$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft File: d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json) Hash identifier: SvaE6Co5CP3mXNkRdjr+fpT+mr3p1s4/Ih2h8wMjos4= Subject key identifier: CE:53:21:9D:C2:4A:0F:9F:71:E0:48:21:A1:4A:60:D7:5A:73:D1:1B Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B Certificate issuer: /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft Manifest number: 42 Signing time: Fri 25 Sep 2026 08:36:45 +0000 Manifest this update: Fri 25 Sep 2026 08:36:44 +0000 Manifest next update: Fri 02 Oct 2026 08:36:44 +0000 Files and hashes: 1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: AbRQcfzrSFpNQVSZn7KaYTL6x0f3nnshve+k3uhZhNE=) 2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B Validity Not Before: Sep 25 08:36:44 2026 GMT Not After : Oct 2 08:36:44 2026 GMT Subject: CN=6ab6329d-0c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:5e:28:73:10:22:51:35:30:51:ef:06:bb: fe:52:47:33:8f:c0:3f:28:5c:5d:53:5d:e9:57:03: d4:54:fa:10:fd:4c:bc:c7:d9:2f:41:77:90:db:0f: 95:43:29:da:bd:1b:be:8a:06:3c:5c:51:b0:d9:0a: 8b:31:15:af:e8:d9:9e:53:ca:01:99:22:7f:2d:63: 75:58:23:ec:92:bf:77:39:6a:db:d2:14:10:34:43: 24:e9:5c:e1:a7:a8:f3:1b:61:79:1a:c3:64:1d:8a: 31:c4:87:46:97:42:39:9a:b6:79:c8:a7:fe:b9:9c: 7d:15:15:84:1d:5a:b9:bc:9b:63:6f:db:79:ac:fb: a6:49:b6:bc:fe:e3:15:42:fc:6f:b6:95:0f:7a:97: 0b:85:5d:6a:3d:51:af:aa:7f:6c:36:b8:6d:ff:95: f0:ef:55:ef:5f:0f:89:e6:19:af:54:22:3b:a9:5b: f7:ee:4e:09:e7:79:fc:87:4c:f4:1a:3a:ef:c0:25: b4:8a:22:96:d5:3a:bb:76:ca:54:34:b5:1a:b8:a6: 41:e4:b7:01:5d:0b:26:25:2c:a2:ed:64:c0:6d:3f: 7c:5a:46:75:02:bc:70:3a:bd:58:9b:cd:31:30:c2: fd:5d:f9:2c:27:e7:56:2a:9b:1c:98:69:09:d1:0e: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:21:9D:C2:4A:0F:9F:71:E0:48:21:A1:4A:60:D7:5A:73:D1:1B X509v3 Authority Key Identifier: keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:bb:57:d5:3f:25:f1:94:1e:07:b7:c0:10:b6:54:fc:a6:0a: 32:68:24:89:17:d1:36:e0:c5:75:f6:0c:53:21:bf:42:2c:87: 58:8d:7b:f3:cb:93:78:c3:78:7c:09:83:28:9a:64:45:be:0f: 2f:a1:ff:3b:ab:c2:c8:71:8b:61:e0:e7:32:26:b9:62:0d:78: 4b:70:94:4d:71:44:e3:92:d8:f2:4f:a0:e7:f3:9d:0f:f6:f0: 7d:59:59:b8:c2:75:a8:df:a6:b9:8d:13:93:8f:e5:b6:d4:84: ec:2f:c0:27:86:96:0f:4c:5a:a1:78:fc:e1:4c:f1:6e:2c:3b: a3:79:94:10:ac:14:eb:df:41:61:ba:5b:e8:19:22:38:bb:02: ee:f0:08:d0:a6:83:4e:62:47:98:f5:40:a0:be:4b:5d:34:67: 19:4d:ae:45:3c:1c:78:6b:cd:85:4c:78:c3:05:26:50:fb:f9: 5a:4d:7e:df:1b:60:f3:45:a0:3b:2d:9c:53:a9:3e:0f:45:ae: 31:0e:00:d4:44:07:d5:8b:1b:ba:1b:ed:49:dd:c3:3c:13:69: 34:bf:97:6a:99:9d:43:7f:ac:12:09:68:7d:e5:16:02:73:1d: 06:b1:b9:64:00:26:e6:bb:42:62:40:07:93:99:64:53:49:da: 7f:ce:4e:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OEE3RDExMC8GA1UEBRMoNzc3MDA2QTQxRTAxOEUzM0Y2N0MyOUZENjk3RTY0NDhD NzhFNUIxQjAeFw0yNjA5MjUwODM2NDRaFw0yNjEwMDIwODM2NDRaMBgxFjAUBgNV BAMTDTZhYjYzMjlkLTBjODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIHF4ocxAiUTUwUe8Gu/5SRzOPwD8oXF1TXelXA9RU+hD9TLzH2S9Bd5DbD5VD Kdq9G76KBjxcUbDZCosxFa/o2Z5TygGZIn8tY3VYI+ySv3c5atvSFBA0QyTpXOGn qPMbYXkaw2QdijHEh0aXQjmatnnIp/65nH0VFYQdWrm8m2Nv23ms+6ZJtrz+4xVC /G+2lQ96lwuFXWo9Ua+qf2w2uG3/lfDvVe9fD4nmGa9UIjupW/fuTgnnefyHTPQa Ou/AJbSKIpbVOrt2ylQ0tRq4pkHktwFdCyYlLKLtZMBtP3xaRnUCvHA6vVibzTEw wv1d+Swn51YqmxyYaQnRDmhJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzlMhncJK D59x4EghoUpg11pz0RswHwYDVR0jBBgwFoAUd3AGpB4BjjP2fCn9aX5kSMeOWxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QTdELzY5NjVERkNBNTU5 MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQMmZDbjlhWDVrU01lT1d4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZDNBR3BCNEJqalAyZkNuOWFYNWtTTWVPV3hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 QTdELzY5NjVERkNBNTU5MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQ MmZDbjlhWDVrU01lT1d4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZu1fVPyXxlB4Ht8AQtlT8pgoyaCSJF9E24MV19gxTIb9CLIdYjXvzy5N4w3h8 CYMommRFvg8vof87q8LIcYth4OcyJrliDXhLcJRNcUTjktjyT6Dn850P9vB9WVm4 wnWo36a5jROTj+W21ITsL8AnhpYPTFqhePzhTPFuLDujeZQQrBTr30FhulvoGSI4 uwLu8AjQpoNOYkeY9UCgvktdNGcZTa5FPBx4a82FTHjDBSZQ+/laTX7fG2DzRaA7 LZxTqT4PRa4xDgDURAfVixu6G+1J3cM8E2k0v5dqmZ1Df6wSCWh95RYCcx0Gsblk ACbmu0JiQAeTmWRTSdp/zk7x -----END CERTIFICATE-----Generated at Fri Sep 25 17:09:02 2026 by rpki-client