$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: NR4rwKvFJ33YvYBofszvi4x5b1INKQQQ4Aeckftvsr4= Subject key identifier: 44:A7:8C:A3:7D:3F:59:89:B2:7D:7D:52:DD:53:BD:62:76:64:AE:8F Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0266 Signing time: Fri 25 Sep 2026 02:12:22 +0000 Manifest this update: Fri 25 Sep 2026 02:12:21 +0000 Manifest next update: Fri 02 Oct 2026 02:12:21 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: d2fyNvAr7h8K7nZ/FfpVTKP8shtlH2fmMI+hB0U2vF0=) 2: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: SBltuM012OqLYqnXdql69mBi1G/BqnKOStfJ8Z81tqY=) 3: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: hsA4dzDqhKvp9cdCvi5E/QiWDK70tsjIjm1pqpZGIzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Sep 25 02:12:21 2026 GMT Not After : Oct 2 02:12:21 2026 GMT Subject: CN=6ab5d886-d2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:26:4c:d7:0d:a2:c2:80:1d:7c:95:71:94: a9:e7:02:5f:55:40:00:40:eb:07:bd:a3:6f:bf:15: 03:6f:e1:e0:3e:a0:12:66:ba:c2:85:22:0b:cd:7f: 04:9c:2c:a1:2e:9b:18:90:ed:ea:0c:21:3e:64:6c: 73:0d:c7:9b:07:89:38:b4:0f:c5:6a:e7:69:bc:aa: 2a:ac:fb:ed:41:ae:d0:2b:5d:98:c0:7f:65:0b:7e: d5:ed:81:6f:47:cf:5e:d8:98:58:0d:6f:7c:f0:e7: ff:31:aa:c0:16:87:3b:b6:e1:57:43:cb:3d:55:6a: 20:f6:62:7b:55:74:44:3a:4a:55:ee:57:60:ea:bf: 94:a1:8e:4e:23:c1:2c:39:e9:f7:0a:15:a3:1c:b4: bd:62:25:9f:cd:a0:48:eb:2d:a3:1d:6e:80:18:55: 97:bf:a5:25:0a:12:7a:c9:ae:e3:1f:20:cd:53:4c: 9c:d3:b8:55:9d:d1:23:ba:ca:ba:74:ed:3b:80:5d: 90:88:e6:3c:04:7e:f6:af:32:34:89:6d:24:ff:76: 7d:d9:49:d8:8c:ef:d4:60:66:fb:9f:eb:94:af:ad: f1:76:55:f3:14:90:60:18:f0:77:6a:0a:92:8f:20: 68:ae:13:8f:48:54:7a:40:c9:4b:d7:e2:d7:86:64: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A7:8C:A3:7D:3F:59:89:B2:7D:7D:52:DD:53:BD:62:76:64:AE:8F X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:a9:f8:1e:7f:b7:a1:12:fc:51:56:19:39:72:cb:12:76: 51:5b:3b:98:99:59:d0:c9:f2:88:f7:00:49:da:47:f0:5d:96: 96:53:4c:4b:27:05:c2:e8:0a:be:3b:a8:63:3e:e9:bd:f0:98: 87:d0:2a:b0:91:aa:e5:25:51:98:2b:20:97:92:67:8b:14:09: 9f:45:2a:76:b3:85:67:6f:ab:d8:6c:d6:e2:92:47:e7:cf:7c: 32:40:22:0c:c6:91:93:98:7b:13:c0:fa:8f:c5:f5:e1:c3:0f: e0:09:24:08:8e:57:0c:0f:91:2e:91:0b:81:a8:12:c5:aa:03: cb:83:e2:77:aa:9e:14:9f:17:24:18:b1:55:e0:29:a6:64:29: a8:a0:0e:e9:50:83:15:15:d1:03:f5:bc:0c:3b:d1:0b:6d:fb: b9:c0:dd:ae:76:0b:94:1a:ea:2f:48:5a:9b:43:16:25:c6:e4: 79:fb:02:ba:ee:0c:26:0b:26:3a:14:6c:51:b1:7f:3a:c2:62: e9:af:86:96:3a:97:b1:b7:07:b5:a3:fc:84:af:39:8e:70:1c: 72:0b:24:8a:3b:02:62:b9:f2:5a:39:12:d1:fe:b6:71:69:1c: 75:f2:c0:83:05:b7:fc:e4:c9:ed:4f:ea:e5:48:f3:a8:a3:cd: 1c:a2:42:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwOTI1MDIxMjIxWhcNMjYxMDAyMDIxMjIxWjAYMRYwFAYD VQQDEw02YWI1ZDg4Ni1kMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKAmTNcNosKAHXyVcZSp5wJfVUAAQOsHvaNvvxUDb+HgPqASZrrChSILzX8E nCyhLpsYkO3qDCE+ZGxzDcebB4k4tA/FaudpvKoqrPvtQa7QK12YwH9lC37V7YFv R89e2JhYDW988Of/MarAFoc7tuFXQ8s9VWog9mJ7VXREOkpV7ldg6r+UoY5OI8Es Oen3ChWjHLS9YiWfzaBI6y2jHW6AGFWXv6UlChJ6ya7jHyDNU0yc07hVndEjusq6 dO07gF2QiOY8BH72rzI0iW0k/3Z92UnYjO/UYGb7n+uUr63xdlXzFJBgGPB3agqS jyBorhOPSFR6QMlL1+LXhmQgowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESnjKN9 P1mJsn19Ut1TvWJ2ZK6PMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTyp+B5/t6ES/FFWGTlyyxJ2UVs7mJlZ0MnyiPcASdpH8F2WllNMSycFwugK vjuoYz7pvfCYh9AqsJGq5SVRmCsgl5JnixQJn0UqdrOFZ2+r2GzW4pJH5898MkAi DMaRk5h7E8D6j8X14cMP4AkkCI5XDA+RLpELgagSxaoDy4Pid6qeFJ8XJBixVeAp pmQpqKAO6VCDFRXRA/W8DDvRC237ucDdrnYLlBrqL0ham0MWJcbkefsCuu4MJgsm OhRsUbF/OsJi6a+GljqXsbcHtaP8hK85jnAccgskijsCYrnyWjkS0f62cWkcdfLA gwW3/OTJ7U/q5UjzqKPNHKJCbA== -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:46 2026 by rpki-client