$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: LLw9wMI18YS+O9uCx4SJFcKZcgrG31kdY0lc4e/4jyw= Subject key identifier: 3A:36:65:19:A5:C8:C6:05:03:C6:C1:BA:2C:41:45:03:62:78:A5:FA Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1266 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 125C Signing time: Thu 08 Oct 2026 17:10:13 +0000 Manifest this update: Thu 08 Oct 2026 17:10:12 +0000 Manifest next update: Thu 15 Oct 2026 17:10:12 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: sS3wStKn1Bw1kIwQX2IuCK1Vu1jL18c3Jfkju5v4VMk=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4710 (0x1266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Oct 8 17:10:12 2026 GMT Not After : Oct 15 17:10:12 2026 GMT Subject: CN=6ac7ce75-dff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:7f:7d:4c:d8:fb:1d:fb:5b:ba:69:6a:e2: 39:22:ad:26:50:57:d6:b7:9e:87:4c:eb:0d:1d:da: 0d:13:f9:9f:95:64:8f:ba:52:06:dc:12:e9:5d:62: a9:8d:da:d5:bf:a0:e9:a6:75:f8:bf:cc:bf:13:69: eb:00:a8:e3:ec:64:09:2a:e4:20:11:48:d8:30:58: 86:f6:39:59:3e:76:fd:65:b3:bc:b3:3d:66:dc:3f: c4:30:af:d3:b1:07:f7:de:29:87:9d:7b:4d:5f:4b: 4e:c7:68:e0:c6:60:cd:de:64:34:06:12:06:42:6e: 9f:15:33:98:57:4e:0c:56:89:9d:7d:8f:ec:60:82: c6:52:37:57:63:4a:45:f2:41:ee:c4:4a:66:9e:2d: 1f:ee:3e:12:5f:97:93:6d:98:7f:c0:13:66:96:b6: 83:bb:ee:9f:bd:66:20:08:14:c0:e3:81:8f:38:de: 05:84:70:53:97:12:d1:b9:30:39:8e:bb:d9:d8:19: 2f:80:33:a5:54:a6:0c:16:0e:83:5e:f6:9a:e5:d6: 36:77:0a:d0:ec:99:95:ff:92:c1:03:5e:bc:fe:05: 25:e9:eb:3c:77:20:42:53:14:73:11:21:72:85:38: 97:e3:c7:b3:d9:ed:76:80:b7:da:70:8a:69:96:4b: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:36:65:19:A5:C8:C6:05:03:C6:C1:BA:2C:41:45:03:62:78:A5:FA X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:74:77:ea:99:47:07:ae:b1:0b:b4:da:0e:23:8e:6a:7b:a0: 51:ae:a3:a6:98:9b:7f:f4:66:73:ef:b3:dd:de:ce:f3:4e:dd: 2a:4c:92:f3:57:4a:11:25:2f:90:a7:28:04:80:14:7b:73:4c: c3:50:2b:91:97:0e:1c:80:e7:db:03:d1:68:78:47:8f:37:b9: 1c:0e:25:fa:09:c3:bd:10:5f:fe:02:9c:52:1b:09:1b:f6:b4: 24:05:1f:f0:94:fd:31:6e:9a:04:f9:ac:af:ee:ac:0b:cf:21: ce:a8:e1:c9:57:7f:03:7e:12:59:8c:a5:e2:13:67:e0:df:ec: b8:f9:b5:27:d8:a0:42:0f:76:85:ae:3e:5d:89:20:4d:d3:91: bd:44:a0:f2:9d:37:8e:54:be:e9:e4:60:af:1a:67:ac:ce:ec: 93:d1:25:32:50:62:4c:65:1c:5d:fa:09:d2:5e:eb:11:57:45: 21:1f:f8:37:c8:5b:4d:a0:24:38:39:93:f6:fd:0d:bc:d8:46: 09:0d:ac:16:73:63:91:e1:1b:20:6d:40:64:87:0b:14:8b:92: e9:57:3e:e6:7d:14:82:3c:9e:6b:57:4d:85:9f:58:dc:c2:f9: b0:26:9a:bd:32:25:88:ee:d8:cf:1e:ef:ac:ce:17:f3:82:56: 65:08:b3:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjYxMDA4MTcxMDEyWhcNMjYxMDE1MTcxMDEyWjAYMRYwFAYD VQQDEw02YWM3Y2U3NS1kZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngt/fUzY+x37W7ppauI5Iq0mUFfWt56HTOsNHdoNE/mflWSPulIG3BLpXWKp jdrVv6DppnX4v8y/E2nrAKjj7GQJKuQgEUjYMFiG9jlZPnb9ZbO8sz1m3D/EMK/T sQf33imHnXtNX0tOx2jgxmDN3mQ0BhIGQm6fFTOYV04MVomdfY/sYILGUjdXY0pF 8kHuxEpmni0f7j4SX5eTbZh/wBNmlraDu+6fvWYgCBTA44GPON4FhHBTlxLRuTA5 jrvZ2BkvgDOlVKYMFg6DXvaa5dY2dwrQ7JmV/5LBA168/gUl6es8dyBCUxRzESFy hTiX48ez2e12gLfacIpplktzGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDo2ZRml yMYFA8bBuixBRQNieKX6MB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr3R36plHB66xC7TaDiOOanugUa6jppibf/Rmc++z3d7O807dKkyS81dKESUv kKcoBIAUe3NMw1ArkZcOHIDn2wPRaHhHjze5HA4l+gnDvRBf/gKcUhsJG/a0JAUf 8JT9MW6aBPmsr+6sC88hzqjhyVd/A34SWYyl4hNn4N/suPm1J9igQg92ha4+XYkg TdORvUSg8p03jlS+6eRgrxpnrM7sk9ElMlBiTGUcXfoJ0l7rEVdFIR/4N8hbTaAk ODmT9v0NvNhGCQ2sFnNjkeEbIG1AZIcLFIuS6Vc+5n0Ugjyea1dNhZ9Y3ML5sCaa vTIliO7Yzx7vrM4X84JWZQiznw== -----END CERTIFICATE-----Generated at Thu Oct 8 20:52:46 2026 by rpki-client