$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: 6MKAp2bStuitQs8+rTKEaeB+ZW2IVPPWhEg0dQpKLUg= Subject key identifier: 46:EF:6A:4D:AE:E8:97:85:9B:D2:F7:C8:C0:DD:C1:F0:60:C9:44:53 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0672 Signing time: Tue 22 Sep 2026 22:22:31 +0000 Manifest this update: Tue 22 Sep 2026 22:22:31 +0000 Manifest next update: Tue 29 Sep 2026 22:22:31 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: aSjrnKTQAtfYAMPbIQlvpIip1+h+Pb7FmWFk/6QGikY=) 2: 8192DC9279D811F1ABEE2BAB62A30FBC.roa (hash: pjhHpj2MOBBanUS1pzq5JLqrgdDCeHLBhLAd7UJOZ1Q=) 3: 5AF5468879D811F18B1076AA62A30FBC.roa (hash: GSj7udpCZ3TiauyqNEm+RwhPkCPJjpIU0roOwcJPGck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Sep 22 22:22:31 2026 GMT Not After : Sep 29 22:22:31 2026 GMT Subject: CN=6ab2ffa7-280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:11:6e:d4:53:91:cf:4b:dd:f5:09:85:5a: d7:24:0e:e1:ef:e9:61:00:d4:78:8d:e8:95:98:9a: 4e:e5:30:de:2e:39:a1:f0:c1:d1:98:f6:8e:b4:c8: 12:ca:e1:7b:8b:de:50:ee:7a:bf:2a:80:94:fa:5d: e2:b8:75:00:fa:48:14:9a:67:e8:ed:d3:76:e0:c0: f2:64:be:b2:b7:81:c4:a8:e3:73:2c:94:c1:dc:4d: 64:5d:22:10:62:0b:23:50:da:a5:01:a8:ee:16:8e: 33:b9:6d:95:4a:09:df:5c:5a:42:1f:f3:7f:03:13: 0a:11:8b:00:63:28:ad:f5:f1:37:55:80:2e:0b:46: 2f:91:8a:f9:f8:9d:a0:c4:e1:23:81:40:aa:5d:45: 67:b7:10:b9:e3:78:18:ac:d5:95:1d:b6:84:fc:78: 25:5a:01:53:e7:a5:31:23:0f:a0:7e:d9:a4:a5:29: 6c:04:3d:a6:e5:eb:45:d0:98:7a:54:6b:79:41:8d: f6:ca:84:cd:0f:95:af:8a:02:fc:46:ce:1c:72:69: 26:68:de:02:e8:de:90:fe:c9:81:22:fa:08:0d:c7: 6c:84:59:06:46:83:dd:ed:80:b6:d8:3e:81:d8:c8: 8b:c3:29:b6:4a:44:2a:5e:d6:c0:e6:0a:fd:55:b2: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:6A:4D:AE:E8:97:85:9B:D2:F7:C8:C0:DD:C1:F0:60:C9:44:53 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:54:31:0a:8d:bf:c9:81:c9:0a:1d:53:5a:ec:07:79:39:54: 6e:8f:c3:a7:5f:32:51:ad:4a:57:1f:29:16:61:36:fb:b1:ea: 84:36:80:af:28:6a:42:ab:22:32:62:61:12:2c:b0:a7:70:97: 39:15:70:93:52:cd:fa:bb:f5:72:c5:50:8b:4a:f4:25:18:30: 42:f5:eb:72:50:4d:e6:5a:8f:f9:40:8c:f0:de:29:6f:5f:2a: 0a:96:19:0d:25:10:61:55:3a:a6:65:50:e9:fe:3f:6e:22:bd: 38:31:7c:16:a2:00:53:e8:56:76:dd:38:a3:72:9d:39:ac:f5: ed:4a:29:24:94:c2:c7:71:8b:4e:c4:97:dc:cd:b9:ec:e5:8f: 0c:36:4f:68:8d:94:84:2b:16:bc:d1:b3:bc:44:40:c3:70:6a: 67:a8:70:e1:92:ec:26:59:f5:a4:75:3a:60:6f:8e:f0:2e:5a: 12:cc:12:16:bf:71:b5:f9:c6:6e:1b:d5:67:39:da:45:92:71: 7c:d5:e7:17:3b:60:b5:b1:8e:16:27:7a:52:58:35:a3:59:d0: 4c:02:11:16:d3:e6:25:31:41:0f:2d:83:41:f6:8f:68:8f:57: 94:32:ef:68:50:7a:88:64:c0:61:ea:6c:61:28:74:c8:d3:c6: 9f:32:eb:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwOTIyMjIyMjMxWhcNMjYwOTI5MjIyMjMxWjAYMRYwFAYD VQQDEw02YWIyZmZhNy0yODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvscRbtRTkc9L3fUJhVrXJA7h7+lhANR4jeiVmJpO5TDeLjmh8MHRmPaOtMgS yuF7i95Q7nq/KoCU+l3iuHUA+kgUmmfo7dN24MDyZL6yt4HEqONzLJTB3E1kXSIQ YgsjUNqlAajuFo4zuW2VSgnfXFpCH/N/AxMKEYsAYyit9fE3VYAuC0YvkYr5+J2g xOEjgUCqXUVntxC543gYrNWVHbaE/HglWgFT56UxIw+gftmkpSlsBD2m5etF0Jh6 VGt5QY32yoTND5WvigL8Rs4ccmkmaN4C6N6Q/smBIvoIDcdshFkGRoPd7YC22D6B 2MiLwym2SkQqXtbA5gr9VbJP7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbvak2u 6JeFm9L3yMDdwfBgyURTMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnFQxCo2/yYHJCh1TWuwHeTlUbo/Dp18yUa1KVx8pFmE2+7HqhDaAryhqQqsi MmJhEiywp3CXORVwk1LN+rv1csVQi0r0JRgwQvXrclBN5lqP+UCM8N4pb18qCpYZ DSUQYVU6pmVQ6f4/biK9ODF8FqIAU+hWdt04o3KdOaz17UopJJTCx3GLTsSX3M25 7OWPDDZPaI2UhCsWvNGzvERAw3BqZ6hw4ZLsJln1pHU6YG+O8C5aEswSFr9xtfnG bhvVZznaRZJxfNXnFztgtbGOFid6Ulg1o1nQTAIRFtPmJTFBDy2DQfaPaI9XlDLv aFB6iGTAYepsYSh0yNPGnzLrLQ== -----END CERTIFICATE-----Generated at Wed Sep 23 01:34:30 2026 by rpki-client