$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: ARR4QcZCTM9Z1l+Z+eDhU8GS3UpFRLf08BrOYiqiEe0= Subject key identifier: 23:4F:F0:DD:BD:AA:D2:6A:B9:97:4B:BD:FF:F6:E0:25:2A:58:2B:FB Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: 01DB Signing time: Fri 25 Sep 2026 03:39:32 +0000 Manifest this update: Fri 25 Sep 2026 03:39:32 +0000 Manifest next update: Fri 02 Oct 2026 03:39:32 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: H8aK9eynw0fdRA9RncGWxKOxzUnHmb4cjagr+8FUCn8=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: nCvz3RU6o2FWhURZ/L0SyrKbzGjsC9xVoGzwhNL9hs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Sep 25 03:39:32 2026 GMT Not After : Oct 2 03:39:32 2026 GMT Subject: CN=6ab5ecf4-6a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:b4:1b:89:12:c1:3b:0c:1b:7e:63:24:47: 64:79:3a:e9:f3:2a:a3:0e:4e:f2:7a:c5:cb:3b:e2: 1f:56:c7:53:7e:68:5e:5e:9d:2f:cb:3f:56:6d:e6: 60:86:30:53:f5:7b:5d:51:84:7e:17:e8:f6:00:95: 46:8e:b4:87:a8:27:75:7d:9d:ab:c7:13:c2:a9:3e: 4a:4e:b3:5f:8b:c9:87:d5:2c:15:13:09:47:80:32: f0:40:0f:45:4a:4c:81:c0:d5:a3:bb:8c:00:46:5c: d7:d6:b8:b5:9f:83:ff:57:74:86:2d:db:8f:1b:1e: ae:ca:8d:16:cf:92:47:c3:cb:6b:97:0a:04:79:6f: ce:b6:72:e9:98:8b:90:20:59:86:3f:ff:b7:a3:48: a8:83:af:b5:ff:6c:2a:3d:57:fd:c0:9e:22:79:a7: 47:dc:24:3a:cc:28:d6:ce:2a:e7:6c:8f:ef:b8:f9: f6:ca:de:d0:d1:fb:94:ba:a7:7f:95:d1:6c:3c:e5: 81:b6:73:3a:c8:74:1a:21:78:16:66:58:7c:29:78: 3c:8d:15:da:7b:26:c2:f6:84:d9:7a:3b:a5:71:b3: e1:bf:93:68:ed:49:a9:fe:a9:5b:02:57:d3:9b:1f: 90:18:e0:61:5f:09:d4:a4:09:ce:49:ca:99:05:1a: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:F0:DD:BD:AA:D2:6A:B9:97:4B:BD:FF:F6:E0:25:2A:58:2B:FB X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:82:80:81:f4:38:58:1b:13:51:b4:c4:fe:20:61:c0:46:72: 75:b5:14:67:f8:8a:e2:dc:86:cc:56:2c:55:07:24:de:71:f6: 20:48:cf:83:15:ae:10:6a:a8:66:38:b2:e1:84:df:08:f4:a4: d0:13:15:ea:f1:c9:ca:f9:c1:5a:6d:a2:df:b0:8a:d5:12:a7: b3:36:ee:d2:c8:7a:18:7d:f4:15:f6:3b:95:d1:3a:9c:c0:ab: 9f:77:cc:fa:a2:07:b5:ab:97:d5:11:17:04:4b:94:04:7d:cc: ae:ff:9f:4c:8e:eb:d9:53:6c:e7:3e:cf:66:9e:d9:73:73:ff: c9:7d:34:01:15:a1:22:02:6a:30:3d:b5:29:0c:5f:a3:a9:ee: 45:33:5e:dc:ea:59:01:e4:da:fb:f1:f3:7a:be:4e:de:f8:91: ce:60:f0:36:e9:e9:11:11:4d:15:e7:6f:87:b9:c1:20:dd:07: 06:81:1d:15:35:6c:6f:53:3a:e4:b6:b4:e8:19:08:d5:3d:de: 55:06:35:02:1f:1b:e1:3a:01:37:ae:2f:b0:ea:98:25:fe:fd: 18:95:9e:d2:c9:3c:61:bd:4a:27:6a:4e:c0:26:d5:a9:2d:fb: 54:cc:d1:6f:c8:47:b7:0b:45:e3:db:d9:3e:c9:82:8b:50:3f: c5:93:6b:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjYwOTI1MDMzOTMyWhcNMjYxMDAyMDMzOTMyWjAYMRYwFAYD VQQDEw02YWI1ZWNmNC02YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVa0G4kSwTsMG35jJEdkeTrp8yqjDk7yesXLO+IfVsdTfmheXp0vyz9WbeZg hjBT9XtdUYR+F+j2AJVGjrSHqCd1fZ2rxxPCqT5KTrNfi8mH1SwVEwlHgDLwQA9F SkyBwNWju4wARlzX1ri1n4P/V3SGLduPGx6uyo0Wz5JHw8trlwoEeW/OtnLpmIuQ IFmGP/+3o0iog6+1/2wqPVf9wJ4ieadH3CQ6zCjWzirnbI/vuPn2yt7Q0fuUuqd/ ldFsPOWBtnM6yHQaIXgWZlh8KXg8jRXaeybC9oTZejulcbPhv5No7Ump/qlbAlfT mx+QGOBhXwnUpAnOScqZBRr0DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNP8N29 qtJquZdLvf/24CUqWCv7MB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdoKAgfQ4WBsTUbTE/iBhwEZydbUUZ/iK4tyGzFYsVQck3nH2IEjPgxWuEGqo Zjiy4YTfCPSk0BMV6vHJyvnBWm2i37CK1RKnszbu0sh6GH30FfY7ldE6nMCrn3fM +qIHtauX1REXBEuUBH3Mrv+fTI7r2VNs5z7PZp7Zc3P/yX00ARWhIgJqMD21KQxf o6nuRTNe3OpZAeTa+/Hzer5O3viRzmDwNunpERFNFedvh7nBIN0HBoEdFTVsb1M6 5La06BkI1T3eVQY1Ah8b4ToBN64vsOqYJf79GJWe0sk8Yb1KJ2pOwCbVqS37VMzR b8hHtwtF49vZPsmCi1A/xZNrGw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:26:41 2026 by rpki-client