$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: MgR8ZZE0gfwvjbz+srRaoUdyj2wbBUsunG3XikxLE+0= Subject key identifier: 4D:2E:DA:F2:86:1A:17:D5:AB:9C:25:B0:CE:6A:87:E9:23:40:52:EA Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 35AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3594 Signing time: Tue 22 Sep 2026 14:34:37 +0000 Manifest this update: Tue 22 Sep 2026 14:34:37 +0000 Manifest next update: Tue 29 Sep 2026 14:34:37 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: c3uIn54hKL5r4p/3IqmzAPGVcTLW1ikXuCMrrEQUEYM=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Sep 22 14:34:37 2026 GMT Not After : Sep 29 14:34:37 2026 GMT Subject: CN=6ab291fd-8f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:65:f3:6c:6c:5b:43:d0:fb:da:be:d8:11: fc:18:78:62:ec:32:ac:ca:85:18:e8:4e:bb:af:01: 70:d6:ee:f9:72:2c:b0:d5:4f:a2:18:8c:8c:47:fc: ad:eb:51:3b:f4:02:80:5b:eb:dd:a6:a3:db:a0:bb: 9c:78:2c:3a:25:cd:db:72:21:f2:e1:5d:f8:b8:cf: 1d:2a:0f:76:c9:67:a9:9b:ec:09:70:94:95:0a:5d: b5:a1:95:b7:89:00:9e:cb:4d:7d:21:0f:60:d3:2d: ee:e0:83:c9:e2:e3:4f:8f:67:78:3d:df:9d:83:c2: f5:c0:bc:00:ad:79:4f:33:a4:d8:00:96:54:a4:13: e2:a9:ba:bd:08:e3:6f:d6:5e:c2:99:f8:b5:21:c3: a4:89:62:90:17:0e:ce:60:3e:ce:4b:de:ce:7f:ac: 89:87:aa:c7:4f:60:46:ac:8f:84:05:34:00:fd:f6: 0f:41:ef:d5:7d:53:17:03:76:d1:6a:7c:ed:ea:20: 32:9b:34:1d:4a:cf:29:02:3f:5d:1c:be:12:92:5e: 1f:b2:1f:bf:b8:5e:51:33:3f:c5:fc:71:69:6e:f0: 95:d8:94:29:c3:e2:2d:21:c3:d0:17:f0:10:5d:79: f1:a6:41:d3:27:24:75:22:57:a1:ad:c6:9d:3f:84: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2E:DA:F2:86:1A:17:D5:AB:9C:25:B0:CE:6A:87:E9:23:40:52:EA X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:18:bf:9d:fe:72:b0:40:8a:a4:4c:92:4a:cc:e5:28:d0:73: d3:2b:28:0a:7e:cb:cf:30:3d:c7:fa:53:f7:0f:02:e9:4e:0d: 9c:a3:fd:0d:a1:b0:e1:84:77:75:21:2e:1c:7d:7f:37:ab:09: 43:eb:0e:6c:97:49:5e:17:69:8a:ca:b9:9f:05:e1:f9:16:01: 5b:06:ef:ba:a0:29:f9:5f:38:d0:40:e8:17:bf:ac:85:77:b8: 98:d7:dc:c5:2c:88:9f:81:4f:b1:09:eb:d4:42:1a:13:e7:a6: 3a:b1:44:90:4d:7f:73:05:7c:08:26:53:15:ca:73:80:84:43: 8d:9b:d4:04:70:47:e0:08:f2:90:b8:dd:12:82:63:5d:4d:31: 88:03:de:15:c2:6c:1e:f6:91:11:af:5d:62:02:b6:b1:43:c1: 02:ab:18:f2:79:2b:50:fb:d7:86:24:95:d0:51:50:80:41:25: b3:86:d5:f6:5c:69:54:5e:3f:f6:46:01:c2:d0:48:aa:2f:92: 0d:98:27:4b:f5:f9:7a:17:1c:2f:03:cd:28:58:e9:cb:cc:e4: 1b:4f:a7:35:e1:ba:d2:88:6c:51:59:b8:6e:20:1b:23:bb:b8: 9f:b6:79:e8:5e:06:59:0b:35:1a:a3:f4:fb:9b:59:03:dc:d5: ea:ae:68:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwOTIyMTQzNDM3WhcNMjYwOTI5MTQzNDM3WjAYMRYwFAYD VQQDEw02YWIyOTFmZC04ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1xl82xsW0PQ+9q+2BH8GHhi7DKsyoUY6E67rwFw1u75ciyw1U+iGIyMR/yt 61E79AKAW+vdpqPboLuceCw6Jc3bciHy4V34uM8dKg92yWepm+wJcJSVCl21oZW3 iQCey019IQ9g0y3u4IPJ4uNPj2d4Pd+dg8L1wLwArXlPM6TYAJZUpBPiqbq9CONv 1l7Cmfi1IcOkiWKQFw7OYD7OS97Of6yJh6rHT2BGrI+EBTQA/fYPQe/VfVMXA3bR anzt6iAymzQdSs8pAj9dHL4Skl4fsh+/uF5RMz/F/HFpbvCV2JQpw+ItIcPQF/AQ XXnxpkHTJyR1IlehrcadP4TcXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0u2vKG GhfVq5wlsM5qh+kjQFLqMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYxi/nf5ysECKpEySSszlKNBz0ysoCn7LzzA9x/pT9w8C6U4NnKP9DaGw4YR3 dSEuHH1/N6sJQ+sObJdJXhdpisq5nwXh+RYBWwbvuqAp+V840EDoF7+shXe4mNfc xSyIn4FPsQnr1EIaE+emOrFEkE1/cwV8CCZTFcpzgIRDjZvUBHBH4AjykLjdEoJj XU0xiAPeFcJsHvaREa9dYgK2sUPBAqsY8nkrUPvXhiSV0FFQgEEls4bV9lxpVF4/ 9kYBwtBIqi+SDZgnS/X5ehccLwPNKFjpy8zkG0+nNeG60ohsUVm4biAbI7u4n7Z5 6F4GWQs1GqP0+5tZA9zV6q5ofg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:21:18 2026 by rpki-client