$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: 0uj408mf7qL+23hLO6vnqBrV3Vsm6r5zgz6+WHCSWfs= Subject key identifier: F5:0C:F8:32:E0:C7:E6:E5:86:AA:3C:C1:A5:10:F6:9E:4E:D9:9E:ED Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: CD Signing time: Tue 13 Oct 2026 07:33:37 +0000 Manifest this update: Tue 13 Oct 2026 07:33:36 +0000 Manifest next update: Tue 20 Oct 2026 07:33:36 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: Dgrp/n1LlKmp3jWvY6h4duyCnNbzvMsIykRjXgh/wjk=) 2: AFAE3E5E918011F18FBECB883611F970.roa (hash: P12qj923E/5jr1ZhYk275Y94yn2Tp1wO6IKREp3e+oA=) 3: 5A3CD118919611F1B67C33A881EE528E.roa (hash: zdLjE/EGWkfjrDMkEsokmmRyblKFb7V9ugMSSFqd5os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 07:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: Oct 13 07:33:36 2026 GMT Not After : Oct 20 07:33:36 2026 GMT Subject: CN=6acdded1-f8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:16:f0:f1:7e:16:9e:e1:f6:2b:3b:bf:a9: 4d:54:93:39:56:61:d9:99:63:fc:53:9a:63:5d:c8: 72:ad:9e:dc:ac:cc:be:1c:a4:66:72:4b:c3:84:89: a1:1e:de:fb:83:f8:ae:ad:0d:89:8a:8f:c7:cc:e0: da:d5:db:33:1b:92:19:2a:11:f8:e3:1b:54:9a:82: cb:83:48:7a:97:05:c5:ce:61:ee:b5:ba:4a:03:37: 6d:9b:b8:15:c0:45:35:fb:13:b1:ac:c0:0d:b7:c2: 70:ee:6d:5d:ab:de:9f:0a:d6:41:ae:89:86:6e:f4: 2e:a7:5e:ae:a0:70:bc:b4:5e:27:5c:d2:58:32:0d: 07:8b:71:96:ec:ca:a4:71:94:74:52:15:14:78:79: 02:c7:9d:eb:0f:32:1a:da:51:bd:14:81:dc:83:38: 72:29:41:b2:7f:6f:65:19:e4:df:74:f9:d9:2d:07: b1:2e:92:e5:02:29:8f:04:87:a3:e2:ea:c0:5f:f9: 85:ca:6c:25:fc:b3:f5:17:c3:5b:44:29:0c:45:0d: 6e:d0:38:cf:43:97:88:59:48:6c:31:b3:cb:b4:a1: 88:b7:5c:07:6d:2c:60:14:18:ce:25:9c:57:24:3b: a8:80:db:77:53:cc:52:cd:bb:1a:32:5f:1e:21:a9: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0C:F8:32:E0:C7:E6:E5:86:AA:3C:C1:A5:10:F6:9E:4E:D9:9E:ED X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:45:bc:6e:ce:fd:2f:6d:48:4c:96:9a:b9:e9:b4:cc:5e:95: ac:f9:3a:68:a0:cc:e4:b5:a5:a2:8a:68:cf:18:eb:5a:a7:ef: 2c:d6:2c:60:64:8a:82:c8:6c:63:d9:ad:59:12:25:5e:3b:18: b4:29:2a:6b:c1:9e:0a:9a:a1:d3:f7:07:6c:46:f1:94:97:da: 2e:33:03:d8:6b:60:00:60:9a:da:84:cd:46:da:29:7c:95:db: f5:9e:fb:a1:bd:c9:d5:9a:60:ff:c3:79:8e:9e:1b:5c:7f:7d: b4:13:b8:e7:2f:1e:0d:30:7c:f0:df:40:a3:07:a1:b2:3d:cd: 77:a4:66:af:11:7b:ae:48:d1:39:dc:da:db:9a:93:a0:b4:39: ce:74:d0:4b:dd:61:33:95:a2:60:4c:95:a9:43:fc:14:90:6e: 5f:36:b1:1a:7f:e0:f5:9f:77:e3:69:a8:f5:61:86:c2:26:12: 4f:da:30:3d:a6:30:b1:d6:08:4a:55:bb:3f:ca:db:87:61:02: 90:0c:21:cb:5b:d9:a0:95:1b:2f:fc:27:4e:05:49:e9:2c:50: b8:3a:57:42:06:05:67:c8:d5:72:f0:3a:38:16:eb:69:28:c9: 0a:35:3b:78:2d:88:d3:3e:52:26:8a:56:65:78:2b:1e:8f:dd: 9e:7a:49:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxOUIxMTAvBgNVBAUTKERGMjJBOUE1N0I3RDNBOEFFQjEyNEQ2OTBDNzkxNzA2 NkI0REI1OUUwHhcNMjYxMDEzMDczMzM2WhcNMjYxMDIwMDczMzM2WjAYMRYwFAYD VQQDEw02YWNkZGVkMS1mOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GYW8PF+Fp7h9is7v6lNVJM5VmHZmWP8U5pjXchyrZ7crMy+HKRmckvDhImh Ht77g/iurQ2Jio/HzODa1dszG5IZKhH44xtUmoLLg0h6lwXFzmHutbpKAzdtm7gV wEU1+xOxrMANt8Jw7m1dq96fCtZBromGbvQup16uoHC8tF4nXNJYMg0Hi3GW7Mqk cZR0UhUUeHkCx53rDzIa2lG9FIHcgzhyKUGyf29lGeTfdPnZLQexLpLlAimPBIej 4urAX/mFymwl/LP1F8NbRCkMRQ1u0DjPQ5eIWUhsMbPLtKGIt1wHbSxgFBjOJZxX JDuogNt3U8xSzbsaMl8eIalA/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUM+DLg x+blhqo8waUQ9p5O2Z7tMB8GA1UdIwQYMBaAFN8iqaV7fTqK6xJNaQx5FwZrTbWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTE5Qi9EQUI4NUUyOEEz NzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9vcnJFazFwREhrWEJtdE50 WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTE5Qi9EQUI4NUUyOEEzNzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9v cnJFazFwREhrWEJtdE50WjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOUW8bs79L21ITJaauem0zF6VrPk6aKDM5LWloopozxjrWqfvLNYsYGSKgshs Y9mtWRIlXjsYtCkqa8GeCpqh0/cHbEbxlJfaLjMD2GtgAGCa2oTNRtopfJXb9Z77 ob3J1Zpg/8N5jp4bXH99tBO45y8eDTB88N9Aowehsj3Nd6RmrxF7rkjROdza25qT oLQ5znTQS91hM5WiYEyVqUP8FJBuXzaxGn/g9Z9342mo9WGGwiYST9owPaYwsdYI SlW7P8rbh2ECkAwhy1vZoJUbL/wnTgVJ6SxQuDpXQgYFZ8jVcvA6OBbraSjJCjU7 eC2I0z5SJopWZXgrHo/dnnpJOQ== -----END CERTIFICATE-----Generated at Tue Oct 13 21:12:36 2026 by rpki-client