$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: jdVbC+yquqrPfFrVx/TjPpZKIyD71TD1vBU3gSVpFOw= Subject key identifier: F1:62:9A:DE:43:FC:20:19:A5:2E:E9:FF:1F:29:19:A6:A6:27:F2:C0 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0DE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D8E Signing time: Fri 02 Oct 2026 18:19:08 +0000 Manifest this update: Fri 02 Oct 2026 18:19:07 +0000 Manifest next update: Fri 09 Oct 2026 18:19:07 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: cPj2Y8iCEX2/4iHHwZ1TRb5HIUzBuFrnnuLuRiYHp6I=) 2: 1801BD8CAB9411F1B59574584A11F970.roa (hash: 0hB7c5DdDlcRXfyZKhbTfTsymtv8P4mwAwktu4W3r0w=) 3: 72F244BEABA811F1826B2D015111F970.roa (hash: hsukBQ93b6WQF6W2mBCSw7TZemUo6Noun4GYm6N6B2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Oct 2 18:19:07 2026 GMT Not After : Oct 9 18:19:07 2026 GMT Subject: CN=6abff59b-a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:d2:9d:ae:e3:4e:28:0b:08:1a:11:b4:54: 86:ad:c7:39:ea:ca:de:69:b9:54:ed:fd:7d:2d:0f: 6d:37:db:7d:02:bf:3c:f7:3f:de:86:61:ab:b4:9d: 95:c2:f0:39:61:74:75:39:72:be:82:b4:d5:40:f2: af:ed:8b:56:7f:57:7c:ce:d4:a1:c7:b5:83:e6:61: 6d:63:7b:1b:b6:85:3c:ea:44:f3:d9:fc:c7:13:cb: ea:ad:b4:38:67:dd:b6:d9:95:32:21:26:51:0b:6b: 07:13:7f:78:a8:11:19:02:96:aa:66:f0:4e:0e:43: 64:90:11:69:f0:21:39:cf:68:91:4d:d3:45:90:91: ee:63:fc:8b:1a:c1:cf:92:d5:c2:35:dd:4b:1d:0a: 59:9c:98:45:64:e4:ef:3d:b0:c1:12:3b:7f:87:6f: 0b:ed:fc:f1:f8:f2:b3:2e:d7:1a:e6:4f:53:25:f0: 87:db:90:de:31:11:43:e7:ea:28:ff:09:13:a9:b0: e6:fb:b2:fd:8c:62:e4:e3:44:0e:d8:9b:57:39:42: f8:34:f5:a4:35:c5:ce:9a:31:9f:df:18:0d:66:61: 3f:5c:40:e4:8c:07:b9:9a:c4:bd:1a:e8:2a:b5:fa: 28:61:4d:93:df:34:c6:6a:3c:a7:9f:e0:a4:ae:29: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:9A:DE:43:FC:20:19:A5:2E:E9:FF:1F:29:19:A6:A6:27:F2:C0 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:b3:e7:89:93:9e:40:ff:bc:bf:5a:27:9f:66:5e:c6:74: ed:d3:22:d9:ed:05:23:1d:4a:26:d6:06:0e:33:38:9b:ec:4b: c7:86:87:d8:b2:8b:78:f4:f2:04:02:69:14:6f:a7:eb:04:df: 17:b2:69:c2:64:da:12:27:f1:f2:05:0d:7b:93:48:7b:9a:d5: 51:11:44:19:2c:c3:78:b6:2a:ca:8d:69:05:28:2b:f7:0b:a9: a3:83:9b:de:76:4e:15:7e:1b:a0:8e:38:7e:c6:73:bd:cd:19: 58:b8:7d:74:46:be:d4:48:d3:d5:3d:90:af:25:79:e5:da:b0: b0:90:76:09:ff:6a:06:d4:0a:f3:e4:73:f6:29:eb:d6:38:a2: bb:72:96:c5:dc:23:04:b0:41:65:cd:86:e1:a1:a9:c8:80:e5: 96:ca:c5:22:09:9f:0a:45:09:2f:24:b6:be:c8:a7:57:37:80: 45:e7:04:77:16:12:ce:33:9d:30:51:d5:f6:10:d3:d5:37:e4: 6b:31:63:bf:d4:0e:9b:13:24:a5:f4:71:dd:c8:6c:6c:65:27: 1c:25:67:77:58:da:49:8c:2e:44:88:db:cb:ff:73:5f:75:30: 8c:d0:db:ed:77:5a:a4:42:19:b7:e4:c7:ad:b6:a1:4e:1d:a1: 79:4c:7c:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYxMDAyMTgxOTA3WhcNMjYxMDA5MTgxOTA3WjAYMRYwFAYD VQQDEw02YWJmZjU5Yi1hODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryPSna7jTigLCBoRtFSGrcc56sreablU7f19LQ9tN9t9Ar889z/ehmGrtJ2V wvA5YXR1OXK+grTVQPKv7YtWf1d8ztShx7WD5mFtY3sbtoU86kTz2fzHE8vqrbQ4 Z9222ZUyISZRC2sHE394qBEZApaqZvBODkNkkBFp8CE5z2iRTdNFkJHuY/yLGsHP ktXCNd1LHQpZnJhFZOTvPbDBEjt/h28L7fzx+PKzLtca5k9TJfCH25DeMRFD5+oo /wkTqbDm+7L9jGLk40QO2JtXOUL4NPWkNcXOmjGf3xgNZmE/XEDkjAe5msS9Gugq tfooYU2T3zTGajynn+CkrikdAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFimt5D /CAZpS7p/x8pGaamJ/LAMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPGz54mTnkD/vL9aJ59mXsZ07dMi2e0FIx1KJtYGDjM4m+xLx4aH2LKLePTy BAJpFG+n6wTfF7JpwmTaEifx8gUNe5NIe5rVURFEGSzDeLYqyo1pBSgr9wupo4Ob 3nZOFX4boI44fsZzvc0ZWLh9dEa+1EjT1T2QryV55dqwsJB2Cf9qBtQK8+Rz9inr 1jiiu3KWxdwjBLBBZc2G4aGpyIDllsrFIgmfCkUJLyS2vsinVzeARecEdxYSzjOd MFHV9hDT1TfkazFjv9QOmxMkpfRx3chsbGUnHCVnd1jaSYwuRIjby/9zX3UwjNDb 7XdapEIZt+THrbahTh2heUx8mA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:08:45 2026 by rpki-client