$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: tHPzjYfBqaEy/NU3PO4vgf3pdp7QV5lcBY7n++qmhCg= Subject key identifier: 73:F7:83:53:A2:38:EE:71:05:74:D2:C0:F3:DF:68:F8:35:6D:BE:DB Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0178 Signing time: Fri 25 Sep 2026 04:45:11 +0000 Manifest this update: Fri 25 Sep 2026 04:45:11 +0000 Manifest next update: Fri 02 Oct 2026 04:45:11 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: 0W12VwQMlrIOlCpOFvXeRaE/ztWUGrY/Bb+UtG3XOoA=) 2: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) 3: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Sep 25 04:45:11 2026 GMT Not After : Oct 2 04:45:11 2026 GMT Subject: CN=6ab5fc57-9c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:e1:dc:d1:91:ad:36:fc:26:e4:06:dc:a0: fd:c0:bc:ab:5c:cb:27:ae:80:90:76:d8:03:91:16: 1f:e3:3a:13:8f:77:66:1d:85:ce:e7:50:33:88:02: 9e:7c:a1:fb:d8:57:3f:8f:c4:8e:f9:0b:b5:76:ba: b0:0a:22:16:bf:e7:cc:b0:05:9c:c6:97:fb:b1:5b: 22:05:36:da:f3:5f:40:13:c5:b6:64:1c:ad:a5:ba: ef:cc:b0:b6:87:33:4c:61:a8:46:74:cd:40:9d:3e: 4b:0a:d4:51:62:63:e2:1c:71:7f:f1:57:1e:b0:69: 89:b8:e4:21:ac:57:fe:3f:74:d7:5c:38:bf:94:d6: ef:eb:27:b7:26:a5:79:77:f8:1d:b7:97:d1:cc:6a: 7a:8c:41:fd:6d:77:ed:3a:fa:e8:86:c1:35:ae:4b: 69:24:ed:8d:7c:cc:ab:23:ce:07:1a:53:11:00:dc: 11:6c:da:d8:b4:40:c6:69:fa:32:b3:9c:55:f0:cf: ea:fd:6a:9a:39:12:00:42:af:86:1f:3f:72:48:89: c7:d7:63:ae:46:3c:3c:7d:14:54:d4:2b:66:39:2c: c9:69:47:b7:5e:5e:9a:c4:ea:cf:7c:10:94:d0:77: a5:b9:a3:d4:5f:c5:3b:78:ea:64:05:9f:84:77:44: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:83:53:A2:38:EE:71:05:74:D2:C0:F3:DF:68:F8:35:6D:BE:DB X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:93:3b:47:c8:6c:db:23:00:ab:d2:0f:5c:a1:89:12:c1:97: c0:0b:c6:a8:34:61:6a:df:74:c6:0e:4c:4d:95:d6:0e:df:ec: 20:cc:ed:dc:5f:fe:d5:1d:77:e9:81:23:d3:e4:a2:16:bf:00: e6:5b:ff:bc:56:26:28:12:7f:c0:8d:a2:15:cb:2e:ef:d0:4f: b7:84:26:c9:05:da:f6:ed:e8:0d:5d:52:61:19:41:67:5b:6d: 2b:80:05:6e:65:f8:ac:41:84:64:5e:e5:64:f2:35:27:6c:25: e2:05:cf:63:a6:20:ec:a5:df:b1:ba:db:09:59:e3:b7:1d:2a: 73:a5:8c:34:3e:d4:c5:c6:15:1d:10:04:f9:41:eb:6f:03:02: b0:c6:1f:a6:ca:1a:19:e8:2a:5f:11:a7:d3:49:c8:aa:68:23: d2:da:a2:a9:a5:76:e2:e6:2a:9b:61:a7:6e:89:fc:d1:75:58: 89:2c:a7:2d:3a:1c:f8:6c:cd:2b:8c:4c:f2:e9:0c:0a:bc:ae: e5:ab:f6:c2:37:19:4b:49:4c:09:09:23:cf:56:2d:e0:11:40: ff:95:ed:3f:bf:ad:37:a2:5a:f6:10:6e:2c:85:b7:4f:8e:33: f1:82:ea:32:99:07:9b:0d:6a:4d:d1:fe:93:ae:44:9e:7d:29: 5b:2c:97:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwOTI1MDQ0NTExWhcNMjYxMDAyMDQ0NTExWjAYMRYwFAYD VQQDEw02YWI1ZmM1Ny05YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiAnh3NGRrTb8JuQG3KD9wLyrXMsnroCQdtgDkRYf4zoTj3dmHYXO51AziAKe fKH72Fc/j8SO+Qu1drqwCiIWv+fMsAWcxpf7sVsiBTba819AE8W2ZBytpbrvzLC2 hzNMYahGdM1AnT5LCtRRYmPiHHF/8VcesGmJuOQhrFf+P3TXXDi/lNbv6ye3JqV5 d/gdt5fRzGp6jEH9bXftOvrohsE1rktpJO2NfMyrI84HGlMRANwRbNrYtEDGafoy s5xV8M/q/WqaORIAQq+GHz9ySInH12OuRjw8fRRU1CtmOSzJaUe3Xl6axOrPfBCU 0HeluaPUX8U7eOpkBZ+Ed0T6YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHP3g1Oi OO5xBXTSwPPfaPg1bb7bMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5M7R8hs2yMAq9IPXKGJEsGXwAvGqDRhat90xg5MTZXWDt/sIMzt3F/+1R13 6YEj0+SiFr8A5lv/vFYmKBJ/wI2iFcsu79BPt4QmyQXa9u3oDV1SYRlBZ1ttK4AF bmX4rEGEZF7lZPI1J2wl4gXPY6Yg7KXfsbrbCVnjtx0qc6WMND7UxcYVHRAE+UHr bwMCsMYfpsoaGegqXxGn00nIqmgj0tqiqaV24uYqm2Gnbon80XVYiSynLToc+GzN K4xM8ukMCryu5av2wjcZS0lMCQkjz1Yt4BFA/5XtP7+tN6Ja9hBuLIW3T44z8YLq MpkHmw1qTdH+k65Enn0pWyyXCA== -----END CERTIFICATE-----Generated at Sat Sep 26 23:15:59 2026 by rpki-client