$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: msGhOJvCw47a2ttq30eMiwxezHN/ODEaGb2NQefimmw= Subject key identifier: CD:A9:2B:D5:77:C9:07:2D:30:A6:3B:36:67:D7:BF:97:36:28:E2:DB Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 01D7 Signing time: Mon 21 Sep 2026 03:36:04 +0000 Manifest this update: Mon 21 Sep 2026 03:36:03 +0000 Manifest next update: Mon 28 Sep 2026 03:36:03 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: jYBQlr6UQns2dSvO2kLC5OQLLs0HGnd7la6qrd5ZmLo=) 2: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 4: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Sep 21 03:36:03 2026 GMT Not After : Sep 28 03:36:03 2026 GMT Subject: CN=6ab0a623-717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:cc:cf:d8:75:27:55:fc:d7:5a:e7:f1:a2: 29:d1:c5:da:81:58:91:1c:9c:e5:ba:31:f1:6e:f5: 4e:68:53:58:ae:50:a0:22:cf:f2:e2:96:2b:9b:95: 93:02:09:4e:77:f0:b5:fa:8a:3c:53:e0:a8:56:35: ed:a2:4f:44:0a:dd:41:68:f8:ef:bf:bc:66:1c:81: 8e:aa:cf:2c:90:7f:ff:14:5b:2f:64:45:ee:4b:90: 7e:84:21:da:ee:66:00:27:21:52:c3:92:eb:bf:1d: 4a:88:77:4d:68:c8:38:40:c0:9f:2a:d5:aa:7a:33: 7c:c4:38:58:64:ff:8d:20:bc:c8:40:8e:6e:87:d4: 84:da:7d:d2:cf:b5:79:31:de:51:bc:95:ee:90:8b: ca:2b:51:95:82:e7:16:d8:44:a5:b2:89:c7:c0:67: 18:4b:51:b0:9e:7b:da:fa:03:e2:e0:94:92:14:a5: 7e:6e:14:9e:74:0b:49:6f:0b:a1:f3:32:dc:85:09: bc:79:38:a0:5b:6d:27:a5:ad:66:ee:bb:98:5c:66: 4d:85:88:3d:d3:57:21:58:83:69:3a:ce:be:ea:d1: 95:a1:b2:aa:d7:09:39:e3:df:1e:97:bb:c7:7c:78: 8d:84:14:6c:ab:68:21:31:55:80:be:21:7f:a6:88: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:2B:D5:77:C9:07:2D:30:A6:3B:36:67:D7:BF:97:36:28:E2:DB X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ba:50:2b:8d:e3:c3:48:a0:d0:3d:43:f9:79:a4:80:54:60: eb:b5:a9:fd:99:87:25:5b:a7:ce:9e:20:d3:f2:db:5b:19:f0: ab:8d:b0:ff:1e:30:27:21:75:e1:3e:c3:9f:4f:93:53:a4:44: bf:f6:a6:a1:e9:42:52:e4:de:6f:d2:25:57:07:bc:17:ef:78: 70:6c:2a:67:01:5b:94:3e:62:7c:f7:d5:89:2f:73:bf:97:56: 9b:57:4d:56:7e:2c:c8:dc:62:a5:be:c1:14:b4:0a:74:93:2e: f9:ac:8a:6f:86:76:50:52:c0:f1:d9:68:56:9a:90:99:c5:20: bf:c4:3c:7c:02:e8:ba:56:c4:2b:e5:42:32:76:0b:b3:16:04: 14:09:d2:4f:83:a7:ac:08:99:af:6c:40:af:c3:46:ef:52:e4: 19:0e:27:23:d2:9d:5b:76:d6:fd:63:f0:99:7d:69:4e:16:99: 18:6a:1a:97:db:97:3d:3a:69:fb:d1:d2:d5:5f:7e:3a:d9:da: 36:9a:84:2f:eb:46:cc:e2:de:9a:e1:9b:7c:92:59:25:4e:17: fd:7a:b0:df:7a:7f:1a:e4:1d:84:53:85:b2:4a:21:86:37:87: da:92:01:18:25:e9:b0:1d:14:31:d8:cc:1f:38:d0:c1:47:ef: c7:4d:e1:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwOTIxMDMzNjAzWhcNMjYwOTI4MDMzNjAzWjAYMRYwFAYD VQQDEw02YWIwYTYyMy03MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwfMz9h1J1X811rn8aIp0cXagViRHJzlujHxbvVOaFNYrlCgIs/y4pYrm5WT AglOd/C1+oo8U+CoVjXtok9ECt1BaPjvv7xmHIGOqs8skH//FFsvZEXuS5B+hCHa 7mYAJyFSw5Lrvx1KiHdNaMg4QMCfKtWqejN8xDhYZP+NILzIQI5uh9SE2n3Sz7V5 Md5RvJXukIvKK1GVgucW2ESlsonHwGcYS1Gwnnva+gPi4JSSFKV+bhSedAtJbwuh 8zLchQm8eTigW20npa1m7ruYXGZNhYg901chWINpOs6+6tGVobKq1wk5498el7vH fHiNhBRsq2ghMVWAviF/pogYsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2pK9V3 yQctMKY7NmfXv5c2KOLbMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbpQK43jw0ig0D1D+XmkgFRg67Wp/ZmHJVunzp4g0/LbWxnwq42w/x4wJyF1 4T7Dn0+TU6REv/amoelCUuTeb9IlVwe8F+94cGwqZwFblD5ifPfViS9zv5dWm1dN Vn4syNxipb7BFLQKdJMu+ayKb4Z2UFLA8dloVpqQmcUgv8Q8fALoulbEK+VCMnYL sxYEFAnST4OnrAiZr2xAr8NG71LkGQ4nI9KdW3bW/WPwmX1pThaZGGoal9uXPTpp +9HS1V9+OtnaNpqEL+tGzOLemuGbfJJZJU4X/Xqw33p/GuQdhFOFskohhjeH2pIB GCXpsB0UMdjMHzjQwUfvx03hZg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:35:05 2026 by rpki-client