$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: WPn2jUg7VHEsnDMuyPYLO44TtIg+wA29N4yLXcMBBvs= Subject key identifier: 29:2F:C4:EF:18:3D:67:51:48:90:C8:E2:68:42:EB:0C:AF:41:17:32 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 018A Signing time: Sun 27 Sep 2026 04:58:45 +0000 Manifest this update: Sun 27 Sep 2026 04:58:45 +0000 Manifest next update: Sun 04 Oct 2026 04:58:45 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: cidBG9osWrdL9wKSu3UIIN6L9uoErh0Sze59By1kdas=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: 1A3H69lIehBD2AfdLSl5FiHzZaNJ6PDNBZ1XdUVIfpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Sep 27 04:58:45 2026 GMT Not After : Oct 4 04:58:45 2026 GMT Subject: CN=6ab8a285-65ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:95:59:c6:bc:f9:25:df:71:4f:99:22:eb: ce:60:a8:d3:a6:7d:83:10:a9:be:3d:ec:a4:a4:5d: 29:ad:b4:d0:98:38:3c:8a:e4:f4:86:c1:b4:ea:df: 21:6d:b0:ab:0e:1f:b0:6f:da:cc:aa:53:ce:25:10: 24:11:a7:c2:b7:a3:f1:f0:b0:9a:77:89:6a:64:90: 2c:03:1c:5c:1a:0c:d7:76:95:9f:23:62:e5:29:cf: 3e:3b:b0:15:a1:b4:e0:68:a6:6a:7f:a3:00:b9:bb: f4:f6:77:61:88:b2:0a:c0:62:b3:11:ed:d0:87:02: a1:84:fa:60:25:5e:45:21:35:22:a0:6f:27:38:79: 8d:e5:3a:c6:45:c9:e6:b0:bc:e1:6e:35:18:ef:68: b1:1c:5e:1c:c9:a0:6d:56:c3:a5:3a:30:24:dd:65: 97:af:aa:f4:d3:1a:a0:fb:d8:ab:dc:c0:eb:d8:fc: 69:be:67:91:f3:16:d8:f1:de:7a:da:b3:2a:a5:9c: 22:ce:df:55:79:97:14:4f:e4:d4:0d:05:81:0c:fc: a6:1c:e7:ee:47:ee:d2:7d:63:db:8a:c7:23:35:1b: 74:b6:fd:05:3d:5e:48:be:d7:ff:17:b3:1b:e7:eb: 45:5c:6e:86:a1:f6:47:ff:52:24:97:08:8f:9d:23: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2F:C4:EF:18:3D:67:51:48:90:C8:E2:68:42:EB:0C:AF:41:17:32 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:35:91:5d:d5:bc:c9:e5:08:09:87:e9:9f:79:02:cc:77:44: a5:ce:72:bc:9d:02:21:ee:48:fa:f0:a4:64:0d:f0:81:52:ca: 1c:bb:32:cd:fd:6a:06:44:9c:d7:bf:20:4f:de:84:5c:cd:d9: 9a:6a:9e:56:4a:36:15:e1:4f:f8:0b:b5:17:82:c0:3c:88:9c: 41:d1:38:f5:4c:99:3f:2e:ee:06:a2:a9:e0:5e:48:c1:7b:51: 73:bd:b4:43:a1:d2:30:71:ff:9d:f3:92:d3:c2:03:5b:c5:33: aa:a0:43:45:cd:4d:27:28:a0:e2:f4:87:e0:47:8c:a7:ec:18: ca:71:fe:af:87:d0:73:6e:2c:f7:38:db:f8:c9:ac:4c:db:fc: 97:d9:8e:8e:a3:03:c7:ae:99:3e:59:ab:c8:3e:86:d9:45:37: 93:a7:35:33:de:25:7a:00:75:6a:4d:59:21:67:a7:b0:db:62: 0b:25:f1:db:fa:06:7e:93:2e:da:d2:c6:18:50:37:fe:39:e6: 2d:46:f3:de:b7:35:87:45:4f:4d:b8:69:cd:48:47:f8:8a:b8: a1:28:d1:dc:c4:3a:c1:fc:f4:51:fd:27:27:96:c4:32:4c:57: 18:37:e8:0f:9e:a9:1c:a5:8a:41:46:8c:de:55:1d:13:f9:13: a2:df:fd:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjYwOTI3MDQ1ODQ1WhcNMjYxMDA0MDQ1ODQ1WjAYMRYwFAYD VQQDEw02YWI4YTI4NS02NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEaVWca8+SXfcU+ZIuvOYKjTpn2DEKm+PeykpF0prbTQmDg8iuT0hsG06t8h bbCrDh+wb9rMqlPOJRAkEafCt6Px8LCad4lqZJAsAxxcGgzXdpWfI2LlKc8+O7AV obTgaKZqf6MAubv09ndhiLIKwGKzEe3QhwKhhPpgJV5FITUioG8nOHmN5TrGRcnm sLzhbjUY72ixHF4cyaBtVsOlOjAk3WWXr6r00xqg+9ir3MDr2PxpvmeR8xbY8d56 2rMqpZwizt9VeZcUT+TUDQWBDPymHOfuR+7SfWPbiscjNRt0tv0FPV5Ivtf/F7Mb 5+tFXG6GofZH/1IklwiPnSM/wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkvxO8Y PWdRSJDI4mhC6wyvQRcyMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdjWRXdW8yeUICYfpn3kCzHdEpc5yvJ0CIe5I+vCkZA3wgVLKHLsyzf1qBkSc 178gT96EXM3ZmmqeVko2FeFP+Au1F4LAPIicQdE49UyZPy7uBqKp4F5IwXtRc720 Q6HSMHH/nfOS08IDW8UzqqBDRc1NJyig4vSH4EeMp+wYynH+r4fQc24s9zjb+Mms TNv8l9mOjqMDx66ZPlmryD6G2UU3k6c1M94legB1ak1ZIWensNtiCyXx2/oGfpMu 2tLGGFA3/jnmLUbz3rc1h0VPTbhpzUhH+Iq4oSjR3MQ6wfz0Uf0nJ5bEMkxXGDfo D56pHKWKQUaM3lUdE/kTot/9Qw== -----END CERTIFICATE-----Generated at Mon Sep 28 10:51:29 2026 by rpki-client