$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: b1sOpN9+bNV4OwXGFKNyVLeF5EaM/e84aO4z+A0tsfQ= Subject key identifier: 28:F7:B9:5C:7A:65:5F:96:69:6B:9A:5F:A7:9C:D7:4F:F4:2A:D5:19 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0671 Signing time: Sun 20 Sep 2026 22:33:33 +0000 Manifest this update: Sun 20 Sep 2026 22:33:33 +0000 Manifest next update: Sun 27 Sep 2026 22:33:33 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: RUUTo2Ks0eY0VpEDuDHcxKaUh9eqDXKqKNLUU8NzzvE=) 2: 5AF5468879D811F18B1076AA62A30FBC.roa (hash: GSj7udpCZ3TiauyqNEm+RwhPkCPJjpIU0roOwcJPGck=) 3: 8192DC9279D811F1ABEE2BAB62A30FBC.roa (hash: pjhHpj2MOBBanUS1pzq5JLqrgdDCeHLBhLAd7UJOZ1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Sep 20 22:33:33 2026 GMT Not After : Sep 27 22:33:33 2026 GMT Subject: CN=6ab05f3d-1af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:62:fb:b7:9e:c4:ea:c6:83:37:e4:72:27: bd:32:f9:cb:21:49:47:db:e9:6c:d8:4d:00:6f:b7: 9e:f4:44:c2:61:e7:b1:57:62:eb:37:1a:b5:46:13: b7:53:09:c8:95:88:73:24:8c:80:50:87:3a:56:68: 12:f1:42:eb:0d:53:76:e3:a4:47:68:13:b9:9f:a0: 87:1e:9d:a5:1e:ce:89:7c:21:61:6d:69:7a:c5:a4: 25:f1:ae:59:16:1f:84:c0:91:e3:3b:0c:da:3b:5f: 67:f8:bf:04:05:01:e5:69:b6:2a:fd:9e:ee:0e:e8: 9d:3d:13:5f:82:4f:59:38:03:e4:65:66:fa:87:f5: 16:a5:c0:45:2c:54:dc:8c:99:5c:26:e8:4a:82:47: 8e:4f:cb:9d:fc:4b:51:e2:44:b8:4b:3b:1a:b8:42: c8:bc:ab:7a:11:a7:97:e9:3f:96:48:08:0d:02:b9: d0:65:92:a3:2a:b5:d6:42:a3:6f:bd:e7:c8:54:c4: fc:e7:6a:83:7f:6c:db:20:14:48:fb:28:43:78:61: 29:38:60:0e:3e:c0:83:27:47:68:62:e1:bd:ee:20: 3e:31:14:28:dc:3c:c6:85:6a:04:c1:68:c4:64:bb: 33:d0:40:53:d1:5c:d1:74:26:e9:20:31:a3:82:a3: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F7:B9:5C:7A:65:5F:96:69:6B:9A:5F:A7:9C:D7:4F:F4:2A:D5:19 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:28:99:d6:0c:a2:77:db:c9:1c:d7:2e:99:78:40:97:08: 61:43:f7:26:77:a6:76:d6:4f:d4:9e:d8:c2:bd:d0:57:e4:08: 19:bc:9e:bf:46:ff:61:10:a8:ae:c6:a1:b6:71:3a:3e:6c:8d: e0:c8:ee:e0:b9:bc:f8:ea:c8:d2:55:62:59:d1:16:08:13:7f: a7:6f:08:64:73:bc:da:e7:a6:66:2f:20:4f:ba:2d:a8:3a:7c: f5:71:18:52:c7:9b:d2:54:31:05:93:d8:0b:a4:e4:30:22:67: 43:e4:73:eb:f4:79:51:56:fa:47:70:06:50:a3:6f:e6:cb:9b: 9e:63:8e:56:3f:e3:4b:99:41:c9:3d:f2:26:7e:5e:18:12:eb: b9:2a:41:c5:e6:ab:7c:7e:8c:b5:b0:b8:5b:16:59:2c:c9:cc: f3:e8:95:78:cf:6e:47:bb:b2:80:70:a4:dc:b3:20:46:a1:04: 50:50:5e:35:4f:5c:4b:f0:bd:e0:ad:df:13:4a:c1:67:1c:62: 60:b8:f9:61:47:f5:e2:36:5e:2f:dd:7b:e1:9a:67:64:55:ca: de:fd:c5:2e:d8:10:5d:6f:3a:62:31:ba:bd:36:9b:54:83:f5: 70:6b:e8:14:99:5a:3d:49:42:93:5e:b8:ad:7e:62:fb:89:98: cc:0a:35:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwOTIwMjIzMzMzWhcNMjYwOTI3MjIzMzMzWjAYMRYwFAYD VQQDEw02YWIwNWYzZC0xYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkl1i+7eexOrGgzfkcie9MvnLIUlH2+ls2E0Ab7ee9ETCYeexV2LrNxq1RhO3 UwnIlYhzJIyAUIc6VmgS8ULrDVN246RHaBO5n6CHHp2lHs6JfCFhbWl6xaQl8a5Z Fh+EwJHjOwzaO19n+L8EBQHlabYq/Z7uDuidPRNfgk9ZOAPkZWb6h/UWpcBFLFTc jJlcJuhKgkeOT8ud/EtR4kS4SzsauELIvKt6EaeX6T+WSAgNArnQZZKjKrXWQqNv vefIVMT852qDf2zbIBRI+yhDeGEpOGAOPsCDJ0doYuG97iA+MRQo3DzGhWoEwWjE ZLsz0EBT0VzRdCbpIDGjgqO2EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCj3uVx6 ZV+WaWuaX6ec10/0KtUZMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADCAomdYMonfbyRzXLpl4QJcIYUP3JnemdtZP1J7Ywr3QV+QIGbyev0b/YRCo rsahtnE6PmyN4Mju4Lm8+OrI0lViWdEWCBN/p28IZHO82uemZi8gT7otqDp89XEY Useb0lQxBZPYC6TkMCJnQ+Rz6/R5UVb6R3AGUKNv5subnmOOVj/jS5lByT3yJn5e GBLruSpBxearfH6MtbC4WxZZLMnM8+iVeM9uR7uygHCk3LMgRqEEUFBeNU9cS/C9 4K3fE0rBZxxiYLj5YUf14jZeL9174ZpnZFXK3v3FLtgQXW86YjG6vTabVIP1cGvo FJlaPUlCk164rX5i+4mYzAo1zg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:45:49 2026 by rpki-client