$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft File: 3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json) Hash identifier: NJv8GkoZJyMqFGxqE9cYlQTjxTiBkIHqJlTL7CdpxNc= Subject key identifier: 47:17:81:DC:4E:BA:9B:9F:B3:3C:C9:C4:31:F0:6B:2F:18:7F:11:30 Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F Certificate issuer: /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft Manifest number: 011A Signing time: Wed 23 Sep 2026 05:53:59 +0000 Manifest this update: Wed 23 Sep 2026 05:53:59 +0000 Manifest next update: Wed 30 Sep 2026 05:53:59 +0000 Files and hashes: 1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: qfSA9WBogJGXdev9dmrlEdbFNqv9abZ2xV8R0He7bXs=) 2: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=) 3: B28E01329B0711F199CD6D115E11F970.roa (hash: u/s9p3ptKydcBVwdA+lqK9E1OMc1aWdkwOrHDlz9hYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Validity Not Before: Sep 23 05:53:59 2026 GMT Not After : Sep 30 05:53:59 2026 GMT Subject: CN=6ab36977-bd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:40:d5:70:14:2b:f0:67:6e:cb:56:32:fa: 1a:52:00:f6:5a:ed:76:44:1c:b2:d5:7f:f7:6f:d9: 30:e7:2a:76:ff:1f:1c:e5:14:69:f1:50:ca:e5:06: f0:ac:c7:81:2f:2e:36:b9:b5:74:48:c1:06:dc:f8: 93:99:51:96:39:0b:d7:d8:b1:18:1c:88:1f:c3:d8: 00:10:f9:db:29:02:22:2f:5a:fe:96:83:6f:1a:f8: 10:c2:e6:73:7c:c6:2b:ec:0f:48:63:f4:aa:74:98: a8:ab:bd:4f:e9:69:19:e4:44:c1:58:16:07:ab:f2: 01:b3:ca:0f:f2:43:29:5e:f8:08:95:9d:c1:65:7a: 55:19:95:a2:38:fb:64:04:a7:cc:95:66:40:86:28: bb:e0:e0:a9:39:1e:72:3b:60:43:7d:82:d0:b8:5b: 9e:a1:58:48:6c:42:43:07:1a:a4:84:fa:d7:97:f6: 69:ad:3e:a3:68:6a:df:ba:a8:ee:70:a2:af:ad:24: 4d:80:d5:c5:d6:00:b3:4a:32:d1:22:08:24:ee:bf: 42:50:ee:17:ac:53:f5:c2:fa:7c:5d:36:d2:23:1e: 87:84:ed:9b:53:aa:e3:66:fc:7a:04:10:c4:a6:bc: 9c:cf:94:2b:f3:b0:39:c4:03:40:db:31:ae:9c:4a: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:17:81:DC:4E:BA:9B:9F:B3:3C:C9:C4:31:F0:6B:2F:18:7F:11:30 X509v3 Authority Key Identifier: keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7b:db:23:aa:00:c3:4f:d3:5e:b6:8b:1e:9a:f0:74:f9:77: 24:28:f7:90:1c:b4:35:1a:47:78:bf:35:a3:9b:84:73:16:8a: fe:04:36:ca:2f:77:fd:28:49:29:8f:66:3a:53:f3:f4:98:d0: 77:d3:51:4d:2c:87:24:66:18:b5:3c:af:09:ac:3c:8c:5f:f0: 8c:a6:47:8a:de:20:12:fd:17:24:d3:1c:91:2f:a7:82:df:63: f0:05:ae:bd:4c:99:75:e6:b7:67:fd:21:da:c2:44:dc:ed:76: e4:ac:2e:f3:08:f3:75:f8:81:5f:0d:60:f7:84:8a:95:32:86: dc:8f:b6:c9:bb:24:5f:88:29:52:e3:37:81:da:f5:d1:46:52: 1d:1b:7f:1c:87:16:d9:4e:fe:c2:2b:d6:0c:e9:e5:4e:62:ac: 07:b0:ee:97:66:15:7a:5e:4d:43:da:6f:df:8e:bf:93:a9:b5: 06:ba:a6:df:f1:ea:e5:f2:0f:70:88:f4:ef:e1:61:57:e0:71: a6:d1:0b:f9:fa:c5:d1:46:58:d5:b2:ee:59:d8:82:e1:25:c2: 20:cf:8f:0b:0b:39:a4:69:a0:5a:24:50:53:ca:91:5f:8f:8d: d9:7a:48:71:e9:8f:b1:cb:42:f1:25:dc:08:c0:36:47:c0:ae: 96:f6:9e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVFQ0YxMTAvBgNVBAUTKERGMzFDRjE4NTA5MEUxNTQ5NjVFRkZGQkM2NjRCREQ3 MjFEODA3NUYwHhcNMjYwOTIzMDU1MzU5WhcNMjYwOTMwMDU1MzU5WjAYMRYwFAYD VQQDEw02YWIzNjk3Ny1iZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNBA1XAUK/BnbstWMvoaUgD2Wu12RByy1X/3b9kw5yp2/x8c5RRp8VDK5Qbw rMeBLy42ubV0SMEG3PiTmVGWOQvX2LEYHIgfw9gAEPnbKQIiL1r+loNvGvgQwuZz fMYr7A9IY/SqdJioq71P6WkZ5ETBWBYHq/IBs8oP8kMpXvgIlZ3BZXpVGZWiOPtk BKfMlWZAhii74OCpOR5yO2BDfYLQuFueoVhIbEJDBxqkhPrXl/ZprT6jaGrfuqju cKKvrSRNgNXF1gCzSjLRIggk7r9CUO4XrFP1wvp8XTbSIx6HhO2bU6rjZvx6BBDE prycz5Qr87A5xANA2zGunEqOdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcXgdxO upufszzJxDHway8YfxEwMB8GA1UdIwQYMBaAFN8xzxhQkOFUll7/+8Zkvdch2Adf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUVDRi9FRjZCOTA1QzI1 RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRWU1dYdl83eG1TOTF5SFlC MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN6SFBHRkNRNFZTV1h2Xzd4bVM5MXlIWUIxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUVDRi9FRjZCOTA1QzI1RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRW U1dYdl83eG1TOTF5SFlCMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD3vbI6oAw0/TXraLHprwdPl3JCj3kBy0NRpHeL81o5uEcxaK/gQ2yi93/ShJ KY9mOlPz9JjQd9NRTSyHJGYYtTyvCaw8jF/wjKZHit4gEv0XJNMckS+ngt9j8AWu vUyZdea3Z/0h2sJE3O125Kwu8wjzdfiBXw1g94SKlTKG3I+2ybskX4gpUuM3gdr1 0UZSHRt/HIcW2U7+wivWDOnlTmKsB7Dul2YVel5NQ9pv346/k6m1Brqm3/Hq5fIP cIj07+FhV+BxptEL+frF0UZY1bLuWdiC4SXCIM+PCws5pGmgWiRQU8qRX4+N2XpI cemPsctC8SXcCMA2R8CulvaeyA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:26:49 2026 by rpki-client