK1hKS81C7/8ag1LLhcbPiSkptV6LnEoK2aLDOrITC KPVbcXjTMdptzD+RDLkmd+6rS499ERQZcJiKUf3lCZuLjjx2D7ECmXrfxz9AmS5u jU/gBEOdZ7n6qDudtmehEl5lCrkCVdxwi9ecgyRoVmDTWCVvYBOfCN8Zp62PH6xO Sz1iHPnCvG5mOLd6sy9b1HW28+P5VDefps9NV9uIjWHIgarua/HEWgg3kkeYbJrh lNpG1yiAXbF2HWUwUUweOFRj/xWOmjRCLYMntUrJhiAQLAxbca9vGq2wjNrZCc5A e0eErcvybV3f9LtBAJUiBue9KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRO84RX o0V6XZ/epgwTRo2HDIIBMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaa4qE+3zOgv+TeeL4VGLCo7WuyN0emYU0+Dm3XWyKm+qkmYTbL2uyjJv8E8h adHPBg46UCMzTQPejs0DxlQcVvEeAfrQAy+8ZNi5GNR0T/h2D/uceOYRD98qXw5G Pay8wIJtpnZNf9M++5L4QTLQGE/V/4iljpzxgrFmOiCs2Fes3SnTSHKmctANrAe3 6oS03pZBRBNj05qi+PBuzHEVEBDGbU4ZuHHA4GO0OQbnaeAhWOGGAxRN8qEX2f31 r7B0ZjMU2BJyibIBtAISQ2cfVvZOQGXgX2bwRV6PGwUv89kk8vBChg3kzgwJxEsc B7M8lCwgV4SzAqQk9H4X6Kbf5Q== -----END CERTIFICATE-----Generated at Mon Sep 21 17:56:51 2026 by rpki-client