$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: yKzm9Fj/GQqzw86BVKkBogZeg4JihwEJ0Ub1p2UiF0M= Subject key identifier: 48:5C:EC:B2:2C:97:A8:58:61:3D:44:DC:7D:26:D4:0D:4A:6D:E2:73 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 0134 Signing time: Wed 23 Sep 2026 05:25:59 +0000 Manifest this update: Wed 23 Sep 2026 05:25:58 +0000 Manifest next update: Wed 30 Sep 2026 05:25:58 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: KNiwG9IsMPZZ54ca47Q/4uT6SiDvQetxdZaFx1hfaT4=) 2: rRNC3E6JI7CmofOfGt02r2GAoY0.asa (hash: mve2brL6PCCHO6LyVKWicopf+XDXh9VmQdiQHp/iWo8=) 3: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Sep 23 05:25:58 2026 GMT Not After : Sep 30 05:25:58 2026 GMT Subject: CN=6ab362e6-682d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:44:25:2b:52:fb:d8:33:ee:8b:95:82:57: 87:ff:99:60:af:7c:a0:c0:72:49:af:b6:c6:81:dc: 75:09:28:00:42:31:ab:eb:e0:46:ea:5d:2c:9e:0e: dc:bf:64:11:b6:08:82:22:fc:c3:30:c2:ca:e6:5c: 32:7b:b8:88:3e:01:3c:89:de:30:73:40:5e:23:18: 30:d8:0f:64:16:52:fb:95:29:84:65:3f:6e:3d:da: 00:d9:5f:a3:6d:b0:c7:ff:3b:b3:c5:e5:1e:f4:b6: 30:26:4e:8f:3b:fc:7c:d2:e3:99:81:a2:8b:15:49: d1:48:b0:44:b5:60:b8:39:44:6b:82:5d:63:6c:10: d4:6a:80:40:41:3f:40:3d:ca:60:9d:ee:b5:fa:18: 86:14:73:b5:86:54:5b:52:3a:e4:9d:64:b7:c3:ac: 46:92:98:d2:55:1b:a0:cd:09:2f:78:8a:78:e6:ea: 71:8f:26:b6:5e:eb:c3:81:cc:7b:d6:cf:04:dd:17: 1a:62:98:4d:cb:ba:dc:4b:e6:c4:27:f2:fe:c2:87: ef:60:32:6f:1f:a1:f0:eb:c9:37:63:e8:49:7f:b8: 0e:44:c0:45:2c:a2:56:a9:01:01:e4:5d:39:e5:a8: 70:e4:75:e6:43:78:cf:c8:ce:b8:cd:75:dd:42:a1: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:EC:B2:2C:97:A8:58:61:3D:44:DC:7D:26:D4:0D:4A:6D:E2:73 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fb:4e:2b:63:e1:86:42:7f:be:6b:5e:d7:b8:35:ab:71:c1: c0:52:63:38:c8:dd:28:52:a8:ec:fb:88:45:a7:46:58:82:98: e3:ef:c3:b7:f8:8f:e8:a8:0e:d1:71:0f:56:fb:15:fd:9a:db: 65:a2:55:b1:fc:65:9c:85:76:ee:da:ae:00:07:16:f4:68:8d: f9:d6:61:55:d3:b2:9d:12:30:89:11:0b:ea:2c:2c:38:15:6f: 1a:2c:88:e9:b8:8d:8a:92:20:9f:e6:42:f0:40:60:96:d7:4c: f3:54:ac:05:15:32:b4:46:63:c9:46:1a:5c:c5:c1:c6:c5:38: cf:c0:0a:71:fa:46:54:2b:70:74:a5:fe:2b:43:ef:fb:5a:51: 80:ed:dc:fa:ae:f3:da:86:b6:8e:a2:f5:1d:b5:17:43:5b:97: 3f:f3:0e:2a:79:a8:9e:b9:b2:ee:69:a1:1c:fb:b9:69:0b:f2: 45:63:60:61:87:8f:95:5f:89:ce:ad:47:96:0e:2e:70:26:ed: 00:80:74:78:74:4a:3f:ed:c1:81:51:e4:a1:f5:0c:9b:a9:6c: bc:d6:56:cf:25:64:be:bb:ea:25:cc:6d:63:bb:4c:78:df:01: 96:ea:ce:93:78:12:fd:3d:3c:ea:5d:47:ee:ef:c4:52:d9:21: 57:ee:71:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjYwOTIzMDUyNTU4WhcNMjYwOTMwMDUyNTU4WjAYMRYwFAYD VQQDEw02YWIzNjJlNi02ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIpEJStS+9gz7ouVgleH/5lgr3ygwHJJr7bGgdx1CSgAQjGr6+BG6l0sng7c v2QRtgiCIvzDMMLK5lwye7iIPgE8id4wc0BeIxgw2A9kFlL7lSmEZT9uPdoA2V+j bbDH/zuzxeUe9LYwJk6PO/x80uOZgaKLFUnRSLBEtWC4OURrgl1jbBDUaoBAQT9A Pcpgne61+hiGFHO1hlRbUjrknWS3w6xGkpjSVRugzQkveIp45upxjya2XuvDgcx7 1s8E3RcaYphNy7rcS+bEJ/L+wofvYDJvH6Hw68k3Y+hJf7gORMBFLKJWqQEB5F05 5ahw5HXmQ3jPyM64zXXdQqFwPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhc7LIs l6hYYT1E3H0m1A1KbeJzMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWvtOK2PhhkJ/vmte17g1q3HBwFJjOMjdKFKo7PuIRadGWIKY4+/Dt/iP6KgO 0XEPVvsV/ZrbZaJVsfxlnIV27tquAAcW9GiN+dZhVdOynRIwiREL6iwsOBVvGiyI 6biNipIgn+ZC8EBgltdM81SsBRUytEZjyUYaXMXBxsU4z8AKcfpGVCtwdKX+K0Pv +1pRgO3c+q7z2oa2jqL1HbUXQ1uXP/MOKnmonrmy7mmhHPu5aQvyRWNgYYePlV+J zq1Hlg4ucCbtAIB0eHRKP+3BgVHkofUMm6lsvNZWzyVkvrvqJcxtY7tMeN8BlurO k3gS/T086l1H7u/EUtkhV+5xiQ== -----END CERTIFICATE-----Generated at Thu Sep 24 14:16:31 2026 by rpki-client