$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: haKX1mvqhDJkQ7TD4ShPyhJXh/vlTVXRWXK6djnaxds= Subject key identifier: 36:53:BB:A9:40:39:4F:4C:FE:6F:7F:C6:DB:7E:75:5B:B5:07:A9:5B Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0D3F Signing time: Thu 24 Sep 2026 18:05:46 +0000 Manifest this update: Thu 24 Sep 2026 18:05:45 +0000 Manifest next update: Thu 01 Oct 2026 18:05:45 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: /xiCDOVng9HSzB/nwMGFYNxxU7Bg/9DUis3M4WTgRMU=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Sep 24 18:05:45 2026 GMT Not After : Oct 1 18:05:45 2026 GMT Subject: CN=6ab5667a-733e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:46:c3:ff:87:11:e3:75:7d:29:38:27:97: 18:cb:52:ce:5f:e6:8a:2f:09:77:eb:0c:f0:97:67: 46:78:21:ba:6f:22:b5:e0:72:27:3b:d1:26:6c:e3: 24:db:be:d1:c6:e5:29:c1:cf:87:f6:e1:fe:79:b6: e4:f9:c1:db:94:e5:8a:a4:ec:50:3c:b3:0a:dc:13: 89:a7:6c:0d:6f:ae:e7:c7:c1:96:59:fa:33:9c:fb: ed:00:5d:13:00:0f:98:02:4c:1b:24:02:f2:5a:68: 36:4d:6b:23:c2:00:9e:56:95:dd:8c:d0:d7:17:b5: 72:05:3a:0d:2b:7b:07:3a:88:ba:08:85:85:0d:ea: 19:64:1b:66:83:82:92:a2:ad:c3:22:2e:ce:1c:c0: 13:16:5e:61:b4:47:b3:49:b7:9f:23:60:d2:97:59: df:28:93:6a:33:3f:86:7c:82:b3:0e:c0:c4:5e:6c: 34:68:7a:91:64:33:6a:65:c5:45:bc:c1:3a:39:25: 17:7d:12:37:dd:cd:e5:f2:64:e2:73:95:45:a7:08: 8d:9c:84:39:21:75:c8:80:d9:95:7f:9c:c7:3a:18: 36:0a:f0:ab:a6:35:6a:7e:ce:f7:cd:4a:93:f3:d0: 1e:36:59:ee:3d:7a:f1:c3:44:16:17:ac:ca:c4:cb: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:BB:A9:40:39:4F:4C:FE:6F:7F:C6:DB:7E:75:5B:B5:07:A9:5B X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:30:5d:3b:b8:33:55:3a:9d:ec:55:de:e7:4b:b0:ac:31:2f: 5a:26:23:89:fd:a4:c8:e1:16:8d:b1:d9:c7:b4:66:bc:73:6e: 54:8c:8e:cc:70:00:74:d8:7f:8d:18:43:e3:ac:f7:e4:aa:cf: 13:a4:8b:e7:f3:76:6c:ae:1a:1a:3a:e8:0f:7f:11:be:cd:0b: b1:2e:8f:84:d0:e5:3b:4e:60:f0:c0:78:04:f6:a5:f3:b9:b1: 7b:c6:b6:0d:fd:0c:1e:88:df:6a:fc:63:d5:a9:b7:88:48:20: e2:f9:dd:c7:4e:3f:8f:52:4d:8f:58:e3:45:2e:78:3e:11:c4: 94:f9:7f:fe:00:7c:64:8a:b8:42:88:0e:f8:97:c5:e8:b1:67: 9c:0b:40:53:1e:76:ad:d9:e9:32:b4:37:86:74:a0:5e:06:08: b1:48:9c:89:6e:f1:ab:db:0f:45:92:8a:cf:48:21:41:13:7a: 22:09:65:0c:3d:cf:c6:05:72:3e:b7:25:07:c5:27:cc:fc:20: 7d:87:fa:ea:93:b9:e0:69:61:65:03:93:b7:58:bf:08:9a:f6: 9c:21:d2:f4:89:c0:9a:38:45:ef:95:b4:45:12:ce:04:2a:cd: 55:1f:05:c5:7b:fa:9e:3a:3b:de:6b:c5:ba:60:c0:75:1c:9f: 24:08:48:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjYwOTI0MTgwNTQ1WhcNMjYxMDAxMTgwNTQ1WjAYMRYwFAYD VQQDEw02YWI1NjY3YS03MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxNGw/+HEeN1fSk4J5cYy1LOX+aKLwl36wzwl2dGeCG6byK14HInO9EmbOMk 277RxuUpwc+H9uH+ebbk+cHblOWKpOxQPLMK3BOJp2wNb67nx8GWWfoznPvtAF0T AA+YAkwbJALyWmg2TWsjwgCeVpXdjNDXF7VyBToNK3sHOoi6CIWFDeoZZBtmg4KS oq3DIi7OHMATFl5htEezSbefI2DSl1nfKJNqMz+GfIKzDsDEXmw0aHqRZDNqZcVF vME6OSUXfRI33c3l8mTic5VFpwiNnIQ5IXXIgNmVf5zHOhg2CvCrpjVqfs73zUqT 89AeNlnuPXrxw0QWF6zKxMsHYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZTu6lA OU9M/m9/xtt+dVu1B6lbMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkTBdO7gzVTqd7FXe50uwrDEvWiYjif2kyOEWjbHZx7RmvHNuVIyOzHAAdNh/ jRhD46z35KrPE6SL5/N2bK4aGjroD38Rvs0LsS6PhNDlO05g8MB4BPal87mxe8a2 Df0MHojfavxj1am3iEgg4vndx04/j1JNj1jjRS54PhHElPl//gB8ZIq4QogO+JfF 6LFnnAtAUx52rdnpMrQ3hnSgXgYIsUiciW7xq9sPRZKKz0ghQRN6IgllDD3PxgVy PrclB8UnzPwgfYf66pO54GlhZQOTt1i/CJr2nCHS9InAmjhF75W0RRLOBCrNVR8F xXv6njo73mvFumDAdRyfJAhIWQ== -----END CERTIFICATE-----Generated at Sat Sep 26 11:10:07 2026 by rpki-client