$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: 1//cRAPf/XzmDInh9SIExUuITzR5Mju4//oM+6keEhE= Subject key identifier: F7:B6:34:0A:BC:16:6F:0F:62:5C:80:2C:67:15:E2:F6:72:E6:B3:7F Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0875 Signing time: Sun 20 Sep 2026 20:44:33 +0000 Manifest this update: Sun 20 Sep 2026 20:44:32 +0000 Manifest next update: Sun 27 Sep 2026 20:44:32 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: kct82JfPd34imhcDhtZmR2VhNI8pexA1mAAgtKWKjmA=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Sep 20 20:44:32 2026 GMT Not After : Sep 27 20:44:32 2026 GMT Subject: CN=6ab045b1-d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:73:a2:80:95:c1:d1:ef:30:94:29:26:5f: 83:df:39:ea:3f:2a:98:0d:59:32:c1:ad:de:92:f7: a1:47:24:da:13:11:ab:3c:dd:46:a7:cf:93:02:a9: 77:cb:d3:bd:62:60:36:df:e0:1f:07:24:56:1f:c2: 0d:26:f6:82:22:43:44:05:b7:76:51:30:93:17:13: 93:c3:2e:fc:20:f9:7f:4b:b5:9a:aa:0c:87:82:35: 80:d6:4f:3d:1f:e0:9d:b3:05:8f:97:34:79:ef:b6: 3c:34:55:ba:b4:66:f2:83:9c:b5:67:57:88:fa:68: d4:32:50:96:f2:63:1a:c6:a1:7f:0f:d3:e7:96:d4: be:30:58:bc:17:d1:61:60:7f:1a:94:55:83:71:70: 90:73:60:17:b8:88:60:ce:1c:63:bd:c7:cc:1f:1f: bf:65:13:df:58:c5:c5:d0:b3:6d:40:fd:38:61:34: 8f:5a:96:b9:75:56:e5:fa:07:bc:59:79:48:d8:12: 33:fa:c8:b8:f5:35:75:65:64:9f:eb:cb:28:6b:9e: 3c:ef:1d:4f:9f:a2:3d:b2:b1:59:15:cd:73:a0:28: e3:e3:4d:aa:9c:a0:fe:56:ba:58:12:b7:b7:20:d7: 22:5a:a4:30:70:99:11:0a:b0:25:d9:b2:36:49:60: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:34:0A:BC:16:6F:0F:62:5C:80:2C:67:15:E2:F6:72:E6:B3:7F X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ab:23:f3:a6:7e:51:17:30:34:5a:84:80:e7:78:0b:09:15: f5:21:e8:6d:c4:37:b8:f4:f9:ea:32:e1:2a:8f:89:be:49:bb: 73:db:49:d1:2a:04:aa:0c:e6:21:0d:75:ad:ed:18:a8:ed:96: 1e:2c:c7:e4:d5:74:9e:99:62:73:6d:49:05:e2:98:f7:30:89: ea:e9:66:57:98:4b:e8:d9:fc:6a:80:52:c3:e8:d3:a8:ee:e9: 2c:89:62:97:b8:41:54:db:2c:41:4d:6d:96:fd:5f:49:fa:21: b1:69:cc:9b:e2:29:e6:d2:cb:f8:a1:ac:41:98:27:61:35:d2: 60:48:32:ad:53:9f:0c:c7:13:be:78:a1:a1:7a:4f:fc:6a:6c: de:2c:59:35:c3:b5:19:77:17:69:a1:a3:12:19:06:61:26:77: c7:32:3c:ef:2f:73:af:18:46:cb:2d:5f:18:a5:12:15:1a:94: 0b:fb:3f:6c:53:5a:cf:fe:25:44:1d:82:a6:46:d4:69:09:4f: fe:cf:61:9e:ec:d0:2e:6b:5b:9b:fc:1a:ca:c0:db:fd:e9:95: 2f:c8:31:ec:4f:24:8a:94:f4:9e:d0:52:e7:09:2a:af:41:0b: 02:5d:f9:17:62:1e:31:7a:bc:3b:d2:19:4d:e9:21:67:d7:38: 70:f6:90:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwOTIwMjA0NDMyWhcNMjYwOTI3MjA0NDMyWjAYMRYwFAYD VQQDEw02YWIwNDViMS1kOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc1zooCVwdHvMJQpJl+D3znqPyqYDVkywa3ekvehRyTaExGrPN1Gp8+TAql3 y9O9YmA23+AfByRWH8INJvaCIkNEBbd2UTCTFxOTwy78IPl/S7WaqgyHgjWA1k89 H+CdswWPlzR577Y8NFW6tGbyg5y1Z1eI+mjUMlCW8mMaxqF/D9PnltS+MFi8F9Fh YH8alFWDcXCQc2AXuIhgzhxjvcfMHx+/ZRPfWMXF0LNtQP04YTSPWpa5dVbl+ge8 WXlI2BIz+si49TV1ZWSf68soa5487x1Pn6I9srFZFc1zoCjj402qnKD+VrpYEre3 INciWqQwcJkRCrAl2bI2SWChNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPe2NAq8 Fm8PYlyALGcV4vZy5rN/MB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqsj86Z+URcwNFqEgOd4CwkV9SHobcQ3uPT56jLhKo+Jvkm7c9tJ0SoEqgzm IQ11re0YqO2WHizH5NV0nplic21JBeKY9zCJ6ulmV5hL6Nn8aoBSw+jTqO7pLIli l7hBVNssQU1tlv1fSfohsWnMm+Ip5tLL+KGsQZgnYTXSYEgyrVOfDMcTvnihoXpP /Gps3ixZNcO1GXcXaaGjEhkGYSZ3xzI87y9zrxhGyy1fGKUSFRqUC/s/bFNaz/4l RB2CpkbUaQlP/s9hnuzQLmtbm/waysDb/emVL8gx7E8kipT0ntBS5wkqr0ELAl35 F2IeMXq8O9IZTekhZ9c4cPaQ3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 21:22:03 2026 by rpki-client