$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: rimHQKIGcNeAKwxqY8K7rprjZemAbBFzBJMlzB66exY= Subject key identifier: 09:5A:49:E3:5B:2E:99:70:48:1E:8D:14:99:F8:AD:15:F8:8B:8F:A8 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2DC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2DA6 Signing time: Mon 12 Oct 2026 15:31:26 +0000 Manifest this update: Mon 12 Oct 2026 15:31:26 +0000 Manifest next update: Mon 19 Oct 2026 15:31:26 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: xdaCG6gOe+ijMsOE1cOVYV35tJf6KebLnJgj8o2J5wM=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: ihG6N7QFwm0XDvC2GLafH4eo/h3mkm9Smxv2CwczyKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11717 (0x2dc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Oct 12 15:31:26 2026 GMT Not After : Oct 19 15:31:26 2026 GMT Subject: CN=6accfd4e-596b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:b4:79:12:93:8c:3c:fd:10:24:23:2f:66: 78:5c:57:3b:ec:7b:ab:af:c9:09:d3:12:0f:d8:4e: f2:3e:e5:18:55:eb:ab:6f:ea:89:d5:7a:c9:fa:6d: 0a:2c:bb:7f:7a:92:55:54:0e:77:85:ac:07:0e:5e: f8:5e:f7:c2:de:e9:7a:7e:cd:66:e2:4e:a2:d4:ea: 59:b4:76:41:0c:e9:1a:0f:24:74:f8:6c:77:9c:5c: cd:b5:d2:8b:93:fc:e4:11:35:e6:68:a8:86:82:cb: 94:ee:2d:f4:5c:25:76:19:9b:24:ce:be:9b:bd:32: 04:53:2f:90:8e:df:63:02:6b:06:94:89:82:7c:e9: a8:ae:88:e8:a9:b3:43:ca:4d:84:5d:86:cc:38:aa: 8e:22:06:be:92:57:21:cd:28:f9:73:9f:0d:9a:86: c8:7f:de:ed:09:f9:a0:9d:fb:51:a5:e0:2d:39:b8: 8b:06:95:fe:1f:80:e2:86:0a:3b:29:7d:6d:ee:c9: ab:b2:7e:c9:14:83:c7:5b:b4:d9:4e:6e:86:99:36: a9:39:69:fa:83:34:be:32:d0:c9:57:c0:52:94:e9: 60:c8:ac:d0:34:ad:18:e4:bf:59:22:96:76:13:eb: 42:8d:60:7c:09:41:94:b0:ce:1e:82:4b:12:33:33: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5A:49:E3:5B:2E:99:70:48:1E:8D:14:99:F8:AD:15:F8:8B:8F:A8 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d7:d2:be:86:2e:3e:82:eb:a6:e5:8f:8c:fa:be:ed:a1:c0: fd:0d:f7:2e:f7:17:d8:dd:b8:5a:86:b8:d3:aa:6a:cf:aa:ce: e3:00:33:28:cd:3f:db:43:f6:f6:ec:b0:69:fe:a3:1c:8c:a2: 71:8f:b3:34:19:d0:9f:2e:b3:d1:f7:e4:36:8d:bd:1b:81:bc: 22:7d:5c:bc:38:e2:d7:e7:e4:4c:c6:80:4a:1c:c4:6c:74:98: 67:60:e4:90:4d:70:d9:cf:bb:7f:0a:6b:5a:39:92:ce:ec:b7: e2:9b:8e:be:54:26:0f:06:96:5a:13:f7:25:b4:3d:21:43:7d: 70:dc:75:b0:a3:3a:3f:ec:2b:4e:02:e6:74:7d:13:64:ed:72: 94:87:d4:2c:40:a9:ef:c5:db:f8:df:9f:75:9c:ed:b3:7c:15: dd:a1:54:62:32:e0:83:2f:35:eb:c1:c5:a0:2a:34:63:57:c4: a7:99:bd:c3:bf:01:63:e7:ce:68:af:b0:a3:0d:2e:44:ce:0a: ca:59:e1:f3:51:d5:f9:0c:48:1f:4d:32:a9:43:fa:70:28:10: cf:5a:b5:a0:c1:a7:4c:3f:ac:c7:ed:ef:10:9d:9d:08:1c:77: 41:15:89:18:c9:7b:10:ab:90:db:a3:c3:c7:7d:88:49:7d:47: 1d:93:33:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYxMDEyMTUzMTI2WhcNMjYxMDE5MTUzMTI2WjAYMRYwFAYD VQQDEw02YWNjZmQ0ZS01OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYC0eRKTjDz9ECQjL2Z4XFc77Hurr8kJ0xIP2E7yPuUYVeurb+qJ1XrJ+m0K LLt/epJVVA53hawHDl74XvfC3ul6fs1m4k6i1OpZtHZBDOkaDyR0+Gx3nFzNtdKL k/zkETXmaKiGgsuU7i30XCV2GZskzr6bvTIEUy+Qjt9jAmsGlImCfOmorojoqbND yk2EXYbMOKqOIga+klchzSj5c58NmobIf97tCfmgnftRpeAtObiLBpX+H4Dihgo7 KX1t7smrsn7JFIPHW7TZTm6GmTapOWn6gzS+MtDJV8BSlOlgyKzQNK0Y5L9ZIpZ2 E+tCjWB8CUGUsM4egksSMzN2vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlaSeNb LplwSB6NFJn4rRX4i4+oMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALdfSvoYuPoLrpuWPjPq+7aHA/Q33LvcX2N24Woa406pqz6rO4wAzKM0/20P2 9uywaf6jHIyicY+zNBnQny6z0ffkNo29G4G8In1cvDji1+fkTMaAShzEbHSYZ2Dk kE1w2c+7fwprWjmSzuy34puOvlQmDwaWWhP3JbQ9IUN9cNx1sKM6P+wrTgLmdH0T ZO1ylIfULECp78Xb+N+fdZzts3wV3aFUYjLggy8168HFoCo0Y1fEp5m9w78BY+fO aK+wow0uRM4Kylnh81HV+QxIH00yqUP6cCgQz1q1oMGnTD+sx+3vEJ2dCBx3QRWJ GMl7EKuQ26PDx32ISX1HHZMzGg== -----END CERTIFICATE-----Generated at Tue Oct 13 08:12:18 2026 by rpki-client