$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: XV4UDJhAdNVH+N3jMPeGTfx0k7xFd2zi3CYNA+bfmcU= Subject key identifier: 70:B4:AD:76:14:B7:46:C8:DC:86:3C:1A:1C:43:83:2F:44:83:93:A7 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0EC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0E77 Signing time: Sun 20 Sep 2026 17:45:46 +0000 Manifest this update: Sun 20 Sep 2026 17:45:45 +0000 Manifest next update: Sun 27 Sep 2026 17:45:45 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: wmLKrUE9lnEYKlWaxSjX3MLE6zQFu0SmrPZy8B2W8ZU=) 2: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: V7vJC1rGtCuOdSFWDJjdd3JhuVIPp/Zsx063dJpSpzo=) 3: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: 8Ac19pb5+p9KK1Iemz1RgsRRRrnuxVd5vC2V5ZATZXA=) 4: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: GS10eEt1MCcAl1eDM0DD66Q/CuCpMh/GfO+nM5nY1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Sep 20 17:45:45 2026 GMT Not After : Sep 27 17:45:45 2026 GMT Subject: CN=6ab01bc9-c199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:37:f9:92:94:90:ff:b3:1c:39:2e:82:08: 66:18:c2:68:a0:f8:a7:18:83:06:35:c3:7e:31:08: 27:0b:96:8e:9a:1c:c4:12:52:93:da:f5:fa:93:98: 1a:c5:f3:c9:fa:fc:4c:2e:38:fc:a2:0e:5c:49:00: 1d:e9:11:c0:a2:f6:af:2d:8d:77:00:ef:81:2f:ef: 3f:39:26:57:1b:a2:3d:51:61:eb:26:13:d5:0b:6f: 3a:49:fb:ca:4b:5a:58:4f:d5:11:fe:c5:a1:7b:05: 41:72:ca:46:33:58:48:e2:da:80:4c:8d:86:16:2a: f9:98:41:4d:ae:15:41:82:07:eb:d0:dd:d6:72:ab: 67:b8:4f:2f:d8:90:2f:2f:e0:e0:f8:59:19:a1:55: a0:e8:2a:c8:0f:2d:27:ca:f5:fa:f7:06:34:8e:54: 0c:fa:fe:1e:1a:08:32:32:fa:23:05:b8:9d:f8:63: a0:12:95:60:10:be:a2:e1:4a:1f:4b:3e:0b:3f:69: e1:d2:4e:d6:c6:1a:25:10:cc:7f:09:ec:16:01:62: 49:e6:6e:b0:1e:ce:9b:fd:0b:7c:6c:6d:f2:27:62: 14:61:58:0c:a9:19:70:25:d4:05:61:75:a8:93:5e: c6:fd:33:0d:6f:1a:05:ce:c1:5b:cb:ee:3f:09:a1: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:AD:76:14:B7:46:C8:DC:86:3C:1A:1C:43:83:2F:44:83:93:A7 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5c:c6:48:ad:3f:b6:8c:8c:d7:c7:ea:67:3b:3d:71:57:ce: 3d:51:d9:3f:33:25:24:5d:a6:33:c7:2d:1a:7b:b4:72:25:86: a2:64:99:25:62:d8:22:4e:0d:ea:39:7f:1e:d5:50:b4:7e:a3: 34:be:e2:9d:c3:f6:4b:1d:62:0d:e2:f4:4f:98:dc:38:0f:00: 66:c9:41:46:1b:5b:ed:f2:e1:f7:a9:78:1b:22:4d:06:ce:0e: e1:30:76:40:70:99:aa:e5:56:24:c4:25:7f:0b:5a:6c:2f:01: c7:cc:d0:62:c7:43:5c:87:0d:9a:83:85:7c:9f:96:7f:e2:29: 3b:d3:df:4f:7f:a8:fb:a7:6a:f7:50:f5:37:29:97:7c:21:f4: a9:51:7f:fb:73:3d:f8:14:fb:6f:d0:97:a4:8e:64:d0:66:96: 10:8a:11:e5:08:e0:e6:50:3b:2a:d1:b5:82:fb:30:18:e9:ce: 4c:02:cb:3f:1e:de:4e:d9:ab:2b:6c:66:df:8c:e5:91:c5:d8: da:fe:99:a3:53:60:34:98:f1:cb:e3:ba:cc:70:bc:8d:0c:fc: 9f:bb:61:bd:5b:bc:b3:70:d6:c5:96:99:50:7f:a0:6c:b2:ce: da:5d:b2:42:96:5d:6c:d0:75:74:47:d3:7d:f4:26:61:4b:90: 13:27:2a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwOTIwMTc0NTQ1WhcNMjYwOTI3MTc0NTQ1WjAYMRYwFAYD VQQDEw02YWIwMWJjOS1jMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb43+ZKUkP+zHDkugghmGMJooPinGIMGNcN+MQgnC5aOmhzEElKT2vX6k5ga xfPJ+vxMLjj8og5cSQAd6RHAovavLY13AO+BL+8/OSZXG6I9UWHrJhPVC286SfvK S1pYT9UR/sWhewVBcspGM1hI4tqATI2GFir5mEFNrhVBggfr0N3WcqtnuE8v2JAv L+Dg+FkZoVWg6CrIDy0nyvX69wY0jlQM+v4eGggyMvojBbid+GOgEpVgEL6i4Uof Sz4LP2nh0k7WxholEMx/CewWAWJJ5m6wHs6b/Qt8bG3yJ2IUYVgMqRlwJdQFYXWo k17G/TMNbxoFzsFby+4/CaGEowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHC0rXYU t0bI3IY8GhxDgy9Eg5OnMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATFzGSK0/toyM18fqZzs9cVfOPVHZPzMlJF2mM8ctGnu0ciWGomSZJWLYIk4N 6jl/HtVQtH6jNL7incP2Sx1iDeL0T5jcOA8AZslBRhtb7fLh96l4GyJNBs4O4TB2 QHCZquVWJMQlfwtabC8Bx8zQYsdDXIcNmoOFfJ+Wf+IpO9PfT3+o+6dq91D1NymX fCH0qVF/+3M9+BT7b9CXpI5k0GaWEIoR5Qjg5lA7KtG1gvswGOnOTALLPx7eTtmr K2xm34zlkcXY2v6Zo1NgNJjxy+O6zHC8jQz8n7thvVu8s3DWxZaZUH+gbLLO2l2y QpZdbNB1dEfTffQmYUuQEycqAA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:27:04 2026 by rpki-client