$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft File: S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json) Hash identifier: Qp2BONtEKCtoI7KnFqIEJwNK9DpH+22u6ZlC+GyZAX4= Subject key identifier: 44:26:EF:22:C6:1F:2A:73:DD:A6:AF:1D:9D:00:24:A2:E1:5F:37:15 Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft Manifest number: 0264 Signing time: Sun 27 Sep 2026 02:32:05 +0000 Manifest this update: Sun 27 Sep 2026 02:32:04 +0000 Manifest next update: Sun 04 Oct 2026 02:32:04 +0000 Files and hashes: 1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: L6hJy8dWOT2JVM6EgZcZn9Y6NAyVf/Aoyq4abUUw7zE=) 2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: 59D9zQ+RBL5Fvi3gvp0OtvuM1QHSjOAbItynN8Kr7yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Sep 27 02:32:04 2026 GMT Not After : Oct 4 02:32:04 2026 GMT Subject: CN=6ab88025-c7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:e6:e9:5e:ec:2e:55:67:87:c8:52:8f:d2: 59:11:6e:2b:b7:de:b1:d6:85:3a:db:31:4e:4c:4e: 94:38:78:22:9a:52:19:df:40:08:0b:0f:80:02:63: 3a:44:7d:81:ee:d3:1f:67:ad:f3:13:40:a4:a3:f7: e6:65:23:98:4a:ec:99:43:fe:b5:93:8e:69:b8:35: 5f:d6:2c:c7:01:dc:03:86:90:ee:48:a1:99:74:aa: b7:f3:eb:7c:c4:f9:56:63:2a:39:32:3e:9e:1f:34: ce:21:09:bd:ff:a2:e1:25:6e:98:27:72:df:63:93: 4b:6f:98:6a:da:59:53:e9:3a:9d:8a:89:05:3e:ec: 54:77:fb:a9:d0:7c:26:b6:67:7d:bf:67:a0:37:f4: d9:fb:fa:b0:6d:c4:4d:d6:90:62:26:a1:4a:b5:d7: 88:e1:fd:28:21:26:26:e8:74:f2:55:7d:f7:33:c3: 42:e9:f3:08:6e:c8:4a:31:62:bc:02:22:d9:b9:1c: a0:f8:b8:68:a8:d1:0d:2c:55:de:7d:42:ef:4d:cb: d3:0d:6e:29:15:cf:9a:fa:51:70:fc:1e:80:a4:12: a2:e2:da:f3:86:92:59:54:e8:23:c4:8e:d7:80:70: 5c:4f:6f:f7:41:69:1e:3f:b6:76:10:19:94:71:ba: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:EF:22:C6:1F:2A:73:DD:A6:AF:1D:9D:00:24:A2:E1:5F:37:15 X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5a:1d:a8:ac:32:f1:be:89:a2:d1:c2:0e:2b:e4:33:ba:5f: 1e:94:ec:47:cc:7c:ec:e6:d1:bb:19:6a:e9:2b:c6:cb:aa:42: f2:29:5d:3f:fe:ed:bb:9e:32:19:5e:f2:2a:32:db:0d:a9:56: 56:12:ef:6c:e7:03:e4:aa:93:23:17:52:91:19:bc:07:4e:c2: 9d:16:c0:2c:59:87:42:12:df:63:53:01:03:d0:fa:bb:45:e5: fc:1c:39:7c:f0:13:74:3d:ab:eb:3c:3b:de:de:ff:96:a8:a8: 02:04:6d:ee:8f:7b:cb:c3:69:af:5a:3b:1e:43:75:82:ae:d3: c4:77:c0:43:23:b7:a2:2e:05:70:af:d9:de:13:d9:08:f4:b2: 9e:20:8e:b8:2e:3a:20:97:35:8b:6a:4d:50:b0:a0:eb:f7:0e: 13:5d:de:ce:55:0e:01:00:09:f4:61:b5:b7:3c:12:24:89:c0: 61:26:84:93:05:a4:62:16:9b:58:c4:93:ec:5a:03:4c:d9:01: 16:2e:c9:74:af:a9:b9:47:6a:c1:6c:0c:69:a4:0c:62:7d:a7: 92:13:33:aa:91:ed:fc:f2:99:01:9d:a3:b0:ee:5d:c0:39:3d: ee:65:a1:87:f0:1d:42:6b:b7:fe:f0:e9:3e:13:6f:4f:72:f6: e2:e8:48:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjYwOTI3MDIzMjA0WhcNMjYxMDA0MDIzMjA0WjAYMRYwFAYD VQQDEw02YWI4ODAyNS1jN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmLm6V7sLlVnh8hSj9JZEW4rt96x1oU62zFOTE6UOHgimlIZ30AICw+AAmM6 RH2B7tMfZ63zE0Cko/fmZSOYSuyZQ/61k45puDVf1izHAdwDhpDuSKGZdKq38+t8 xPlWYyo5Mj6eHzTOIQm9/6LhJW6YJ3LfY5NLb5hq2llT6TqdiokFPuxUd/up0Hwm tmd9v2egN/TZ+/qwbcRN1pBiJqFKtdeI4f0oISYm6HTyVX33M8NC6fMIbshKMWK8 AiLZuRyg+LhoqNENLFXefULvTcvTDW4pFc+a+lFw/B6ApBKi4trzhpJZVOgjxI7X gHBcT2/3QWkeP7Z2EBmUcbqiawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQm7yLG Hypz3aavHZ0AJKLhXzcVMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6 TEp2UFV1VG5jdUNtODZZeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaVodqKwy8b6JotHCDivkM7pfHpTsR8x87ObRuxlq6SvGy6pC8ildP/7tu54y GV7yKjLbDalWVhLvbOcD5KqTIxdSkRm8B07CnRbALFmHQhLfY1MBA9D6u0Xl/Bw5 fPATdD2r6zw73t7/lqioAgRt7o97y8Npr1o7HkN1gq7TxHfAQyO3oi4FcK/Z3hPZ CPSyniCOuC46IJc1i2pNULCg6/cOE13ezlUOAQAJ9GG1tzwSJInAYSaEkwWkYhab WMST7FoDTNkBFi7JdK+puUdqwWwMaaQMYn2nkhMzqpHt/PKZAZ2jsO5dwDk97mWh h/AdQmu3/vDpPhNvT3L24uhI+g== -----END CERTIFICATE-----Generated at Mon Sep 28 19:19:12 2026 by rpki-client