$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: DX8z2wY1HBcabE2hkTMUDh0kSyW1k5Y9PUDZ3GwAzWw= Subject key identifier: 2C:12:E0:BD:E2:21:AA:BD:28:70:49:B4:49:1E:B2:BD:E2:8D:62:A7 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 08B5 Signing time: Sat 26 Sep 2026 20:46:18 +0000 Manifest this update: Sat 26 Sep 2026 20:46:17 +0000 Manifest next update: Sat 03 Oct 2026 20:46:17 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: b2FTx0eiSV6wy+2SvGZ/U88onxubzlO55tpIl1Einqo=) 2: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=) 4: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Sep 26 20:46:17 2026 GMT Not After : Oct 3 20:46:17 2026 GMT Subject: CN=6ab82f19-0d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:51:c7:d4:cc:f5:2b:03:d2:ef:d7:62:6d: 68:21:fc:3a:66:d4:1c:c2:73:f1:b0:f3:be:e4:91: 02:f5:8a:d9:e3:ad:77:4d:e6:f4:e0:8c:a4:c4:e4: b8:d9:94:f2:6e:df:dd:52:73:42:69:66:39:16:4a: f3:3f:09:16:f1:7d:71:fe:56:b1:f3:4c:4b:34:47: 91:44:25:a3:6c:76:84:cc:23:65:ab:10:c5:57:82: b4:04:49:7d:0b:98:5f:6c:5d:5d:f9:f5:a1:95:f3: 62:aa:97:dc:e5:b0:66:a8:18:88:3f:bc:20:e2:1c: 99:98:8a:8c:68:36:44:3a:ee:05:75:b8:66:c5:13: b9:c0:e3:ea:39:c2:a8:69:d0:50:22:c8:08:44:31: 32:5a:00:4f:29:5c:ee:8d:4f:a7:94:ea:d9:3c:8f: 31:35:9f:a4:72:3f:0f:52:73:c9:9c:ce:6a:a3:24: c3:f6:fb:69:d1:77:a9:bb:be:ef:d1:6d:8a:7e:a5: 2c:52:64:eb:55:04:27:6b:c4:86:22:21:31:32:3c: 67:bc:35:99:1b:f1:8e:ee:be:f3:64:5e:12:65:54: 5f:70:78:77:e8:31:ba:39:44:3f:99:2f:f5:0b:40: 43:76:bf:95:b8:7f:16:4b:02:5c:57:69:a7:23:a9: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:12:E0:BD:E2:21:AA:BD:28:70:49:B4:49:1E:B2:BD:E2:8D:62:A7 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:4d:fc:e4:cd:67:d3:90:eb:ae:4e:58:99:a5:19:af:d0:b1: 01:05:44:8e:4a:2d:6a:df:c3:dd:f7:e1:41:55:2b:f1:f3:6f: b1:a1:08:eb:10:6e:5c:d4:af:ca:2e:fb:9f:e5:2d:da:79:c8: a4:8e:bb:fc:81:36:0a:ab:3d:af:a3:d0:c0:c9:95:a9:41:8a: be:e6:a4:f1:41:26:dd:0d:31:db:d7:13:7d:77:c7:80:e4:9b: ce:90:a6:fb:71:85:02:8e:6a:94:b1:d9:ce:de:2f:e8:da:5b: b6:ea:62:2c:49:e9:42:60:41:bd:59:4e:46:f8:0b:98:99:91: 71:9d:43:13:f8:bf:15:c3:16:fc:a9:15:72:82:4c:05:20:28: ac:4b:e9:11:87:c2:aa:66:36:7e:e8:0c:ec:71:72:c2:78:34: a7:c8:a4:b4:de:d5:98:d8:32:b2:33:b9:a9:90:c3:f2:94:a9: 7a:6f:b3:05:ae:67:7e:96:09:37:1d:a4:1b:2e:4c:be:08:02: b4:a7:d9:33:cf:24:a0:ee:93:fb:ae:cd:7a:19:77:0a:be:d1: 8e:2a:8b:c5:0b:15:74:6c:2c:2d:cb:83:85:cf:b2:4f:84:7e: 40:80:12:a1:b7:d5:24:6c:01:06:1d:61:69:38:81:e7:05:a5: ec:80:71:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwOTI2MjA0NjE3WhcNMjYxMDAzMjA0NjE3WjAYMRYwFAYD VQQDEw02YWI4MmYxOS0wZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndNRx9TM9SsD0u/XYm1oIfw6ZtQcwnPxsPO+5JEC9YrZ4613Teb04IykxOS4 2ZTybt/dUnNCaWY5FkrzPwkW8X1x/lax80xLNEeRRCWjbHaEzCNlqxDFV4K0BEl9 C5hfbF1d+fWhlfNiqpfc5bBmqBiIP7wg4hyZmIqMaDZEOu4FdbhmxRO5wOPqOcKo adBQIsgIRDEyWgBPKVzujU+nlOrZPI8xNZ+kcj8PUnPJnM5qoyTD9vtp0Xepu77v 0W2KfqUsUmTrVQQna8SGIiExMjxnvDWZG/GO7r7zZF4SZVRfcHh36DG6OUQ/mS/1 C0BDdr+VuH8WSwJcV2mnI6kWNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwS4L3i Iaq9KHBJtEkesr3ijWKnMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy0385M1n05Drrk5YmaUZr9CxAQVEjkotat/D3ffhQVUr8fNvsaEI6xBuXNSv yi77n+Ut2nnIpI67/IE2Cqs9r6PQwMmVqUGKvuak8UEm3Q0x29cTfXfHgOSbzpCm +3GFAo5qlLHZzt4v6NpbtupiLEnpQmBBvVlORvgLmJmRcZ1DE/i/FcMW/KkVcoJM BSAorEvpEYfCqmY2fugM7HFywng0p8iktN7VmNgysjO5qZDD8pSpem+zBa5nfpYJ Nx2kGy5MvggCtKfZM88koO6T+67Nehl3Cr7RjiqLxQsVdGwsLcuDhc+yT4R+QIAS obfVJGwBBh1haTiB5wWl7IBxaA== -----END CERTIFICATE-----Generated at Mon Sep 28 20:54:15 2026 by rpki-client