$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: MjqwVtM3xIs79RgoxjsPHseErpx8WHzYUuscR1+6MC4= Subject key identifier: 1A:08:86:B5:AC:9A:DB:9D:81:B3:14:A2:14:77:33:11:A6:E3:54:1A Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0876 Signing time: Tue 22 Sep 2026 20:36:41 +0000 Manifest this update: Tue 22 Sep 2026 20:36:41 +0000 Manifest next update: Tue 29 Sep 2026 20:36:41 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: AtXL0DGxCVKJ6GuK1BdU+asfrDywgCj6oN6hoxN/jpY=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Sep 22 20:36:41 2026 GMT Not After : Sep 29 20:36:41 2026 GMT Subject: CN=6ab2e6d9-2ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:a6:01:28:5a:9a:73:39:39:8d:05:df:74: 22:60:a9:fa:78:37:ad:fc:00:6b:82:57:f6:01:8d: 31:2b:5c:e5:46:c0:80:31:bf:9e:d5:63:ba:04:0e: 39:c3:68:77:8f:7c:fd:80:76:b9:bd:3e:89:a2:56: d0:a6:67:94:fc:49:ce:a7:4d:91:95:47:38:a7:4c: 9a:f8:d5:80:27:2c:f8:3d:08:9c:99:88:46:07:0a: 9d:42:37:c0:0f:9c:bb:8a:37:bf:62:37:61:8f:86: 5a:88:8d:67:14:90:04:d2:cd:1b:15:92:24:89:ae: a4:8d:06:75:70:e4:b9:e6:3e:20:64:f6:d9:14:1f: ff:49:ca:99:a0:57:82:df:ca:11:08:df:4d:9e:b6: d2:4d:e8:aa:8f:ad:00:f1:3e:e9:9a:1e:77:8d:65: 04:52:83:59:34:ac:36:99:a6:59:e8:94:1e:a1:0d: e9:67:ba:91:e9:29:a3:c3:25:46:a7:18:72:d1:ff: ec:96:40:a7:08:b1:c6:12:52:f9:9b:c8:43:2b:96: 79:3f:61:db:7d:6b:e6:be:bf:d5:66:72:28:9d:09: 66:9e:f6:ec:b2:c9:b5:d9:f8:a3:c9:b6:22:34:76: 39:6a:08:58:c7:e0:6b:8c:ba:44:48:56:0f:df:21: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:86:B5:AC:9A:DB:9D:81:B3:14:A2:14:77:33:11:A6:E3:54:1A X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b2:7e:c6:26:ae:ee:bc:95:1d:eb:99:9a:d7:d6:e5:bd:71: a1:27:4e:fb:cf:bb:ec:8a:59:33:8a:d9:b9:80:fc:3d:a0:2e: e8:26:7c:47:e5:4a:19:81:32:ad:30:19:d3:b1:b6:58:7e:fa: 14:97:cd:a5:83:b9:f1:cf:bf:dc:3a:5e:64:02:50:e9:a2:84: 9e:7c:0b:9b:fe:f0:5c:8b:8e:05:59:f0:35:8b:42:d9:f9:26: 06:3f:be:a5:fe:82:07:18:8b:d2:41:22:ee:79:61:8e:e9:cc: c2:b3:40:a5:6a:8c:bc:34:3f:7d:12:8a:e8:5b:f2:e2:61:77: 75:99:d2:7e:d8:0a:74:6c:51:11:da:cc:35:9b:5e:f8:bc:e4: 68:37:41:24:ce:ca:65:06:19:34:7d:95:9c:bf:ac:a8:e8:3e: de:58:9f:32:cb:b6:21:2e:55:f4:d1:aa:6d:2e:1f:43:f4:16: 59:83:0c:20:c0:66:1a:2c:c6:d5:48:91:ee:0a:41:7b:89:b5: a2:04:22:71:cf:ff:81:c7:ad:26:19:3b:cf:ce:70:96:06:0e: 13:d3:83:27:4e:c7:7e:58:c2:1e:d6:f6:a5:eb:4a:a8:25:9a: f0:f2:38:6d:1c:b4:c3:91:47:3e:11:95:03:e0:12:8a:10:21: a7:ff:4c:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwOTIyMjAzNjQxWhcNMjYwOTI5MjAzNjQxWjAYMRYwFAYD VQQDEw02YWIyZTZkOS0yZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7KmAShamnM5OY0F33QiYKn6eDet/ABrglf2AY0xK1zlRsCAMb+e1WO6BA45 w2h3j3z9gHa5vT6JolbQpmeU/EnOp02RlUc4p0ya+NWAJyz4PQicmYhGBwqdQjfA D5y7ije/Yjdhj4ZaiI1nFJAE0s0bFZIkia6kjQZ1cOS55j4gZPbZFB//ScqZoFeC 38oRCN9NnrbSTeiqj60A8T7pmh53jWUEUoNZNKw2maZZ6JQeoQ3pZ7qR6SmjwyVG pxhy0f/slkCnCLHGElL5m8hDK5Z5P2HbfWvmvr/VZnIonQlmnvbsssm12fijybYi NHY5aghYx+BrjLpESFYP3yEr8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoIhrWs mtudgbMUohR3MxGm41QaMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYLJ+xiau7ryVHeuZmtfW5b1xoSdO+8+77IpZM4rZuYD8PaAu6CZ8R+VKGYEy rTAZ07G2WH76FJfNpYO58c+/3DpeZAJQ6aKEnnwLm/7wXIuOBVnwNYtC2fkmBj++ pf6CBxiL0kEi7nlhjunMwrNApWqMvDQ/fRKK6Fvy4mF3dZnSftgKdGxREdrMNZte +LzkaDdBJM7KZQYZNH2VnL+sqOg+3lifMsu2IS5V9NGqbS4fQ/QWWYMMIMBmGizG 1UiR7gpBe4m1ogQicc//gcetJhk7z85wlgYOE9ODJ07HfljCHtb2petKqCWa8PI4 bRy0w5FHPhGVA+ASihAhp/9Mdw== -----END CERTIFICATE-----Generated at Thu Sep 24 14:21:21 2026 by rpki-client