$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: 0lFlNPZ0WSGWC3rEhuhbWt+Hmr52L2DGxCDyALv0w0M= Subject key identifier: 9A:92:35:9C:DE:BF:63:FF:3E:15:02:4A:C2:D0:DF:50:B8:86:B6:DB Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 0168 Signing time: Sat 19 Sep 2026 05:11:23 +0000 Manifest this update: Sat 19 Sep 2026 05:11:22 +0000 Manifest next update: Sat 26 Sep 2026 05:11:22 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 15hQBLYgU7FLwULy0Twt/zTXqD6KG95+kOEocvdRHRY=) 2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=) 3: E8E690809A2811F1AC58E4345911F970.roa (hash: m9m0P1oed7W/3ZAbI8jvAxoQb72mghkUJhemhrbvgNI=) 4: 1E388DB49A2511F1832A4CB45711F970.roa (hash: TiT9lGln0Eh4KjjUpQfi3tArVwegKeJ1yIafSY4m8LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Sep 19 05:11:22 2026 GMT Not After : Sep 26 05:11:22 2026 GMT Subject: CN=6aae197b-cefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:fb:66:3a:67:d7:e1:b4:52:43:79:71:1f: 50:95:80:25:b2:7a:20:cb:6d:e4:f3:8c:b5:67:e8: ea:f0:f5:82:6a:89:fc:ac:b1:a9:65:c2:d5:68:9e: 3d:86:78:02:64:49:db:15:54:25:e9:89:08:2d:1c: 30:73:01:76:41:49:95:4d:69:04:4c:1d:79:26:cf: cc:81:4c:a7:29:70:dd:26:c7:79:0f:bc:e3:45:d4: 38:d9:7e:c0:b2:ba:28:29:3c:f6:29:d8:ad:68:28: ae:21:e7:47:bb:f0:9e:78:0e:dd:eb:b8:1e:08:ef: 57:39:d1:48:61:60:23:8d:b5:02:3d:75:d6:2b:0c: 4a:88:25:c7:5a:fa:89:7e:9c:b4:fb:6c:10:15:9e: 32:ae:aa:c8:28:a2:10:94:47:3b:76:bd:6d:69:fe: 1a:a6:ec:23:55:3a:b2:8d:3b:72:56:bc:19:66:35: 39:1d:ae:12:8e:38:3b:3d:36:bd:2e:ba:be:a7:a7: ad:87:16:0e:c1:83:35:60:eb:46:5a:da:b8:90:27: 84:5b:5d:39:a3:8a:ca:51:73:9d:9b:55:8f:01:59: 7a:f5:6f:bc:58:57:bf:57:f2:89:9b:ec:90:07:17: 4a:cf:2f:51:86:4e:21:a6:8d:f4:d5:75:00:86:a5: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:92:35:9C:DE:BF:63:FF:3E:15:02:4A:C2:D0:DF:50:B8:86:B6:DB X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e2:2e:be:b5:51:be:6f:9c:1a:da:92:e4:ee:b6:52:37:46: f7:1c:a9:64:1b:2f:a1:8e:c7:d9:e7:f7:d9:6b:86:39:84:88: 00:32:30:5c:5a:ba:1c:ec:8e:a5:a1:c2:52:4c:7f:25:23:8a: da:35:9f:3c:fc:1c:0b:5b:83:7c:a7:a2:18:73:5f:f1:8d:98: 98:35:d0:eb:41:9c:67:6e:a9:a4:85:74:1e:e5:74:e8:84:44: ff:1e:d3:58:2d:e5:bc:86:0b:0b:23:eb:76:02:ec:73:83:94: 93:77:eb:cc:c6:32:82:3e:89:01:d8:44:42:35:23:82:fd:34: d0:5f:b8:74:8f:64:1c:11:82:be:f5:58:6a:99:5a:a6:ae:fb: 4e:ae:7b:c0:9f:bd:16:c1:bc:31:28:5e:73:dd:76:58:cf:b8: 7d:93:b5:1f:40:8d:9e:d3:44:59:69:d2:b2:bf:b3:ba:e5:af: 52:08:79:e4:46:34:24:f1:9d:d9:61:d3:69:c9:94:21:11:51: 39:db:23:11:0a:50:d8:98:78:04:fd:65:ff:19:c2:5f:a1:90: ae:55:65:dd:f4:ab:33:52:2d:16:48:a1:8e:6c:8d:b0:d9:fd: 88:d1:0c:22:67:f8:ef:72:99:5a:2b:5b:f9:de:ec:fe:0d:44: 64:c4:c1:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjYwOTE5MDUxMTIyWhcNMjYwOTI2MDUxMTIyWjAYMRYwFAYD VQQDEw02YWFlMTk3Yi1jZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhpz7Zjpn1+G0UkN5cR9QlYAlsnogy23k84y1Z+jq8PWCaon8rLGpZcLVaJ49 hngCZEnbFVQl6YkILRwwcwF2QUmVTWkETB15Js/MgUynKXDdJsd5D7zjRdQ42X7A srooKTz2KditaCiuIedHu/CeeA7d67geCO9XOdFIYWAjjbUCPXXWKwxKiCXHWvqJ fpy0+2wQFZ4yrqrIKKIQlEc7dr1taf4apuwjVTqyjTtyVrwZZjU5Ha4Sjjg7PTa9 Lrq+p6ethxYOwYM1YOtGWtq4kCeEW105o4rKUXOdm1WPAVl69W+8WFe/V/KJm+yQ BxdKzy9Rhk4hpo301XUAhqVz2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqSNZze v2P/PhUCSsLQ31C4hrbbMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc+IuvrVRvm+cGtqS5O62UjdG9xypZBsvoY7H2ef32WuGOYSIADIwXFq6HOyO paHCUkx/JSOK2jWfPPwcC1uDfKeiGHNf8Y2YmDXQ60GcZ26ppIV0HuV06IRE/x7T WC3lvIYLCyPrdgLsc4OUk3frzMYygj6JAdhEQjUjgv000F+4dI9kHBGCvvVYapla pq77Tq57wJ+9FsG8MShec912WM+4fZO1H0CNntNEWWnSsr+zuuWvUgh55EY0JPGd 2WHTacmUIRFROdsjEQpQ2Jh4BP1l/xnCX6GQrlVl3fSrM1ItFkihjmyNsNn9iNEM Imf473KZWitb+d7s/g1EZMTB8A== -----END CERTIFICATE-----Generated at Sun Sep 20 16:58:44 2026 by rpki-client