$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: EVMZl1VYlkvf2s97jP7MotAxMbnDPJKggwscWnTy6oE= Subject key identifier: 33:F9:3A:FB:4F:0C:BD:58:64:6C:F4:91:E4:0F:D6:97:D3:2D:DC:57 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 0887 Signing time: Tue 22 Sep 2026 20:31:19 +0000 Manifest this update: Tue 22 Sep 2026 20:31:19 +0000 Manifest next update: Tue 29 Sep 2026 20:31:19 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: FRrnNabD64zkBN8PjagUHnlJGQxQrjSBqDPhaUDXgFo=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: +1MurbXyF5va03lXfL/j9G2HKWwfacoafaUYrKj0wIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Sep 22 20:31:19 2026 GMT Not After : Sep 29 20:31:19 2026 GMT Subject: CN=6ab2e597-d597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:6c:f3:de:1e:7b:df:05:81:81:1e:9f:c6: 53:2a:77:5b:a9:c7:28:c7:1b:86:23:07:6f:23:c7: cb:98:27:28:eb:1d:5f:ab:e6:76:a2:4f:8b:aa:92: 3e:39:2b:df:7a:48:d1:fa:bb:e6:88:41:84:7b:89: 6e:c5:6c:9b:87:2f:26:68:41:dd:a7:dc:5e:b0:38: 5b:21:0b:7a:69:2d:29:84:8a:a3:4c:14:af:21:41: ac:6c:e4:d9:b5:78:76:e5:10:15:0d:1d:0b:c0:28: 5d:71:ec:62:b7:08:56:96:dc:e6:1f:80:62:37:bb: 5c:34:83:b3:56:57:41:08:d7:a4:df:e7:fb:dc:65: 4f:c2:ef:90:3b:68:d9:da:ae:37:07:68:94:8c:09: 03:71:37:ad:69:69:bb:7d:d5:9b:a6:f2:d8:2a:c4: 93:e6:d4:90:cd:35:ac:00:d5:de:c3:72:de:60:d0: c3:bc:66:ec:8e:0b:e8:68:62:a5:71:0b:29:b0:f5: 0f:35:76:1e:54:8f:df:fb:e3:33:9d:79:61:5e:85: b8:01:dd:0e:c7:c7:a2:bf:5d:5b:a7:75:aa:d6:0d: 3a:f7:9d:0a:bc:26:8e:13:3b:bb:ad:24:09:2a:da: 65:e9:cd:cf:a9:8e:0b:85:be:83:d3:92:07:6d:ea: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:3A:FB:4F:0C:BD:58:64:6C:F4:91:E4:0F:D6:97:D3:2D:DC:57 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8a:cc:b2:1d:d6:d2:50:9a:16:11:b7:3d:aa:c6:ed:e5:f0: bb:6e:dd:eb:91:8c:3f:8c:ff:78:be:d9:c6:38:88:a0:3f:1c: cb:56:de:cf:39:69:d0:9b:56:3a:36:6e:a0:68:89:23:9c:0a: fe:10:cf:d1:d3:b9:31:4e:d4:3b:c3:64:2d:f2:57:44:f6:e3: ab:86:ea:05:ca:72:39:41:d4:40:7c:61:bc:0f:f2:af:15:4c: 61:00:39:4f:63:1a:3e:e0:73:16:e9:3d:5b:f1:6d:ac:49:c1: 66:80:4a:b5:b8:e6:5d:a4:73:3b:23:d0:6a:fa:09:f8:a2:da: 7f:44:93:90:0b:66:e0:fa:8b:a9:f3:40:24:0c:56:db:ae:8e: a3:e0:33:ba:3c:34:51:d6:23:99:62:6e:08:b7:8e:19:a7:9a: 9f:15:dd:74:8f:77:11:67:c0:7c:bf:fc:08:3f:6b:2f:50:94: a1:16:40:fe:b0:fe:75:a8:e0:cf:23:73:15:f4:7e:0d:44:9e: 4e:76:92:49:c1:d4:84:9b:55:41:dc:58:8d:4d:21:01:dc:5e: 96:ff:0c:0e:67:f9:5c:8f:81:4d:4d:49:9d:d6:a7:b6:84:84: 58:c0:13:8b:05:43:f5:9e:43:cc:38:c2:eb:f7:23:16:4a:fa: 65:6c:d2:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjYwOTIyMjAzMTE5WhcNMjYwOTI5MjAzMTE5WjAYMRYwFAYD VQQDEw02YWIyZTU5Ny1kNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu05s894ee98FgYEen8ZTKndbqccoxxuGIwdvI8fLmCco6x1fq+Z2ok+LqpI+ OSvfekjR+rvmiEGEe4luxWybhy8maEHdp9xesDhbIQt6aS0phIqjTBSvIUGsbOTZ tXh25RAVDR0LwChdcexitwhWltzmH4BiN7tcNIOzVldBCNek3+f73GVPwu+QO2jZ 2q43B2iUjAkDcTetaWm7fdWbpvLYKsST5tSQzTWsANXew3LeYNDDvGbsjgvoaGKl cQspsPUPNXYeVI/f++MznXlhXoW4Ad0Ox8eiv11bp3Wq1g06950KvCaOEzu7rSQJ Ktpl6c3PqY4Lhb6D05IHbeqrdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP5OvtP DL1YZGz0keQP1pfTLdxXMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYrMsh3W0lCaFhG3ParG7eXwu27d65GMP4z/eL7ZxjiIoD8cy1bezzlp0JtW OjZuoGiJI5wK/hDP0dO5MU7UO8NkLfJXRPbjq4bqBcpyOUHUQHxhvA/yrxVMYQA5 T2MaPuBzFuk9W/FtrEnBZoBKtbjmXaRzOyPQavoJ+KLaf0STkAtm4PqLqfNAJAxW 266Oo+Azujw0UdYjmWJuCLeOGaeanxXddI93EWfAfL/8CD9rL1CUoRZA/rD+dajg zyNzFfR+DUSeTnaSScHUhJtVQdxYjU0hAdxelv8MDmf5XI+BTU1JndantoSEWMAT iwVD9Z5DzDjC6/cjFkr6ZWzSog== -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:12 2026 by rpki-client