$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: QtbQn74ES94wdNcZ4B/sMbFS4vdTb5Oh1+3sWynIA1w= Subject key identifier: A0:EB:1C:31:C9:CB:0D:D4:AB:7B:1D:5F:98:03:3F:25:4D:5C:19:BB Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 7B Signing time: Fri 25 Sep 2026 07:58:42 +0000 Manifest this update: Fri 25 Sep 2026 07:58:41 +0000 Manifest next update: Fri 02 Oct 2026 07:58:41 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: mHNPeAWXOE6amAuWWyLbFbypNlMEtxsks8u5W7ahSm0=) 2: 24E2E6B8B80311F1980856933211F970.roa (hash: s2IG2HROrlnBpy6KVlCaHxXPWt4gxfRcFO0V6qc98D0=) 3: 431B027EB7F311F1AEB843C36D11F970.roa (hash: 0hTMdW5wS3Vz6x9QNUuQtirwjm/NcLyUU1762lAE4ac=) 4: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Sep 25 07:58:41 2026 GMT Not After : Oct 2 07:58:41 2026 GMT Subject: CN=6ab629b2-1736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:0b:18:65:73:96:0d:93:83:1e:8c:ff:2e: f6:06:cf:6e:2a:c3:a3:05:a6:d3:56:ea:29:62:4f: 7c:d9:ca:be:ff:dd:aa:07:8a:c0:27:8d:16:60:9f: 28:44:58:a3:4f:1e:b4:ba:ae:e6:68:fc:38:6b:31: ed:48:3a:20:60:50:1d:dd:9b:43:b2:96:55:27:b2: c0:9f:c1:cd:5f:ba:c9:0e:ff:83:8f:30:bc:d5:92: 0f:c5:cb:cd:ee:bc:44:25:45:79:aa:09:25:03:4f: 1a:fe:b1:2f:57:08:c1:d7:0f:35:fe:6c:a0:d9:46: 9a:bf:bc:78:a0:d2:7c:d0:20:72:42:85:31:4e:73: 22:46:94:98:9e:f0:38:d4:20:c8:e5:42:3d:dd:60: 51:7c:19:a1:9e:f1:e0:76:9c:4f:db:d8:6c:45:78: 2b:3f:b3:40:37:bd:fb:c2:0a:64:56:0d:37:17:8b: c5:72:d1:b9:ab:eb:10:64:2d:a1:36:e7:a4:2b:64: 82:fd:7c:7c:bd:60:5b:9b:1d:c5:b0:da:9f:27:cf: 54:f5:45:19:b6:86:0e:cf:99:eb:25:bf:56:e3:5e: 4d:78:a3:48:d6:72:22:28:d7:86:73:ab:0d:3e:43: 14:e7:31:56:2f:2b:d4:07:a4:d6:d2:f8:43:b2:35: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EB:1C:31:C9:CB:0D:D4:AB:7B:1D:5F:98:03:3F:25:4D:5C:19:BB X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:22:01:5b:da:73:b9:46:6d:0b:82:a4:1c:34:37:3c:7c:4c: 56:49:a7:ba:03:9c:bd:a2:ba:15:d6:0e:af:cc:85:83:22:5a: f1:b3:0e:80:85:3b:1a:dc:7e:bd:f8:b7:fc:58:cc:67:e9:65: 75:61:b5:a0:2d:1d:a3:1b:41:7c:3b:59:fc:d0:d3:8d:08:88: 26:f3:2e:32:f6:72:1d:74:97:ea:94:78:a5:c2:23:3a:d5:fe: 03:d3:d9:b4:da:58:3a:27:7f:69:05:a8:ba:27:1b:70:51:6c: 12:a3:20:b2:81:0a:0c:43:96:d2:fb:db:00:11:5c:5a:f7:59: 41:fe:25:e7:23:c3:da:d9:d9:a4:fd:64:e4:a2:01:d0:a4:96: 4b:55:9b:ce:3e:7f:d0:eb:53:0b:1f:fd:d1:08:b0:99:8d:5d: 13:95:d7:6c:0a:88:a9:9b:84:e4:7d:d9:e7:06:24:dd:12:93: bd:26:0b:1e:33:90:c6:0a:a5:a4:85:dc:9a:f8:bb:b5:32:20: 0b:f9:51:5c:d2:09:d3:19:f8:bb:ec:77:cb:5e:96:ef:da:0a: f9:c7:95:60:69:2e:1b:ed:66:2a:47:7b:ea:b1:ef:86:ae:9a: 4e:d2:56:4a:9e:b3:a6:76:0a:76:e1:ba:36:b3:e1:c4:11:ca: 0c:e4:ef:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzMTQxMTAvBgNVBAUTKERFMjY2RDZBRjBCOTNERTlDODY5MjczMjBBMkU5REJC QzlDRjlDQzIwHhcNMjYwOTI1MDc1ODQxWhcNMjYxMDAyMDc1ODQxWjAYMRYwFAYD VQQDEw02YWI2MjliMi0xNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8cLGGVzlg2Tgx6M/y72Bs9uKsOjBabTVuopYk982cq+/92qB4rAJ40WYJ8o RFijTx60uq7maPw4azHtSDogYFAd3ZtDspZVJ7LAn8HNX7rJDv+DjzC81ZIPxcvN 7rxEJUV5qgklA08a/rEvVwjB1w81/myg2Uaav7x4oNJ80CByQoUxTnMiRpSYnvA4 1CDI5UI93WBRfBmhnvHgdpxP29hsRXgrP7NAN737wgpkVg03F4vFctG5q+sQZC2h NuekK2SC/Xx8vWBbmx3FsNqfJ89U9UUZtoYOz5nrJb9W415NeKNI1nIiKNeGc6sN PkMU5zFWLyvUB6TW0vhDsjW+8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDrHDHJ yw3Uq3sdX5gDPyVNXBm7MB8GA1UdIwQYMBaAFN4mbWrwuT3pyGknMgounbvJz5zC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDMxNC8zNjU5NzRDNjA5 N0ExMUYxODA0RjVFQTExMDNEOEM2Ny8zaVp0YXZDNVBlbklhU2N5Q2k2ZHU4blBu TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDMxNC8zNjU5NzRDNjA5N0ExMUYxODA0RjVFQTExMDNEOEM2Ny8zaVp0YXZDNVBl bklhU2N5Q2k2ZHU4blBuTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASyIBW9pzuUZtC4KkHDQ3PHxMVkmnugOcvaK6FdYOr8yFgyJa8bMOgIU7Gtx+ vfi3/FjMZ+lldWG1oC0doxtBfDtZ/NDTjQiIJvMuMvZyHXSX6pR4pcIjOtX+A9PZ tNpYOid/aQWouicbcFFsEqMgsoEKDEOW0vvbABFcWvdZQf4l5yPD2tnZpP1k5KIB 0KSWS1Wbzj5/0OtTCx/90QiwmY1dE5XXbAqIqZuE5H3Z5wYk3RKTvSYLHjOQxgql pIXcmvi7tTIgC/lRXNIJ0xn4u+x3y16W79oK+ceVYGkuG+1mKkd76rHvhq6aTtJW Sp6zpnYKduG6NrPhxBHKDOTvnw== -----END CERTIFICATE-----Generated at Sun Sep 27 05:47:32 2026 by rpki-client