$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft File: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft (raw, json) Hash identifier: PkTjyiSjHxOawT263gEmRAgpMA59yniMMS8PYJ6DXFY= Subject key identifier: 62:F7:AC:08:A2:61:83:0A:67:45:7C:2C:B7:BA:69:AA:31:46:25:B5 Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 Certificate issuer: /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft Manifest number: 07 Signing time: Mon 21 Sep 2026 09:15:44 +0000 Manifest this update: Mon 21 Sep 2026 09:15:43 +0000 Manifest next update: Mon 28 Sep 2026 09:15:43 +0000 Files and hashes: 1: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl (hash: OVQKw9IcONIhj62Er3+2VClW/b3kI+a76Ir0KF0BG5Y=) 2: y1g0K3BpCtGdwmwVYGz416Ro37A.asa (hash: 14Kb56nmcCqX1/aGgMSOO20n7FfaDrbKczoyK0CGkuA=) 3: A39294F2B31911F1AD8137FA6511F970.roa (hash: Zma4t38tztu49pqbn5EJV9Y/LliEvIBeR5nXDKoUMC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Validity Not Before: Sep 21 09:15:43 2026 GMT Not After : Sep 28 09:15:43 2026 GMT Subject: CN=6ab0f5bf-0d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:c3:52:a2:59:e9:58:c5:c4:94:0b:3b:9c: 79:a4:27:42:18:e5:71:47:0b:47:35:6d:fa:98:89: dd:ff:9a:65:87:18:2f:45:eb:2d:4a:bb:af:15:f7: 70:11:31:f4:92:51:56:38:23:64:83:8b:a4:95:4d: d8:ff:61:8f:79:80:e0:b4:f6:ec:bf:41:0e:b5:23: d9:e0:fe:50:9b:60:03:31:85:d0:6e:ed:b0:c3:90: 0e:05:8c:55:cf:9a:59:1d:0b:0f:97:92:14:22:c2: ed:14:04:1b:b3:cb:b9:ce:05:51:67:bc:92:e8:ac: f8:fc:b3:45:0a:4d:5b:f5:38:d3:c6:e0:3a:9e:8a: 71:a4:c5:3e:3e:ea:a6:b2:ab:db:d4:ce:cb:aa:91: 40:24:79:ae:fa:2a:fa:8e:01:29:e0:05:b7:a7:1b: 92:8c:1f:c4:32:52:2f:05:37:19:70:a3:16:ed:38: 47:e5:3e:30:97:df:ed:2d:7c:67:45:9f:50:2d:c4: 3e:73:7e:e3:21:ba:2e:6e:6c:41:90:63:71:40:06: 95:31:d5:d5:c7:b2:fd:1b:9c:85:fa:d9:69:95:c3: 00:cd:96:a5:18:2b:52:fb:af:43:64:fd:02:01:26: 8a:06:62:ef:40:17:d8:0c:fe:64:23:0e:10:01:45: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:AC:08:A2:61:83:0A:67:45:7C:2C:B7:BA:69:AA:31:46:25:B5 X509v3 Authority Key Identifier: keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c4:e7:72:1f:bb:d4:c2:cc:2a:0c:ab:89:9d:32:7c:6c:2d: fc:25:80:3b:9c:42:2c:09:c2:c8:a7:70:e3:94:2e:3f:9d:31: 48:71:65:f5:5f:6d:bd:ca:40:e2:48:08:be:8f:1b:db:95:7a: f1:b0:bf:7f:b0:71:28:cd:af:f9:33:cd:fc:bc:71:fc:eb:c1: 55:db:1c:9c:40:62:58:ee:b4:7a:e9:32:bb:6d:d4:e4:f1:55: 77:46:e0:03:4c:ca:d9:cc:1f:f2:f4:31:ac:b2:db:79:ed:8b: f3:ca:c1:64:b9:09:cb:9d:72:45:87:8e:bb:ba:8b:ba:83:23: b3:93:37:96:50:31:f4:49:f1:1e:38:7a:ef:8c:df:22:f6:01: dc:6d:dd:05:20:d4:5f:b3:5f:3e:30:16:31:0c:1b:82:e9:e9: 97:e8:1e:85:f2:7b:30:02:7c:d4:99:75:c7:eb:2e:53:b7:20: ac:19:03:e8:a9:54:9f:0a:a0:5c:3b:1b:9a:91:4c:e9:73:2e: a3:40:9b:09:38:f9:c3:0c:c6:33:08:dc:c5:40:c6:19:18:7c: be:6b:dd:72:b1:1a:91:b8:d2:dc:ef:fc:8f:4c:9b:93:97:a5: b6:d2:e1:d0:28:a5:99:58:86:d8:d8:78:41:03:5a:74:35:34: e0:8c:6c:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxRDExMC8GA1UEBRMoREREQzcxMDJBRDkyRDlEODFBNjBDNDNBNEY2QjQyOTM0 RDUxMUJBMjAeFw0yNjA5MjEwOTE1NDNaFw0yNjA5MjgwOTE1NDNaMBgxFjAUBgNV BAMTDTZhYjBmNWJmLTBkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQ58NSolnpWMXElAs7nHmkJ0IY5XFHC0c1bfqYid3/mmWHGC9F6y1Ku68V93AR MfSSUVY4I2SDi6SVTdj/YY95gOC09uy/QQ61I9ng/lCbYAMxhdBu7bDDkA4FjFXP mlkdCw+XkhQiwu0UBBuzy7nOBVFnvJLorPj8s0UKTVv1ONPG4DqeinGkxT4+6qay q9vUzsuqkUAkea76KvqOASngBbenG5KMH8QyUi8FNxlwoxbtOEflPjCX3+0tfGdF n1AtxD5zfuMhui5ubEGQY3FABpUx1dXHsv0bnIX62WmVwwDNlqUYK1L7r0Nk/QIB JooGYu9AF9gM/mQjDhABRe1XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYvesCKJh gwpnRXwst7ppqjFGJbUwHwYDVR0jBBgwFoAU3dxxAq2S2dgaYMQ6T2tCk01RG6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzdGODYwQ0U4QjIx RTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRnYVlNUTZUMnRDazAxUkc2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R4eEFxMlMyZGdhWU1RNlQydENrMDFSRzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTFELzdGODYwQ0U4QjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRn YVlNUTZUMnRDazAxUkc2SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjxOdyH7vUwswqDKuJnTJ8bC38JYA7nEIsCcLIp3DjlC4/nTFIcWX1X229ykDi SAi+jxvblXrxsL9/sHEoza/5M838vHH868FV2xycQGJY7rR66TK7bdTk8VV3RuAD TMrZzB/y9DGsstt57YvzysFkuQnLnXJFh467uou6gyOzkzeWUDH0SfEeOHrvjN8i 9gHcbd0FINRfs18+MBYxDBuC6emX6B6F8nswAnzUmXXH6y5TtyCsGQPoqVSfCqBc OxuakUzpcy6jQJsJOPnDDMYzCNzFQMYZGHy+a91ysRqRuNLc7/yPTJuTl6W20uHQ KKWZWIbY2HhBA1p0NTTgjGyD -----END CERTIFICATE-----Generated at Tue Sep 22 18:48:26 2026 by rpki-client