$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: ss6R8xNjClcy4teXmRt4A2OfakfCw2AT5EBwwKwjv8g= Subject key identifier: 27:EC:1C:7F:A9:AC:BD:8A:0C:1A:47:67:8F:00:F8:9A:7E:AA:48:74 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0D5F Signing time: Sun 20 Sep 2026 18:01:25 +0000 Manifest this update: Sun 20 Sep 2026 18:01:25 +0000 Manifest next update: Sun 27 Sep 2026 18:01:25 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: u1n+su4drKjLNFXFHB8BzqBx4hxFC3pOdkdmtG+xe6I=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Sep 20 18:01:25 2026 GMT Not After : Sep 27 18:01:25 2026 GMT Subject: CN=6ab01f75-0d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:1a:af:57:97:8e:f5:a1:93:b2:24:bd:97: 89:5e:27:b8:c3:0a:ce:8d:4f:cd:f3:a4:e1:1a:c5: 56:56:3c:f9:1b:00:1d:fc:03:80:e3:ad:24:7b:64: 4b:d9:fb:78:ad:e3:2e:5f:2f:34:7e:e6:be:ca:cf: 8b:ca:aa:5a:47:34:97:50:a2:98:bf:c3:da:09:49: 5c:65:bb:34:70:be:fc:95:c4:8d:de:f2:b3:9a:96: cb:4a:ac:ba:65:6d:2f:13:75:1b:16:d2:0a:df:8f: 61:ef:2f:b4:8d:22:24:72:19:1d:2c:db:20:4b:25: b2:1a:56:40:1d:c5:36:1d:24:75:5d:83:1e:0c:b5: e1:a1:36:e5:67:e6:20:2c:07:8d:1c:05:59:05:4b: f2:bd:1b:12:b6:cb:71:ce:ed:f5:e0:87:2c:b7:2f: 81:3a:9a:80:6c:50:77:ad:f2:26:f2:a7:39:5f:07: db:91:89:63:05:52:9f:be:a6:23:f5:48:b1:d2:df: c2:1c:b6:aa:c1:3b:6e:59:1a:6a:19:b5:dc:e2:f2: ac:ff:b8:fe:7a:21:08:14:31:a7:9f:e6:f8:76:e9: 81:f9:c8:1a:fa:9c:7d:2e:47:4b:b3:b6:3a:cc:76: 47:36:07:d7:19:a5:df:58:c7:77:09:93:82:62:9c: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:1C:7F:A9:AC:BD:8A:0C:1A:47:67:8F:00:F8:9A:7E:AA:48:74 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c7:ad:6d:a4:a0:e7:6e:76:15:d8:e8:c6:89:68:65:ae:67: d0:de:6a:fb:12:ff:3d:32:cf:2d:9c:7e:8d:83:18:bf:f5:8e: 58:9c:23:c3:87:b2:11:b5:8f:a3:a5:a7:28:b1:42:5b:87:a4: 5b:be:75:00:80:60:16:66:e6:30:49:1f:38:6b:ea:59:5b:94: 83:e6:32:12:af:26:89:30:40:0a:77:95:64:cf:f6:67:e6:c1: 5a:92:67:dc:d0:15:5b:ed:4f:4c:79:68:c6:37:92:2d:21:55: a2:e3:32:c2:05:19:77:61:d7:c3:ad:19:14:4b:ee:c0:ef:84: 25:ba:6f:50:31:44:7a:a5:a4:3f:b9:6d:5a:da:25:2a:28:54: a1:27:a8:b0:cc:49:07:4a:50:e4:d3:dd:8b:ea:38:c2:e2:4d: 88:4c:6e:f1:ad:22:d7:fc:5f:7d:6a:b0:04:48:80:d2:f3:2e: c3:df:b3:e0:4c:ff:0d:90:4d:46:c6:4d:65:dc:af:d8:35:d8: 34:ab:c0:81:75:a7:bf:14:d0:e0:27:e8:3b:02:67:b3:43:a6: 15:cc:bd:8a:42:2d:28:d0:56:4b:13:ab:40:f1:eb:01:48:56: 29:40:51:83:07:d0:92:33:29:89:21:e0:0e:8f:3c:ae:e2:af: 54:9a:01:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjYwOTIwMTgwMTI1WhcNMjYwOTI3MTgwMTI1WjAYMRYwFAYD VQQDEw02YWIwMWY3NS0wZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfIar1eXjvWhk7IkvZeJXie4wwrOjU/N86ThGsVWVjz5GwAd/AOA460ke2RL 2ft4reMuXy80fua+ys+LyqpaRzSXUKKYv8PaCUlcZbs0cL78lcSN3vKzmpbLSqy6 ZW0vE3UbFtIK349h7y+0jSIkchkdLNsgSyWyGlZAHcU2HSR1XYMeDLXhoTblZ+Yg LAeNHAVZBUvyvRsStstxzu314Icsty+BOpqAbFB3rfIm8qc5XwfbkYljBVKfvqYj 9Uix0t/CHLaqwTtuWRpqGbXc4vKs/7j+eiEIFDGnn+b4dumB+cga+px9LkdLs7Y6 zHZHNgfXGaXfWMd3CZOCYpyeEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfsHH+p rL2KDBpHZ48A+Jp+qkh0MB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATsetbaSg5252FdjoxoloZa5n0N5q+xL/PTLPLZx+jYMYv/WOWJwjw4eyEbWP o6WnKLFCW4ekW751AIBgFmbmMEkfOGvqWVuUg+YyEq8miTBACneVZM/2Z+bBWpJn 3NAVW+1PTHloxjeSLSFVouMywgUZd2HXw60ZFEvuwO+EJbpvUDFEeqWkP7ltWtol KihUoSeosMxJB0pQ5NPdi+o4wuJNiExu8a0i1/xffWqwBEiA0vMuw9+z4Ez/DZBN RsZNZdyv2DXYNKvAgXWnvxTQ4CfoOwJns0OmFcy9ikItKNBWSxOrQPHrAUhWKUBR gwfQkjMpiSHgDo88ruKvVJoB7g== -----END CERTIFICATE-----Generated at Mon Sep 21 23:43:51 2026 by rpki-client