$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft File: 3MnOwPy4zLyvexzByLIVJW33h48.mft (raw, json) Hash identifier: UN0owAde9l1KEw6c4ECD7WjYQ7M6tV+GJZxUrfTaTHs= Subject key identifier: 29:94:2B:FA:CD:E3:A9:BE:D1:A9:71:0E:1D:52:3D:38:79:00:70:02 Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F Certificate issuer: /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft Manifest number: 28 Signing time: Sat 03 Oct 2026 09:31:52 +0000 Manifest this update: Sat 03 Oct 2026 09:31:51 +0000 Manifest next update: Sat 10 Oct 2026 09:31:51 +0000 Files and hashes: 1: 3MnOwPy4zLyvexzByLIVJW33h48.crl (hash: zVEmQ0ps8xPj45Yb8pxrYq5/IAwxnsEZJN1tkhOhsDg=) 2: 21FFC88285BB11F18D64891761A30FBC.roa (hash: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Validity Not Before: Oct 3 09:31:51 2026 GMT Not After : Oct 10 09:31:51 2026 GMT Subject: CN=6ac0cb88-6763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:66:4d:24:19:07:6a:39:40:f8:e1:77:97: d9:3e:66:88:ef:c6:ec:ea:f5:8b:cd:0b:69:1c:b2: 06:7d:73:00:a6:50:41:48:ff:56:d0:85:6b:34:bf: e5:23:22:0e:c9:cd:e7:0b:e0:78:be:7c:28:10:1c: 00:4e:51:8e:b2:4a:d8:88:cb:8b:12:71:71:d4:4a: 25:4f:ae:71:cc:a5:69:72:fd:b4:02:1c:f1:f6:b4: 3f:87:b5:fc:ba:2b:ab:70:3f:0c:1c:30:d9:93:a6: 40:93:16:3d:3b:23:58:e5:dc:6d:1c:30:2f:0a:c4: b4:ba:d9:75:7c:41:b7:c9:00:01:92:90:43:d7:53: 08:45:5b:46:0e:2b:67:7b:83:9c:1d:93:7a:de:d8: 49:39:3f:5a:b5:a6:df:5e:11:bf:50:d8:cc:8b:51: 95:de:32:76:fa:1c:71:f1:10:00:91:27:13:44:f7: ea:44:90:9e:97:98:8b:9d:4d:38:96:80:0d:da:21: 4b:4d:16:31:dd:10:e6:0f:9f:8b:56:78:10:8e:3e: 14:4e:82:3b:ba:2b:42:d9:69:cf:51:ca:19:b6:ee: 27:97:e6:08:0b:ef:47:2f:03:a4:31:04:99:bc:bd: 19:15:69:7c:f1:9d:7b:6d:6f:2c:1e:56:64:cf:12: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:94:2B:FA:CD:E3:A9:BE:D1:A9:71:0E:1D:52:3D:38:79:00:70:02 X509v3 Authority Key Identifier: keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:07:f7:75:aa:17:c9:69:fa:31:77:c0:15:55:ca:e7:e2:63: 20:70:eb:8c:6b:5e:e5:71:d8:09:cf:35:6d:1c:cc:e6:58:7b: 5c:c6:c9:8e:ab:d4:7b:56:0e:bf:27:f9:94:99:ff:6f:df:e2: 5b:c9:17:93:b8:44:f1:5e:4e:eb:ac:3a:02:28:02:ce:d2:b8: 23:4e:73:2f:fe:4a:d3:8e:66:2f:97:7e:60:ca:36:dc:aa:08: 66:1a:4a:3b:4a:8e:af:b7:df:01:25:cc:12:ee:77:91:5b:75: 9a:d5:35:9b:5d:b7:c1:b5:7d:2a:bc:9d:94:08:fb:3a:16:3e: 25:f1:69:9c:7b:56:d3:2a:76:7c:c4:12:c5:0c:0b:5e:92:55: 08:f1:b0:66:8c:44:98:f9:42:88:32:b6:cf:50:15:12:3e:a0: ce:80:55:6e:a6:da:38:47:9e:b5:e3:bd:93:15:7c:ce:1a:c5: e5:99:13:4f:22:da:0c:ee:58:9b:74:56:68:7e:74:7f:cc:58: c6:37:10:4c:29:b2:6f:f9:8a:97:3d:d8:05:13:e0:ac:4b:a2: 9e:04:fb:75:a1:0c:72:6e:2d:44:31:70:b4:3a:e2:99:13:9a: f1:e9:49:85:b3:ff:bd:62:8f:a1:80:1f:6e:3e:d0:b8:37:eb: 43:90:ff:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTEwQjExMC8GA1UEBRMoRENDOUNFQzBGQ0I4Q0NCQ0FGN0IxQ0MxQzhCMjE1MjU2 REY3ODc4RjAeFw0yNjEwMDMwOTMxNTFaFw0yNjEwMTAwOTMxNTFaMBgxFjAUBgNV BAMTDTZhYzBjYjg4LTY3NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4u2ZNJBkHajlA+OF3l9k+Zojvxuzq9YvNC2kcsgZ9cwCmUEFI/1bQhWs0v+Uj Ig7JzecL4Hi+fCgQHABOUY6yStiIy4sScXHUSiVPrnHMpWly/bQCHPH2tD+Htfy6 K6twPwwcMNmTpkCTFj07I1jl3G0cMC8KxLS62XV8QbfJAAGSkEPXUwhFW0YOK2d7 g5wdk3re2Ek5P1q1pt9eEb9Q2MyLUZXeMnb6HHHxEACRJxNE9+pEkJ6XmIudTTiW gA3aIUtNFjHdEOYPn4tWeBCOPhROgju6K0LZac9Ryhm27ieX5ggL70cvA6QxBJm8 vRkVaXzxnXttbyweVmTPEmOHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKZQr+s3j qb7RqXEOHVI9OHkAcAIwHwYDVR0jBBgwFoAU3MnOwPy4zLyvexzByLIVJW33h48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMTBCLzFCNDBEMkIyODVC QTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5dmV4ekJ5TElWSlczM2g0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM01uT3dQeTR6THl2ZXh6QnlMSVZKVzMzaDQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MTBCLzFCNDBEMkIyODVCQTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5 dmV4ekJ5TElWSlczM2g0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYB/d1qhfJafoxd8AVVcrn4mMgcOuMa17lcdgJzzVtHMzmWHtcxsmOq9R7Vg6/ J/mUmf9v3+JbyReTuETxXk7rrDoCKALO0rgjTnMv/krTjmYvl35gyjbcqghmGko7 So6vt98BJcwS7neRW3Wa1TWbXbfBtX0qvJ2UCPs6Fj4l8Wmce1bTKnZ8xBLFDAte klUI8bBmjESY+UKIMrbPUBUSPqDOgFVupto4R561472TFXzOGsXlmRNPItoM7lib dFZofnR/zFjGNxBMKbJv+YqXPdgFE+CsS6KeBPt1oQxybi1EMXC0OuKZE5rx6UmF s/+9Yo+hgB9uPtC4N+tDkP+s -----END CERTIFICATE-----Generated at Mon Oct 5 06:34:11 2026 by rpki-client