$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft File: 3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft (raw, json) Hash identifier: b/4hEXzkVr2etYhC776xUvNFhEcSxZfct5UVY+Xbsw8= Subject key identifier: 24:57:D1:76:2C:A7:0D:BF:9D:CF:7C:EB:34:8D:0E:6B:D8:A1:66:B4 Authority key identifier: DC:75:A3:1E:92:8A:D9:95:7C:B4:CB:F5:25:F3:9B:90:66:77:F5:25 Certificate issuer: /CN=A91A31C0/serialNumber=DC75A31E928AD9957CB4CBF525F39B906677F525 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft Manifest number: 0D Signing time: Sun 27 Sep 2026 09:50:54 +0000 Manifest this update: Sun 27 Sep 2026 09:50:54 +0000 Manifest next update: Sun 04 Oct 2026 09:50:54 +0000 Files and hashes: 1: 3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl (hash: x7e+Z33dllel9/3VdLrR30UscGSUY99WoJujGj+d5Cg=) 2: A7A66002B28111F1B7FF07293811F970.roa (hash: GfCaXzmg8uNxBhmD5fltb9njQ/nHLq5Kv9p6y+3kPDc=) 3: W-mwtkhRqUa5cmJ0GwAGEtGc2qU.asa (hash: pnSPT5PSELeKVD+d5TJLQZDzGxVOkebFfsIrV6jJZWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31C0, serialNumber=DC75A31E928AD9957CB4CBF525F39B906677F525 Validity Not Before: Sep 27 09:50:54 2026 GMT Not After : Oct 4 09:50:54 2026 GMT Subject: CN=6ab8e6fe-98fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:0d:54:c5:39:db:4e:9e:84:e7:a0:15:47: c0:5d:93:a1:cd:b0:79:2a:0e:dd:88:7d:b6:e0:c9: 3a:99:1e:00:3d:5e:c9:bd:3d:1a:d8:a4:56:e5:25: e7:02:be:4f:d3:41:3d:bc:23:01:ab:87:4b:65:b7: 61:c4:5f:c7:8a:24:22:be:56:83:92:27:a9:c7:06: 35:3a:80:b9:7e:9b:6c:fe:46:7e:36:f2:06:ea:ce: 11:9f:a1:e6:7e:74:31:c4:ab:69:87:a0:8a:09:06: bf:d1:e7:d6:0b:b0:27:c1:80:9e:5d:10:f0:4f:2d: 14:2e:d8:c4:29:8c:2b:e9:3b:7d:fa:30:06:66:cb: bc:1a:4f:bf:ce:b6:de:ad:14:52:05:2c:eb:70:3f: cd:3b:12:93:54:00:d1:e7:1d:83:7a:ef:c7:62:aa: da:6f:4e:31:4d:f7:96:eb:3f:22:ff:e8:c3:cf:e1: 2c:2f:3d:c2:ff:0f:c6:95:a4:9b:d1:44:df:17:da: 14:a3:7a:12:c9:ca:1e:8d:28:a3:6f:8b:f0:95:ad: 31:53:b6:27:a6:9c:0f:b1:60:ff:e5:08:a2:3c:f5: 0c:81:ed:8e:4e:44:02:1d:9b:b9:ba:c7:95:6e:d1: d5:84:72:c1:8f:f9:74:61:da:62:ad:90:50:6d:87: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:D1:76:2C:A7:0D:BF:9D:CF:7C:EB:34:8D:0E:6B:D8:A1:66:B4 X509v3 Authority Key Identifier: keyid:DC:75:A3:1E:92:8A:D9:95:7C:B4:CB:F5:25:F3:9B:90:66:77:F5:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:31:c7:8e:4f:db:92:af:9e:46:83:c7:1f:47:54:fe:be:f7: ff:ef:6b:74:da:dd:00:fc:ef:eb:aa:ba:3b:96:12:76:67:8f: 1b:5a:1c:59:45:cf:ee:e0:e1:c9:b2:24:c9:47:51:e8:ad:20: f4:40:9f:49:44:1a:a0:c0:6d:3e:84:a5:2d:13:44:d9:29:af: b9:53:69:e8:7d:99:f5:1b:31:31:22:f0:4c:16:2f:7b:32:9d: 87:ba:c8:c4:1c:a9:d5:50:87:78:62:a8:e6:9e:e8:32:8e:0d: fd:97:58:f3:c2:dc:63:e1:e9:0b:9d:0d:b9:c3:0f:9c:26:0e: 9f:6f:73:b2:9a:0e:ae:1e:61:97:de:13:3b:e0:e4:5f:4a:5d: b9:13:fd:b6:e6:5a:57:b1:20:dd:23:0f:19:06:a9:af:29:77: ac:ee:b8:df:fe:22:24:86:e7:a4:c9:e6:17:d7:f0:47:04:cb: 70:b2:3b:14:7a:0d:c5:ec:25:c0:c0:1a:5e:f1:a3:c5:a6:98: 2c:cb:e0:d8:7c:11:98:99:8a:1e:0d:e7:9b:df:0d:bf:02:a9: a3:d7:fd:66:98:b6:29:c4:7a:39:09:4c:dd:6a:37:18:fe:9d: 04:e2:90:ba:88:ed:f7:72:a0:2c:1d:26:f9:bc:94:a8:8e:3b: 59:e2:1f:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFDMDExMC8GA1UEBRMoREM3NUEzMUU5MjhBRDk5NTdDQjRDQkY1MjVGMzlCOTA2 Njc3RjUyNTAeFw0yNjA5MjcwOTUwNTRaFw0yNjEwMDQwOTUwNTRaMBgxFjAUBgNV BAMTDTZhYjhlNmZlLTk4ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClvg1UxTnbTp6E56AVR8Bdk6HNsHkqDt2IfbbgyTqZHgA9Xsm9PRrYpFblJecC vk/TQT28IwGrh0tlt2HEX8eKJCK+VoOSJ6nHBjU6gLl+m2z+Rn428gbqzhGfoeZ+ dDHEq2mHoIoJBr/R59YLsCfBgJ5dEPBPLRQu2MQpjCvpO336MAZmy7waT7/Ott6t FFIFLOtwP807EpNUANHnHYN678diqtpvTjFN95brPyL/6MPP4SwvPcL/D8aVpJvR RN8X2hSjehLJyh6NKKNvi/CVrTFTtiemnA+xYP/lCKI89QyB7Y5ORAIdm7m6x5Vu 0dWEcsGP+XRh2mKtkFBthyFvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJFfRdiyn Db+dz3zrNI0Oa9ihZrQwHwYDVR0jBBgwFoAU3HWjHpKK2ZV8tMv1JfObkGZ39SUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUMwLzM0NjEzMjEwQjI1 NTExRjE5N0FFMTVBMTY5MTFGOTcwLzNIV2pIcEtLMlpWOHRNdjFKZk9ia0daMzlT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0hXakhwS0syWlY4dE12MUpmT2JrR1ozOVNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUMwLzM0NjEzMjEwQjI1NTExRjE5N0FFMTVBMTY5MTFGOTcwLzNIV2pIcEtLMlpW OHRNdjFKZk9ia0daMzlTVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwMceOT9uSr55Gg8cfR1T+vvf/72t02t0A/O/rqro7lhJ2Z48bWhxZRc/u4OHJ siTJR1HorSD0QJ9JRBqgwG0+hKUtE0TZKa+5U2nofZn1GzExIvBMFi97Mp2HusjE HKnVUId4Yqjmnugyjg39l1jzwtxj4ekLnQ25ww+cJg6fb3Oymg6uHmGX3hM74ORf Sl25E/225lpXsSDdIw8ZBqmvKXes7rjf/iIkhuekyeYX1/BHBMtwsjsUeg3F7CXA wBpe8aPFppgsy+DYfBGYmYoeDeeb3w2/Aqmj1/1mmLYpxHo5CUzdajcY/p0E4pC6 iO33cqAsHSb5vJSojjtZ4h+P -----END CERTIFICATE-----Generated at Mon Sep 28 13:24:39 2026 by rpki-client