$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: LLNbBqEBt14fYV14+FQX9osQ9d7F3+1FvYzvAzbGbFo= Subject key identifier: 60:04:A2:CE:6D:44:4B:86:AC:CB:34:C8:82:14:0E:5A:80:59:D4:F4 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0263 Signing time: Fri 25 Sep 2026 02:16:57 +0000 Manifest this update: Fri 25 Sep 2026 02:16:56 +0000 Manifest next update: Fri 02 Oct 2026 02:16:56 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: Bq1PbiOEY72vmiby0rPyPfNMXLz6tc6qvDbSA7dgyFg=) 2: 79FC546E326611F08478D72AC4F9AE02.roa (hash: mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=) 3: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Sep 25 02:16:56 2026 GMT Not After : Oct 2 02:16:56 2026 GMT Subject: CN=6ab5d999-08cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:e4:b0:bb:2e:29:18:ca:d6:74:be:85:39: 24:65:3e:f7:84:b0:f9:9f:fa:fa:b7:6a:ed:f8:23: 28:d0:1d:af:fe:f0:2b:05:ee:c7:9b:83:18:4f:76: d7:85:92:2c:16:05:88:f5:b5:bf:6a:63:7a:27:77: ce:48:7b:90:c0:db:0d:a6:c8:f6:d8:25:5c:54:38: 4c:f7:f0:dd:69:dd:5f:08:ff:aa:66:b2:e5:3a:b7: 8b:4e:f5:fd:27:3e:69:93:bb:74:ed:fe:69:f9:0a: dc:d5:5f:cc:5f:7b:de:ea:5c:d6:30:5f:d1:f3:6b: 31:8a:bd:18:cd:84:08:3c:c9:d6:af:c6:19:b0:c2: 91:25:ce:87:66:99:9c:74:22:9d:ad:94:51:c7:e6: 99:ef:de:68:09:52:70:44:c8:42:ef:b3:3e:09:66: 18:d3:d5:ef:c8:27:42:9e:72:38:42:79:e8:80:2d: 69:6d:9f:c8:b6:b5:3c:44:c7:e8:7b:3f:1e:94:95: b2:c8:34:81:a7:ae:9c:8d:95:77:32:e2:34:4e:b7: d5:c9:dc:5a:09:0e:0a:94:fc:2b:ba:1d:26:b3:35: 51:14:92:b7:3b:b7:db:0a:10:dc:90:cc:a4:12:38: b2:5d:2e:01:73:ee:4e:8d:b0:ee:b9:09:29:f4:be: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:A2:CE:6D:44:4B:86:AC:CB:34:C8:82:14:0E:5A:80:59:D4:F4 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:88:25:43:8e:e3:f0:86:c1:49:2a:0f:d0:2e:26:49:2e: 56:f5:bc:09:06:f2:a6:6b:ee:b7:c4:be:1f:2c:cc:df:64:91: 07:53:4b:cc:3a:1d:08:89:fa:9e:ed:fa:b9:25:c1:d9:26:31: c8:bf:7d:20:5b:a7:60:f3:7b:ee:e6:69:55:1b:f7:35:f4:f2: 5b:8f:ec:fe:a0:12:01:e9:63:c3:0b:49:84:1e:99:49:20:4e: bb:01:48:92:98:81:61:63:5b:2c:88:d5:68:d1:0e:89:85:55: b2:36:f5:36:f5:bb:41:34:17:67:7b:4f:f9:d3:cf:8b:ad:5b: 7b:35:f7:d6:17:47:fe:e3:ad:c0:dd:e5:0d:92:08:e3:b0:33: a1:46:f3:0e:d9:b9:3e:de:4f:9e:52:cb:f4:eb:a7:74:63:5f: 87:85:86:73:f6:50:3b:70:5a:d7:bb:37:c9:87:27:34:57:cf: 18:b0:d6:bf:b3:29:b3:4b:af:3b:e5:fb:ef:0c:d1:34:01:af: d9:21:e8:18:1f:08:a4:81:ca:e4:ef:37:7c:7a:47:6b:8e:2a: 6e:72:32:af:e0:bc:d8:af:dc:a1:58:dd:8c:c6:22:2d:0e:38: 2d:3b:15:d6:2b:c4:f0:e2:bc:43:06:b1:f1:38:01:3f:83:49: 47:73:01:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYwOTI1MDIxNjU2WhcNMjYxMDAyMDIxNjU2WjAYMRYwFAYD VQQDEw02YWI1ZDk5OS0wOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5bksLsuKRjK1nS+hTkkZT73hLD5n/r6t2rt+CMo0B2v/vArBe7Hm4MYT3bX hZIsFgWI9bW/amN6J3fOSHuQwNsNpsj22CVcVDhM9/Ddad1fCP+qZrLlOreLTvX9 Jz5pk7t07f5p+Qrc1V/MX3ve6lzWMF/R82sxir0YzYQIPMnWr8YZsMKRJc6HZpmc dCKdrZRRx+aZ795oCVJwRMhC77M+CWYY09XvyCdCnnI4QnnogC1pbZ/ItrU8RMfo ez8elJWyyDSBp66cjZV3MuI0TrfVydxaCQ4KlPwruh0mszVRFJK3O7fbChDckMyk EjiyXS4Bc+5OjbDuuQkp9L68nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAEos5t REuGrMs0yIIUDlqAWdT0MB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADg6IJUOO4/CGwUkqD9AuJkkuVvW8CQbypmvut8S+HyzM32SRB1NLzDodCIn6 nu36uSXB2SYxyL99IFunYPN77uZpVRv3NfTyW4/s/qASAeljwwtJhB6ZSSBOuwFI kpiBYWNbLIjVaNEOiYVVsjb1NvW7QTQXZ3tP+dPPi61bezX31hdH/uOtwN3lDZII 47AzoUbzDtm5Pt5PnlLL9OundGNfh4WGc/ZQO3Ba17s3yYcnNFfPGLDWv7Mps0uv O+X77wzRNAGv2SHoGB8IpIHK5O83fHpHa44qbnIyr+C82K/coVjdjMYiLQ44LTsV 1ivE8OK8Qwax8TgBP4NJR3MByQ== -----END CERTIFICATE-----Generated at Sun Sep 27 03:17:32 2026 by rpki-client