$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json) Hash identifier: MgeTfylbZO+Hqzqe1QPXGa712x5RJVPcQ1MSk2JOx/E= Subject key identifier: BA:41:CB:14:43:76:2C:16:12:5D:9C:3A:40:20:12:8C:B7:B6:BE:93 Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft Manifest number: 97 Signing time: Wed 23 Sep 2026 07:15:17 +0000 Manifest this update: Wed 23 Sep 2026 07:15:17 +0000 Manifest next update: Wed 30 Sep 2026 07:15:17 +0000 Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: caLAB2C82hgZAa8t6XSP2WFY/gAG5WZxiVgUbAhRpFE=) 2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Validity Not Before: Sep 23 07:15:17 2026 GMT Not After : Sep 30 07:15:17 2026 GMT Subject: CN=6ab37c85-da4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:92:40:a5:24:e5:30:88:bd:90:b2:71:6c: 12:b9:24:48:62:94:2a:a1:a8:55:31:fa:a5:94:d6: 6f:f3:bd:77:3f:e3:f2:32:e5:1d:a0:a6:58:e7:04: cc:2d:38:ff:ce:3e:81:6d:57:7d:9a:f5:83:df:db: 7f:4a:68:41:e9:5b:de:86:4a:99:ab:2b:21:59:73: 6b:cf:a9:41:5a:2e:72:72:cf:fa:7e:5d:ef:2a:30: 1c:d7:e9:16:7b:55:cd:2b:9c:3f:74:07:cd:4e:02: 2e:2a:87:e8:6c:f5:67:e9:82:66:b5:6c:5f:fe:a3: 8f:5b:10:95:20:75:87:37:d9:2f:5c:78:cd:14:a2: 03:14:5b:3e:c1:4c:26:db:56:7e:4e:16:f1:15:8d: 52:01:e2:fb:ec:d3:52:cd:db:20:2b:24:b0:54:5f: e6:f0:e6:36:f3:78:a0:0a:5a:93:68:bd:50:a3:42: 35:ab:78:77:d8:9c:4f:3c:1b:17:14:d8:15:92:7c: 89:fe:89:0f:30:3d:58:e0:88:87:01:43:84:99:0f: 4b:eb:42:cb:e5:1e:42:7e:01:24:b9:cc:80:02:3a: 35:83:a1:67:d4:18:20:5e:dd:8e:40:f5:31:dd:8c: ff:b0:50:2e:d6:81:ea:da:d3:e4:bd:7b:ef:1a:86: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:CB:14:43:76:2C:16:12:5D:9C:3A:40:20:12:8C:B7:B6:BE:93 X509v3 Authority Key Identifier: keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:1f:d4:da:f7:0b:38:96:08:06:9e:ef:0d:dc:24:3b:26: 2a:56:a8:d2:f4:2d:e7:d1:78:30:bb:3c:e5:1f:9f:8d:e8:71: 2e:9b:cd:a4:73:e7:00:a0:77:55:c4:f6:2b:da:60:f5:62:4f: 5b:20:a7:f9:f5:d9:4f:af:c7:4a:d0:79:95:96:5c:bb:f1:d6: b5:04:35:1c:34:57:04:94:a5:42:00:61:e2:f9:21:6b:ea:27: 5c:14:cd:da:ec:cd:34:b5:33:eb:98:3e:d8:6f:bd:16:78:4b: cc:b9:91:b2:04:88:29:d2:a8:58:df:53:7a:c7:a0:9b:df:49: c2:dc:fa:1b:c7:56:9d:17:d9:ff:22:87:be:e6:e4:40:87:bd: e9:db:bb:75:e4:d7:d3:82:f1:f1:1f:b5:a1:53:58:a1:a2:db: 8a:34:e0:7a:b9:9d:61:e2:4a:94:b0:78:35:2e:01:58:27:22: 0c:5c:36:5a:6c:f6:01:0c:0c:5a:ea:bd:74:6f:bd:fd:42:b8: f6:03:db:2d:b1:96:22:b8:7a:ba:47:06:53:33:73:e3:96:24: 15:6f:4c:52:b1:32:6e:7d:19:0f:6c:b5:c1:73:20:cf:79:16: f5:6b:b7:3c:a5:55:c5:fe:60:94:dd:ba:61:43:c5:a4:a6:81: 62:08:f1:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMjgxMTAvBgNVBAUTKERFODNDNzZDREI0NEY0Rjc5NDQ3MTkyMDJCRTNBRkE4 ODNEMzQ5NEQwHhcNMjYwOTIzMDcxNTE3WhcNMjYwOTMwMDcxNTE3WjAYMRYwFAYD VQQDEw02YWIzN2M4NS1kYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBaSQKUk5TCIvZCycWwSuSRIYpQqoahVMfqllNZv8713P+PyMuUdoKZY5wTM LTj/zj6BbVd9mvWD39t/SmhB6VvehkqZqyshWXNrz6lBWi5ycs/6fl3vKjAc1+kW e1XNK5w/dAfNTgIuKofobPVn6YJmtWxf/qOPWxCVIHWHN9kvXHjNFKIDFFs+wUwm 21Z+ThbxFY1SAeL77NNSzdsgKySwVF/m8OY283igClqTaL1Qo0I1q3h32JxPPBsX FNgVknyJ/okPMD1Y4IiHAUOEmQ9L60LL5R5CfgEkucyAAjo1g6Fn1BggXt2OQPUx 3Yz/sFAu1oHq2tPkvXvvGoZQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpByxRD diwWEl2cOkAgEoy3tr6TMB8GA1UdIwQYMBaAFN6Dx2zbRPT3lEcZICvjr6iD00lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyOC80NzYwNkVCNERC QjcxMUYwQTBERjkwRjA0RDY0MTk1MS8zb1BIYk50RTlQZVVSeGtnSy1PdnFJUFRT VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvUEhiTnRFOVBlVVJ4a2dLLU92cUlQVFNVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUyOC80NzYwNkVCNERCQjcxMUYwQTBERjkwRjA0RDY0MTk1MS8zb1BIYk50RTlQ ZVVSeGtnSy1PdnFJUFRTVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcsf1Nr3CziWCAae7w3cJDsmKlao0vQt59F4MLs85R+fjehxLpvNpHPnAKB3 VcT2K9pg9WJPWyCn+fXZT6/HStB5lZZcu/HWtQQ1HDRXBJSlQgBh4vkha+onXBTN 2uzNNLUz65g+2G+9FnhLzLmRsgSIKdKoWN9Tesegm99Jwtz6G8dWnRfZ/yKHvubk QIe96du7deTX04Lx8R+1oVNYoaLbijTgermdYeJKlLB4NS4BWCciDFw2Wmz2AQwM Wuq9dG+9/UK49gPbLbGWIrh6ukcGUzNz45YkFW9MUrEybn0ZD2y1wXMgz3kW9Wu3 PKVVxf5glN26YUPFpKaBYgjxcg== -----END CERTIFICATE-----Generated at Thu Sep 24 22:50:16 2026 by rpki-client