$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft File: S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json) Hash identifier: YdcvU7WVHJg8BfexrTwKBqgr358bfDbj2CpR5At/vzA= Subject key identifier: 0D:79:17:83:00:6C:ED:A9:C3:36:7C:F0:75:2C:1F:BB:18:74:96:DC Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft Manifest number: 0258 Signing time: Thu 03 Sep 2026 02:27:46 +0000 Manifest this update: Thu 03 Sep 2026 02:27:46 +0000 Manifest next update: Thu 10 Sep 2026 02:27:46 +0000 Files and hashes: 1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: oXA/9+Q3tfBHyO83/KFa9Tw5kKJndMOgVNic9Ez6VOM=) 2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: 59D9zQ+RBL5Fvi3gvp0OtvuM1QHSjOAbItynN8Kr7yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Sep 3 02:27:46 2026 GMT Not After : Sep 10 02:27:46 2026 GMT Subject: CN=6a98db22-d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:1f:ff:84:07:8b:1b:7f:d3:f5:7f:ba:72: f1:34:ae:98:69:f1:51:34:7b:0b:b0:4c:32:eb:4a: f3:5c:5a:64:ce:35:09:f5:fc:d9:e8:6c:eb:58:81: 0d:dc:ae:b6:e8:77:6b:6f:b9:2e:9a:8d:e7:17:fe: 2d:5a:fd:ea:cf:ae:36:4b:dc:32:cf:1b:bc:75:c0: 0c:dd:46:3a:a6:d3:3e:8c:4a:2e:02:4b:a2:a8:5f: c5:36:1d:18:2b:12:42:fd:a3:5a:14:0c:9b:59:32: 7e:b1:f6:d8:0c:f8:32:fa:0e:50:0e:97:9c:9f:42: 30:88:79:a8:78:fa:ff:af:88:95:ca:79:c8:b4:6f: a2:6f:ca:79:1a:bc:98:09:6c:67:7f:eb:b0:09:eb: d3:c1:36:15:d9:5d:14:12:11:48:19:28:bc:2a:9c: 1d:31:bf:01:a0:be:0c:88:b7:11:92:f6:e9:53:af: 14:c5:d7:08:39:43:76:45:0c:5f:12:e3:a6:1f:60: a5:b2:54:26:66:d8:fb:e8:e4:b8:a6:38:4a:07:1a: 32:d8:42:9e:7c:a1:39:0f:66:42:c5:22:0c:3f:0a: bf:5d:d3:df:ae:0f:76:49:95:92:ad:73:21:92:1d: 93:19:20:e8:4c:c1:5a:bc:2e:44:8d:9b:d4:31:32: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:79:17:83:00:6C:ED:A9:C3:36:7C:F0:75:2C:1F:BB:18:74:96:DC X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e5:5f:1d:87:ba:25:7b:93:8a:0b:8b:05:ec:3b:e1:0b:fb: da:ec:be:18:49:53:d7:04:4b:ae:71:b7:03:0c:15:24:a7:2e: 17:43:14:0a:c4:81:77:17:0f:2c:67:f5:db:21:ae:fb:53:e0: 4f:0d:21:6a:ee:a7:aa:01:50:df:7b:c0:8e:f7:e0:6d:c4:c2: 70:8d:0c:8f:99:3f:d0:8a:cd:dd:45:dc:00:15:1a:03:c4:17: f7:40:55:65:70:3a:44:67:54:cc:a9:a4:61:85:a6:27:93:c5: 0e:eb:8e:a3:d4:6e:87:7f:01:31:96:76:aa:7b:cb:f0:75:50: 96:dc:91:a3:b8:75:7f:0e:bf:ce:b8:6a:2d:07:c5:f6:b4:8e: 2d:e1:a5:31:36:4a:e8:aa:48:cb:60:44:cd:a2:b7:11:fd:5b: e5:6e:7d:08:95:b2:64:15:29:9d:a5:16:2a:c7:d2:44:2f:89: c5:45:30:ae:f5:24:26:62:20:af:8a:c9:ed:20:6b:56:4d:0e: bf:2a:43:af:fb:f3:86:13:c4:71:8e:62:22:31:03:b0:16:48: ba:97:5f:6e:4e:59:4f:2c:2f:e0:6c:9d:63:7a:a7:bc:9e:7e: 6d:f6:b5:cc:6b:ed:f9:c9:d9:6f:f6:f9:3b:c5:2f:b0:e9:ce: 8e:6d:3f:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjYwOTAzMDIyNzQ2WhcNMjYwOTEwMDIyNzQ2WjAYMRYwFAYD VQQDEw02YTk4ZGIyMi1kNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvQf/4QHixt/0/V/unLxNK6YafFRNHsLsEwy60rzXFpkzjUJ9fzZ6GzrWIEN 3K626Hdrb7kumo3nF/4tWv3qz642S9wyzxu8dcAM3UY6ptM+jEouAkuiqF/FNh0Y KxJC/aNaFAybWTJ+sfbYDPgy+g5QDpecn0IwiHmoePr/r4iVynnItG+ib8p5GryY CWxnf+uwCevTwTYV2V0UEhFIGSi8KpwdMb8BoL4MiLcRkvbpU68UxdcIOUN2RQxf EuOmH2ClslQmZtj76OS4pjhKBxoy2EKefKE5D2ZCxSIMPwq/XdPfrg92SZWSrXMh kh2TGSDoTMFavC5EjZvUMTKZvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA15F4MA bO2pwzZ88HUsH7sYdJbcMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6 TEp2UFV1VG5jdUNtODZZeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALeVfHYe6JXuTiguLBew74Qv72uy+GElT1wRLrnG3AwwVJKcuF0MUCsSBdxcP LGf12yGu+1PgTw0hau6nqgFQ33vAjvfgbcTCcI0Mj5k/0IrN3UXcABUaA8QX90BV ZXA6RGdUzKmkYYWmJ5PFDuuOo9Ruh38BMZZ2qnvL8HVQltyRo7h1fw6/zrhqLQfF 9rSOLeGlMTZK6KpIy2BEzaK3Ef1b5W59CJWyZBUpnaUWKsfSRC+JxUUwrvUkJmIg r4rJ7SBrVk0OvypDr/vzhhPEcY5iIjEDsBZIupdfbk5ZTywv4GydY3qnvJ5+bfa1 zGvt+cnZb/b5O8UvsOnOjm0/Dg== -----END CERTIFICATE-----Generated at Thu Sep 3 21:58:25 2026 by rpki-client