$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft File: 3hf-sZrsTfV-srV4rPueEDE5byA.mft (raw, json) Hash identifier: 0YjLbynGmb+vElMsH/sRIPRCIFIvWnSoNuCtd0EiiZ8= Subject key identifier: DA:1D:4A:DE:E9:83:68:40:8D:8F:68:D5:4C:26:9F:0A:EC:89:BB:7B Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft Manifest number: 17 Signing time: Wed 23 Sep 2026 08:49:03 +0000 Manifest this update: Wed 23 Sep 2026 08:49:02 +0000 Manifest next update: Wed 30 Sep 2026 08:49:02 +0000 Files and hashes: 1: 3hf-sZrsTfV-srV4rPueEDE5byA.crl (hash: Do6dM46ycYKPkLjvpFuevNTFPk3Y6LTxr/8nyozqSiI=) 2: 3E5CDF8CAC4A11F199EB65634211F970.roa (hash: euLOWcKgKWGURDYxgn0BH7WUOGhmBm81XkTnvH0nRaw=) 3: 3DC9CCC4AC4A11F199EB65634211F970.roa (hash: 9ASxwF0gTHSlKzDFapefVUpz6ogFigYAOzKtxdpXqvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Validity Not Before: Sep 23 08:49:02 2026 GMT Not After : Sep 30 08:49:02 2026 GMT Subject: CN=6ab3927f-c809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:9e:84:cc:30:bb:fd:c3:d4:2e:5d:3e:41: f7:ae:ea:b0:7e:5b:54:b8:b1:cc:20:aa:a5:5d:1c: 71:f2:0d:82:60:55:c9:d6:f5:96:16:5f:dc:55:d4: 64:b1:a9:31:12:2c:e8:ff:9f:f2:df:c8:39:7d:84: b6:82:db:a9:71:bf:2d:39:81:ac:ac:02:71:85:b3: 92:d6:2f:0e:78:c1:0e:99:d3:4a:18:64:45:8f:aa: 74:e1:79:fa:38:56:4d:16:19:43:9a:09:b1:d1:50: 61:ba:8f:8f:96:87:fb:19:0d:4a:85:47:a4:dc:fb: 22:ac:2c:f5:d4:96:08:70:86:c9:16:03:ed:d2:59: 8b:73:37:c9:32:0b:60:da:dc:ee:7f:41:6e:bc:8a: 29:09:c5:f1:e9:78:f5:f3:86:7f:c3:7d:6e:43:7e: a6:d9:bf:fe:fb:92:67:3a:7e:10:60:5c:9e:5a:fd: 37:5d:a9:0f:76:2e:2b:e2:d4:98:cc:f3:58:ed:79: 2d:03:78:4d:ae:7d:48:d2:ca:50:7e:6a:19:5f:2b: 9b:02:00:f2:16:15:e1:94:3d:ff:37:a6:e4:a2:00: 3f:80:f1:be:b7:ed:03:92:5b:1c:95:79:8d:fc:a3: 63:dd:c2:02:bf:b9:69:12:fe:99:6c:2c:3c:a5:bc: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1D:4A:DE:E9:83:68:40:8D:8F:68:D5:4C:26:9F:0A:EC:89:BB:7B X509v3 Authority Key Identifier: keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fa:50:5b:93:1f:83:23:3c:1f:33:ec:08:21:ce:da:03:c3: b4:9c:06:58:5b:47:17:33:47:40:4c:e2:21:b1:f1:d7:0f:3b: 60:6f:73:f8:b1:d8:91:bb:5b:7d:65:77:d6:90:9c:bc:5a:8f: dd:36:77:cd:f8:d2:b8:e3:81:38:fd:0a:94:52:a7:0d:fd:e6: bb:b2:76:77:47:62:4e:69:d6:e1:d5:59:13:c0:78:75:1a:57: 37:17:bc:c4:03:48:25:f3:54:4b:0e:e1:1e:b9:52:a0:c4:ac: 5b:bb:38:df:75:a3:f7:f0:95:b5:e5:7f:d7:bd:9f:38:10:53: 09:59:9d:7f:58:c6:14:4f:20:cf:ac:be:6b:b9:d5:aa:42:d3: 0a:41:1e:09:5b:4a:75:9d:05:f3:2b:7d:1e:ee:7f:27:93:c6: 6c:f5:78:56:ec:4f:4c:5a:0c:d3:d3:aa:10:cd:fe:52:03:5e: f9:30:a6:ab:9e:fe:fa:8c:ed:e1:2c:52:cb:c7:24:1a:26:9f: 7b:44:f1:d8:97:7b:47:5e:b3:53:f6:8a:2a:90:28:29:6b:f1: 93:d1:c0:26:61:a1:dc:a6:ab:7c:54:72:48:55:33:c4:fc:74: 25:de:98:33:73:2e:ef:ab:d4:ff:aa:27:f1:ee:c4:3f:70:b2: 91:0d:11:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoREUxN0ZFQjE5QUVDNERGNTdFQjJCNTc4QUNGQjlFMTAz MTM5NkYyMDAeFw0yNjA5MjMwODQ5MDJaFw0yNjA5MzAwODQ5MDJaMBgxFjAUBgNV BAMTDTZhYjM5MjdmLWM4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtuZ6EzDC7/cPULl0+Qfeu6rB+W1S4scwgqqVdHHHyDYJgVcnW9ZYWX9xV1GSx qTESLOj/n/LfyDl9hLaC26lxvy05gaysAnGFs5LWLw54wQ6Z00oYZEWPqnThefo4 Vk0WGUOaCbHRUGG6j4+Wh/sZDUqFR6Tc+yKsLPXUlghwhskWA+3SWYtzN8kyC2Da 3O5/QW68iikJxfHpePXzhn/DfW5DfqbZv/77kmc6fhBgXJ5a/TddqQ92Livi1JjM 81jteS0DeE2ufUjSylB+ahlfK5sCAPIWFeGUPf83puSiAD+A8b637QOSWxyVeY38 o2PdwgK/uWkS/plsLDylvDUTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2h1K3umD aECNj2jVTCafCuyJu3swHwYDVR0jBBgwFoAU3hf+sZrsTfV+srV4rPueEDE5byAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzNFNkUyRURDOUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZWLXNyVjRyUHVlRURFNWJ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2hmLXNacnNUZlYtc3JWNHJQdWVFREU1YnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw REM4LzNFNkUyRURDOUMwNDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZW LXNyVjRyUHVlRURFNWJ5QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBu+lBbkx+DIzwfM+wIIc7aA8O0nAZYW0cXM0dATOIhsfHXDztgb3P4sdiRu1t9 ZXfWkJy8Wo/dNnfN+NK444E4/QqUUqcN/ea7snZ3R2JOadbh1VkTwHh1Glc3F7zE A0gl81RLDuEeuVKgxKxbuzjfdaP38JW15X/XvZ84EFMJWZ1/WMYUTyDPrL5rudWq QtMKQR4JW0p1nQXzK30e7n8nk8Zs9XhW7E9MWgzT06oQzf5SA175MKarnv76jO3h LFLLxyQaJp97RPHYl3tHXrNT9ooqkCgpa/GT0cAmYaHcpqt8VHJIVTPE/HQl3pgz cy7vq9T/qifx7sQ/cLKRDRFW -----END CERTIFICATE-----Generated at Thu Sep 24 02:24:24 2026 by rpki-client