$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: fvrmOF+jmHszlAvEQo/gK/azwz8c7gcrjSOAAt5i3Tg= Subject key identifier: F7:81:70:89:CC:66:16:4B:02:C7:26:87:B6:C2:B8:85:C0:68:86:B7 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 052A Signing time: Tue 22 Sep 2026 23:18:35 +0000 Manifest this update: Tue 22 Sep 2026 23:18:34 +0000 Manifest next update: Tue 29 Sep 2026 23:18:34 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: rRP9BGwabOXh4K3vpTiJlTiL5MiS4K9wzOjQ2wUA0EA=) 2: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 3: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 4: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 5: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 6: C81C448AAE0511F18D02DF5C4B11F970.roa (hash: lmYB0jIm/G2KR+F1EFuW8P13BJJlTqG79RhiSa3M/5Q=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 8: 04018F58A75A11F1998E3A213411F970.roa (hash: Br8VWReNn2kIUilsRcPk+KsT6Kue3Sa/9TUPm+SrlEU=) 9: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 10: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Sep 22 23:18:34 2026 GMT Not After : Sep 29 23:18:34 2026 GMT Subject: CN=6ab30cca-b0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:ed:f2:d7:95:d7:fa:3f:49:aa:fc:b7:bd: ae:e9:42:b8:d7:fe:66:8e:21:c4:38:a5:5b:9f:aa: 0a:50:b0:46:e4:ba:c7:ad:27:18:97:13:df:0e:73: 90:96:15:08:36:8b:da:79:65:c3:0d:37:8f:cb:a8: 56:40:f1:db:f6:71:13:b2:a5:4c:83:1a:5f:37:07: 12:ea:57:bf:17:68:c8:ce:f2:a0:0f:0f:84:6d:b3: 0b:e1:1a:44:7c:b3:d7:a5:a7:74:15:ba:d0:9e:5c: a3:35:0d:08:12:aa:31:19:a0:72:df:86:11:77:a7: cd:98:94:a6:29:68:b7:a6:6e:ee:8b:f0:97:33:a5: da:25:3f:82:16:61:fc:01:4f:3c:07:58:a2:ed:fe: ac:40:06:f7:ee:6b:09:46:ad:1c:1f:04:da:52:5a: 24:50:12:bb:4a:10:74:0c:82:e8:91:7e:aa:de:ca: 4e:ba:b5:40:5c:95:14:8a:54:e5:aa:12:e0:38:d9: 0b:c0:80:c5:29:99:8d:ff:df:3f:67:7a:fc:39:76: c3:50:a0:87:cf:0a:0f:b3:8c:a2:0f:8a:6c:0b:6d: a2:92:7a:50:ae:42:14:8f:23:11:2b:fa:e5:7e:29: 15:ad:9c:19:91:4e:7d:6e:7c:07:a1:a4:83:56:7d: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:81:70:89:CC:66:16:4B:02:C7:26:87:B6:C2:B8:85:C0:68:86:B7 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:42:09:9f:f8:bb:f6:58:1f:2c:0a:03:a5:5e:27:fd:cd: a1:ec:4c:0e:da:e0:08:0f:32:34:d5:c1:15:6d:67:c1:bf:26: 3a:7a:fd:6f:58:59:8b:7c:28:70:6e:f7:6e:f6:4a:93:c7:fe: 45:a6:2a:cc:4c:c2:67:a9:ae:7b:31:76:fd:84:ac:8f:aa:5f: dc:06:a4:ed:df:6a:47:b5:49:7b:15:85:53:25:1e:c6:71:46: 93:bb:b1:03:c7:b9:1f:00:87:1c:e9:8e:6c:2a:f5:7c:41:ff: 64:b8:a8:29:e4:a2:83:d3:3e:82:22:2d:92:c8:5b:d4:dc:8c: ad:fe:eb:bb:8c:ac:87:2f:af:73:85:c0:6a:cd:6b:dd:0a:bf: 5e:2b:b5:d3:de:df:91:65:90:73:9c:32:cc:a3:96:ac:53:7a: 73:e1:ba:25:23:81:26:58:dd:28:95:51:7a:e1:1f:98:67:f4: 12:39:7f:2c:bd:b6:d2:80:80:2f:4a:50:c8:79:9d:6c:99:49: ac:4c:e0:ad:c6:a9:22:fe:0f:2a:77:d2:5e:fd:61:b5:ce:f8: de:f0:55:a9:07:79:1b:88:41:ca:70:6a:2a:e8:9a:5b:01:ca: 72:71:68:cc:c5:5e:7a:eb:03:2c:0d:69:6d:fd:3c:7d:38:cb: 80:80:10:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwOTIyMjMxODM0WhcNMjYwOTI5MjMxODM0WjAYMRYwFAYD VQQDEw02YWIzMGNjYS1iMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjKLt8teV1/o/Sar8t72u6UK41/5mjiHEOKVbn6oKULBG5LrHrScYlxPfDnOQ lhUINovaeWXDDTePy6hWQPHb9nETsqVMgxpfNwcS6le/F2jIzvKgDw+EbbML4RpE fLPXpad0FbrQnlyjNQ0IEqoxGaBy34YRd6fNmJSmKWi3pm7ui/CXM6XaJT+CFmH8 AU88B1ii7f6sQAb37msJRq0cHwTaUlokUBK7ShB0DILokX6q3spOurVAXJUUilTl qhLgONkLwIDFKZmN/98/Z3r8OXbDUKCHzwoPs4yiD4psC22iknpQrkIUjyMRK/rl fikVrZwZkU59bnwHoaSDVn3HGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeBcInM ZhZLAscmh7bCuIXAaIa3MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvJCCZ/4u/ZYHywKA6VeJ/3NoexMDtrgCA8yNNXBFW1nwb8mOnr9b1hZi3wo cG73bvZKk8f+RaYqzEzCZ6muezF2/YSsj6pf3Aak7d9qR7VJexWFUyUexnFGk7ux A8e5HwCHHOmObCr1fEH/ZLioKeSig9M+giItkshb1NyMrf7ru4yshy+vc4XAas1r 3Qq/Xiu1097fkWWQc5wyzKOWrFN6c+G6JSOBJljdKJVReuEfmGf0Ejl/LL220oCA L0pQyHmdbJlJrEzgrcapIv4PKnfSXv1htc743vBVqQd5G4hBynBqKuiaWwHKcnFo zMVeeusDLA1pbf08fTjLgIAQAA== -----END CERTIFICATE-----Generated at Thu Sep 24 00:33:17 2026 by rpki-client