$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: T6dn9HtkxX/tS9hu/AAaCS7oCa3cazVRlAbmzDhicuA= Subject key identifier: 88:9E:8C:AE:09:CC:FF:9B:D7:0C:CB:BA:28:FA:B6:A6:BD:AE:D6:90 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0A4D Signing time: Sun 20 Sep 2026 19:36:53 +0000 Manifest this update: Sun 20 Sep 2026 19:36:53 +0000 Manifest next update: Sun 27 Sep 2026 19:36:53 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: vPuPTQkvr2fYyet1GPA4c0cBT9cAz2hwORucS4LQVF4=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: OYi6iPOzlWh6eoXqX49fJiVTJCcfXyryKflqKEAnvYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Sep 20 19:36:53 2026 GMT Not After : Sep 27 19:36:53 2026 GMT Subject: CN=6ab035d5-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:f5:f2:05:92:37:92:20:0b:d4:c1:9d:33: 20:de:9a:cd:92:f8:1e:50:93:8e:59:68:32:71:c3: d8:06:19:b2:dd:d0:8f:aa:c2:42:dc:95:06:ad:27: c5:b8:1d:38:1d:9b:d2:20:b1:e2:59:14:54:b0:1e: 6b:d9:07:ce:8b:bd:76:68:f8:e3:13:8a:bb:95:21: c5:06:11:de:fd:16:e6:06:e7:cb:a8:c1:6e:48:6a: 80:5b:41:12:ab:b8:b0:da:0c:5f:d8:30:20:c7:bb: 45:1e:ac:07:9c:10:87:3b:f0:db:17:ce:80:9f:53: e7:df:f8:ef:d4:36:65:92:44:60:02:27:6f:14:b8: 8d:56:4a:9c:c5:ad:e7:e7:53:7a:5a:28:c0:f4:d2: 5e:66:fa:03:19:0f:8a:11:36:b0:e0:0b:39:f9:30: d2:d4:31:76:a6:a4:b6:ad:79:50:62:88:b8:e2:aa: 2e:15:c3:65:5b:c7:7c:d5:fc:b9:3e:3d:0b:a4:b7: a0:23:cc:0d:f5:f4:81:e8:53:3c:28:4d:af:84:38: 70:4e:a0:44:b3:76:ee:89:cb:11:59:f1:81:f3:bd: d8:3f:4d:94:20:4e:7d:71:f7:09:0c:38:15:20:cc: be:ef:8c:43:c5:45:b9:e0:a9:fa:18:eb:98:c3:ac: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9E:8C:AE:09:CC:FF:9B:D7:0C:CB:BA:28:FA:B6:A6:BD:AE:D6:90 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:79:3a:81:7b:84:1c:16:a1:05:bb:91:fd:b7:4c:92:16:59: e4:22:66:7b:2e:c4:46:76:e4:28:e3:63:a8:15:14:17:d1:60: 9c:28:4d:1c:2e:0c:68:ce:48:51:da:ce:3f:9d:e7:18:c5:79: 8b:ec:fd:03:e2:20:d7:60:a2:77:6a:71:06:b6:da:03:16:a8: 47:fb:42:e0:75:16:9d:3a:a0:40:9f:92:ba:33:3d:b3:e9:bf: 48:90:01:39:11:28:3f:92:40:7b:41:14:7d:12:94:3d:89:d1: 06:49:9f:cc:32:ed:d8:5f:22:c7:5b:6c:e4:d4:2f:4d:ea:9b: 29:e2:4e:14:c4:ab:93:41:a9:45:1f:8d:82:b9:03:17:f9:9c: d6:d0:c2:e5:0b:58:3b:20:fb:be:72:45:05:fe:2e:5e:13:62: 65:07:50:ff:25:27:bf:41:f6:cc:f0:77:ce:ed:49:2b:bf:b2: 50:98:83:ab:4d:97:dc:9d:fa:c7:ce:a2:59:61:d6:30:6d:6b: 0b:5d:53:5e:90:15:9f:f8:88:94:33:9d:f7:9a:95:17:f1:a5: fe:6e:6d:d6:62:b2:58:93:78:8e:37:c4:3a:78:b3:a2:52:3f: 34:01:c9:f4:67:09:9d:ce:26:2d:6c:a3:76:6e:98:d4:e0:09: 7c:47:06:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwOTIwMTkzNjUzWhcNMjYwOTI3MTkzNjUzWjAYMRYwFAYD VQQDEw02YWIwMzVkNS05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrD18gWSN5IgC9TBnTMg3prNkvgeUJOOWWgyccPYBhmy3dCPqsJC3JUGrSfF uB04HZvSILHiWRRUsB5r2QfOi712aPjjE4q7lSHFBhHe/RbmBufLqMFuSGqAW0ES q7iw2gxf2DAgx7tFHqwHnBCHO/DbF86An1Pn3/jv1DZlkkRgAidvFLiNVkqcxa3n 51N6WijA9NJeZvoDGQ+KETaw4As5+TDS1DF2pqS2rXlQYoi44qouFcNlW8d81fy5 Pj0LpLegI8wN9fSB6FM8KE2vhDhwTqBEs3buicsRWfGB873YP02UIE59cfcJDDgV IMy+74xDxUW54Kn6GOuYw6zCZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiejK4J zP+b1wzLuij6tqa9rtaQMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnk6gXuEHBahBbuR/bdMkhZZ5CJmey7ERnbkKONjqBUUF9FgnChNHC4MaM5I UdrOP53nGMV5i+z9A+Ig12Cid2pxBrbaAxaoR/tC4HUWnTqgQJ+SujM9s+m/SJAB OREoP5JAe0EUfRKUPYnRBkmfzDLt2F8ix1ts5NQvTeqbKeJOFMSrk0GpRR+NgrkD F/mc1tDC5QtYOyD7vnJFBf4uXhNiZQdQ/yUnv0H2zPB3zu1JK7+yUJiDq02X3J36 x86iWWHWMG1rC11TXpAVn/iIlDOd95qVF/Gl/m5t1mKyWJN4jjfEOnizolI/NAHJ 9GcJnc4mLWyjdm6Y1OAJfEcGRg== -----END CERTIFICATE-----Generated at Mon Sep 21 15:46:43 2026 by rpki-client