$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: lVYPg2Z+dm0U+w2fEmdfbjNW0nRprYk4ssJYIr7HsS8= Subject key identifier: 6B:B3:DD:A1:C4:88:B8:5E:8D:47:6F:8B:DB:63:E8:70:20:BC:4D:32 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 0191 Signing time: Wed 23 Sep 2026 04:15:19 +0000 Manifest this update: Wed 23 Sep 2026 04:15:19 +0000 Manifest next update: Wed 30 Sep 2026 04:15:19 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: HdYb+GhU1B4v8BhpWvLvpDCFr6fLSjgJOTpgBN2zAOE=) 2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=) 3: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Sep 23 04:15:19 2026 GMT Not After : Sep 30 04:15:19 2026 GMT Subject: CN=6ab35257-2315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:a7:01:65:ff:1f:13:57:49:7e:9c:ad:6f: 7b:8f:4f:5a:b2:fa:09:6a:da:82:cc:cd:61:e0:12: 86:2b:36:70:88:34:81:1d:e2:1c:6d:18:31:12:3e: eb:60:d8:93:3f:43:cf:e4:78:bb:a5:bf:9a:dd:1c: 29:92:cf:a6:cd:71:3e:b2:ee:47:84:3e:2c:00:86: c6:5e:2c:95:c7:34:db:80:68:2c:b9:23:78:4e:0d: 25:a9:aa:96:61:a7:bc:34:c3:02:f8:05:02:c3:93: d2:58:80:c6:c3:a3:c7:82:6a:88:7f:4f:4f:48:92: 38:46:7b:bb:0e:73:c7:6a:f6:4c:44:24:09:3b:fb: 69:e0:ff:f9:88:e3:fd:9e:b1:ea:63:72:56:c5:63: 05:6f:21:f3:28:54:ee:5d:ee:9e:83:f4:77:0d:ca: d3:ea:7f:da:7b:d4:6e:13:a6:a7:76:c4:35:28:ef: a4:15:62:16:2a:70:df:58:b4:a5:36:f8:2a:18:7e: 33:3e:d2:17:49:29:ab:db:a7:ed:ec:fa:f2:e2:78: 80:8c:5c:70:b4:eb:be:36:a5:ca:dc:77:76:7c:f9: 0f:80:83:cb:dd:3c:8f:ae:d9:6a:a6:f7:ca:0b:8b: 9e:79:42:74:86:d5:09:c1:1b:a6:f0:dc:7d:af:cf: 6b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B3:DD:A1:C4:88:B8:5E:8D:47:6F:8B:DB:63:E8:70:20:BC:4D:32 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:66:d0:7d:52:4e:b8:49:15:7d:f5:73:ae:3a:23:af:d2:32: 52:75:17:60:e2:4c:68:81:6e:f3:b5:21:54:d6:a4:43:30:a9: 96:56:99:5b:1f:7c:57:03:01:df:2e:34:bd:0e:6d:9a:5c:1c: 9d:dd:18:ad:a1:5f:1a:a4:6f:83:6e:dc:de:af:5d:0e:35:ca: b1:ca:ee:61:6f:0f:1b:17:84:e7:95:94:db:90:be:6f:98:15: 74:1e:bc:5e:71:25:8d:78:30:f6:77:9f:c5:70:b5:8f:1b:e8: 6a:fb:59:d1:24:30:51:c4:8c:95:87:b5:7d:63:9d:7e:7b:bd: f4:56:86:76:9d:07:19:79:c3:d7:6b:51:23:24:19:ab:1e:78: 37:36:c4:19:7c:9a:c3:92:b1:bc:cf:e3:d3:96:2e:a3:ba:b6: 47:1f:87:71:49:f1:4f:2b:bb:17:b4:44:72:db:cb:b5:0f:e7: ad:9d:3c:7c:16:ee:26:70:6a:aa:bd:fa:e9:65:19:ba:54:6a: d6:84:00:92:86:d0:e0:f7:08:d9:a6:1a:1f:10:02:5f:98:f3: 08:64:e8:07:31:1e:ca:1b:fb:6a:58:77:a7:60:38:9c:e2:ce: 09:30:0b:0d:36:3f:bd:35:30:c8:9a:8e:6d:6f:a4:b1:1b:fc: ce:e6:f0:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjYwOTIzMDQxNTE5WhcNMjYwOTMwMDQxNTE5WjAYMRYwFAYD VQQDEw02YWIzNTI1Ny0yMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgOnAWX/HxNXSX6crW97j09asvoJatqCzM1h4BKGKzZwiDSBHeIcbRgxEj7r YNiTP0PP5Hi7pb+a3Rwpks+mzXE+su5HhD4sAIbGXiyVxzTbgGgsuSN4Tg0lqaqW Yae8NMMC+AUCw5PSWIDGw6PHgmqIf09PSJI4Rnu7DnPHavZMRCQJO/tp4P/5iOP9 nrHqY3JWxWMFbyHzKFTuXe6eg/R3DcrT6n/ae9RuE6andsQ1KO+kFWIWKnDfWLSl NvgqGH4zPtIXSSmr26ft7Pry4niAjFxwtOu+NqXK3Hd2fPkPgIPL3TyPrtlqpvfK C4ueeUJ0htUJwRum8Nx9r89rYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuz3aHE iLhejUdvi9tj6HAgvE0yMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWbQfVJOuEkVffVzrjojr9IyUnUXYOJMaIFu87UhVNakQzCpllaZWx98VwMB 3y40vQ5tmlwcnd0YraFfGqRvg27c3q9dDjXKscruYW8PGxeE55WU25C+b5gVdB68 XnEljXgw9nefxXC1jxvoavtZ0SQwUcSMlYe1fWOdfnu99FaGdp0HGXnD12tRIyQZ qx54NzbEGXyaw5KxvM/j05Yuo7q2Rx+HcUnxTyu7F7REctvLtQ/nrZ08fBbuJnBq qr366WUZulRq1oQAkobQ4PcI2aYaHxACX5jzCGToBzEeyhv7alh3p2A4nOLOCTAL DTY/vTUwyJqObW+ksRv8zubw2A== -----END CERTIFICATE-----Generated at Thu Sep 24 06:10:05 2026 by rpki-client