$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: qdL2XtejEvanR0ge7bMPmqyaEfQxsJTdI3MROZxqC2g= Subject key identifier: A2:7D:AC:86:F3:AD:E3:7A:36:27:2D:80:8E:25:80:8E:2F:F2:6E:0F Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: DF Signing time: Tue 29 Sep 2026 07:08:50 +0000 Manifest this update: Tue 29 Sep 2026 07:08:50 +0000 Manifest next update: Tue 06 Oct 2026 07:08:50 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: VYyFKtiW7+dt8n64yKDk4DKteOUs+n8qwTgJzs0T0/U=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Sep 29 07:08:50 2026 GMT Not After : Oct 6 07:08:50 2026 GMT Subject: CN=6abb6402-df5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:c2:d1:a5:08:e5:ab:94:e7:e5:ac:ce:29: 2c:f7:be:de:13:b7:ec:9e:fe:19:33:d4:ed:77:d2: 9f:3a:cd:c2:8a:43:ea:f3:05:39:36:7d:d8:40:30: aa:fc:3c:58:7e:66:c8:af:3f:f8:7b:1b:be:f3:73: d8:de:1c:78:cd:bc:23:1e:47:4d:68:56:f3:7b:2d: a8:c7:1c:1b:26:74:fd:9f:7c:a8:ed:53:62:aa:ec: e7:aa:08:8e:a5:67:28:7c:81:4e:c1:b4:c0:c1:93: 17:b0:56:5d:94:58:fa:70:33:79:d4:8e:ad:31:7b: 74:c4:cf:5f:e0:b7:e5:84:6c:91:02:dd:6b:c1:73: 79:5d:07:69:de:53:38:62:4c:f9:db:04:04:a7:86: a9:6d:b1:a0:4d:15:b9:51:6f:66:ca:ce:35:94:eb: c5:75:ca:27:41:e7:1b:10:14:ba:73:a7:7f:f2:75: 71:db:d6:c2:99:d2:51:a3:8e:46:ff:4e:32:57:65: f3:82:59:41:2e:d6:82:0e:8b:c7:5e:f3:d0:bc:36: de:e0:40:e7:ae:24:fd:5e:19:1e:21:a1:ca:22:3b: a0:aa:85:f9:d6:c9:3f:0c:0d:ba:89:fc:4b:a7:d4: 89:ff:b2:b2:ac:7b:d6:85:8e:8e:48:ab:bd:02:d7: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:AC:86:F3:AD:E3:7A:36:27:2D:80:8E:25:80:8E:2F:F2:6E:0F X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a2:b5:b8:da:de:19:d1:3c:85:cd:90:13:8f:98:d3:6f:67: d3:4b:e6:75:65:10:97:bf:ba:c2:0a:9f:8e:09:86:b1:24:e3: f7:54:eb:79:cc:a0:6c:70:e8:b7:a9:74:8b:e3:69:4d:8f:95: 22:21:a4:2f:80:7e:7a:42:09:7d:b4:69:be:50:10:bf:90:d9: ed:b8:bf:81:c7:07:0f:e7:0c:0f:03:f6:a6:f1:b1:dd:7f:d3: 56:09:cc:f5:3a:63:c8:a3:3b:fe:4e:88:4b:9d:3d:ba:b5:87: d8:1f:df:bb:c8:48:ad:e3:10:79:ca:19:16:ca:25:47:f2:09: f3:e0:64:ee:63:b9:84:32:c9:72:80:48:8b:fc:96:72:a5:31: ce:4e:2e:e7:61:6a:74:9f:8d:f9:e2:c4:d6:48:b0:7f:ce:c0: d0:c9:e5:7f:c4:28:ca:a9:71:15:c2:a8:78:7d:43:71:9e:2a: 26:65:88:55:4a:1a:a3:79:2c:ec:32:22:a6:17:4f:8d:46:b0: 9b:49:5e:bb:d6:03:82:f9:9a:62:42:d0:12:de:21:d6:25:e0: 70:e8:75:e0:8d:85:83:f6:23:d0:6f:53:e8:6a:b2:8e:11:21: 49:f5:0b:1a:bf:fe:e7:66:27:fe:18:cc:14:00:65:22:82:a3: 4f:65:7b:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYwOTI5MDcwODUwWhcNMjYxMDA2MDcwODUwWjAYMRYwFAYD VQQDEw02YWJiNjQwMi1kZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGnC0aUI5auU5+Wsziks977eE7fsnv4ZM9Ttd9KfOs3CikPq8wU5Nn3YQDCq /DxYfmbIrz/4exu+83PY3hx4zbwjHkdNaFbzey2oxxwbJnT9n3yo7VNiquznqgiO pWcofIFOwbTAwZMXsFZdlFj6cDN51I6tMXt0xM9f4LflhGyRAt1rwXN5XQdp3lM4 Ykz52wQEp4apbbGgTRW5UW9mys41lOvFdconQecbEBS6c6d/8nVx29bCmdJRo45G /04yV2XzgllBLtaCDovHXvPQvDbe4EDnriT9XhkeIaHKIjugqoX51sk/DA26ifxL p9SJ/7KyrHvWhY6OSKu9AtfucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJ9rIbz reN6NictgI4lgI4v8m4PMB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj6K1uNreGdE8hc2QE4+Y029n00vmdWUQl7+6wgqfjgmGsSTj91TrecygbHDo t6l0i+NpTY+VIiGkL4B+ekIJfbRpvlAQv5DZ7bi/gccHD+cMDwP2pvGx3X/TVgnM 9TpjyKM7/k6IS509urWH2B/fu8hIreMQecoZFsolR/IJ8+Bk7mO5hDLJcoBIi/yW cqUxzk4u52FqdJ+N+eLE1kiwf87A0Mnlf8QoyqlxFcKoeH1DcZ4qJmWIVUoao3ks 7DIiphdPjUawm0leu9YDgvmaYkLQEt4h1iXgcOh14I2Fg/Yj0G9T6GqyjhEhSfUL Gr/+52Yn/hjMFABlIoKjT2V7hw== -----END CERTIFICATE-----Generated at Wed Sep 30 03:50:42 2026 by rpki-client