$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft File: 3Hp9C5oBv4XomicX87lm2Z5F9-c.mft (raw, json) Hash identifier: E/AsNGgiFElQs3jYt5NGIvwObqO+StAy+MtzKJt/15A= Subject key identifier: 5B:D8:43:AD:7D:4C:8F:32:20:F9:3D:E3:3E:E9:80:33:0B:31:A5:FA Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7 Certificate issuer: /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft Manifest number: 2F Signing time: Fri 25 Sep 2026 08:54:36 +0000 Manifest this update: Fri 25 Sep 2026 08:54:35 +0000 Manifest next update: Fri 02 Oct 2026 08:54:35 +0000 Files and hashes: 1: 3Hp9C5oBv4XomicX87lm2Z5F9-c.crl (hash: 8hWg/SMESRNzkLSnaljcOEGB0xBRUqXyCz1co0u2TPI=) 2: 2E45B7DE80E611F1936909A061A30FBC.roa (hash: boIChwmQ8OLdUTt45ZhPNZwjS9L/s3K4KKRa2qyDCXM=) 3: 03C24D0680E611F1A15EA29461A30FBC.roa (hash: u7JbDFz3qAshRF4caNqctdr/Pu6iadoZfhpdKTIEvOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7 Validity Not Before: Sep 25 08:54:35 2026 GMT Not After : Oct 2 08:54:35 2026 GMT Subject: CN=6ab636cc-dbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:b1:5e:93:4f:47:37:40:80:cd:ce:0f:ba: 6e:ce:34:17:73:09:39:18:cb:5d:71:aa:46:af:94: 65:b0:0b:e3:f4:ce:73:fb:a5:66:8d:ea:ae:22:0c: c2:35:e7:a4:ec:cb:e0:d3:a9:0a:e6:9f:55:60:db: f5:97:9e:53:ea:17:86:83:88:b5:38:47:95:a4:3e: cf:bb:fc:81:ba:a9:a3:b9:98:42:66:7e:91:b1:30: 88:85:8b:57:8e:37:c7:5c:8d:b0:20:61:89:9e:27: a2:83:f7:73:13:04:42:aa:80:ee:8b:7b:6f:ee:86: be:15:59:74:5c:56:95:df:bc:08:f5:01:b1:12:35: 3b:40:ce:f8:f4:80:95:f3:7b:c0:8d:c8:10:79:89: f9:c3:d1:88:d4:6f:ec:9d:8a:eb:a5:a0:66:0b:11: 38:4f:f6:a0:6e:1e:c8:80:5f:3b:a8:d5:2a:61:72: 06:87:2c:90:4f:b9:27:4d:57:27:83:95:be:97:38: d7:fc:2d:40:fb:23:64:20:d4:2f:9c:26:15:8c:8a: b3:67:a3:e5:7b:50:92:a9:d8:36:fe:50:86:4c:d8: 34:39:05:6f:56:03:9e:16:65:8c:14:e2:12:72:20: 85:05:0a:40:6a:ac:b3:aa:37:14:62:d2:9f:38:a7: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D8:43:AD:7D:4C:8F:32:20:F9:3D:E3:3E:E9:80:33:0B:31:A5:FA X509v3 Authority Key Identifier: keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e5:6b:f6:27:23:b8:fc:14:61:ea:58:d2:9a:68:0c:07:83: 38:fa:e1:00:a2:8a:93:fe:7f:e6:3e:84:c0:45:ea:b8:86:84: 7e:d8:5d:d0:22:c2:13:e5:38:ea:0f:54:73:34:04:70:f4:ca: eb:0e:02:c9:55:22:9a:d6:e7:8a:54:e1:71:3a:ae:63:40:e4: a9:04:2c:fc:98:44:88:60:ee:ad:e0:af:d4:df:d7:bc:d8:c3: a0:bb:be:a7:1d:10:e5:35:13:b2:2f:14:95:70:3e:05:1a:2d: 8d:e8:5d:8d:8b:0f:63:2a:da:72:be:cc:06:51:d9:b5:22:8a: 3d:85:24:73:24:46:63:f2:55:80:e2:d2:20:3e:10:8b:87:02: 82:7b:c2:62:47:85:6e:1e:d9:6a:2a:94:0d:36:f9:4b:fc:7d: b6:17:00:32:31:6d:0d:6a:59:e0:82:10:62:ec:11:df:67:a5: dc:94:4d:7c:67:69:79:e4:6b:86:62:20:a4:50:e8:bc:ab:fe: 81:91:bc:ce:c1:c7:69:7f:48:87:cd:02:0b:4d:d2:fd:fa:ff: 21:70:36:3b:a0:ba:0c:aa:ed:a9:4b:42:64:ac:c6:b2:66:0a: 0f:b1:bc:79:32:63:b6:f0:3c:be:c3:a5:07:55:c3:89:30:90: 1e:34:5b:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEE5MDExMC8GA1UEBRMoREM3QTdEMEI5QTAxQkY4NUU4OUEyNzE3RjNCOTY2RDk5 RTQ1RjdFNzAeFw0yNjA5MjUwODU0MzVaFw0yNjEwMDIwODU0MzVaMBgxFjAUBgNV BAMTDTZhYjYzNmNjLWRiZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgkrFek09HN0CAzc4Pum7ONBdzCTkYy11xqkavlGWwC+P0znP7pWaN6q4iDMI1 56Tsy+DTqQrmn1Vg2/WXnlPqF4aDiLU4R5WkPs+7/IG6qaO5mEJmfpGxMIiFi1eO N8dcjbAgYYmeJ6KD93MTBEKqgO6Le2/uhr4VWXRcVpXfvAj1AbESNTtAzvj0gJXz e8CNyBB5ifnD0YjUb+ydiuuloGYLEThP9qBuHsiAXzuo1SphcgaHLJBPuSdNVyeD lb6XONf8LUD7I2Qg1C+cJhWMirNno+V7UJKp2Db+UIZM2DQ5BW9WA54WZYwU4hJy IIUFCkBqrLOqNxRi0p84p6WTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW9hDrX1M jzIg+T3jPumAMwsxpfowHwYDVR0jBBgwFoAU3Hp9C5oBv4XomicX87lm2Z5F9+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzREODM5NTRDN0I5 MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRYb21pY1g4N2xtMlo1Rjkt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0hwOUM1b0J2NFhvbWljWDg3bG0yWjVGOS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 QTkwLzREODM5NTRDN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRY b21pY1g4N2xtMlo1RjktYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAh5Wv2JyO4/BRh6ljSmmgMB4M4+uEAooqT/n/mPoTAReq4hoR+2F3QIsIT5Tjq D1RzNARw9MrrDgLJVSKa1ueKVOFxOq5jQOSpBCz8mESIYO6t4K/U39e82MOgu76n HRDlNROyLxSVcD4FGi2N6F2Niw9jKtpyvswGUdm1Ioo9hSRzJEZj8lWA4tIgPhCL hwKCe8JiR4VuHtlqKpQNNvlL/H22FwAyMW0NalngghBi7BHfZ6XclE18Z2l55GuG YiCkUOi8q/6BkbzOwcdpf0iHzQILTdL9+v8hcDY7oLoMqu2pS0JkrMayZgoPsbx5 MmO28Dy+w6UHVcOJMJAeNFvF -----END CERTIFICATE-----Generated at Sat Sep 26 13:47:23 2026 by rpki-client