$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: NfyZ3WuH5AB6slclpPl3k04Vh4SpqwK/CQm0GJRO9U4= Subject key identifier: 3D:3F:22:FE:FD:82:46:D5:91:EE:23:2C:A1:7A:B6:38:13:A3:85:4E Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0D0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0CEF Signing time: Sat 10 Oct 2026 18:30:17 +0000 Manifest this update: Sat 10 Oct 2026 18:30:16 +0000 Manifest next update: Sat 17 Oct 2026 18:30:16 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: avi4ZTVrvRfHfcyIOabjmwDLrD2zkQmJlzA+A23Tkcc=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: 2ZECssZFKej2Bnmujg65SvPR+m2K68FZcUfUc+ikvVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3341 (0xd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Oct 10 18:30:16 2026 GMT Not After : Oct 17 18:30:16 2026 GMT Subject: CN=6aca8439-9473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:02:4e:a0:b1:19:aa:74:49:d4:df:65:16: 6e:eb:63:b6:0d:b2:e3:bb:68:e7:5a:cc:a5:1b:f1: 31:1c:d2:d2:ca:26:29:41:de:56:ca:4d:c9:4f:ce: fa:80:0d:66:5b:9c:d2:68:b7:fc:ee:30:9b:60:7d: 3f:d9:50:40:27:e2:52:e4:da:68:be:41:62:4b:08: 24:8e:c0:65:8c:f5:81:7d:56:08:b0:5d:27:f2:7a: 9e:98:27:3c:97:2c:bc:7d:e0:d2:97:e4:98:de:f8: d1:5a:e9:25:42:35:16:e0:02:1d:33:a8:73:d1:67: 67:f2:4c:2f:04:80:9f:6f:91:06:f4:63:ac:f0:43: 86:96:2a:22:cb:12:18:87:10:dd:0a:45:bb:33:13: d2:6d:af:6a:a6:8e:0e:d8:e3:6a:41:fc:95:fd:4c: 92:75:94:b2:e3:9c:1e:9c:1d:3f:3d:d1:3f:03:a9: 3b:8c:d5:64:c0:27:13:b7:e4:24:a2:85:68:a4:08: aa:98:45:89:5d:0d:f8:44:06:16:b9:2e:32:64:63: 71:82:0e:23:94:0b:b8:14:c2:fa:66:6b:67:63:95: d1:3b:9d:b0:22:aa:6e:08:fd:3b:28:10:32:2a:59: 2e:41:50:aa:ea:39:8c:1a:cf:73:15:f9:55:d8:7a: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3F:22:FE:FD:82:46:D5:91:EE:23:2C:A1:7A:B6:38:13:A3:85:4E X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:e9:aa:ca:15:43:70:2f:d1:5c:a3:5e:1b:d8:13:48:d7: cf:59:e8:7f:d3:dc:ae:e1:35:48:0a:a3:e1:0d:e0:81:bc:0c: e4:ba:1d:8c:4a:ad:3d:73:ee:46:c3:0a:7e:59:f0:2f:20:bb: c6:11:d9:41:88:c3:3b:fd:cb:b4:03:fe:da:ad:b1:c9:10:c2: 6d:dd:3f:df:21:28:ed:d9:e1:da:d6:fb:2d:49:08:06:00:f3: 67:b8:6f:92:33:43:a2:9e:4f:18:8c:33:a8:58:c2:9f:3e:c1: 9c:c5:2c:a5:1d:24:89:35:9c:8e:88:fe:29:f2:04:1f:dc:36: 7a:04:0e:f1:ab:cc:e5:0d:45:48:6f:a4:32:f6:4a:15:7d:ec: 86:d3:3e:79:53:9b:99:cc:f3:83:80:d2:93:31:c5:a3:e5:b7: 1d:50:26:56:3d:a1:b9:83:af:25:02:2c:9f:fc:1f:8f:5a:7d: da:1b:52:c1:8c:fb:19:b0:dd:ec:24:8b:35:e0:41:be:10:20: d8:e6:28:a0:92:40:45:10:93:a9:f7:00:61:22:d5:ae:07:1a: e9:f3:d6:d5:40:c5:68:9b:66:67:3e:de:2a:cf:c5:7d:ca:79: 85:09:51:0a:df:86:9a:20:ac:a9:74:ba:eb:16:25:69:6e:2d: 2d:1e:44:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYxMDEwMTgzMDE2WhcNMjYxMDE3MTgzMDE2WjAYMRYwFAYD VQQDEw02YWNhODQzOS05NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1UCTqCxGap0SdTfZRZu62O2DbLju2jnWsylG/ExHNLSyiYpQd5Wyk3JT876 gA1mW5zSaLf87jCbYH0/2VBAJ+JS5NpovkFiSwgkjsBljPWBfVYIsF0n8nqemCc8 lyy8feDSl+SY3vjRWuklQjUW4AIdM6hz0Wdn8kwvBICfb5EG9GOs8EOGlioiyxIY hxDdCkW7MxPSba9qpo4O2ONqQfyV/UySdZSy45wenB0/PdE/A6k7jNVkwCcTt+Qk ooVopAiqmEWJXQ34RAYWuS4yZGNxgg4jlAu4FML6ZmtnY5XRO52wIqpuCP07KBAy KlkuQVCq6jmMGs9zFflV2HpHzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0/Iv79 gkbVke4jLKF6tjgTo4VOMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHmXpqsoVQ3Av0VyjXhvYE0jXz1nof9PcruE1SAqj4Q3ggbwM5LodjEqtPXPu RsMKflnwLyC7xhHZQYjDO/3LtAP+2q2xyRDCbd0/3yEo7dnh2tb7LUkIBgDzZ7hv kjNDop5PGIwzqFjCnz7BnMUspR0kiTWcjoj+KfIEH9w2egQO8avM5Q1FSG+kMvZK FX3shtM+eVObmczzg4DSkzHFo+W3HVAmVj2huYOvJQIsn/wfj1p92htSwYz7GbDd 7CSLNeBBvhAg2OYooJJARRCTqfcAYSLVrgca6fPW1UDFaJtmZz7eKs/Ffcp5hQlR Ct+GmiCsqXS66xYlaW4tLR5EtQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:58:10 2026 by rpki-client