$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: 9VEs9HtAWFrRKT0/MSZMK9z0ZaRg7t/0NuDIKHsaglo= Subject key identifier: 4B:14:0F:F1:9F:1C:65:48:E5:95:69:43:FD:4B:28:81:A0:4D:68:74 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 042D Signing time: Sun 27 Sep 2026 00:20:32 +0000 Manifest this update: Sun 27 Sep 2026 00:20:31 +0000 Manifest next update: Sun 04 Oct 2026 00:20:31 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: sifiMNaIgoc+IDv903558ZjpgQx8ebQF0uqJmg8G1rY=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6gyuElfq0PIA/FM7aREUsNAU/exyPDZQFt/Bj2F34gs=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 2w8tzihYxteSAWlYehFedS9pPwNpZwA6Ufz/Jy6ET4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Sep 27 00:20:31 2026 GMT Not After : Oct 4 00:20:31 2026 GMT Subject: CN=6ab86150-276a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:8b:77:d0:bb:94:42:f1:3b:2d:f7:a6:a7: 51:4a:87:f2:70:cc:f9:88:c0:5d:15:c7:6e:61:fb: aa:34:dd:0a:ae:bb:16:3d:af:f5:2a:29:aa:6c:92: c3:73:63:93:b2:f5:fe:40:3e:b0:22:ad:02:6b:0d: 46:b4:d5:88:9c:20:95:52:33:55:d3:97:36:84:c1: b5:b2:a1:d9:88:38:69:38:79:7c:2e:0d:6e:0d:6c: d3:4b:e8:10:11:1b:ba:ca:d8:a5:27:86:ae:36:8a: 93:d3:8b:a0:09:57:ea:39:88:94:d3:95:3c:a8:a3: 76:b5:b8:9f:20:51:db:60:79:17:a0:cc:e5:36:87: 4c:66:f4:3f:d0:74:64:a1:26:e5:a3:60:39:d7:80: 5c:ba:ad:3e:b0:a8:bc:9f:e1:39:41:a7:d0:e0:0f: 43:fb:a3:03:da:52:d5:65:85:b6:ad:43:46:a0:47: 60:f3:d1:62:5a:64:86:6d:97:f4:ca:e6:71:43:d1: 7f:31:0f:02:d8:a9:e5:aa:76:4d:ce:4f:c4:07:1d: ad:1a:3b:05:b1:0f:06:5d:49:26:ec:a0:35:56:da: 58:aa:2f:3d:c9:cf:58:bd:e8:94:58:7b:87:30:15: a2:0a:35:d2:2e:4d:db:80:d3:fb:00:7a:02:56:e4: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:0F:F1:9F:1C:65:48:E5:95:69:43:FD:4B:28:81:A0:4D:68:74 X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:ce:38:cd:8d:85:b0:94:cc:28:af:b4:29:cd:0d:85:1d: 85:f6:34:a1:98:dc:29:98:ce:af:45:9b:f6:6e:ac:af:ce:8c: d1:90:11:68:80:e0:e4:57:85:27:ee:68:8c:c8:3f:28:3d:ef: d1:22:00:91:97:93:5e:86:0e:56:c0:cb:12:e5:51:d7:20:40: f5:ad:10:c8:f1:89:53:13:51:bc:45:a6:bf:3b:22:7b:e3:99: 97:e3:73:48:c7:df:06:8f:4e:35:33:27:b8:8b:e7:73:c1:a6: 10:14:11:4f:04:08:6c:8b:6b:1c:8f:ae:48:97:35:76:53:7c: a8:69:82:52:6d:bb:92:28:b9:92:02:05:c4:22:ee:a9:be:ed: 1d:a9:60:b5:f2:0e:2f:64:9f:24:22:39:29:d2:fb:97:18:a7: 8f:7b:39:c7:d1:e0:95:1f:90:44:10:4f:ad:7e:0a:c9:a6:88: b1:e8:53:b8:7b:b0:77:95:d6:9c:9a:07:99:3a:aa:95:7c:72: d2:15:75:b2:50:2a:58:9d:06:eb:e8:ba:40:62:aa:40:53:db: 0c:db:7b:22:10:43:06:89:53:54:7d:ce:82:ab:05:46:99:58: 98:bb:20:84:ed:9d:ef:29:6f:d9:57:8d:1b:a8:a6:6b:98:2e: e1:eb:b5:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjYwOTI3MDAyMDMxWhcNMjYxMDA0MDAyMDMxWjAYMRYwFAYD VQQDEw02YWI4NjE1MC0yNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfaLd9C7lELxOy33pqdRSofycMz5iMBdFcduYfuqNN0KrrsWPa/1KimqbJLD c2OTsvX+QD6wIq0Caw1GtNWInCCVUjNV05c2hMG1sqHZiDhpOHl8Lg1uDWzTS+gQ ERu6ytilJ4auNoqT04ugCVfqOYiU05U8qKN2tbifIFHbYHkXoMzlNodMZvQ/0HRk oSblo2A514Bcuq0+sKi8n+E5QafQ4A9D+6MD2lLVZYW2rUNGoEdg89FiWmSGbZf0 yuZxQ9F/MQ8C2KnlqnZNzk/EBx2tGjsFsQ8GXUkm7KA1VtpYqi89yc9YveiUWHuH MBWiCjXSLk3bgNP7AHoCVuQiswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsUD/Gf HGVI5ZVpQ/1LKIGgTWh0MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQm7OOM2NhbCUzCivtCnNDYUdhfY0oZjcKZjOr0Wb9m6sr86M0ZARaIDg5FeF J+5ojMg/KD3v0SIAkZeTXoYOVsDLEuVR1yBA9a0QyPGJUxNRvEWmvzsie+OZl+Nz SMffBo9ONTMnuIvnc8GmEBQRTwQIbItrHI+uSJc1dlN8qGmCUm27kii5kgIFxCLu qb7tHalgtfIOL2SfJCI5KdL7lxinj3s5x9HglR+QRBBPrX4KyaaIsehTuHuwd5XW nJoHmTqqlXxy0hV1slAqWJ0G6+i6QGKqQFPbDNt7IhBDBolTVH3OgqsFRplYmLsg hO2d7ylv2VeNG6ima5gu4eu1nA== -----END CERTIFICATE-----Generated at Mon Sep 28 00:55:05 2026 by rpki-client