$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: JSwLIGVfIjVVuxfRsHmc3YpwY6rLj7cz8Ei2dwI7PXE= Subject key identifier: 0B:61:40:A1:F9:EF:11:6C:29:A9:50:9A:74:67:91:1D:92:B0:55:BB Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0D60 Signing time: Tue 22 Sep 2026 17:56:35 +0000 Manifest this update: Tue 22 Sep 2026 17:56:34 +0000 Manifest next update: Tue 29 Sep 2026 17:56:34 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: B689SXBUB3nF30g8L3m1BQtU9pCQMv64oVc1LwK+6J8=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Sep 22 17:56:34 2026 GMT Not After : Sep 29 17:56:34 2026 GMT Subject: CN=6ab2c153-8dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:44:08:f0:ab:96:68:af:a5:f9:db:f2:92: 1a:93:9e:4b:90:8e:a8:76:08:35:7e:a8:44:37:d5: 19:84:a6:9c:37:f5:dc:dd:ac:a9:ea:0e:3c:36:29: d1:04:c8:0c:5a:fc:cb:04:6c:00:2c:54:c1:88:61: 94:eb:ca:f2:eb:b9:cb:7a:0f:10:13:93:08:5f:31: 96:dd:0b:ee:30:42:31:6d:17:be:10:2c:91:fb:5e: 3c:de:ca:fd:a4:9e:ae:4e:8c:99:41:19:5e:23:29: b6:2e:d3:81:73:ee:b9:e6:82:cf:54:89:87:cb:62: 5d:bd:7b:e7:d2:c2:b5:0c:b9:30:bb:64:c5:ad:bb: 3b:88:61:ce:eb:69:26:52:a3:ae:99:b8:6b:94:38: 52:a0:ec:ca:02:25:b7:97:39:7e:bb:2e:81:ef:4d: 3c:c3:d4:79:d4:c9:78:ef:67:20:c6:8e:46:1b:5e: fb:01:e1:5b:e6:76:fe:0a:25:30:e6:c3:36:86:25: 3c:6d:9b:e7:b4:10:76:fe:f3:84:be:e0:f4:06:6d: 94:ac:a4:1d:d2:97:aa:ba:19:11:76:e3:76:92:40: 4e:62:da:fa:59:72:44:ec:be:e0:6d:58:4a:13:ec: a9:12:6b:81:55:de:65:71:ad:9a:92:78:65:2b:d3: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:40:A1:F9:EF:11:6C:29:A9:50:9A:74:67:91:1D:92:B0:55:BB X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:bb:2e:5e:e0:6f:25:08:29:83:5c:d7:67:aa:c0:70:27:3c: 50:c1:11:83:e6:bb:55:76:33:b8:cb:65:be:1a:0f:eb:48:df: c7:42:3f:b3:01:72:8c:24:67:b3:7e:af:3e:1c:2e:a1:c6:34: e8:45:b0:84:23:1c:cc:27:db:f4:8d:d3:13:65:6c:fb:b1:5a: 09:70:3e:cb:fa:ce:b1:1a:b5:e5:1b:3a:94:4a:47:ef:7f:61: 7b:e2:53:7d:34:b3:59:be:c6:4b:d5:e6:c1:17:de:fd:81:ca: 22:a1:0a:7b:2e:65:ec:78:c7:2e:68:12:e4:67:8b:00:dc:f9: 4c:d4:79:36:b2:8a:b5:ad:99:f8:53:90:f1:1c:83:3b:54:15: 24:2b:ec:65:d4:5d:69:60:cb:2c:2b:4f:35:37:70:7b:3e:0a: d1:4d:a0:f8:dc:43:a8:94:93:e5:d4:49:64:b2:62:c3:f6:cd: 6b:00:0a:24:db:5d:4c:08:78:63:87:fe:c7:e4:f8:ba:7c:4d: e9:dd:fc:d2:5b:25:35:e8:89:9a:c4:8b:af:9d:40:58:21:59: 99:94:ce:73:19:0f:8a:91:1d:08:44:3d:9f:f0:ff:76:63:ea: 00:ef:36:8f:f4:b1:8e:ca:31:64:31:32:f0:ca:73:db:76:c6: 0c:b5:58:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjYwOTIyMTc1NjM0WhcNMjYwOTI5MTc1NjM0WjAYMRYwFAYD VQQDEw02YWIyYzE1My04ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa1ECPCrlmivpfnb8pIak55LkI6odgg1fqhEN9UZhKacN/Xc3ayp6g48NinR BMgMWvzLBGwALFTBiGGU68ry67nLeg8QE5MIXzGW3QvuMEIxbRe+ECyR+1483sr9 pJ6uToyZQRleIym2LtOBc+655oLPVImHy2JdvXvn0sK1DLkwu2TFrbs7iGHO62km UqOumbhrlDhSoOzKAiW3lzl+uy6B7008w9R51Ml472cgxo5GG177AeFb5nb+CiUw 5sM2hiU8bZvntBB2/vOEvuD0Bm2UrKQd0pequhkRduN2kkBOYtr6WXJE7L7gbVhK E+ypEmuBVd5lca2aknhlK9MXiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAthQKH5 7xFsKalQmnRnkR2SsFW7MB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs7suXuBvJQgpg1zXZ6rAcCc8UMERg+a7VXYzuMtlvhoP60jfx0I/swFyjCRn s36vPhwuocY06EWwhCMczCfb9I3TE2Vs+7FaCXA+y/rOsRq15Rs6lEpH739he+JT fTSzWb7GS9XmwRfe/YHKIqEKey5l7HjHLmgS5GeLANz5TNR5NrKKta2Z+FOQ8RyD O1QVJCvsZdRdaWDLLCtPNTdwez4K0U2g+NxDqJST5dRJZLJiw/bNawAKJNtdTAh4 Y4f+x+T4unxN6d380lslNeiJmsSLr51AWCFZmZTOcxkPipEdCEQ9n/D/dmPqAO82 j/SxjsoxZDEy8Mpz23bGDLVYiw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:07:29 2026 by rpki-client