$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: 8oPQYczXAbSJfSklpvKWEXo85N+7Tr+hFil7t8+r11g= Subject key identifier: 78:FB:90:78:11:D0:55:8A:7F:FF:4D:A6:1F:9C:9E:50:97:29:E3:AE Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 012E Signing time: Mon 21 Sep 2026 05:40:00 +0000 Manifest this update: Mon 21 Sep 2026 05:39:59 +0000 Manifest next update: Mon 28 Sep 2026 05:39:59 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: PaovGUo5zHIK1NfWHv1rbcCF/V2iOHVDpsSXXWnuhSM=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Sep 21 05:39:59 2026 GMT Not After : Sep 28 05:39:59 2026 GMT Subject: CN=6ab0c330-3fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:8e:4b:12:c0:9e:a7:ad:8e:df:e4:da:19: 98:4b:bd:37:e1:02:d9:45:94:09:be:7b:fa:b5:84: 1e:90:d9:01:06:41:cd:40:6e:9f:d1:c0:b5:4f:bc: 92:7f:f9:0f:b3:e6:f1:a5:c9:43:38:b2:57:e7:a4: d2:f5:b4:cd:c9:1a:06:98:2f:bf:69:4f:2c:7f:c9: 73:3c:d6:fa:45:9f:da:5d:89:02:c0:a6:bf:fe:45: be:b0:d3:2e:88:7f:b2:f2:8b:7f:5c:af:ca:08:0f: 7e:ae:1f:7b:54:15:39:73:3a:48:f3:86:26:cc:3b: ac:a0:03:75:18:5e:c5:89:1f:d8:54:88:d3:d0:9a: 33:58:48:2c:0f:cf:41:8d:36:5d:be:c9:81:6d:1c: b3:25:34:e9:3d:ef:88:1f:24:01:1f:0c:d6:91:27: 6e:61:f8:be:2d:13:f3:08:06:5a:28:10:62:95:3b: 2b:52:bd:6d:9f:7d:d9:f1:64:a3:4b:06:a2:37:40: ef:8f:a8:ec:ba:84:0d:cc:79:44:44:86:a7:d7:48: 44:6d:4a:63:5a:9d:fe:69:63:21:a1:00:5a:cb:38: 1c:e3:24:37:51:45:9c:87:53:8c:f0:4c:b0:f7:85: 53:22:fc:d9:76:5c:3d:35:87:00:a1:d0:25:a5:fe: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FB:90:78:11:D0:55:8A:7F:FF:4D:A6:1F:9C:9E:50:97:29:E3:AE X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:40:f1:01:ef:8e:68:b1:6f:0a:d5:70:a9:a1:a2:46:f3:b5: b1:62:9a:aa:42:5e:e4:f0:8c:ac:42:cb:aa:12:d8:93:5a:4a: 42:78:2d:00:86:5f:29:15:7c:21:dc:1a:dd:58:a7:39:e1:14: 48:52:33:31:51:c0:45:f2:11:b7:d2:45:44:35:3e:f0:e3:f7: 16:ce:d3:98:9a:20:21:84:2d:1e:79:86:58:83:fe:12:72:19: 7f:16:05:f0:73:b7:aa:d3:12:4a:cc:fb:1f:e5:fb:55:a2:63: 86:c2:67:5a:04:24:20:69:d2:24:d3:78:1f:36:81:f6:48:6b: bc:32:75:db:8c:51:a4:70:98:c9:6f:ed:06:7c:5b:f3:c7:81: c9:cc:22:87:ca:ee:f7:6b:77:e7:ea:59:f3:81:ed:06:68:3c: 80:65:05:6b:53:81:ef:5e:89:c9:fe:ab:49:39:9e:04:9c:6e: 64:f2:84:bb:1e:2e:e8:9e:4a:7e:32:1c:c4:07:54:72:42:da: 88:1f:f0:de:18:d0:10:1f:99:f8:a6:09:c3:6d:f6:b1:cf:70: b6:e8:b0:3f:4a:63:22:06:26:fc:75:d7:0b:c9:4a:dc:16:72: 02:37:45:d6:c4:54:2f:bb:a9:98:c3:74:db:b8:81:58:0a:d8: 61:9a:25:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjYwOTIxMDUzOTU5WhcNMjYwOTI4MDUzOTU5WjAYMRYwFAYD VQQDEw02YWIwYzMzMC0zZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/mOSxLAnqetjt/k2hmYS7034QLZRZQJvnv6tYQekNkBBkHNQG6f0cC1T7yS f/kPs+bxpclDOLJX56TS9bTNyRoGmC+/aU8sf8lzPNb6RZ/aXYkCwKa//kW+sNMu iH+y8ot/XK/KCA9+rh97VBU5czpI84YmzDusoAN1GF7FiR/YVIjT0JozWEgsD89B jTZdvsmBbRyzJTTpPe+IHyQBHwzWkSduYfi+LRPzCAZaKBBilTsrUr1tn33Z8WSj SwaiN0Dvj6jsuoQNzHlERIan10hEbUpjWp3+aWMhoQBayzgc4yQ3UUWch1OM8Eyw 94VTIvzZdlw9NYcAodAlpf596QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHj7kHgR 0FWKf/9Nph+cnlCXKeOuMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0DxAe+OaLFvCtVwqaGiRvO1sWKaqkJe5PCMrELLqhLYk1pKQngtAIZfKRV8 Idwa3VinOeEUSFIzMVHARfIRt9JFRDU+8OP3Fs7TmJogIYQtHnmGWIP+EnIZfxYF 8HO3qtMSSsz7H+X7VaJjhsJnWgQkIGnSJNN4HzaB9khrvDJ124xRpHCYyW/tBnxb 88eBycwih8ru92t35+pZ84HtBmg8gGUFa1OB716Jyf6rSTmeBJxuZPKEux4u6J5K fjIcxAdUckLaiB/w3hjQEB+Z+KYJw232sc9wtuiwP0pjIgYm/HXXC8lK3BZyAjdF 1sRUL7upmMN027iBWArYYZolBw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:14:55 2026 by rpki-client