$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: WhHrr7d/jBvA1Yqm5sPWOBmd3x2A9vp6NDa+8epXorM= Subject key identifier: 42:B0:3E:51:88:71:97:E1:48:69:F9:37:B6:50:C7:B3:E8:4B:DF:6C Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0176 Signing time: Mon 21 Sep 2026 04:43:16 +0000 Manifest this update: Mon 21 Sep 2026 04:43:16 +0000 Manifest next update: Mon 28 Sep 2026 04:43:16 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: 1yPiHSItfXAU0etz8TicWkQ1baHvpf7hBPEc9GEls0Q=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Sep 21 04:43:16 2026 GMT Not After : Sep 28 04:43:16 2026 GMT Subject: CN=6ab0b5e4-4d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:8f:a1:74:5e:91:34:b1:3b:ab:fc:4a:43: 4d:d2:4e:f2:00:ee:15:64:58:2b:e6:fb:82:43:2c: de:6c:66:b0:1a:c5:39:e6:3d:fb:b0:58:d9:37:f8: 55:16:83:b7:b7:73:64:2f:b2:ad:87:c4:32:fc:f9: 63:d9:c3:e5:e1:53:1c:78:1c:d9:a0:9f:ca:10:1a: 57:71:90:56:3a:d4:ad:66:89:f3:04:0f:b4:b1:2d: 1c:7b:10:83:6d:c2:8d:cc:35:bc:31:0a:34:f6:39: 5d:40:ab:df:4b:44:74:ce:a1:eb:29:ab:3d:d2:d4: be:9f:3e:8e:41:03:7a:04:7f:33:3c:79:79:bc:ee: 29:e2:c2:14:f9:b3:d3:66:1f:7f:9f:3d:e1:d9:b6: 30:51:7d:6d:1f:75:69:78:57:d9:7a:97:6f:9e:ac: 7b:e7:10:75:1c:fa:8f:0b:62:b7:2d:e1:9b:e3:a2: f7:cb:0f:e0:93:b1:14:9d:30:a7:c6:24:29:c2:71: 65:05:22:1c:b0:8c:0c:07:94:d8:b0:b2:aa:59:5f: 9a:88:c0:7e:44:06:74:61:e1:c9:c4:71:03:9d:1a: c7:25:fd:5a:5e:c4:9a:9b:c0:3b:5a:3e:c0:f2:13: 5b:c6:e8:f4:99:25:98:89:1e:0e:67:f0:f1:98:9d: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B0:3E:51:88:71:97:E1:48:69:F9:37:B6:50:C7:B3:E8:4B:DF:6C X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5d:1b:f6:91:a5:d0:80:f7:0e:65:41:27:d4:fa:bb:ab:8e: 01:57:10:95:66:4d:d4:61:2e:04:5a:be:c9:03:71:1c:e1:fa: 84:ea:d1:f9:ac:99:94:bd:93:19:40:8e:c3:f1:70:35:9b:f7: 53:0c:a4:bc:9d:ec:46:e1:2a:02:65:f3:35:70:58:c6:61:56: 84:91:ef:f1:4e:b9:fe:c7:5d:22:3e:33:42:66:e5:72:58:5b: c4:38:54:39:bd:b7:27:de:f1:3e:74:c4:fa:6a:40:36:4a:e4: b6:d1:66:56:d8:3a:40:af:99:3b:e7:56:3f:42:17:bb:a0:dc: 75:61:c0:e3:95:b9:47:f2:05:37:bb:a6:62:fd:25:5d:7e:9b: a8:93:0f:0b:ff:d4:41:b5:83:f6:14:1a:75:a2:9e:d6:f3:3b: 3e:97:b9:de:b1:70:70:4f:11:54:f7:79:94:4b:09:3e:ea:5e: 90:2f:d7:6a:17:37:0e:0a:90:6a:c5:62:a8:ff:06:d9:32:56: c3:10:ac:4e:55:ca:f7:ab:b9:10:bc:5b:7d:e5:29:34:ed:f3: 10:56:ca:8c:7f:c1:ae:58:7e:81:06:b4:19:8c:09:42:b5:2a: 4a:01:d3:97:bf:f3:a9:19:a2:8d:79:63:2d:8b:ed:25:32:f1: c1:79:d7:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwOTIxMDQ0MzE2WhcNMjYwOTI4MDQ0MzE2WjAYMRYwFAYD VQQDEw02YWIwYjVlNC00ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJaPoXRekTSxO6v8SkNN0k7yAO4VZFgr5vuCQyzebGawGsU55j37sFjZN/hV FoO3t3NkL7Kth8Qy/Plj2cPl4VMceBzZoJ/KEBpXcZBWOtStZonzBA+0sS0cexCD bcKNzDW8MQo09jldQKvfS0R0zqHrKas90tS+nz6OQQN6BH8zPHl5vO4p4sIU+bPT Zh9/nz3h2bYwUX1tH3VpeFfZepdvnqx75xB1HPqPC2K3LeGb46L3yw/gk7EUnTCn xiQpwnFlBSIcsIwMB5TYsLKqWV+aiMB+RAZ0YeHJxHEDnRrHJf1aXsSam8A7Wj7A 8hNbxuj0mSWYiR4OZ/DxmJ34gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKwPlGI cZfhSGn5N7ZQx7PoS99sMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMF0b9pGl0ID3DmVBJ9T6u6uOAVcQlWZN1GEuBFq+yQNxHOH6hOrR+ayZlL2T GUCOw/FwNZv3UwykvJ3sRuEqAmXzNXBYxmFWhJHv8U65/sddIj4zQmblclhbxDhU Ob23J97xPnTE+mpANkrkttFmVtg6QK+ZO+dWP0IXu6DcdWHA45W5R/IFN7umYv0l XX6bqJMPC//UQbWD9hQadaKe1vM7Ppe53rFwcE8RVPd5lEsJPupekC/Xahc3DgqQ asViqP8G2TJWwxCsTlXK96u5ELxbfeUpNO3zEFbKjH/Brlh+gQa0GYwJQrUqSgHT l7/zqRmijXljLYvtJTLxwXnXog== -----END CERTIFICATE-----Generated at Wed Sep 23 02:10:09 2026 by rpki-client