$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json) Hash identifier: 3HFbwSRWglp4yLpQXPz6jNbwq9fj86gWphObki6dx58= Subject key identifier: B1:B6:90:ED:4F:06:3C:39:AF:72:77:77:9A:11:6F:F9:FE:87:95:2D Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft Manifest number: 0120 Signing time: Sun 27 Sep 2026 06:27:38 +0000 Manifest this update: Sun 27 Sep 2026 06:27:37 +0000 Manifest next update: Sun 04 Oct 2026 06:27:37 +0000 Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: XFUvTb6LQXqvZfDT7NDrsqLfsHPPUT7ALuMkKScRk0c=) 2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Validity Not Before: Sep 27 06:27:37 2026 GMT Not After : Oct 4 06:27:37 2026 GMT Subject: CN=6ab8b759-f559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:64:4b:d3:75:cc:6b:3c:b7:a6:56:c7:43: 05:5a:77:8b:cc:c1:03:3d:dd:16:d7:6a:37:ac:40: 99:2d:65:d0:9d:f4:ce:36:75:78:ca:1d:05:3d:16: af:d5:de:8a:92:41:3a:0f:76:c3:79:28:ff:01:0a: b9:53:e7:a9:a8:1e:86:f2:48:e6:e1:da:8a:46:58: 54:69:3f:75:fe:85:77:69:c2:6f:36:70:a1:4a:52: 7b:5e:2f:fe:c4:87:7c:b3:b5:12:82:c7:f2:4f:e6: 0b:e0:b2:ef:73:4f:ec:c7:5a:94:63:47:c9:15:15: 3f:d6:4a:5c:89:2e:3a:09:bc:35:6d:6b:e9:97:ec: dd:17:5a:07:ad:21:ae:14:59:b6:70:67:62:24:78: 2e:ff:b9:b8:28:07:dd:6d:ce:0f:d8:53:1b:56:a3: 77:08:98:18:15:cb:42:38:c6:5e:3b:81:a5:91:af: fe:6e:3a:31:03:7a:80:d8:22:9c:a9:1c:60:76:08: ec:c0:d0:92:31:45:82:74:e5:11:af:c1:32:b8:7d: 79:8e:79:db:2b:9d:cb:95:92:a1:1a:4f:89:ff:6f: c4:08:21:14:75:e4:89:27:0a:8d:30:5c:6d:eb:0c: d5:9d:c7:e8:b1:f3:62:f6:b8:da:9c:a5:58:98:9e: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:90:ED:4F:06:3C:39:AF:72:77:77:9A:11:6F:F9:FE:87:95:2D X509v3 Authority Key Identifier: keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:bb:8f:f5:64:84:cd:fa:b0:4d:2d:e7:4f:a0:de:ea:cf:17: 2f:13:ac:08:42:02:87:8d:58:fa:43:3d:32:24:30:c7:55:7d: ad:9e:67:e5:6a:32:35:ca:6b:65:41:ab:0a:86:ae:c8:9e:7d: 50:7d:13:b8:93:d1:3a:35:ec:b2:a9:de:83:d7:58:82:d5:95: 46:6c:f5:64:63:a9:31:16:d4:ce:c7:2e:8a:8f:6b:2c:aa:4f: 1f:d9:09:f7:11:c9:40:d2:10:e1:c8:8e:3b:c6:cd:f8:3f:71: 6e:5d:9b:96:f1:aa:86:07:b5:fd:d8:c8:39:39:4b:4d:34:a4: 07:a6:7e:75:94:53:af:9f:a1:6b:32:e3:a9:7f:25:ce:46:04: ec:7a:4f:ff:37:b6:5e:09:6b:46:41:ae:81:76:51:58:17:9f: 07:95:bb:eb:dc:a7:0f:0a:2d:c1:e0:ea:be:44:d7:80:20:78: 4b:76:26:be:f8:e6:88:74:ce:fe:b8:ba:9e:89:54:3c:5e:f9: fb:2a:cb:9b:e3:91:c3:f7:e6:41:db:f4:17:09:98:26:14:b0: f7:cf:95:b7:a9:7f:34:35:ad:b5:8e:4c:df:de:cf:5a:89:0b: 0d:f1:f4:a7:0f:89:0e:c8:8d:30:ab:a7:3f:be:91:e8:a2:9c: 49:15:5d:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKERFQjRDMEI5MDdGQUNBMUM1RDM3NzZCRDQ5NDZGNEJB QThDQTZCMzAwHhcNMjYwOTI3MDYyNzM3WhcNMjYxMDA0MDYyNzM3WjAYMRYwFAYD VQQDEw02YWI4Yjc1OS1mNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqJkS9N1zGs8t6ZWx0MFWneLzMEDPd0W12o3rECZLWXQnfTONnV4yh0FPRav 1d6KkkE6D3bDeSj/AQq5U+epqB6G8kjm4dqKRlhUaT91/oV3acJvNnChSlJ7Xi/+ xId8s7USgsfyT+YL4LLvc0/sx1qUY0fJFRU/1kpciS46Cbw1bWvpl+zdF1oHrSGu FFm2cGdiJHgu/7m4KAfdbc4P2FMbVqN3CJgYFctCOMZeO4Glka/+bjoxA3qA2CKc qRxgdgjswNCSMUWCdOURr8EyuH15jnnbK53LlZKhGk+J/2/ECCEUdeSJJwqNMFxt 6wzVncfosfNi9rjanKVYmJ7/ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLG2kO1P Bjw5r3J3d5oRb/n+h5UtMB8GA1UdIwQYMBaAFN60wLkH+socXTd2vUlG9Lqoymsw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CMTcwQzkxMjEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnloeGROM2E5U1ViMHVxakth ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNyVEF1UWY2eWh4ZE4zYTlTVWIwdXFqS2F6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CMTcwQzkxMjEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnlo eGROM2E5U1ViMHVxakthekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlLuP9WSEzfqwTS3nT6De6s8XLxOsCEICh41Y+kM9MiQwx1V9rZ5n5WoyNcpr ZUGrCoauyJ59UH0TuJPROjXssqneg9dYgtWVRmz1ZGOpMRbUzscuio9rLKpPH9kJ 9xHJQNIQ4ciOO8bN+D9xbl2blvGqhge1/djIOTlLTTSkB6Z+dZRTr5+hazLjqX8l zkYE7HpP/ze2XglrRkGugXZRWBefB5W769ynDwotweDqvkTXgCB4S3YmvvjmiHTO /ri6nolUPF75+yrLm+ORw/fmQdv0FwmYJhSw98+Vt6l/NDWttY5M397PWokLDfH0 pw+JDsiNMKunP76R6KKcSRVdSw== -----END CERTIFICATE-----Generated at Mon Sep 28 23:48:17 2026 by rpki-client