$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json) Hash identifier: ObuIzxY3f12B9rNuCoyB/hnHjUNNbUjQOlxzLlNOZn8= Subject key identifier: 94:22:BC:39:D7:33:FF:54:98:20:20:43:0C:F5:62:EB:1C:00:70:A3 Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft Manifest number: D1 Signing time: Wed 23 Sep 2026 06:38:11 +0000 Manifest this update: Wed 23 Sep 2026 06:38:10 +0000 Manifest next update: Wed 30 Sep 2026 06:38:10 +0000 Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: NSrvoiOcMP6mxj2t3jzH3PUYFpkNv21vaWkYqLfLx40=) 2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: Mh6xm78auUKAwke23lojP8OjM0xqIQ6biFwnIBwuAI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Validity Not Before: Sep 23 06:38:10 2026 GMT Not After : Sep 30 06:38:10 2026 GMT Subject: CN=6ab373d3-4c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:18:7f:29:7b:88:f7:88:3c:fc:bc:58:0c: 3a:57:c9:14:5c:b1:67:87:bd:f5:0c:e1:4f:61:66: 3c:af:76:b4:57:d3:47:d3:2d:86:97:dd:e7:7e:e9: 00:ea:45:43:32:f6:b9:74:3e:20:77:b9:be:08:b5: eb:0c:09:c1:76:20:c7:91:4e:db:45:6f:18:5a:0b: 30:42:0a:f9:30:8d:16:dc:ec:6c:21:fd:80:d6:65: dc:80:ae:30:fb:78:02:9b:02:6c:ee:c9:e2:b7:96: 7d:ce:8f:a2:f6:ab:2c:c3:8c:64:84:81:08:13:a9: 71:d8:79:ee:1f:b3:a3:cc:57:ac:f0:da:79:9a:5a: f4:c7:7f:96:3c:d5:94:40:a3:ea:c8:9b:49:0b:15: a5:47:84:f7:05:94:35:48:29:66:87:3a:5e:62:cf: cc:cb:7e:53:10:71:4f:9f:64:62:8a:71:52:96:46: 32:19:9b:6e:ce:55:b1:67:99:02:5d:a5:50:0b:90: a1:12:b0:ff:76:af:58:a9:87:b2:41:0d:d8:8d:0f: e2:b8:d2:5c:14:96:61:bd:23:33:aa:a7:eb:76:e9: 2b:87:fe:31:fb:86:63:98:c7:9b:3c:93:0e:30:c6: c5:57:7b:0d:71:9d:c3:89:ea:fe:97:64:d9:f7:cf: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:BC:39:D7:33:FF:54:98:20:20:43:0C:F5:62:EB:1C:00:70:A3 X509v3 Authority Key Identifier: keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7e:c1:61:a9:c5:17:98:40:8b:49:79:60:a6:7f:47:d0:91: 9c:c4:f6:33:9e:76:57:bd:99:db:66:26:03:64:3a:37:b3:ca: 38:b5:4c:7a:f7:69:82:26:a9:29:0c:78:15:f7:12:cd:c7:63: 50:48:a5:bc:bf:77:8a:18:9c:18:f9:9b:d2:11:8a:ed:42:fe: be:ea:54:71:63:e3:c7:0f:4d:a9:72:20:b2:6b:79:af:1d:4b: 33:8f:9f:e1:41:a5:fb:04:5f:5e:63:59:b3:83:ca:07:ad:1e: 2b:6a:ef:bd:f1:1a:b0:c7:90:3f:b3:79:26:64:65:11:75:34: 4d:da:54:64:2e:56:eb:1e:dd:df:c3:44:a2:69:8d:a7:c9:7f: 8b:06:34:97:70:ee:a9:2a:d8:74:5f:d8:6b:59:33:88:d9:af: b9:98:e8:96:a1:12:18:e6:b7:9b:d2:5c:c2:fd:5d:95:ef:7d: 9e:67:e9:bd:e0:1c:22:3a:93:af:a7:ec:d1:fa:f7:26:8b:37: cf:cc:17:50:2a:07:af:e1:78:8c:9c:0c:1e:8c:a9:01:e5:01: e1:0d:98:f5:46:29:76:67:bb:0e:7a:9b:72:71:f1:6b:2e:29: ab:04:29:d6:d5:ce:69:e4:10:61:1a:d9:93:6a:a3:78:56:f7: 0e:a2:a9:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEQUMxMTAvBgNVBAUTKERERkNBOUQwMzQ5NDVBNTkyNDExNjEzN0Q2Mjg3N0Yw Q0U1MkJGMUIwHhcNMjYwOTIzMDYzODEwWhcNMjYwOTMwMDYzODEwWjAYMRYwFAYD VQQDEw02YWIzNzNkMy00YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntYYfyl7iPeIPPy8WAw6V8kUXLFnh731DOFPYWY8r3a0V9NH0y2Gl93nfukA 6kVDMva5dD4gd7m+CLXrDAnBdiDHkU7bRW8YWgswQgr5MI0W3OxsIf2A1mXcgK4w +3gCmwJs7snit5Z9zo+i9qssw4xkhIEIE6lx2HnuH7OjzFes8Np5mlr0x3+WPNWU QKPqyJtJCxWlR4T3BZQ1SClmhzpeYs/My35TEHFPn2RiinFSlkYyGZtuzlWxZ5kC XaVQC5ChErD/dq9YqYeyQQ3YjQ/iuNJcFJZhvSMzqqfrdukrh/4x+4ZjmMebPJMO MMbFV3sNcZ3Dier+l2TZ98/+fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQivDnX M/9UmCAgQwz1YuscAHCjMB8GA1UdIwQYMBaAFN38qdA0lFpZJBFhN9Yod/DOUr8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83OEQ1OTMxODhG MzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVdsa2tFV0UzMWloMzhNNVN2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RBQy83OEQ1OTMxODhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVds a2tFV0UzMWloMzhNNVN2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIH7BYanFF5hAi0l5YKZ/R9CRnMT2M552V72Z22YmA2Q6N7PKOLVMevdpgiap KQx4FfcSzcdjUEilvL93ihicGPmb0hGK7UL+vupUcWPjxw9NqXIgsmt5rx1LM4+f 4UGl+wRfXmNZs4PKB60eK2rvvfEasMeQP7N5JmRlEXU0TdpUZC5W6x7d38NEommN p8l/iwY0l3DuqSrYdF/Ya1kziNmvuZjolqESGOa3m9Jcwv1dle99nmfpveAcIjqT r6fs0fr3Jos3z8wXUCoHr+F4jJwMHoypAeUB4Q2Y9UYpdme7DnqbcnHxay4pqwQp 1tXOaeQQYRrZk2qjeFb3DqKp5w== -----END CERTIFICATE-----Generated at Thu Sep 24 10:25:30 2026 by rpki-client