$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft File: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft (raw, json) Hash identifier: be5T3YXC2PGP4VV1raf/pSciVeQrEDrFQMUk3DWs8Ag= Subject key identifier: CE:E3:3E:AF:A5:DC:8F:A0:BA:70:AD:00:3D:84:A3:37:13:5D:D4:68 Authority key identifier: 1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 Certificate issuer: /CN=A91E1EC4/serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft Manifest number: 06 Signing time: Wed 23 Sep 2026 09:00:37 +0000 Manifest this update: Wed 23 Sep 2026 09:00:37 +0000 Manifest next update: Wed 30 Sep 2026 09:00:37 +0000 Files and hashes: 1: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl (hash: Ox8xy5yEPTMEHc/dhakXnQDxaF1DLSHjWnczX4PPvp4=) 2: 1BB9B9E8B1A211F1B29B34E27011F970.roa (hash: mo10WGZmq9tNwrK2xvFXV1zwqAuzUaWpjqL/A8EcvWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC4, serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Validity Not Before: Sep 23 09:00:37 2026 GMT Not After : Sep 30 09:00:37 2026 GMT Subject: CN=6ab39535-fcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:c9:68:f9:02:99:0f:41:d7:18:c2:c2:08: e3:50:c5:36:50:f1:12:99:e6:e8:8e:9b:01:5a:72: 5f:dc:56:bf:bc:93:79:bf:0e:8c:bc:0f:a4:c6:97: 2a:74:84:58:fe:23:b8:34:e6:94:6a:b6:7f:58:32: 06:55:62:3a:af:36:a1:7a:c4:bd:0f:0c:2b:4b:be: 57:4e:7e:29:16:3d:49:a1:c2:58:0b:f8:18:b8:8f: a0:bf:28:e7:13:cd:64:a4:ec:7e:07:dc:a7:cd:4c: a3:2a:e7:6e:db:49:8c:04:f1:73:c9:fb:88:b2:93: 9b:ac:83:d1:6a:b1:31:df:29:69:a2:da:f8:8e:70: 91:45:d2:c5:f4:50:41:5e:97:78:c4:a2:ae:69:e8: ae:17:b9:64:b3:77:5b:4c:e6:1d:7f:57:c9:77:dc: 3e:c2:b3:00:fa:7b:1d:c0:5f:62:e2:77:0a:bf:4f: d9:1f:01:af:b5:6c:49:d1:34:6d:c8:1a:eb:1a:45: d1:ef:82:5c:0c:ae:37:23:8c:e4:ab:26:72:cf:a7: 09:e6:3c:2c:64:7a:7f:02:fc:64:ae:a5:8a:e0:26: 85:b3:2d:2e:4c:e3:0c:38:a0:41:e0:94:14:1c:2f: b9:70:9b:5a:7b:7f:c4:01:9c:a0:1c:99:1e:3d:3e: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E3:3E:AF:A5:DC:8F:A0:BA:70:AD:00:3D:84:A3:37:13:5D:D4:68 X509v3 Authority Key Identifier: keyid:1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:8f:35:a8:65:ae:48:fe:4d:46:f6:74:2c:ca:1c:cb:c4:e7: 74:bd:7b:82:63:be:c8:9c:a8:9c:d3:e2:21:28:39:0e:4c:29: 16:a7:f9:9c:51:9d:68:15:d3:71:ac:d9:b6:73:4f:e7:a8:39: a2:00:5e:90:f4:81:e6:6f:95:ff:b7:7f:de:40:07:a6:7c:47: 28:c0:4b:33:30:cc:f7:1e:00:1a:52:3f:f3:e8:93:a9:0d:61: a3:dc:7d:85:6f:83:15:1d:0c:01:1f:9c:3f:ab:83:84:2c:9e: e9:53:bd:e4:e0:79:9e:28:63:e5:b4:03:e1:69:97:2d:71:3f: f0:d3:5b:36:49:0e:03:e5:ae:6e:16:49:78:5f:7b:b0:95:21: fd:0f:67:b7:c6:0f:33:a4:9b:85:69:01:3a:a2:69:2b:c0:b1: c7:42:3d:45:fd:19:2c:71:98:27:3e:bc:e2:4e:d3:3b:52:b2: 43:c7:b1:84:a2:6a:e8:21:66:ab:6c:c2:66:22:7d:29:91:e8: 06:bb:df:05:f3:bc:ef:22:38:e7:56:6f:e4:f1:2a:b5:72:0a: 05:aa:e7:4f:b5:b5:75:7a:e9:9e:5a:8d:ab:d4:ff:cd:3e:8d: 49:34:02:f2:7f:d9:1f:5d:ba:37:1f:a2:67:64:66:66:ef:ea: fb:e5:c4:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDNDExMC8GA1UEBRMoMUI3MjgxOTdEMTM2NjMxNEE2NkVEMEJGRjMxRUU5NTJE REMxMTdCNjAeFw0yNjA5MjMwOTAwMzdaFw0yNjA5MzAwOTAwMzdaMBgxFjAUBgNV BAMTDTZhYjM5NTM1LWZjZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpKclo+QKZD0HXGMLCCONQxTZQ8RKZ5uiOmwFacl/cVr+8k3m/Doy8D6TGlyp0 hFj+I7g05pRqtn9YMgZVYjqvNqF6xL0PDCtLvldOfikWPUmhwlgL+Bi4j6C/KOcT zWSk7H4H3KfNTKMq527bSYwE8XPJ+4iyk5usg9FqsTHfKWmi2viOcJFF0sX0UEFe l3jEoq5p6K4XuWSzd1tM5h1/V8l33D7CswD6ex3AX2Lidwq/T9kfAa+1bEnRNG3I GusaRdHvglwMrjcjjOSrJnLPpwnmPCxken8C/GSupYrgJoWzLS5M4ww4oEHglBQc L7lwm1p7f8QBnKAcmR49PlKTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzuM+r6Xc j6C6cK0APYSjNxNd1GgwHwYDVR0jBBgwFoAUG3KBl9E2YxSmbtC/8x7pUt3BF7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUM0LzYyQzFDRUUwQjFB MDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhTbWJ0Q184eDdwVXQzQkY3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzNLQmw5RTJZeFNtYnRDXzh4N3BVdDNCRjdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUM0LzYyQzFDRUUwQjFBMDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhT bWJ0Q184eDdwVXQzQkY3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDcjzWoZa5I/k1G9nQsyhzLxOd0vXuCY77InKic0+IhKDkOTCkWp/mcUZ1oFdNx rNm2c0/nqDmiAF6Q9IHmb5X/t3/eQAemfEcowEszMMz3HgAaUj/z6JOpDWGj3H2F b4MVHQwBH5w/q4OELJ7pU73k4HmeKGPltAPhaZctcT/w01s2SQ4D5a5uFkl4X3uw lSH9D2e3xg8zpJuFaQE6omkrwLHHQj1F/RkscZgnPrziTtM7UrJDx7GEomroIWar bMJmIn0pkegGu98F87zvIjjnVm/k8Sq1cgoFqudPtbV1eumeWo2r1P/NPo1JNALy f9kfXbo3H6JnZGZm7+r75cTa -----END CERTIFICATE-----Generated at Thu Sep 24 22:21:47 2026 by rpki-client