$ rpki-client -vvvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: m0WLlhKRjb8ADJGbM/dWXqDjwhpkx9Rrj2/yR1zchJY= Subject key identifier: F6:00:A9:1C:51:A0:7B:AC:E8:65:6E:B9:3B:1B:D3:4B:D0:06:6F:86 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0FEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0FD8 Signing time: Sat 26 Sep 2026 17:32:16 +0000 Manifest this update: Sat 26 Sep 2026 17:32:15 +0000 Manifest next update: Sat 03 Oct 2026 17:32:15 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: /Q7uNmH9BhlDYShOOOcGOo4zciJbVGVjoaxVJAjNoY8=) 2: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: OiI4GeqY5mB+sQeThF/k2nzv6QjlYZCXjncPTYDZnR8=) 3: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: dENkyXnpATnLgb025SowCVq24fI5D1cqXlVYxDEMzio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4078 (0xfee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Sep 26 17:32:15 2026 GMT Not After : Oct 3 17:32:15 2026 GMT Subject: CN=6ab801a0-ad7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:f5:56:9a:0a:b4:52:3e:ce:bf:cc:3e:fb: a4:ff:d9:e2:8f:f4:f8:92:b4:dc:96:42:ba:0e:c8: 9f:69:63:c0:95:a8:0c:09:9a:61:a6:4d:1f:85:b8: 60:72:bb:5a:9e:41:06:fc:e8:c5:e5:14:53:e7:0f: b9:59:d9:86:a0:ed:0a:dd:de:d9:f6:68:07:f9:de: 1e:02:0e:e9:f5:87:b5:b3:b2:bf:da:82:55:46:7a: a4:c0:12:ff:6f:01:28:b9:c6:85:6b:4f:99:38:d7: 48:89:8c:dc:c9:cd:a7:52:4e:3d:aa:65:5f:fa:0a: 85:fa:14:2a:41:29:fe:96:4d:3e:49:45:a1:c3:c3: 66:3e:9e:8f:39:b6:d8:f6:4d:f3:a5:39:9e:75:34: 99:3c:0d:c8:2d:90:fd:92:8d:17:53:d5:24:f7:a2: f1:f5:dd:e0:df:7d:03:f7:3f:d4:0b:f3:71:ea:c4: b7:02:fb:c3:2b:f1:7c:cf:6f:e3:b3:68:28:33:8e: 16:b8:cf:e0:84:20:56:e6:b3:ea:58:8d:bc:b8:c0: b0:ff:35:8d:9d:c6:e6:3d:58:9d:d9:05:21:6f:c2: 77:55:ce:e8:f1:31:75:15:76:c7:80:60:69:2b:6f: ba:a8:38:43:6b:4b:e6:df:60:11:ce:73:8d:88:19: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:00:A9:1C:51:A0:7B:AC:E8:65:6E:B9:3B:1B:D3:4B:D0:06:6F:86 X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:16:bd:f5:56:48:f9:21:71:b6:cb:7e:5a:76:96:98:c4: fc:6a:93:9a:56:04:d1:a3:95:a9:1f:f0:14:7f:92:74:0a:8e: fa:94:bc:c2:9c:89:b5:1f:4e:56:fd:f8:9b:f0:86:2a:6e:94: ea:f5:8a:29:27:a8:11:a0:e4:84:9a:e7:b8:50:74:c3:bb:bd: c0:bb:27:63:52:f4:28:ca:66:a4:02:d0:7e:a3:1f:74:bf:aa: 8d:7f:93:20:b2:70:2c:9f:b1:f6:6b:a7:56:62:dc:10:a5:a8: e2:92:90:ae:c6:4e:c2:b4:99:36:98:03:3a:42:bc:6a:ce:b4: fb:b9:06:64:d2:93:80:c7:e7:b8:25:96:44:8e:72:d4:eb:33: 09:1e:d0:7f:27:a6:9e:f0:35:9e:c3:87:42:ab:91:50:c5:61: 16:d7:fc:4c:8a:97:29:3a:d3:9f:f9:df:31:98:d1:d0:78:a2: eb:3f:fa:71:c5:b3:99:e5:c5:2d:d5:b1:f9:19:7c:e2:c8:90: f5:19:ba:9a:bc:f3:3f:32:9b:bd:03:cb:a0:bf:27:21:a1:af: bb:3e:4c:06:58:b9:06:b2:e4:fc:71:00:01:71:b6:4e:91:5d: 5c:db:3e:de:5d:3b:d5:93:1a:36:86:2c:31:48:da:aa:49:a7: ed:fe:22:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjYwOTI2MTczMjE1WhcNMjYxMDAzMTczMjE1WjAYMRYwFAYD VQQDEw02YWI4MDFhMC1hZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIn1VpoKtFI+zr/MPvuk/9nij/T4krTclkK6DsifaWPAlagMCZphpk0fhbhg crtankEG/OjF5RRT5w+5WdmGoO0K3d7Z9mgH+d4eAg7p9Ye1s7K/2oJVRnqkwBL/ bwEoucaFa0+ZONdIiYzcyc2nUk49qmVf+gqF+hQqQSn+lk0+SUWhw8NmPp6PObbY 9k3zpTmedTSZPA3ILZD9ko0XU9Uk96Lx9d3g330D9z/UC/Nx6sS3AvvDK/F8z2/j s2goM44WuM/ghCBW5rPqWI28uMCw/zWNncbmPVid2QUhb8J3Vc7o8TF1FXbHgGBp K2+6qDhDa0vm32ARznONiBmysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYAqRxR oHus6GVuuTsb00vQBm+GMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKfUWvfVWSPkhcbbLflp2lpjE/GqTmlYE0aOVqR/wFH+SdAqO+pS8wpyJtR9O Vv34m/CGKm6U6vWKKSeoEaDkhJrnuFB0w7u9wLsnY1L0KMpmpALQfqMfdL+qjX+T ILJwLJ+x9munVmLcEKWo4pKQrsZOwrSZNpgDOkK8as60+7kGZNKTgMfnuCWWRI5y 1OszCR7QfyemnvA1nsOHQquRUMVhFtf8TIqXKTrTn/nfMZjR0Hii6z/6ccWzmeXF LdWx+Rl84siQ9Rm6mrzzPzKbvQPLoL8nIaGvuz5MBli5BrLk/HEAAXG2TpFdXNs+ 3l071ZMaNoYsMUjaqkmn7f4iMg== -----END CERTIFICATE-----Generated at Sun Sep 27 01:19:03 2026 by rpki-client