$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json) Hash identifier: Mi0oSDQzKlt2djhdUSsP9JlmeRDuqytT1GP05aAEuqU= Subject key identifier: 61:86:51:55:7B:09:3B:5E:57:CC:99:C5:25:C0:98:09:77:91:08:85 Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft Manifest number: 0F71 Signing time: Thu 24 Sep 2026 17:29:01 +0000 Manifest this update: Thu 24 Sep 2026 17:29:00 +0000 Manifest next update: Thu 01 Oct 2026 17:29:00 +0000 Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: BnOt2G6IWjdOSi+yt4k3tQMC7pTotLIXnnRkl61s6Nw=) 2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: epuRJDNpLBRjInLcr8wNqAbigHvQWwNVcLarPZoddFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Sep 24 17:29:00 2026 GMT Not After : Oct 1 17:29:00 2026 GMT Subject: CN=6ab55ddd-5a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:1f:7c:d9:33:3f:06:59:17:ff:fa:c7:eb: 20:c9:52:7a:3d:25:9c:2b:6b:cf:a5:f1:0a:37:01: ef:9e:88:06:c0:a0:f8:d1:c6:6c:dc:4f:d4:59:c0: 19:7a:f9:6f:d6:14:e8:e8:eb:8a:e6:c5:00:27:73: a1:f8:a2:8a:d6:ef:d5:62:83:62:b9:5c:ff:13:2e: fb:25:12:79:4a:e8:aa:fd:6e:0a:fa:26:e9:02:63: 03:20:18:cc:d0:53:fc:7c:c2:88:b5:6d:f6:6a:24: 9a:c5:71:a5:b7:83:c2:bb:35:96:50:86:c2:fc:56: 50:e8:71:c9:bf:62:48:91:e1:e7:2c:3d:dd:98:45: c6:ad:cb:e4:d3:22:c9:57:89:a3:cd:c4:21:0a:d4: 61:1e:a8:c4:3e:cb:19:d4:a7:c7:69:9a:c5:24:68: 27:10:69:d6:3c:fa:25:df:a0:78:60:11:ce:28:f5: 46:82:e1:d0:27:01:a4:e0:67:f0:89:2f:0f:5a:8b: 37:cc:ad:51:35:39:81:f7:ce:49:8f:d7:b8:49:50: b6:65:22:da:1b:f8:77:e4:66:3e:ce:0d:03:38:43: 3f:6f:43:c8:9b:a3:55:b7:7d:53:64:46:ab:65:ee: bc:84:af:3f:67:93:51:d4:70:29:5f:ff:02:ef:b4: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:51:55:7B:09:3B:5E:57:CC:99:C5:25:C0:98:09:77:91:08:85 X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:dd:c6:52:7a:8c:e6:e4:ab:86:2a:f4:22:62:7a:a0:e2: b3:02:31:7e:50:ef:eb:4e:78:ad:ad:2d:72:05:81:e8:49:ef: 49:a7:cd:f1:b3:53:4f:6c:6d:fe:e8:9e:6d:c9:7f:94:0a:37: 6a:f4:d2:ca:22:63:1d:78:61:45:1d:03:0a:96:34:f9:7e:46: 20:58:f7:14:2b:3f:a4:0e:be:33:47:6e:60:ea:b3:f6:52:36: 42:61:b9:d5:5c:d6:72:fa:8b:bb:cc:d5:9d:df:5e:2b:97:62: 3f:6d:10:24:a6:cd:b4:75:99:67:91:0a:e2:cb:59:89:ad:5a: 99:90:be:8e:3a:a2:44:98:6f:0d:6a:dd:19:be:59:4a:47:74: 4a:1e:18:00:de:94:f4:fb:85:78:31:e8:30:84:ef:5e:ac:7a: 11:a8:de:48:f4:01:85:84:be:cb:1e:a3:27:97:c1:6a:8d:c6: f1:8b:14:03:da:48:4b:2f:3b:8a:0a:b6:d7:ce:e0:2d:27:08: 37:f1:e5:ee:d7:67:ad:bc:2b:ec:49:21:ea:d3:f9:12:31:54: 95:5a:a3:df:cd:5f:6d:a3:e7:45:38:40:d0:98:c3:b3:95:40: 9b:4d:f0:ab:f0:61:a3:5a:2c:4b:24:e8:4a:1a:e8:3a:74:d1: 11:f0:b2:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjYwOTI0MTcyOTAwWhcNMjYxMDAxMTcyOTAwWjAYMRYwFAYD VQQDEw02YWI1NWRkZC01YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg0ffNkzPwZZF//6x+sgyVJ6PSWcK2vPpfEKNwHvnogGwKD40cZs3E/UWcAZ evlv1hTo6OuK5sUAJ3Oh+KKK1u/VYoNiuVz/Ey77JRJ5Suiq/W4K+ibpAmMDIBjM 0FP8fMKItW32aiSaxXGlt4PCuzWWUIbC/FZQ6HHJv2JIkeHnLD3dmEXGrcvk0yLJ V4mjzcQhCtRhHqjEPssZ1KfHaZrFJGgnEGnWPPol36B4YBHOKPVGguHQJwGk4Gfw iS8PWos3zK1RNTmB985Jj9e4SVC2ZSLaG/h35GY+zg0DOEM/b0PIm6NVt31TZEar Ze68hK8/Z5NR1HApX/8C77R5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGGUVV7 CTteV8yZxSXAmAl3kQiFMB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdL d1pHc09Rb3NrbDJNQTFxRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqPdxlJ6jObkq4Yq9CJieqDiswIxflDv6054ra0tcgWB6EnvSafN8bNTT2xt /uiebcl/lAo3avTSyiJjHXhhRR0DCpY0+X5GIFj3FCs/pA6+M0duYOqz9lI2QmG5 1VzWcvqLu8zVnd9eK5diP20QJKbNtHWZZ5EK4stZia1amZC+jjqiRJhvDWrdGb5Z Skd0Sh4YAN6U9PuFeDHoMITvXqx6EajeSPQBhYS+yx6jJ5fBao3G8YsUA9pISy87 igq2187gLScIN/Hl7tdnrbwr7Ekh6tP5EjFUlVqj381fbaPnRThA0JjDs5VAm03w q/Bho1osSyToShroOnTREfCyaw== -----END CERTIFICATE-----Generated at Sat Sep 26 10:41:42 2026 by rpki-client