$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: 6tSeR+oLZjaPRLPbWW4QihZ0/2XB+uLvjExb1pnclO0= Subject key identifier: D9:A7:0E:21:4D:8B:75:CE:98:B2:A8:94:FB:45:6D:37:D2:9B:1D:CE Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 014B Signing time: Mon 21 Sep 2026 05:29:11 +0000 Manifest this update: Mon 21 Sep 2026 05:29:10 +0000 Manifest next update: Mon 28 Sep 2026 05:29:10 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: p6t7QZoNv23CymL4qNSNJZy9KWaEjIGRw9WaQLf8u64=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Sep 21 05:29:10 2026 GMT Not After : Sep 28 05:29:10 2026 GMT Subject: CN=6ab0c0a7-b1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:e3:e6:58:e4:e2:5c:c5:1f:e2:3d:59:82: 8f:a3:bd:87:e4:e3:8b:90:32:a1:0d:e0:dd:73:d4: b7:19:9e:ad:80:62:a7:99:eb:10:8b:f9:e3:1c:98: 71:e4:e6:20:f8:55:ba:4b:b0:2d:4f:13:35:58:1c: 70:53:d9:78:61:a5:ac:3a:29:d3:34:9c:52:c6:c3: 4f:3f:d8:ac:ab:5c:15:84:60:d4:74:3e:66:bb:2e: e3:b0:e5:fa:d3:30:0f:2c:81:fd:3e:12:89:bc:71: 60:dc:e5:46:db:c2:91:2d:a3:21:3e:d7:f6:a7:6d: 34:41:fb:66:cd:30:ce:2b:02:c8:ed:41:55:55:23: 3d:b0:ae:7a:51:1e:de:7e:12:18:ad:69:0d:12:a3: 35:bb:38:d4:90:d4:08:78:14:ab:d5:c0:19:26:9e: 49:79:fe:ea:37:85:dd:bc:f3:98:66:c8:3a:d1:fe: a1:bd:35:72:e4:ad:e9:2d:0b:cd:3c:4d:9c:17:42: e6:dd:ff:7e:4b:01:74:72:87:06:26:18:18:f0:f6: 82:16:d1:fb:4e:ad:95:07:41:80:07:e1:48:cd:7c: 55:93:39:0f:be:5f:70:96:97:83:cb:4d:48:62:62: 0d:d4:7a:cf:67:85:cc:88:32:79:1a:8a:ee:0b:e5: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:0E:21:4D:8B:75:CE:98:B2:A8:94:FB:45:6D:37:D2:9B:1D:CE X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fb:10:59:e0:f7:a1:a3:b7:80:8e:ef:8c:ad:90:a4:59:aa: 80:7b:4c:7a:37:83:d5:3a:7e:8f:56:3b:b1:33:e8:2e:07:93: df:3a:b9:f3:47:9d:fb:1a:ff:27:94:13:34:24:1d:7b:03:2e: b1:9e:2e:95:0d:04:8e:14:b5:76:21:8c:19:dc:70:39:1d:dd: e4:7d:3d:16:ce:f1:6e:8e:78:fd:57:49:44:18:ee:9c:2a:05: 05:1d:cc:1c:9a:1d:d6:2d:a2:6e:2f:0d:4a:0d:71:e0:0f:2a: 20:2f:ac:73:88:72:a9:6a:87:de:d4:7c:21:3e:95:54:56:dd: ed:3c:4c:bd:35:aa:c5:c5:a8:23:40:ce:f6:59:4a:bd:e6:69: 86:df:89:58:84:5c:b4:c4:49:ef:d2:65:3c:b5:b2:17:76:d8: ee:30:bc:80:ac:06:31:1c:ce:c9:f4:87:4f:60:b1:39:c2:94: f9:40:86:a2:4a:54:c6:f2:b2:a5:15:72:da:3c:14:1f:b7:ee: 7e:f1:a3:f3:78:cd:ef:a5:69:c5:1f:e5:2d:dc:27:98:80:0a: ef:eb:70:8c:2f:be:13:81:6c:4b:a3:0d:14:86:96:1a:56:24: 20:58:0c:1b:55:f1:fe:ae:61:4a:14:ec:48:e0:4a:fe:31:be: 51:5c:c8:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0QTYxMTAvBgNVBAUTKERDODBDODVFNTEwMTA4OUFCMjQyNUQzRkM5MTc3OTg1 QTAxMjVDNkUwHhcNMjYwOTIxMDUyOTEwWhcNMjYwOTI4MDUyOTEwWjAYMRYwFAYD VQQDEw02YWIwYzBhNy1iMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoTj5ljk4lzFH+I9WYKPo72H5OOLkDKhDeDdc9S3GZ6tgGKnmesQi/njHJhx 5OYg+FW6S7AtTxM1WBxwU9l4YaWsOinTNJxSxsNPP9isq1wVhGDUdD5muy7jsOX6 0zAPLIH9PhKJvHFg3OVG28KRLaMhPtf2p200QftmzTDOKwLI7UFVVSM9sK56UR7e fhIYrWkNEqM1uzjUkNQIeBSr1cAZJp5Jef7qN4XdvPOYZsg60f6hvTVy5K3pLQvN PE2cF0Lm3f9+SwF0cocGJhgY8PaCFtH7Tq2VB0GAB+FIzXxVkzkPvl9wlpeDy01I YmIN1HrPZ4XMiDJ5GoruC+UgRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmnDiFN i3XOmLKolPtFbTfSmx3OMB8GA1UdIwQYMBaAFNyAyF5RAQiaskJdP8kXeYWgElxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83MTcxQkJGMkQx OUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNKcXlRbDBfeVJkNWhhQVNY RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzRBNi83MTcxQkJGMkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNK cXlRbDBfeVJkNWhhQVNYRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd/sQWeD3oaO3gI7vjK2QpFmqgHtMejeD1Tp+j1Y7sTPoLgeT3zq580ed+xr/ J5QTNCQdewMusZ4ulQ0EjhS1diGMGdxwOR3d5H09Fs7xbo54/VdJRBjunCoFBR3M HJod1i2ibi8NSg1x4A8qIC+sc4hyqWqH3tR8IT6VVFbd7TxMvTWqxcWoI0DO9llK veZpht+JWIRctMRJ79JlPLWyF3bY7jC8gKwGMRzOyfSHT2CxOcKU+UCGokpUxvKy pRVy2jwUH7fufvGj83jN76VpxR/lLdwnmIAK7+twjC++E4FsS6MNFIaWGlYkIFgM G1Xx/q5hShTsSOBK/jG+UVzIIA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:21 2026 by rpki-client