$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: 29sI4SUEOGpdQv3sikokXu1LkHAPkZicexp2mhmckKg= Subject key identifier: 9E:82:CA:65:A2:06:A7:CB:13:C4:99:BB:BC:B7:60:BD:E3:7D:8E:05 Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0D47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0D3D Signing time: Sun 20 Sep 2026 18:06:25 +0000 Manifest this update: Sun 20 Sep 2026 18:06:25 +0000 Manifest next update: Sun 27 Sep 2026 18:06:25 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: JMo+2DbggnliwEVwshRDdlsLznDlND5UXhI54l8tMXE=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Sep 20 18:06:25 2026 GMT Not After : Sep 27 18:06:25 2026 GMT Subject: CN=6ab020a1-b66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:82:8b:15:6f:36:e3:c2:4c:24:31:ec:0f: 74:75:bf:22:ee:81:37:c4:e8:f9:c1:aa:7d:0f:93: 4e:85:d2:2e:93:6e:fd:fa:35:36:63:c0:62:c3:8a: 8b:71:e7:b3:94:0a:53:36:7a:f1:8e:a0:df:6d:1d: d0:b9:ef:07:68:b8:20:8c:30:61:0b:a7:77:4b:d9: b9:d8:fa:9e:51:7d:33:13:04:ca:72:ed:fc:35:4b: 37:b1:f4:7c:93:dc:4b:61:d2:ee:f9:55:08:e1:3f: 35:63:05:74:ee:3f:1e:c0:f0:48:04:80:81:a0:e7: b0:43:06:bb:71:f5:99:5f:cc:dc:68:32:48:cf:28: ac:13:d9:32:77:a3:56:9f:ba:6b:e9:f2:67:2d:19: 50:e4:64:59:d9:51:ea:9f:b2:ce:53:b7:8f:ee:44: b8:a3:69:5a:a4:66:7a:33:34:c6:4a:1f:b4:90:5c: 15:33:a7:32:7e:b2:8b:3e:56:7f:6b:74:3b:ac:f7: ad:c7:a0:c3:df:74:dd:0e:85:98:48:7f:73:e5:2f: 94:d4:b4:cd:20:52:e3:be:90:3c:75:ce:73:07:59: 56:ca:f6:71:cc:09:3f:b7:64:ee:bd:da:87:35:9d: c5:36:94:b2:e5:41:e6:4e:54:c6:7b:86:16:72:c8: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:CA:65:A2:06:A7:CB:13:C4:99:BB:BC:B7:60:BD:E3:7D:8E:05 X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c5:55:b1:62:d6:ba:3b:30:b1:5d:4b:cd:99:52:8c:8b:f8: db:29:fa:d6:99:dd:9e:10:02:4b:08:a3:9c:55:3b:02:ff:74: d0:88:26:98:20:5e:c8:b5:f2:09:3b:5f:ab:b9:fc:96:06:de: 4f:e1:b6:57:3d:a4:2e:5c:ae:93:7c:30:96:f1:59:ad:4c:5f: 3b:86:a0:bd:b0:0f:94:27:9f:91:13:22:f7:20:29:ec:48:97: 7f:6e:05:77:bc:de:df:1b:98:1d:0d:45:a9:5f:6a:ae:f0:81: 8d:b0:f6:1d:2b:16:97:91:28:f2:3a:7e:a5:03:db:ca:36:43: 13:2b:7a:a2:5b:aa:0c:07:66:4a:80:1c:0b:ae:c6:bc:f0:d9: 27:71:9c:35:2c:5f:b0:b0:c5:79:7c:d3:22:5b:c8:fc:c6:2c: 39:84:ee:98:2a:28:41:1b:54:f8:5e:95:34:85:d5:6f:aa:fc: 86:c5:bb:9c:f3:14:fa:85:43:f9:25:97:e3:9f:d3:50:0f:6d: 05:a0:f0:31:7b:46:8e:1c:3e:da:0e:fe:ef:53:c3:20:6f:51: f4:c0:57:cb:82:8c:27:4d:ea:56:c9:69:87:7f:b1:3b:4d:85: 92:40:3a:4f:2e:ba:3a:b3:06:e9:26:cf:4a:57:c8:05:9d:0a: 43:86:de:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjYwOTIwMTgwNjI1WhcNMjYwOTI3MTgwNjI1WjAYMRYwFAYD VQQDEw02YWIwMjBhMS1iNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2WCixVvNuPCTCQx7A90db8i7oE3xOj5wap9D5NOhdIuk279+jU2Y8Biw4qL ceezlApTNnrxjqDfbR3Que8HaLggjDBhC6d3S9m52PqeUX0zEwTKcu38NUs3sfR8 k9xLYdLu+VUI4T81YwV07j8ewPBIBICBoOewQwa7cfWZX8zcaDJIzyisE9kyd6NW n7pr6fJnLRlQ5GRZ2VHqn7LOU7eP7kS4o2lapGZ6MzTGSh+0kFwVM6cyfrKLPlZ/ a3Q7rPetx6DD33TdDoWYSH9z5S+U1LTNIFLjvpA8dc5zB1lWyvZxzAk/t2TuvdqH NZ3FNpSy5UHmTlTGe4YWcsiw6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6CymWi BqfLE8SZu7y3YL3jfY4FMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs8VVsWLWujswsV1LzZlSjIv42yn61pndnhACSwijnFU7Av900IgmmCBeyLXy CTtfq7n8lgbeT+G2Vz2kLlyuk3wwlvFZrUxfO4agvbAPlCefkRMi9yAp7EiXf24F d7ze3xuYHQ1FqV9qrvCBjbD2HSsWl5Eo8jp+pQPbyjZDEyt6oluqDAdmSoAcC67G vPDZJ3GcNSxfsLDFeXzTIlvI/MYsOYTumCooQRtU+F6VNIXVb6r8hsW7nPMU+oVD +SWX45/TUA9tBaDwMXtGjhw+2g7+71PDIG9R9MBXy4KMJ03qVslph3+xO02FkkA6 Ty66OrMG6SbPSlfIBZ0KQ4belw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:17:23 2026 by rpki-client