$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: /AeBN9BDc60faW/SmpDs2i2kjn7A7mt1vK+3djE0vmc= Subject key identifier: 4A:80:30:46:BA:D7:1F:92:C4:26:A5:AF:9C:E3:26:52:7F:00:93:F7 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: A2 Signing time: Wed 23 Sep 2026 06:59:35 +0000 Manifest this update: Wed 23 Sep 2026 06:59:34 +0000 Manifest next update: Wed 30 Sep 2026 06:59:34 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: vnY4d5JcYbTFxujSmQXmjtftqqRsgVkTsVB2UHEkzE8=) 2: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=) 3: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Sep 23 06:59:34 2026 GMT Not After : Sep 30 06:59:34 2026 GMT Subject: CN=6ab378d6-ed59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:2e:ac:a3:ca:43:92:cb:6b:a2:e5:80:f2: 05:70:4d:26:a0:28:e8:b0:86:f4:48:ba:13:59:43: 85:d3:05:fe:43:8a:25:cb:5d:7a:13:f7:f3:59:2c: 31:e3:4d:2e:c8:36:56:41:8f:40:2e:a7:58:ca:46: 56:d0:c4:da:a6:c2:dd:7b:39:aa:d6:8f:ff:6c:20: 70:aa:87:7e:31:a0:bb:af:60:a6:93:c8:c7:b9:e0: b0:3f:81:bb:8d:e8:97:13:df:c6:0f:61:3b:78:78: 46:8d:0e:7d:6a:56:e9:a4:59:7f:f1:54:0f:70:c9: a4:97:6a:77:da:21:35:b1:26:16:ba:70:d1:19:a9: 66:2a:e8:25:52:d3:4a:a0:f9:b9:e7:4a:64:87:a6: a8:a7:8f:84:a1:fb:eb:2f:78:f9:79:36:9d:b8:e8: 2a:4f:cb:bb:62:e1:c4:47:0d:8e:d7:77:09:0e:29: e5:bf:65:1a:1f:64:a9:7e:41:30:13:ea:9f:a9:c6: 1f:41:85:40:3e:08:b6:ea:39:9b:fc:ea:4f:a8:a1: 38:01:30:70:28:ef:92:40:f2:35:80:74:63:47:06: 4e:5f:06:cf:17:68:b1:d3:c5:de:a1:47:e1:f9:81: c3:de:ee:af:f5:83:c0:6b:93:61:a3:88:dc:6b:03: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:30:46:BA:D7:1F:92:C4:26:A5:AF:9C:E3:26:52:7F:00:93:F7 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:99:b2:01:45:a4:70:f5:56:65:8b:78:19:0c:5a:4d:ca:3a: 00:fd:58:cc:5d:d3:c4:56:a5:cd:d5:fa:cb:97:fd:5d:f7:4d: 1f:be:08:85:fd:f2:25:67:99:80:e1:d1:b9:9e:8e:2a:6c:4e: 00:9b:f2:1d:30:5f:64:98:88:5a:ca:ff:14:d9:c6:46:50:08: 88:6a:7f:22:10:eb:1d:f9:4b:8b:69:47:6c:f7:9c:68:71:9d: 49:9a:08:eb:f7:0d:43:db:e9:aa:59:bd:5f:89:1a:13:ea:13: dc:11:eb:3c:06:ff:02:fc:70:e0:c1:b1:3c:43:42:28:61:80: ac:6e:89:1c:80:4b:5d:29:15:a1:c1:de:36:f7:6d:82:4b:24: 29:c5:ec:9b:be:fb:b6:3a:6e:57:76:7d:08:d4:75:f1:31:41: a6:0a:8a:9e:d6:10:74:d5:94:d0:02:1e:c3:22:e8:63:f9:4c: 19:c2:4f:5e:d8:67:b3:a5:18:a0:74:f7:eb:09:a9:c9:60:5b: f9:38:51:de:dd:14:03:b8:83:1d:76:13:97:cf:81:8e:6f:78: 1b:65:6d:e7:fa:81:3f:8e:ae:c9:b5:d8:c4:2e:8e:ff:1d:da: fb:7a:1a:1a:28:cc:9c:b6:cb:d6:e0:02:da:bc:f0:f5:ff:d3: 89:4a:05:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZCQUYxMTAvBgNVBAUTKEIwNERDN0FCNDgyMzMzODkwQzI4QTc2NTc1RDhBREU2 NDI5QzNGQ0IwHhcNMjYwOTIzMDY1OTM0WhcNMjYwOTMwMDY1OTM0WjAYMRYwFAYD VQQDEw02YWIzNzhkNi1lZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqggurKPKQ5LLa6LlgPIFcE0moCjosIb0SLoTWUOF0wX+Q4oly116E/fzWSwx 400uyDZWQY9ALqdYykZW0MTapsLdezmq1o//bCBwqod+MaC7r2Cmk8jHueCwP4G7 jeiXE9/GD2E7eHhGjQ59albppFl/8VQPcMmkl2p32iE1sSYWunDRGalmKuglUtNK oPm550pkh6aop4+EofvrL3j5eTaduOgqT8u7YuHERw2O13cJDinlv2UaH2SpfkEw E+qfqcYfQYVAPgi26jmb/OpPqKE4ATBwKO+SQPI1gHRjRwZOXwbPF2ix08XeoUfh +YHD3u6v9YPAa5Nho4jcawO/1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqAMEa6 1x+SxCalr5zjJlJ/AJP3MB8GA1UdIwQYMBaAFLBNx6tIIzOJDCinZXXYreZCnD/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkJBRi82ODJCMzlBNkMz N0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00a01LS2RsZGRpdDVrS2NQ OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00 a01LS2RsZGRpdDVrS2NQOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMpmyAUWkcPVWZYt4GQxaTco6AP1YzF3TxFalzdX6y5f9XfdNH74Ihf3yJWeZ gOHRuZ6OKmxOAJvyHTBfZJiIWsr/FNnGRlAIiGp/IhDrHflLi2lHbPecaHGdSZoI 6/cNQ9vpqlm9X4kaE+oT3BHrPAb/Avxw4MGxPENCKGGArG6JHIBLXSkVocHeNvdt gkskKcXsm777tjpuV3Z9CNR18TFBpgqKntYQdNWU0AIewyLoY/lMGcJPXthns6UY oHT36wmpyWBb+ThR3t0UA7iDHXYTl8+Bjm94G2Vt5/qBP46uybXYxC6O/x3a+3oa GijMnLbL1uAC2rzw9f/TiUoFXw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:07:56 2026 by rpki-client