$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: 4ESIigTABg8zBeCwU3rNMKsfJDTE71Hc5W0ZFG84NXE= Subject key identifier: D3:54:CC:1F:B7:42:87:7B:AA:DC:C4:B9:08:8B:21:A8:C4:70:2A:F1 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 01D8 Signing time: Wed 23 Sep 2026 03:26:21 +0000 Manifest this update: Wed 23 Sep 2026 03:26:21 +0000 Manifest next update: Wed 30 Sep 2026 03:26:21 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: b29PGFlZ47XkRQ5NvlScQiphwTk+oz3Eo5Q9A2TPKoo=) 2: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 4: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Sep 23 03:26:21 2026 GMT Not After : Sep 30 03:26:21 2026 GMT Subject: CN=6ab346dd-0069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:a7:2f:54:8f:77:62:14:a2:30:01:56:b5: 8c:09:95:e0:29:17:fa:aa:d5:c1:fc:43:f2:49:dc: 7b:e8:ac:28:6c:39:e7:29:c0:25:e6:0c:d3:41:00: 6b:a3:c3:5e:96:7e:01:50:e0:ee:a2:bb:9b:e6:19: b8:b8:d5:df:57:90:ff:86:34:57:c3:c4:8b:71:cb: 61:2d:c1:cb:aa:d0:a7:2b:9b:08:ce:ba:93:6d:7f: ec:f5:d6:da:c1:ab:74:21:e3:14:9d:f1:6f:4b:6a: 90:45:34:66:6f:b5:01:8c:8a:0c:7c:42:58:b6:87: af:51:3e:1d:05:cb:b0:43:da:21:4e:2c:ba:2c:a4: 8b:e5:34:92:e8:2b:54:d0:b9:21:9c:67:1d:44:cb: 46:19:db:d3:12:1e:19:99:f3:b7:03:cd:ef:85:2b: 5c:ad:45:a7:52:3f:36:03:29:0c:4d:64:a3:94:eb: 50:21:d4:4e:28:3b:0c:ee:70:e1:25:04:b7:eb:a3: 17:3c:b0:c5:b9:1f:cd:f0:59:33:e7:10:2d:28:49: 4c:98:87:e4:16:f2:c4:2c:f5:fd:73:bb:2f:05:1c: 01:53:18:7e:0e:b4:c1:c7:d1:cd:1e:80:ae:91:07: e0:83:c5:c1:13:2d:c8:83:75:14:13:51:4a:b7:8b: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:CC:1F:B7:42:87:7B:AA:DC:C4:B9:08:8B:21:A8:C4:70:2A:F1 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:39:ae:59:5f:4d:b0:d9:30:a9:c2:80:6e:13:67:2f:3d:ff: dc:24:4c:c4:07:a1:6c:7f:83:17:48:14:96:df:cd:21:90:3a: 70:46:2f:71:9f:31:25:f9:74:88:83:c3:fb:13:ac:c0:77:15: 0d:b6:3c:a9:b7:4a:2d:9b:ab:4f:8b:91:ea:66:cb:dd:a9:bd: 25:f7:15:51:7b:f9:e7:50:58:5b:2b:d9:47:68:b7:4f:e9:8c: 3e:b9:6f:88:3c:a0:6a:9b:18:c5:db:e9:99:a2:0e:b0:32:0c: e3:ef:41:ce:6e:4b:2e:e2:0f:c6:bc:4e:6e:60:26:50:0a:27: 49:16:f6:9d:5d:94:11:99:9d:93:e9:ed:d4:8e:7f:46:39:9f: 89:74:8d:40:a2:63:a8:81:75:72:77:a9:e0:26:b3:24:f8:cd: a4:e7:10:d9:14:d2:16:c7:31:b4:44:1a:db:02:69:1b:f1:0d: d1:1a:fb:b5:5d:04:8c:d7:1d:04:49:67:bb:e4:b2:02:0d:e5: c1:0e:2a:5b:98:49:09:32:1e:d6:28:a2:b5:b6:07:b3:e6:a5: 0d:57:e0:14:32:12:fd:08:82:b6:69:f0:41:81:99:e3:57:d4: bc:a4:40:5c:7c:08:e9:7d:e1:09:21:a4:c2:ad:ab:88:5a:06: 54:c9:ec:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwOTIzMDMyNjIxWhcNMjYwOTMwMDMyNjIxWjAYMRYwFAYD VQQDEw02YWIzNDZkZC0wMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpOnL1SPd2IUojABVrWMCZXgKRf6qtXB/EPySdx76KwobDnnKcAl5gzTQQBr o8Neln4BUODuorub5hm4uNXfV5D/hjRXw8SLccthLcHLqtCnK5sIzrqTbX/s9dba wat0IeMUnfFvS2qQRTRmb7UBjIoMfEJYtoevUT4dBcuwQ9ohTiy6LKSL5TSS6CtU 0LkhnGcdRMtGGdvTEh4ZmfO3A83vhStcrUWnUj82AykMTWSjlOtQIdROKDsM7nDh JQS366MXPLDFuR/N8Fkz5xAtKElMmIfkFvLELPX9c7svBRwBUxh+DrTBx9HNHoCu kQfgg8XBEy3Ig3UUE1FKt4vl7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNUzB+3 Qod7qtzEuQiLIajEcCrxMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAozmuWV9NsNkwqcKAbhNnLz3/3CRMxAehbH+DF0gUlt/NIZA6cEYvcZ8xJfl0 iIPD+xOswHcVDbY8qbdKLZurT4uR6mbL3am9JfcVUXv551BYWyvZR2i3T+mMPrlv iDygapsYxdvpmaIOsDIM4+9Bzm5LLuIPxrxObmAmUAonSRb2nV2UEZmdk+nt1I5/ RjmfiXSNQKJjqIF1cnep4CazJPjNpOcQ2RTSFscxtEQa2wJpG/EN0Rr7tV0EjNcd BElnu+SyAg3lwQ4qW5hJCTIe1iiitbYHs+alDVfgFDIS/QiCtmnwQYGZ41fUvKRA XHwI6X3hCSGkwq2riFoGVMns2Q== -----END CERTIFICATE-----Generated at Thu Sep 24 04:34:52 2026 by rpki-client