$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft File: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft (raw, json) Hash identifier: 6OrDLaygrq1O7HkOwnbbx2rS6FBMnK0s4oZjkH7PTmw= Subject key identifier: 04:F9:E2:9A:96:32:53:BC:14:5F:F9:25:A4:C8:27:6C:98:29:4E:FF Authority key identifier: DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57 Certificate issuer: /CN=A91731A3/serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft Manifest number: 18 Signing time: Wed 23 Sep 2026 08:45:41 +0000 Manifest this update: Wed 23 Sep 2026 08:45:41 +0000 Manifest next update: Wed 30 Sep 2026 08:45:41 +0000 Files and hashes: 1: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl (hash: As4DHFHJsLld7dQmAOSMpBydMyvcdcRHKIO6p1F+9BM=) 2: FE48721A979211F1B1FF570F5011F970.roa (hash: FMkg1uv3vBHeUlhEXwmbBwkyuLXm5T/S60PVC3PzM9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731A3, serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57 Validity Not Before: Sep 23 08:45:41 2026 GMT Not After : Sep 30 08:45:41 2026 GMT Subject: CN=6ab391b5-ba8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:d1:9a:c2:75:37:54:37:70:5f:cf:df:d0: 80:fd:9e:50:66:71:bb:e3:38:f4:e6:d3:5c:b4:40: c9:e0:b5:36:8a:cc:8f:06:b3:f7:24:70:30:dd:d0: ec:5f:1b:ae:73:08:f4:32:32:d1:ca:99:69:2f:eb: 13:54:ef:9c:d2:d4:1b:9a:0c:ea:0b:92:e6:eb:30: a1:55:f1:b0:73:61:e8:74:1f:82:c3:75:18:b7:06: d9:22:ef:e6:52:1d:79:03:28:ac:0a:91:3c:53:7e: 01:ed:c5:7e:ab:4b:96:d9:50:9e:63:19:dc:46:0b: cd:04:43:31:6a:89:1d:76:13:8e:fe:1c:f6:9e:eb: 81:e9:01:de:8c:2f:3b:ee:22:28:da:4c:60:d9:ba: f2:89:42:fe:da:38:d6:ae:88:34:f6:5f:49:a6:46: 95:68:df:d0:ed:18:e4:2f:6a:33:64:83:6f:fb:2c: 21:c2:e3:a4:be:2f:85:bf:7d:10:9a:12:31:93:07: 34:3f:06:d4:88:e0:19:77:4a:f5:13:2f:be:c6:71: 6d:0d:c0:53:de:dc:0f:e6:ac:37:47:54:bb:2b:57: 74:8b:9a:43:e2:87:e0:c8:50:f9:40:f6:0d:b3:cf: b7:2e:8f:d6:fa:2e:ed:53:86:bd:47:8d:1a:df:5a: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F9:E2:9A:96:32:53:BC:14:5F:F9:25:A4:C8:27:6C:98:29:4E:FF X509v3 Authority Key Identifier: keyid:DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:01:91:46:e1:e4:c0:df:90:fe:24:b1:72:6f:68:ea:2f:a1: 5e:92:b9:ca:d9:f6:71:2b:0c:54:7c:a3:fd:08:4b:54:6a:82: 6f:d9:13:6f:7f:e4:9c:38:c5:66:83:75:f5:79:fa:96:b4:71: 37:24:7d:04:81:5d:f0:63:e7:44:e0:a6:ea:22:b6:61:a0:3f: 58:a3:ed:65:43:07:2e:6e:bd:9c:0f:e4:0f:1f:b7:3b:ad:ad: 9c:b4:4c:2e:96:f3:1b:6b:17:7e:11:ad:38:02:8c:1c:f5:94: b8:be:53:f2:1b:6b:3b:e7:26:4b:58:bf:51:78:0c:aa:55:51: 32:2b:e4:b6:8c:3a:b7:75:97:06:90:01:90:c4:42:78:61:a3: f3:97:84:01:98:46:ba:05:b8:b6:dc:2e:c3:54:63:ed:65:0e: e3:88:ae:46:ef:60:bd:59:30:ca:ba:14:4c:3e:69:c9:55:96: 7a:b3:0c:20:cf:dd:ec:e7:4f:fc:bf:7b:bd:02:4d:4d:cf:58: 4e:17:fc:72:33:2b:da:cd:78:05:c2:3c:57:69:79:4b:f3:c6: db:18:c8:09:5c:d3:5b:bb:7d:a3:55:62:f0:6b:7a:8c:f1:b9: 95:d8:d7:d2:3b:53:ac:e2:6e:1b:89:33:d4:96:41:ab:89:9d: cc:06:c8:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBMzExMC8GA1UEBRMoRENGQjcyQzZGNkQwMzk1QzQ1OTdGMzJGODI0QkQ2ODk2 REIzN0I1NzAeFw0yNjA5MjMwODQ1NDFaFw0yNjA5MzAwODQ1NDFaMBgxFjAUBgNV BAMTDTZhYjM5MWI1LWJhOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFM9GawnU3VDdwX8/f0ID9nlBmcbvjOPTm01y0QMngtTaKzI8Gs/ckcDDd0Oxf G65zCPQyMtHKmWkv6xNU75zS1BuaDOoLkubrMKFV8bBzYeh0H4LDdRi3Btki7+ZS HXkDKKwKkTxTfgHtxX6rS5bZUJ5jGdxGC80EQzFqiR12E47+HPae64HpAd6MLzvu IijaTGDZuvKJQv7aONauiDT2X0mmRpVo39DtGOQvajNkg2/7LCHC46S+L4W/fRCa EjGTBzQ/BtSI4Bl3SvUTL77GcW0NwFPe3A/mrDdHVLsrV3SLmkPih+DIUPlA9g2z z7cuj9b6Lu1Thr1HjRrfWhU5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBPnimpYy U7wUX/klpMgnbJgpTv8wHwYDVR0jBBgwFoAU3PtyxvbQOVxFl/MvgkvWiW2ze1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUEzLzk2NUQ2RDJDOTc5 MjExRjFCNDI1NDdFQzRGMTFGOTcwLzNQdHl4dmJRT1Z4RmxfTXZna3ZXaVcyemUx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1B0eXh2YlFPVnhGbF9NdmdrdldpVzJ6ZTFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUEzLzk2NUQ2RDJDOTc5MjExRjFCNDI1NDdFQzRGMTFGOTcwLzNQdHl4dmJRT1Z4 RmxfTXZna3ZXaVcyemUxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMAZFG4eTA35D+JLFyb2jqL6FekrnK2fZxKwxUfKP9CEtUaoJv2RNvf+ScOMVm g3X1efqWtHE3JH0EgV3wY+dE4KbqIrZhoD9Yo+1lQwcubr2cD+QPH7c7ra2ctEwu lvMbaxd+Ea04Aowc9ZS4vlPyG2s75yZLWL9ReAyqVVEyK+S2jDq3dZcGkAGQxEJ4 YaPzl4QBmEa6Bbi23C7DVGPtZQ7jiK5G72C9WTDKuhRMPmnJVZZ6swwgz93s50/8 v3u9Ak1Nz1hOF/xyMyvazXgFwjxXaXlL88bbGMgJXNNbu32jVWLwa3qM8bmV2NfS O1Os4m4biTPUlkGriZ3MBsgh -----END CERTIFICATE-----Generated at Wed Sep 23 16:56:25 2026 by rpki-client