$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: OtcZC5IaDs38LfQfHo9Z3ps2+mDMhoqWlW7pn6YjONQ= Subject key identifier: 14:EB:88:95:AD:F9:53:86:45:DC:CD:81:EC:1F:89:5D:67:6F:50:AD Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0E78 Signing time: Tue 22 Sep 2026 17:41:38 +0000 Manifest this update: Tue 22 Sep 2026 17:41:38 +0000 Manifest next update: Tue 29 Sep 2026 17:41:38 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: wVnf+PgW5wyIFCYhf9Q6YWG2VYBYPMNBfxochaCa0xM=) 2: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: GS10eEt1MCcAl1eDM0DD66Q/CuCpMh/GfO+nM5nY1Wc=) 3: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: V7vJC1rGtCuOdSFWDJjdd3JhuVIPp/Zsx063dJpSpzo=) 4: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: 8Ac19pb5+p9KK1Iemz1RgsRRRrnuxVd5vC2V5ZATZXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Sep 22 17:41:38 2026 GMT Not After : Sep 29 17:41:38 2026 GMT Subject: CN=6ab2bdd2-8eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:ba:58:e0:01:8b:04:86:a4:27:b1:ba:0d: 1b:91:16:0a:85:3a:12:28:71:9f:4d:e8:16:67:56: ee:dc:fc:03:b5:5b:a5:6f:05:04:ba:d7:3a:1f:9b: 61:a7:64:98:d5:a1:ce:bf:ac:5f:ef:e5:65:17:c9: d9:c1:25:58:41:70:26:19:ed:cc:b0:c3:21:28:99: ec:7f:30:e4:ec:18:92:8d:f3:5f:26:25:23:76:e2: 77:c8:46:c2:ea:1b:60:2a:73:63:f8:12:99:3b:09: b7:eb:75:16:bb:97:3c:e9:e6:c4:f6:7b:0c:31:81: 0c:e9:47:d2:b8:a9:c5:02:22:27:e1:32:09:ea:b7: d8:59:45:15:9a:6f:a8:06:ad:4e:5f:04:13:4e:8f: f3:fa:02:09:78:c7:8f:cf:13:fe:05:97:8b:dd:39: a8:54:af:08:35:b5:cd:aa:29:2f:8d:ed:ed:cc:79: 69:91:05:4e:ba:4d:fb:60:dc:38:e5:bd:11:ad:7a: 05:e5:b3:f7:51:be:eb:4a:22:fc:b0:88:8e:07:db: 6f:34:bd:3a:05:0f:c4:7f:1d:4a:5f:e2:87:88:cc: 0a:02:f0:b8:48:a4:65:16:96:48:36:79:0e:99:2a: 25:eb:31:e5:27:2a:11:32:f4:a3:99:5a:99:3b:87: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:88:95:AD:F9:53:86:45:DC:CD:81:EC:1F:89:5D:67:6F:50:AD X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:67:e6:f1:85:14:c8:9a:ab:dd:ef:de:3d:7c:af:ee:a7: 8d:ff:90:6f:2e:13:76:0d:0f:11:b2:37:62:cd:cc:d8:be:af: 58:57:63:d7:55:67:48:bc:57:3d:d0:eb:24:a6:53:27:0a:82: 63:58:cc:8e:92:91:b7:ee:33:f3:30:7d:98:eb:c1:ed:1c:20: e3:c5:74:1f:0a:31:4d:23:d8:83:b5:b2:07:ba:e5:81:0c:df: e8:4e:7d:f3:60:30:66:af:81:1a:20:2f:11:e1:51:e3:f3:43: 01:ba:c8:8b:cc:f1:f8:20:02:5c:c0:c1:19:22:d5:3e:e3:61: 8e:61:aa:6a:49:39:58:d8:f3:29:84:3f:f9:04:2b:32:f1:88: c7:df:bc:0e:e6:31:ce:8b:54:97:eb:e6:1b:30:f7:20:c1:4c: bf:4e:bf:3a:0d:83:20:71:64:55:15:ec:9b:0f:d7:bb:41:19: 11:f0:f3:4e:84:3e:53:cf:43:91:5b:2a:04:29:ea:12:02:cb: 2d:21:3a:29:06:2f:4b:4f:84:05:06:1b:f8:2e:40:d2:81:80: 8b:b5:a9:f1:33:78:dd:1f:c7:1d:5b:55:5a:e0:78:e7:f6:db: 02:96:5e:66:77:d5:60:8a:76:c0:2c:d9:24:77:e6:57:2b:53: d4:f6:cc:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwOTIyMTc0MTM4WhcNMjYwOTI5MTc0MTM4WjAYMRYwFAYD VQQDEw02YWIyYmRkMi04ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VG6WOABiwSGpCexug0bkRYKhToSKHGfTegWZ1bu3PwDtVulbwUEutc6H5th p2SY1aHOv6xf7+VlF8nZwSVYQXAmGe3MsMMhKJnsfzDk7BiSjfNfJiUjduJ3yEbC 6htgKnNj+BKZOwm363UWu5c86ebE9nsMMYEM6UfSuKnFAiIn4TIJ6rfYWUUVmm+o Bq1OXwQTTo/z+gIJeMePzxP+BZeL3TmoVK8INbXNqikvje3tzHlpkQVOuk37YNw4 5b0RrXoF5bP3Ub7rSiL8sIiOB9tvNL06BQ/Efx1KX+KHiMwKAvC4SKRlFpZINnkO mSol6zHlJyoRMvSjmVqZO4fIWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTriJWt +VOGRdzNgewfiV1nb1CtMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoktn5vGFFMiaq93v3j18r+6njf+Qby4Tdg0PEbI3Ys3M2L6vWFdj11VnSLxX PdDrJKZTJwqCY1jMjpKRt+4z8zB9mOvB7Rwg48V0HwoxTSPYg7WyB7rlgQzf6E59 82AwZq+BGiAvEeFR4/NDAbrIi8zx+CACXMDBGSLVPuNhjmGqakk5WNjzKYQ/+QQr MvGIx9+8DuYxzotUl+vmGzD3IMFMv06/Og2DIHFkVRXsmw/Xu0EZEfDzToQ+U89D kVsqBCnqEgLLLSE6KQYvS0+EBQYb+C5A0oGAi7Wp8TN43R/HHVtVWuB45/bbApZe ZnfVYIp2wCzZJHfmVytT1PbMKA== -----END CERTIFICATE-----Generated at Thu Sep 24 06:30:32 2026 by rpki-client