$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json) Hash identifier: u1NPNS4lz7epsSuJ/2SFmMjM3RzjWl08IgpPWIryt+A= Subject key identifier: 2E:01:FF:51:48:44:41:B1:EA:B7:73:93:5A:9B:B6:F7:17:AB:4A:53 Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft Manifest number: 0127 Signing time: Sun 11 Oct 2026 06:28:27 +0000 Manifest this update: Sun 11 Oct 2026 06:28:27 +0000 Manifest next update: Sun 18 Oct 2026 06:28:27 +0000 Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: hQbgjf1d1gZ5KWK7OoXLAQiQkwZKUTYlje06qG8w+q4=) 2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Validity Not Before: Oct 11 06:28:27 2026 GMT Not After : Oct 18 06:28:27 2026 GMT Subject: CN=6acb2c8b-a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:78:e2:9f:4e:91:4e:d7:04:87:09:78:d1: 61:9d:81:eb:5a:75:06:99:b2:5a:b1:54:59:97:16: 9e:95:e5:dd:c5:9e:8e:18:d7:f8:17:bc:1a:ce:ad: 09:01:0c:67:0b:04:e8:ea:95:1b:d7:a5:5a:c1:36: 9e:8b:62:c4:3d:eb:24:23:c0:39:1d:fe:9c:87:58: 12:58:34:fb:4a:ed:6c:11:d4:58:7b:7a:d8:92:92: b9:08:c7:00:75:9c:cd:3c:df:94:7b:89:4d:d7:ef: 52:73:37:f3:8e:ef:60:29:22:09:18:ca:65:60:90: b3:71:b7:51:6a:cb:35:2b:ba:94:48:75:9a:4a:c1: 8c:b8:36:47:ff:30:95:fe:da:af:3f:40:50:fd:ee: 87:80:85:8c:86:27:ea:23:a2:44:48:f1:bb:5b:8b: 51:a5:f6:d6:36:75:ce:ca:0c:78:99:69:13:dd:63: 8a:1c:58:bc:8c:55:57:b8:70:c0:f6:8f:1c:1d:b1: 36:09:b9:e6:a0:73:36:9c:fd:1f:16:fe:ac:44:62: 56:fe:65:e6:8e:3f:8f:ea:1f:41:33:ea:2d:fd:5e: b1:ce:a8:c9:31:9d:be:4f:bb:0c:53:cc:04:7f:2a: fc:a0:32:aa:f1:48:45:69:e9:b6:ed:d8:4e:f0:ea: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:FF:51:48:44:41:B1:EA:B7:73:93:5A:9B:B6:F7:17:AB:4A:53 X509v3 Authority Key Identifier: keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:80:2f:a9:b9:56:58:4b:32:a3:23:e7:87:77:72:6a:1a:8e: d1:34:ba:a5:87:cf:09:0f:83:c5:8d:d6:1b:ad:48:86:3b:51: 11:bd:75:b2:41:c5:c8:dc:fe:f9:62:a1:fe:30:90:b4:66:03: 6f:cd:5a:0e:3e:bb:0f:27:fc:bc:a1:c1:db:8c:7f:cd:af:a1: 41:ec:37:1d:6b:9b:b9:66:70:42:2d:69:1d:0f:bf:1b:37:40: 2c:1a:db:52:3a:9a:f4:32:35:86:3c:3a:6a:7f:35:c6:2e:69: 99:9e:88:01:3e:14:74:ea:ed:ed:b4:7a:2f:bf:94:e3:f7:c7: 34:8e:f8:78:ee:63:54:d7:e7:a2:01:9d:e4:4d:e9:d3:fe:ae: 57:9d:fc:24:21:d6:75:cd:cf:f1:52:99:59:f0:c3:8e:f8:56: fe:33:61:63:69:3c:04:db:31:4f:72:8a:00:43:f7:da:e6:67: 16:a7:72:c7:cc:ac:5f:b2:fd:c9:4c:da:43:d1:0d:71:f4:a9: 4a:77:03:ab:7f:29:ab:eb:90:34:9e:15:86:1c:22:5a:07:64: 45:e2:10:4e:e8:0d:f0:f4:05:b3:a4:25:23:ba:de:af:cf:16: 09:cf:ab:02:ad:56:14:88:33:7b:2c:bf:9b:81:b0:28:00:fc: 65:88:2d:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKERFQjRDMEI5MDdGQUNBMUM1RDM3NzZCRDQ5NDZGNEJB QThDQTZCMzAwHhcNMjYxMDExMDYyODI3WhcNMjYxMDE4MDYyODI3WjAYMRYwFAYD VQQDEw02YWNiMmM4Yi1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEx44p9OkU7XBIcJeNFhnYHrWnUGmbJasVRZlxaeleXdxZ6OGNf4F7wazq0J AQxnCwTo6pUb16VawTaei2LEPeskI8A5Hf6ch1gSWDT7Su1sEdRYe3rYkpK5CMcA dZzNPN+Ue4lN1+9Sczfzju9gKSIJGMplYJCzcbdRass1K7qUSHWaSsGMuDZH/zCV /tqvP0BQ/e6HgIWMhifqI6JESPG7W4tRpfbWNnXOygx4mWkT3WOKHFi8jFVXuHDA 9o8cHbE2CbnmoHM2nP0fFv6sRGJW/mXmjj+P6h9BM+ot/V6xzqjJMZ2+T7sMU8wE fyr8oDKq8UhFaem27dhO8OpLZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4B/1FI REGx6rdzk1qbtvcXq0pTMB8GA1UdIwQYMBaAFN60wLkH+socXTd2vUlG9Lqoymsw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CMTcwQzkxMjEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnloeGROM2E5U1ViMHVxakth ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNyVEF1UWY2eWh4ZE4zYTlTVWIwdXFqS2F6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CMTcwQzkxMjEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnlo eGROM2E5U1ViMHVxakthekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoAvqblWWEsyoyPnh3dyahqO0TS6pYfPCQ+DxY3WG61IhjtREb11skHFyNz+ +WKh/jCQtGYDb81aDj67Dyf8vKHB24x/za+hQew3HWubuWZwQi1pHQ+/GzdALBrb Ujqa9DI1hjw6an81xi5pmZ6IAT4UdOrt7bR6L7+U4/fHNI74eO5jVNfnogGd5E3p 0/6uV538JCHWdc3P8VKZWfDDjvhW/jNhY2k8BNsxT3KKAEP32uZnFqdyx8ysX7L9 yUzaQ9ENcfSpSncDq38pq+uQNJ4VhhwiWgdkReIQTugN8PQFs6QlI7rer88WCc+r Aq1WFIgzeyy/m4GwKAD8ZYgt2Q== -----END CERTIFICATE-----Generated at Sun Oct 11 08:51:14 2026 by rpki-client