$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: 7qaGurqaIWV/y1stJWg7gyya5ZFDm0foB5jRtNdaDy8= Subject key identifier: DD:75:B0:3C:B7:1F:50:CC:BA:B1:FA:D9:F8:08:89:90:8E:78:88:B1 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0406 Signing time: Wed 23 Sep 2026 00:03:15 +0000 Manifest this update: Wed 23 Sep 2026 00:03:15 +0000 Manifest next update: Wed 30 Sep 2026 00:03:15 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: c6i4IOUu3eKrRxMpE1t6jNnOeacGqWKQzOHKZVoNkqQ=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: LpWdecCaZjYDqnwlofOF98ADZ9wJd8dslMfZKWc8i2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Sep 23 00:03:15 2026 GMT Not After : Sep 30 00:03:15 2026 GMT Subject: CN=6ab31743-5cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:da:da:a7:54:75:29:c0:d4:c6:89:38:cb: 3c:b6:19:4e:d9:85:34:14:69:83:de:14:0b:14:33: 94:68:27:d0:5d:d3:ba:3f:93:e3:1c:09:d8:d3:6d: 96:5b:f9:f6:e7:33:57:8e:9b:8d:6e:b0:c0:99:bb: 61:85:e5:5b:3a:69:55:1e:3e:df:4c:34:1d:0f:73: 85:23:14:63:7f:52:e0:f5:80:be:b8:9d:fd:67:a9: c7:ed:07:73:84:26:e1:52:69:53:2e:ea:8f:68:38: 50:cd:ee:a1:61:12:15:c0:b8:97:c7:0f:06:67:7f: 36:18:36:4c:1d:e8:ea:48:bc:fa:62:44:bf:b5:8b: a7:89:6d:1c:b4:cb:f1:ce:4e:c3:c9:6c:32:79:ae: dc:21:66:4c:10:61:2e:84:fb:61:7d:0f:bc:61:c9: e5:44:69:9c:71:d1:df:e6:ef:67:5f:c1:c9:35:ca: ab:f5:6c:82:47:7c:4e:f4:20:ba:9b:ba:ed:ad:b3: d1:34:7b:c6:b2:3a:82:fa:6e:e0:68:0f:75:42:62: 11:32:d1:c7:a3:4c:7f:f1:89:36:73:3f:3d:06:4f: a1:09:b2:7a:88:d8:e1:98:c4:6d:1a:c1:dc:f2:e0: 20:ff:32:9b:9d:6a:a2:ff:6b:a3:b3:91:71:36:da: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:B0:3C:B7:1F:50:CC:BA:B1:FA:D9:F8:08:89:90:8E:78:88:B1 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:05:8d:98:89:03:cf:05:0d:5a:c4:6e:5c:de:37:f0:64:e7: a4:91:20:94:1e:19:ee:50:75:3a:c4:50:b1:d7:7f:0e:61:fd: 0c:35:f3:d6:3b:2f:f1:b7:fc:c2:5a:f4:46:51:81:bf:fb:7f: d7:6c:2a:e4:ba:91:7c:96:96:52:c3:8e:38:ac:57:73:eb:9b: d1:5b:19:b5:33:51:cb:bd:56:89:2a:ca:17:67:47:49:05:8d: 84:06:3a:d6:b2:03:9c:2d:2f:0b:0c:4c:f0:e2:ad:2e:bf:62: 96:88:05:97:62:e8:68:31:8f:17:e1:25:81:59:a7:d8:0d:2e: d4:bc:bb:fa:8f:86:c9:57:ec:76:9f:2b:eb:7a:09:1f:d0:0d: f7:3b:fd:f2:58:ed:01:91:9d:1e:8f:b4:58:52:a1:0e:a4:c2: 83:4d:81:74:fc:c1:c4:e1:ea:96:f3:cd:7c:35:ef:a3:3b:21: b7:ef:07:7f:b7:a0:52:e9:fe:5b:4e:c6:25:ff:8f:e6:ff:bf: 85:a0:bc:7d:05:a9:e4:b4:4f:ab:4f:32:8b:e8:f1:d5:b5:67: 54:33:ea:2e:45:87:37:73:58:61:5e:c5:e3:b2:ff:0d:5d:63: 3d:ca:42:52:f2:cd:e1:61:d1:07:22:8b:eb:c7:30:97:74:df: 15:c5:aa:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwOTIzMDAwMzE1WhcNMjYwOTMwMDAwMzE1WjAYMRYwFAYD VQQDEw02YWIzMTc0My01Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXLa2qdUdSnA1MaJOMs8thlO2YU0FGmD3hQLFDOUaCfQXdO6P5PjHAnY022W W/n25zNXjpuNbrDAmbthheVbOmlVHj7fTDQdD3OFIxRjf1Lg9YC+uJ39Z6nH7Qdz hCbhUmlTLuqPaDhQze6hYRIVwLiXxw8GZ382GDZMHejqSLz6YkS/tYuniW0ctMvx zk7DyWwyea7cIWZMEGEuhPthfQ+8YcnlRGmccdHf5u9nX8HJNcqr9WyCR3xO9CC6 m7rtrbPRNHvGsjqC+m7gaA91QmIRMtHHo0x/8Yk2cz89Bk+hCbJ6iNjhmMRtGsHc 8uAg/zKbnWqi/2ujs5FxNtpZ8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN11sDy3 H1DMurH62fgIiZCOeIixMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASwWNmIkDzwUNWsRuXN438GTnpJEglB4Z7lB1OsRQsdd/DmH9DDXz1jsv8bf8 wlr0RlGBv/t/12wq5LqRfJaWUsOOOKxXc+ub0VsZtTNRy71WiSrKF2dHSQWNhAY6 1rIDnC0vCwxM8OKtLr9ilogFl2LoaDGPF+ElgVmn2A0u1Ly7+o+GyVfsdp8r63oJ H9AN9zv98ljtAZGdHo+0WFKhDqTCg02BdPzBxOHqlvPNfDXvozsht+8Hf7egUun+ W07GJf+P5v+/haC8fQWp5LRPq08yi+jx1bVnVDPqLkWHN3NYYV7F47L/DV1jPcpC UvLN4WHRByKL68cwl3TfFcWqGQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:35:52 2026 by rpki-client