$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: S5R+vIau+6a0QLCGlQ+ZgPVw9Qw5zymr7Go8q9rdXbM= Subject key identifier: 59:AD:2C:64:A9:59:19:BC:C4:E5:39:D6:FD:D1:37:79:CC:48:DC:FE Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 0170 Signing time: Mon 21 Sep 2026 04:57:27 +0000 Manifest this update: Mon 21 Sep 2026 04:57:26 +0000 Manifest next update: Mon 28 Sep 2026 04:57:26 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: gfB0whhFN+qkck4y0hVdXKelTmBHylEKV7ox6uuBLVU=) 2: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: QMr7SSp5xbajHiCRuT5qA5lZIJuO6WaXl9EYEvA91Ec=) 3: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: 3kIF68zO8V/KZKS8dRul3MgYSoRJ3VG5qDumT+v5J+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Sep 21 04:57:26 2026 GMT Not After : Sep 28 04:57:26 2026 GMT Subject: CN=6ab0b937-1d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5c:e7:dd:1a:7a:bd:45:80:11:0a:3c:de:4a: e0:27:02:4b:88:67:9b:da:cc:44:07:97:5e:ed:c1: 8e:75:54:59:e7:fd:7d:80:dd:72:9c:e8:57:b8:ca: 46:9d:3e:0a:b9:5c:bd:a0:14:97:be:22:47:02:b8: 58:25:16:b0:ac:31:e9:e2:3a:1a:ef:6a:cf:3a:ea: fd:75:d8:f4:0e:ab:0a:8c:8b:b8:8a:44:06:2d:b5: ac:35:e4:57:4f:a6:78:13:62:b7:b8:e8:d1:64:79: 33:d5:ae:c3:a9:77:7a:12:69:bf:ef:35:a8:8d:76: 08:31:e2:86:fa:a0:14:d8:32:60:36:cc:4f:d4:07: 28:71:98:be:25:98:b5:fe:22:0f:54:75:b8:d2:4a: 50:06:de:68:87:62:d0:dc:10:22:ce:a5:3b:40:e9: 1a:29:ae:78:0c:f9:f3:e3:f8:a7:de:94:da:61:0f: 7b:20:b6:5f:d2:6d:c4:f8:cf:bc:06:27:85:5f:85: fb:7a:43:2c:c5:a4:49:7f:cf:57:d3:f1:22:56:8b: 14:5e:e5:6b:e0:d6:60:54:e0:34:48:56:a3:96:c6: e7:03:f4:ef:c7:90:aa:9d:ec:87:85:86:2a:96:6b: 12:be:53:28:ef:08:1f:88:63:6c:4c:eb:64:e1:7a: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AD:2C:64:A9:59:19:BC:C4:E5:39:D6:FD:D1:37:79:CC:48:DC:FE X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:51:fe:31:f1:3f:e4:5d:e8:b1:4f:50:ae:07:2d:bc:83: 84:97:32:7d:f0:77:75:58:d4:fb:bf:e2:15:9c:45:a7:2e:69: d7:cf:78:1f:57:8b:1a:d3:9d:18:8b:41:c5:d5:79:07:15:78: b4:1f:9b:ba:60:70:18:75:d2:e8:51:a5:04:da:f2:da:2a:3c: bc:72:6f:bb:05:c5:90:85:62:f5:5c:99:64:9f:03:99:42:08: 46:49:21:ff:b6:77:59:89:3b:7d:8b:9d:ce:82:f6:bb:ba:62: ab:1b:d0:ff:c9:54:72:fa:f2:31:42:45:43:06:6f:2b:9b:7b: 71:28:9a:b0:c7:ee:4d:78:a9:00:b8:7e:ac:4f:ff:07:15:7b: 64:10:1d:cb:73:f2:b4:3c:05:59:5f:74:27:b3:dc:94:14:76: 94:33:99:f6:a7:03:e2:70:21:5b:1b:2d:a3:71:d9:3c:a5:df: 66:ac:d9:9b:05:94:fc:bd:b0:5c:2f:5f:e9:c2:29:bb:59:bd: 3d:a2:ae:1a:c3:8b:5f:e7:91:ab:2c:ce:2c:e9:ba:9e:07:53: ab:83:14:2b:80:46:c4:6b:c1:f1:6e:3b:b8:73:4d:66:d9:0e: 77:32:01:11:40:62:4c:93:8d:89:5b:27:e8:5c:07:7d:bd:8c: 94:61:6b:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjYwOTIxMDQ1NzI2WhcNMjYwOTI4MDQ1NzI2WjAYMRYwFAYD VQQDEw02YWIwYjkzNy0xZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vzn3Rp6vUWAEQo83krgJwJLiGeb2sxEB5de7cGOdVRZ5/19gN1ynOhXuMpG nT4KuVy9oBSXviJHArhYJRawrDHp4joa72rPOur9ddj0DqsKjIu4ikQGLbWsNeRX T6Z4E2K3uOjRZHkz1a7DqXd6Emm/7zWojXYIMeKG+qAU2DJgNsxP1AcocZi+JZi1 /iIPVHW40kpQBt5oh2LQ3BAizqU7QOkaKa54DPnz4/in3pTaYQ97ILZf0m3E+M+8 BieFX4X7ekMsxaRJf89X0/EiVosUXuVr4NZgVOA0SFajlsbnA/Tvx5CqneyHhYYq lmsSvlMo7wgfiGNsTOtk4XqBbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmtLGSp WRm8xOU51v3RN3nMSNz+MB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1VR/jHxP+Rd6LFPUK4HLbyDhJcyffB3dVjU+7/iFZxFpy5p1894H1eLGtOd GItBxdV5BxV4tB+bumBwGHXS6FGlBNry2io8vHJvuwXFkIVi9VyZZJ8DmUIIRkkh /7Z3WYk7fYudzoL2u7piqxvQ/8lUcvryMUJFQwZvK5t7cSiasMfuTXipALh+rE// BxV7ZBAdy3PytDwFWV90J7PclBR2lDOZ9qcD4nAhWxsto3HZPKXfZqzZmwWU/L2w XC9f6cIpu1m9PaKuGsOLX+eRqyzOLOm6ngdTq4MUK4BGxGvB8W47uHNNZtkOdzIB EUBiTJONiVsn6FwHfb2MlGFrQg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:00 2026 by rpki-client