$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: XMiVJtINLY6xZ1c/zdMecHYGO2wQ/LpuVszzbAG2+IE= Subject key identifier: AB:FF:8B:4E:7F:C3:0B:DF:A4:C2:86:1C:2A:1F:1D:98:66:0E:E5:3F Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0231 Signing time: Sun 27 Sep 2026 03:00:38 +0000 Manifest this update: Sun 27 Sep 2026 03:00:37 +0000 Manifest next update: Sun 04 Oct 2026 03:00:37 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: XwoU58b2Yf0ry+aFIX7/s09RNWKlvPy1q8017KYY5W0=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: S+Y8oP//RYaIR2kO19UxtIdNUz76sF0XE/tof0f/xOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Sep 27 03:00:37 2026 GMT Not After : Oct 4 03:00:37 2026 GMT Subject: CN=6ab886d6-6e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:94:b6:76:c1:61:37:d8:cc:5d:24:96:cf: 6b:2d:4c:42:fa:8b:fc:51:53:17:b7:2b:4c:3f:7f: 82:38:2f:2f:18:21:28:3d:b3:51:99:c7:c7:5e:b5: 3d:52:ff:d7:30:08:9f:3d:76:93:ba:d7:67:ab:23: f2:0c:80:77:9e:a4:be:b3:b2:85:b6:af:45:4b:f5: e3:84:8f:62:4f:95:41:b8:4b:02:99:73:83:d4:19: eb:3c:d9:d8:6f:94:d4:2e:a8:75:89:89:26:00:1b: cd:75:6a:cd:13:7e:0d:63:f3:0b:91:a6:5b:34:b6: 53:7e:1f:00:98:c8:aa:dd:5d:24:95:06:7c:28:29: a4:f0:f6:00:f4:a0:8b:bc:08:d2:db:c7:77:b3:74: bb:95:05:bc:0f:3c:c3:3d:db:24:ac:7a:f0:c6:b6: 62:e6:1a:d0:fd:02:dd:31:43:07:bd:d8:f8:22:3a: 35:36:fa:d3:82:0e:99:e9:f1:85:17:af:c7:a4:84: 01:14:95:1f:22:84:28:46:c1:60:a4:96:d1:5f:d6: 18:5c:81:92:64:16:7a:fa:55:5c:ea:77:81:77:88: 9b:44:f3:dc:8b:27:93:fd:ab:02:47:d2:e7:6e:16: 84:f7:9f:62:1e:22:fb:64:af:46:0d:53:71:dc:0d: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:8B:4E:7F:C3:0B:DF:A4:C2:86:1C:2A:1F:1D:98:66:0E:E5:3F X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:37:5e:58:a4:03:79:ad:83:90:43:e0:b0:21:9e:2b:9d:06: 1b:ce:8b:ea:c7:8d:a4:45:9a:16:30:9c:6e:10:71:81:7a:03: bb:b4:74:c3:8f:28:f9:7a:6d:96:e1:b5:47:ce:60:1e:05:e6: 66:97:67:26:a4:52:c5:42:36:f9:d2:62:95:89:d1:72:10:4a: 75:55:a6:bd:ef:d9:e8:99:31:b0:c1:f5:60:0a:c7:16:9a:ac: 41:aa:47:d7:c4:9c:d6:4d:0f:b8:44:e8:12:84:70:8b:35:18: 8d:a7:33:fb:f7:21:97:43:fb:e0:81:c3:7a:8a:65:7b:f1:f4: e9:5d:d7:44:e1:e5:8c:22:0c:ba:8c:b9:c1:9c:48:15:ae:64: 18:ca:2b:26:50:67:7a:b0:1d:33:a4:62:c1:3c:dd:93:55:1c: b9:27:da:47:18:f2:f1:53:d6:93:0b:80:da:c7:6c:f4:83:f4: b9:18:ea:5a:58:b8:68:0b:b9:b5:fb:89:de:d0:b9:90:4e:d9: 2c:e2:ce:de:6c:68:c1:32:d2:e7:23:45:c6:00:72:ac:2b:3d: 25:ae:90:cb:16:91:1b:29:31:e4:0a:84:66:2f:d9:ee:2a:54: 94:84:ef:59:5f:8f:fe:42:54:a4:7d:fe:5d:6d:0e:f9:68:a5: 6d:08:f9:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYwOTI3MDMwMDM3WhcNMjYxMDA0MDMwMDM3WjAYMRYwFAYD VQQDEw02YWI4ODZkNi02ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiu6UtnbBYTfYzF0kls9rLUxC+ov8UVMXtytMP3+COC8vGCEoPbNRmcfHXrU9 Uv/XMAifPXaTutdnqyPyDIB3nqS+s7KFtq9FS/XjhI9iT5VBuEsCmXOD1BnrPNnY b5TULqh1iYkmABvNdWrNE34NY/MLkaZbNLZTfh8AmMiq3V0klQZ8KCmk8PYA9KCL vAjS28d3s3S7lQW8DzzDPdskrHrwxrZi5hrQ/QLdMUMHvdj4Ijo1NvrTgg6Z6fGF F6/HpIQBFJUfIoQoRsFgpJbRX9YYXIGSZBZ6+lVc6neBd4ibRPPciyeT/asCR9Ln bhaE959iHiL7ZK9GDVNx3A2q6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv/i05/ wwvfpMKGHCofHZhmDuU/MB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALjdeWKQDea2DkEPgsCGeK50GG86L6seNpEWaFjCcbhBxgXoDu7R0w48o+Xpt luG1R85gHgXmZpdnJqRSxUI2+dJilYnRchBKdVWmve/Z6JkxsMH1YArHFpqsQapH 18Sc1k0PuEToEoRwizUYjacz+/chl0P74IHDeople/H06V3XROHljCIMuoy5wZxI Fa5kGMorJlBnerAdM6RiwTzdk1UcuSfaRxjy8VPWkwuA2sds9IP0uRjqWli4aAu5 tfuJ3tC5kE7ZLOLO3mxowTLS5yNFxgByrCs9Ja6QyxaRGykx5AqEZi/Z7ipUlITv WV+P/kJUpH3+XW0O+WilbQj5fA== -----END CERTIFICATE-----Generated at Tue Sep 29 04:57:22 2026 by rpki-client