$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: qm9N8V9uYENEp7GydPgK3Id5uIwfquhjOG+8euOtCfI= Subject key identifier: 6C:0E:C1:92:CC:6E:D7:F4:2C:93:75:BD:EA:B6:4D:80:56:03:DE:D3 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 08B4 Signing time: Thu 24 Sep 2026 20:36:23 +0000 Manifest this update: Thu 24 Sep 2026 20:36:23 +0000 Manifest next update: Thu 01 Oct 2026 20:36:23 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: bhDRQcpcTicFCAnpw3gLJFvZEha6YjXmVe2Bc4fT7ig=) 2: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=) 4: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Sep 24 20:36:23 2026 GMT Not After : Oct 1 20:36:23 2026 GMT Subject: CN=6ab589c7-3610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:06:d9:b3:c0:c8:b8:7d:3e:9f:8e:25:93: ae:cb:8b:78:bf:cc:48:d1:c5:21:57:a0:af:07:23: d5:33:e3:e7:31:42:a2:5a:bf:92:10:22:3e:3e:9a: f4:6f:ca:c0:e9:24:b9:08:b5:d3:68:76:73:5e:ac: b7:61:b3:29:3c:27:e9:2a:60:bb:bc:af:75:b5:34: fb:8b:ef:e7:f3:a7:f4:b7:a8:32:40:3e:f2:1e:bb: 3f:c7:d2:a5:70:1b:1f:8f:87:22:df:76:40:6a:de: 9f:db:43:68:09:11:b9:4f:9e:1d:56:54:33:78:d6: f0:ff:b5:90:89:25:19:9d:36:3d:33:a2:79:20:01: 1b:f0:a5:38:5c:23:cb:3d:d8:e2:e7:83:f1:2a:8c: f1:6e:07:81:d1:06:cf:3b:43:97:72:75:a5:dd:50: 46:cc:e1:ce:b9:6c:19:2e:45:c5:cd:ca:38:fe:26: 9d:35:b9:63:b2:77:02:18:34:24:32:04:59:c5:65: 63:b3:9f:a3:04:2b:87:4c:01:1c:7e:de:c1:d3:87: 09:2b:83:04:86:7a:95:b4:f1:ef:cc:2c:d0:b3:d1: 7a:b9:b8:01:7c:d0:df:b3:62:a9:67:72:2d:e2:63: 9b:ea:fe:b0:b2:b7:97:88:42:97:55:00:77:3f:00: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0E:C1:92:CC:6E:D7:F4:2C:93:75:BD:EA:B6:4D:80:56:03:DE:D3 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:35:e6:bd:53:46:a5:27:15:50:85:dc:7b:bb:18:d6:44:97: 10:79:37:a6:6b:9b:64:f4:6b:c1:aa:3e:9a:28:03:9a:1f:c0: 74:99:ae:91:22:7d:6d:d3:4f:e3:1e:bb:73:57:26:92:7d:73: 3b:46:2c:fe:54:56:87:4e:35:3f:ab:58:0c:8e:ca:27:39:2a: 9e:83:c3:ef:f8:14:dd:ad:90:e1:f7:6a:7d:90:c7:fa:fb:e1: 34:ca:55:f8:23:d1:c3:9d:de:e5:91:99:49:32:6a:10:ed:ed: 37:b8:c7:3a:99:74:22:be:ba:5e:9b:eb:f7:b9:4d:e1:e8:82: 9a:d5:9a:ff:36:da:ef:c5:c9:aa:89:4c:e7:78:41:17:19:57: 51:b9:95:8c:34:64:bf:77:85:06:39:6d:e2:66:e2:0c:03:d8: 58:13:8d:9d:69:53:0f:70:77:23:94:cc:d5:d1:6e:86:19:a1: 77:05:b0:4c:53:b2:2a:ef:00:ba:8b:c9:f9:c4:f6:4b:6d:6b: d3:8c:1d:a7:8d:f1:d8:61:5c:10:7a:63:2b:a5:70:00:78:68: 32:2a:de:a4:0d:89:c8:64:0e:61:d8:b6:bf:5d:65:58:b7:77: 59:fa:cc:fc:38:c2:20:01:13:47:e7:ec:fb:06:cd:e7:3c:9a: f6:36:cb:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwOTI0MjAzNjIzWhcNMjYxMDAxMjAzNjIzWjAYMRYwFAYD VQQDEw02YWI1ODljNy0zNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykIG2bPAyLh9Pp+OJZOuy4t4v8xI0cUhV6CvByPVM+PnMUKiWr+SECI+Ppr0 b8rA6SS5CLXTaHZzXqy3YbMpPCfpKmC7vK91tTT7i+/n86f0t6gyQD7yHrs/x9Kl cBsfj4ci33ZAat6f20NoCRG5T54dVlQzeNbw/7WQiSUZnTY9M6J5IAEb8KU4XCPL Pdji54PxKozxbgeB0QbPO0OXcnWl3VBGzOHOuWwZLkXFzco4/iadNbljsncCGDQk MgRZxWVjs5+jBCuHTAEcft7B04cJK4MEhnqVtPHvzCzQs9F6ubgBfNDfs2KpZ3It 4mOb6v6wsreXiEKXVQB3PwDKXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwOwZLM btf0LJN1veq2TYBWA97TMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTXmvVNGpScVUIXce7sY1kSXEHk3pmubZPRrwao+migDmh/AdJmukSJ9bdNP 4x67c1cmkn1zO0Ys/lRWh041P6tYDI7KJzkqnoPD7/gU3a2Q4fdqfZDH+vvhNMpV +CPRw53e5ZGZSTJqEO3tN7jHOpl0Ir66Xpvr97lN4eiCmtWa/zba78XJqolM53hB FxlXUbmVjDRkv3eFBjlt4mbiDAPYWBONnWlTD3B3I5TM1dFuhhmhdwWwTFOyKu8A uovJ+cT2S21r04wdp43x2GFcEHpjK6VwAHhoMirepA2JyGQOYdi2v11lWLd3WfrM /DjCIAETR+fs+wbN5zya9jbLug== -----END CERTIFICATE-----Generated at Fri Sep 25 03:28:02 2026 by rpki-client