$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft File: 3g51A-ABhslzWN1dtBsa6o1bt98.mft (raw, json) Hash identifier: 071VcKzs/T9+GgRtsOtCHclpL2aGn2PM4+ExLJ2iS8I= Subject key identifier: BC:60:84:E1:E1:A4:38:3D:9B:81:16:B4:10:4D:34:5F:47:A9:7D:95 Authority key identifier: DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF Certificate issuer: /CN=A91DEF3E/serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft Manifest number: 03 Signing time: Wed 23 Sep 2026 09:02:54 +0000 Manifest this update: Wed 23 Sep 2026 09:02:54 +0000 Manifest next update: Wed 30 Sep 2026 09:02:54 +0000 Files and hashes: 1: 3g51A-ABhslzWN1dtBsa6o1bt98.crl (hash: 6ctdAWELMc5cPZeamYsERAGgaPgTbkh4u+VvWqVcvH4=) 2: 16F2E8B4B5D311F18B3897F34511F970.roa (hash: aPzgvPWBiEMb+aOplX7bKEWIyKEhhVZj+xQvU3c5hig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF3E, serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF Validity Not Before: Sep 23 09:02:54 2026 GMT Not After : Sep 30 09:02:54 2026 GMT Subject: CN=6ab395be-54e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:a1:c5:a6:14:91:2a:04:20:9d:52:84:46: 8a:9e:33:0a:d6:f9:09:05:4a:2c:5f:4e:88:19:e9: 42:88:f7:a9:0d:05:b5:a8:81:e3:f2:2d:1e:33:e6: a7:98:1e:6f:b2:bf:0c:b0:c5:6b:fc:d6:51:d5:12: 8f:3b:62:68:f1:6a:8a:e4:31:0b:77:0c:9c:1e:51: 44:3c:d5:80:62:c2:84:14:ba:9d:10:92:9c:ac:2c: 1a:c0:06:3f:05:7c:e2:ff:ef:54:7d:8a:71:11:e3: 28:0b:e6:7f:98:4e:fc:c2:4e:4a:d8:ca:e1:16:ee: 14:28:fc:58:88:a7:40:77:bb:7d:9b:c8:d1:c7:6e: 6b:48:31:6f:d0:34:e2:72:d6:75:2e:c6:e6:0d:2e: 7b:8f:7a:5c:94:51:1a:7c:5f:a6:8d:a3:a3:5b:af: 9e:bb:4d:f4:94:2c:78:b3:6f:60:a4:01:16:61:36: ee:f1:9c:7a:1e:3e:f2:ad:c6:3c:11:54:c9:52:f3: 31:9e:50:47:38:ce:c8:cf:2c:a9:af:3c:b5:88:3e: 03:78:51:de:6a:d6:fd:13:ec:94:e2:e8:92:6b:72: d2:54:18:28:a6:73:d4:65:7d:39:ab:d8:7a:79:e6: 28:cb:72:d2:6a:61:11:20:39:e4:33:c7:02:04:f2: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:84:E1:E1:A4:38:3D:9B:81:16:B4:10:4D:34:5F:47:A9:7D:95 X509v3 Authority Key Identifier: keyid:DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:50:d8:5d:bd:77:0f:c7:55:cc:99:bc:9e:6b:93:c3:2e:87: f0:44:b5:2e:bc:3b:44:bc:69:c7:e8:0d:f1:32:1a:c4:51:71: e8:27:c0:eb:0a:97:7d:ea:59:91:4f:3a:f1:16:61:53:f7:cb: 48:d6:cb:bb:0a:eb:37:b9:86:3d:85:bc:46:36:cf:79:1f:89: ad:6d:63:7f:8e:a3:93:3e:3e:09:56:f5:1f:dd:71:67:3a:52: ad:88:fc:9d:9c:28:75:62:d2:a1:f0:05:ba:23:ac:f6:de:d4: 2e:21:12:59:0a:93:cf:cf:d3:21:19:62:74:3c:50:63:71:06: a6:7e:86:df:95:1d:61:48:e2:7a:6b:a6:7b:30:2d:fa:4d:b5: ac:eb:7f:9a:4c:cf:4c:ee:e9:6f:1f:2d:05:06:28:c1:e2:2a: 42:52:7c:b6:6c:90:a5:91:e7:65:80:6d:2c:bd:fb:67:4d:b4: bd:32:34:ca:56:e2:d0:80:64:7f:17:e7:20:35:0d:49:4b:68: ec:5e:67:4c:33:e9:99:9b:11:ae:8a:25:c0:47:60:56:c8:d8: ae:5e:60:3d:4b:28:48:3d:e2:7c:f0:2d:fe:17:7c:0d:1f:9d: 65:ee:34:7a:78:1c:81:ee:29:f9:06:0a:3f:20:20:92:10:1e: 26:af:b7:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUYzRTExMC8GA1UEBRMoREUwRTc1MDNFMDAxODZDOTczNThERDVEQjQxQjFBRUE4 RDVCQjdERjAeFw0yNjA5MjMwOTAyNTRaFw0yNjA5MzAwOTAyNTRaMBgxFjAUBgNV BAMTDTZhYjM5NWJlLTU0ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiAqHFphSRKgQgnVKERoqeMwrW+QkFSixfTogZ6UKI96kNBbWogePyLR4z5qeY Hm+yvwywxWv81lHVEo87YmjxaorkMQt3DJweUUQ81YBiwoQUup0QkpysLBrABj8F fOL/71R9inER4ygL5n+YTvzCTkrYyuEW7hQo/FiIp0B3u32byNHHbmtIMW/QNOJy 1nUuxuYNLnuPelyUURp8X6aNo6Nbr567TfSULHizb2CkARZhNu7xnHoePvKtxjwR VMlS8zGeUEc4zsjPLKmvPLWIPgN4Ud5q1v0T7JTi6JJrctJUGCimc9RlfTmr2Hp5 5ijLctJqYREgOeQzxwIE8lJtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvGCE4eGk OD2bgRa0EE00X0epfZUwHwYDVR0jBBgwFoAU3g51A+ABhslzWN1dtBsa6o1bt98w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFRjNFL0NFQzAzNTJFQjVE MjExRjFBRjk5ODJFNDQ1MTFGOTcwLzNnNTFBLUFCaHNseldOMWR0QnNhNm8xYnQ5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2c1MUEtQUJoc2x6V04xZHRCc2E2bzFidDk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF RjNFL0NFQzAzNTJFQjVEMjExRjFBRjk5ODJFNDQ1MTFGOTcwLzNnNTFBLUFCaHNs eldOMWR0QnNhNm8xYnQ5OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmUNhdvXcPx1XMmbyea5PDLofwRLUuvDtEvGnH6A3xMhrEUXHoJ8DrCpd96lmR TzrxFmFT98tI1su7Cus3uYY9hbxGNs95H4mtbWN/jqOTPj4JVvUf3XFnOlKtiPyd nCh1YtKh8AW6I6z23tQuIRJZCpPPz9MhGWJ0PFBjcQamfobflR1hSOJ6a6Z7MC36 TbWs63+aTM9M7ulvHy0FBijB4ipCUny2bJClkedlgG0svftnTbS9MjTKVuLQgGR/ F+cgNQ1JS2jsXmdMM+mZmxGuiiXAR2BWyNiuXmA9SyhIPeJ88C3+F3wNH51l7jR6 eByB7in5Bgo/ICCSEB4mr7cE -----END CERTIFICATE-----Generated at Wed Sep 23 22:16:35 2026 by rpki-client