$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: zvm2R+RG30u3GVsII23Pwds4H4snkuDF2sVbW28F6rk= Subject key identifier: B0:7D:30:8E:FF:AA:1D:2D:17:0E:F9:C3:A0:A2:EA:19:FB:03:C2:6D Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D93 Signing time: Mon 12 Oct 2026 18:11:50 +0000 Manifest this update: Mon 12 Oct 2026 18:11:49 +0000 Manifest next update: Mon 19 Oct 2026 18:11:49 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: 1wtQ9d8QFSea5+/JXjvXmLjw7YirFTkNe+F40/HhajY=) 2: 1801BD8CAB9411F1B59574584A11F970.roa (hash: 0hB7c5DdDlcRXfyZKhbTfTsymtv8P4mwAwktu4W3r0w=) 3: 72F244BEABA811F1826B2D015111F970.roa (hash: hsukBQ93b6WQF6W2mBCSw7TZemUo6Noun4GYm6N6B2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3558 (0xde6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Oct 12 18:11:49 2026 GMT Not After : Oct 19 18:11:49 2026 GMT Subject: CN=6acd22e6-cd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:da:6d:d3:ed:5f:33:dc:6f:5e:f0:2d:67: f9:c5:3c:01:b9:ff:e5:c0:3b:d8:86:89:f4:45:74: 66:e3:9c:ce:c2:54:99:74:32:c6:ef:ab:31:80:e3: 25:92:13:18:bd:a6:58:26:fe:c9:c6:7c:b8:f2:06: d7:2f:77:c1:74:e1:89:fe:c3:05:0d:2b:bd:47:48: 37:1d:aa:ab:7b:0b:41:13:79:49:60:e3:6c:7b:6f: 4c:ee:bb:69:9d:53:8d:25:d9:06:d5:bf:bf:c1:26: c2:cb:13:e0:f7:34:ba:c2:f9:d3:55:e5:8a:7f:38: 0c:53:1f:04:76:02:66:fd:62:68:0e:df:1f:65:d8: 7e:cc:4a:d8:7c:8b:d5:d6:ec:0a:21:3f:e3:c6:ec: a0:95:b8:93:9a:9e:7a:a4:dd:55:95:c7:cc:77:82: fe:95:89:82:30:05:cb:41:d4:eb:2d:31:75:50:cc: 6b:2d:63:42:b5:bd:8c:be:fc:c0:46:dc:52:43:72: 07:eb:6c:fc:a7:97:f7:5d:30:75:4b:9f:df:0b:db: d6:6c:1d:79:c6:d7:cd:b3:9e:fa:e0:27:57:3f:4a: ab:d7:72:43:6c:19:41:d5:6b:ef:4d:c4:15:71:c6: 3e:a1:db:c8:11:65:72:22:42:c9:a4:37:5e:fd:92: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7D:30:8E:FF:AA:1D:2D:17:0E:F9:C3:A0:A2:EA:19:FB:03:C2:6D X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:69:a0:2c:ff:8c:d7:58:87:f5:b6:85:06:be:ea:24:b6: 6a:49:b6:db:e7:94:fb:62:29:da:2c:73:73:7c:b2:58:f7:32: 1c:22:68:b3:ea:aa:84:cb:97:64:6d:f5:42:22:21:00:34:5e: 00:df:a6:7a:ec:e1:8d:53:23:91:2b:c9:81:7d:d2:81:f8:39: bd:99:ad:fc:9a:17:76:34:2c:1b:b4:bf:ff:62:65:6b:fd:ea: db:8f:a3:c5:00:90:fb:99:92:c8:86:fd:1f:2b:84:f7:53:fb: d4:9d:1a:56:1c:ab:6f:d8:2e:20:0d:ac:d2:45:56:40:b8:7a: 18:6a:b7:4e:08:4f:1e:8b:e7:f8:f2:02:62:71:ba:d5:6c:79: 0b:81:0c:ce:af:93:60:41:5e:de:b1:17:16:e9:4f:59:23:c0: 0c:8a:13:8a:9d:1b:52:74:13:ca:7e:38:48:1f:46:80:74:17: 99:78:a3:32:96:85:13:46:b8:8f:35:34:a5:0c:27:45:76:fc: 36:f8:ed:a5:b3:70:a7:31:41:31:44:55:7b:bb:08:66:1f:d6: 3a:eb:aa:ec:bd:fb:0c:fa:18:b0:2f:e1:1b:b7:3f:58:cb:ec: e3:c3:d9:87:cc:01:65:83:9f:1c:58:f6:29:89:1f:ca:e0:a5: 99:2f:3d:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYxMDEyMTgxMTQ5WhcNMjYxMDE5MTgxMTQ5WjAYMRYwFAYD VQQDEw02YWNkMjJlNi1jZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhTabdPtXzPcb17wLWf5xTwBuf/lwDvYhon0RXRm45zOwlSZdDLG76sxgOMl khMYvaZYJv7Jxny48gbXL3fBdOGJ/sMFDSu9R0g3HaqrewtBE3lJYONse29M7rtp nVONJdkG1b+/wSbCyxPg9zS6wvnTVeWKfzgMUx8EdgJm/WJoDt8fZdh+zErYfIvV 1uwKIT/jxuyglbiTmp56pN1VlcfMd4L+lYmCMAXLQdTrLTF1UMxrLWNCtb2MvvzA RtxSQ3IH62z8p5f3XTB1S5/fC9vWbB15xtfNs5764CdXP0qr13JDbBlB1WvvTcQV ccY+odvIEWVyIkLJpDde/ZKyOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLB9MI7/ qh0tFw75w6Ci6hn7A8JtMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyNpoCz/jNdYh/W2hQa+6iS2akm22+eU+2Ip2ixzc3yyWPcyHCJos+qqhMuX ZG31QiIhADReAN+meuzhjVMjkSvJgX3Sgfg5vZmt/JoXdjQsG7S//2Jla/3q24+j xQCQ+5mSyIb9HyuE91P71J0aVhyrb9guIA2s0kVWQLh6GGq3TghPHovn+PICYnG6 1Wx5C4EMzq+TYEFe3rEXFulPWSPADIoTip0bUnQTyn44SB9GgHQXmXijMpaFE0a4 jzU0pQwnRXb8NvjtpbNwpzFBMURVe7sIZh/WOuuq7L37DPoYsC/hG7c/WMvs48PZ h8wBZYOfHFj2KYkfyuClmS897Q== -----END CERTIFICATE-----Generated at Tue Oct 13 16:10:46 2026 by rpki-client