$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: CZR3azOMWqUymZk4xZASjII9BdLU+ejd0oE4UJCZkNQ= Subject key identifier: 99:2B:07:A5:47:B8:4C:FC:E1:11:DA:4C:E2:77:6B:A6:F2:C5:57:46 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 01D0 Signing time: Mon 21 Sep 2026 03:42:55 +0000 Manifest this update: Mon 21 Sep 2026 03:42:54 +0000 Manifest next update: Mon 28 Sep 2026 03:42:54 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: J0sLBI/8+oTcEsm91diTgG2sgYANZnXv7dxOlQI3Tcg=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: MxjihytyjqbI0kprRCcgZJxlcagSJ1SZVxyrVtzudrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Sep 21 03:42:54 2026 GMT Not After : Sep 28 03:42:54 2026 GMT Subject: CN=6ab0a7bf-9aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:88:6d:98:f6:e6:73:7c:68:00:70:3a:7b: 33:ef:86:bf:45:73:85:95:a7:15:4a:42:eb:21:2b: bc:cd:2c:8c:bb:5b:e6:95:38:3b:3b:c1:ee:4a:2e: 59:2e:28:7a:72:6c:b2:ed:6e:8f:03:b6:1d:32:26: 7f:48:48:74:cb:55:26:2a:ba:98:8c:5b:d9:e6:85: a5:31:b9:b0:6f:f3:13:b2:d7:00:9b:60:25:12:05: 8c:48:ee:d4:25:54:9a:71:e9:b2:4a:99:20:90:3e: 05:1d:d5:67:22:99:ae:c1:e6:06:8d:22:f8:ec:04: c2:44:58:ab:e7:82:dd:24:8b:e2:2a:09:f6:2d:28: 3c:6a:23:d0:ab:f0:af:ae:60:68:7f:e2:3e:c0:c4: 13:ee:1a:0a:0e:38:25:fa:1b:4e:2e:26:c6:36:49: 80:91:9b:28:c2:3d:6b:4e:50:a7:2c:ce:09:ab:7f: ec:1b:cf:5c:8a:bd:46:aa:ab:93:22:8d:83:4e:c6: c0:16:34:64:61:13:61:8c:83:2b:e0:cd:b2:30:6e: ad:5e:2f:1a:d6:cc:85:e4:52:80:f4:dc:f6:bd:cf: bd:65:59:51:9c:ff:2e:fa:60:1d:5c:f7:29:ec:84: 06:2b:f5:d2:fc:7e:e3:06:d4:8f:ea:2c:38:00:f8: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:07:A5:47:B8:4C:FC:E1:11:DA:4C:E2:77:6B:A6:F2:C5:57:46 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:5d:cf:d6:14:eb:85:fa:b6:96:59:f3:dc:ca:2a:a4:75:e2: 4a:46:b4:39:33:cc:8c:ea:99:23:3f:a5:ec:89:77:0f:b4:92: fa:2a:da:62:4e:76:ba:1d:92:8e:26:8e:da:7d:e9:1d:c5:26: 3c:7e:e8:47:96:9d:52:03:79:d1:21:f8:51:3a:8e:fd:77:31: 0f:4d:cb:5a:64:6f:c0:92:b5:57:37:f4:26:76:2c:5a:d4:9a: 54:98:2b:86:21:97:1c:4d:1f:da:86:fe:ae:6e:ec:fa:f8:ef: 9a:5d:6d:f4:fd:a8:a4:d8:6c:e1:1b:fe:93:df:59:c7:e7:14: 46:c6:0a:fb:93:6e:a6:81:92:30:48:ec:75:36:ab:eb:1d:55: f3:cb:58:4e:56:ff:f1:59:e1:a3:df:74:0c:9c:29:47:57:fd: b6:3e:7c:b1:83:40:59:09:2f:26:ae:2e:6a:38:82:ce:42:65: 9b:5f:ea:1d:1c:e5:e9:2c:66:bf:69:b8:0f:58:89:87:87:02: 20:2e:29:57:5f:46:3b:7b:a1:53:f2:03:39:b1:8f:27:5f:3f: ce:10:f4:ed:8e:0f:bf:69:35:5c:1b:ee:75:b7:3f:94:91:ac: d8:a7:eb:c1:fe:ed:5d:40:da:06:c0:2d:e4:ad:61:ef:22:5f: 37:9f:35:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjYwOTIxMDM0MjU0WhcNMjYwOTI4MDM0MjU0WjAYMRYwFAYD VQQDEw02YWIwYTdiZi05YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nWIbZj25nN8aABwOnsz74a/RXOFlacVSkLrISu8zSyMu1vmlTg7O8HuSi5Z Lih6cmyy7W6PA7YdMiZ/SEh0y1UmKrqYjFvZ5oWlMbmwb/MTstcAm2AlEgWMSO7U JVSacemySpkgkD4FHdVnIpmuweYGjSL47ATCRFir54LdJIviKgn2LSg8aiPQq/Cv rmBof+I+wMQT7hoKDjgl+htOLibGNkmAkZsowj1rTlCnLM4Jq3/sG89cir1GqquT Io2DTsbAFjRkYRNhjIMr4M2yMG6tXi8a1syF5FKA9Nz2vc+9ZVlRnP8u+mAdXPcp 7IQGK/XS/H7jBtSP6iw4APgnyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkrB6VH uEz84RHaTOJ3a6byxVdGMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV13P1hTrhfq2llnz3MoqpHXiSka0OTPMjOqZIz+l7Il3D7SS+iraYk52uh2S jiaO2n3pHcUmPH7oR5adUgN50SH4UTqO/XcxD03LWmRvwJK1Vzf0JnYsWtSaVJgr hiGXHE0f2ob+rm7s+vjvml1t9P2opNhs4Rv+k99Zx+cURsYK+5NupoGSMEjsdTar 6x1V88tYTlb/8Vnho990DJwpR1f9tj58sYNAWQkvJq4uajiCzkJlm1/qHRzl6Sxm v2m4D1iJh4cCIC4pV19GO3uhU/IDObGPJ18/zhD07Y4Pv2k1XBvudbc/lJGs2Kfr wf7tXUDaBsAt5K1h7yJfN581Gw== -----END CERTIFICATE-----Generated at Tue Sep 22 09:04:32 2026 by rpki-client