$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft File: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft (raw, json) Hash identifier: eWhcV7N1zLfq3nEkIEE4qOA0V4G+kqsVJ01eR6RxfWQ= Subject key identifier: 91:E4:1E:8C:BA:D7:21:36:6F:AD:B2:15:5D:F6:62:83:31:95:A1:6C Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 Certificate issuer: /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft Manifest number: 09 Signing time: Fri 25 Sep 2026 09:26:58 +0000 Manifest this update: Fri 25 Sep 2026 09:26:58 +0000 Manifest next update: Fri 02 Oct 2026 09:26:58 +0000 Files and hashes: 1: 3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl (hash: 7ky1xepwDGF/bYbTeQAmXByykLUqxKXvJIikaTkEiWw=) 2: y1g0K3BpCtGdwmwVYGz416Ro37A.asa (hash: 14Kb56nmcCqX1/aGgMSOO20n7FfaDrbKczoyK0CGkuA=) 3: A39294F2B31911F1AD8137FA6511F970.roa (hash: Zma4t38tztu49pqbn5EJV9Y/LliEvIBeR5nXDKoUMC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2 Validity Not Before: Sep 25 09:26:58 2026 GMT Not After : Oct 2 09:26:58 2026 GMT Subject: CN=6ab63e62-ffa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:03:78:16:6d:a3:12:5b:af:83:b8:44:2c: c8:78:93:d1:b0:5b:87:32:20:51:a8:1d:32:8b:ac: 1d:75:b2:18:b8:6e:f3:13:ad:4c:40:a5:69:e8:ad: a9:aa:b7:12:93:dc:c8:8e:8a:4a:9b:10:6d:d9:86: a1:2d:84:1d:e9:3d:59:6f:ef:e5:7f:58:9f:7b:9f: 33:54:d4:7d:00:2b:fa:04:1e:d1:88:4c:66:4d:7b: 34:a9:6e:62:7f:76:63:39:80:5e:96:4c:e7:15:8e: c3:11:5c:8d:53:5d:d2:05:2d:48:8f:60:0e:f9:ad: 0c:1a:0c:f4:a4:3c:cb:65:e4:1e:c2:7d:ac:59:2a: bc:45:ee:72:48:77:cd:6c:9b:0b:d8:70:d0:99:ed: a8:ed:5f:9b:d6:f1:03:02:b1:be:b7:77:c5:ef:55: f6:bf:00:c2:fe:1f:a0:99:b8:d8:32:52:15:b7:2f: 63:08:c9:a6:86:f4:6f:95:31:87:e1:62:57:21:b1: d1:10:35:d9:14:da:27:2e:a0:b3:29:04:b1:19:a2: b3:bd:47:14:e7:24:74:59:be:21:d2:98:c1:0d:3b: c6:72:26:fc:8e:3c:a8:b4:34:52:d2:a5:2f:0c:7c: 68:15:f6:82:c6:15:7d:08:fa:26:14:80:87:f2:8d: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:1E:8C:BA:D7:21:36:6F:AD:B2:15:5D:F6:62:83:31:95:A1:6C X509v3 Authority Key Identifier: keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:15:cd:1b:ff:52:16:a5:fb:2a:fa:d2:b2:0f:54:02:10:31: 7e:93:43:03:3e:35:a6:8f:46:2c:9b:38:46:bc:06:7c:84:6b: c5:9e:b5:be:5c:cc:8b:d1:4c:95:20:11:5a:11:a8:03:f6:53: e2:cc:0c:ee:92:1f:08:4f:bb:db:a0:9c:2b:ab:30:ea:6e:35: c5:82:73:24:81:e2:e2:76:33:d1:38:fc:83:ba:60:cf:79:0c: ce:41:29:bc:41:3f:bd:c7:f3:13:83:ef:a8:a2:c7:69:3e:50: b9:26:2a:ca:7c:d3:a3:93:45:11:9a:ea:4b:b4:bc:f6:c7:fb: 9f:01:69:6b:d0:0d:9f:4b:59:ec:43:0c:e4:6b:bb:37:c0:b9: 2a:7e:98:64:fa:da:fa:53:20:b7:7b:f7:77:fe:82:47:7f:36: 74:b1:7f:e0:7b:d2:c1:dd:8c:bf:1a:45:19:e6:d1:8f:bd:2b: e5:01:82:0b:6c:a9:20:50:e6:88:79:40:d6:61:a9:66:08:0d: f0:dc:19:7b:b6:fe:3c:71:7f:0b:99:c5:89:52:6e:6c:e9:b7: ec:32:e2:76:65:4a:d6:04:93:df:52:ad:7d:b9:45:49:ef:fc: 93:42:7c:b5:ce:2a:7b:be:3d:80:5f:90:55:8c:d0:b6:1b:36: 18:0d:7d:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxRDExMC8GA1UEBRMoREREQzcxMDJBRDkyRDlEODFBNjBDNDNBNEY2QjQyOTM0 RDUxMUJBMjAeFw0yNjA5MjUwOTI2NThaFw0yNjEwMDIwOTI2NThaMBgxFjAUBgNV BAMTDTZhYjYzZTYyLWZmYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCopgN4Fm2jEluvg7hELMh4k9GwW4cyIFGoHTKLrB11shi4bvMTrUxApWnoramq txKT3MiOikqbEG3ZhqEthB3pPVlv7+V/WJ97nzNU1H0AK/oEHtGITGZNezSpbmJ/ dmM5gF6WTOcVjsMRXI1TXdIFLUiPYA75rQwaDPSkPMtl5B7CfaxZKrxF7nJId81s mwvYcNCZ7ajtX5vW8QMCsb63d8XvVfa/AML+H6CZuNgyUhW3L2MIyaaG9G+VMYfh YlchsdEQNdkU2icuoLMpBLEZorO9RxTnJHRZviHSmMENO8ZyJvyOPKi0NFLSpS8M fGgV9oLGFX0I+iYUgIfyjUWBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkeQejLrX ITZvrbIVXfZigzGVoWwwHwYDVR0jBBgwFoAU3dxxAq2S2dgaYMQ6T2tCk01RG6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzdGODYwQ0U4QjIx RTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRnYVlNUTZUMnRDazAxUkc2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R4eEFxMlMyZGdhWU1RNlQydENrMDFSRzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTFELzdGODYwQ0U4QjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwLzNkeHhBcTJTMmRn YVlNUTZUMnRDazAxUkc2SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZFc0b/1IWpfsq+tKyD1QCEDF+k0MDPjWmj0YsmzhGvAZ8hGvFnrW+XMyL0UyV IBFaEagD9lPizAzukh8IT7vboJwrqzDqbjXFgnMkgeLidjPROPyDumDPeQzOQSm8 QT+9x/MTg++oosdpPlC5JirKfNOjk0URmupLtLz2x/ufAWlr0A2fS1nsQwzka7s3 wLkqfphk+tr6UyC3e/d3/oJHfzZ0sX/ge9LB3Yy/GkUZ5tGPvSvlAYILbKkgUOaI eUDWYalmCA3w3Bl7tv48cX8LmcWJUm5s6bfsMuJ2ZUrWBJPfUq19uUVJ7/yTQny1 zip7vj2AX5BVjNC2GzYYDX2E -----END CERTIFICATE-----Generated at Sat Sep 26 08:15:07 2026 by rpki-client