$ rpki-client -vvvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json) Hash identifier: mOoIyxFgyPNCw9SlpUFOsexK6wtH/SJmfnHCws/KGcY= Subject key identifier: 91:E9:F8:51:92:9E:34:D7:38:48:44:DA:56:CF:9E:7D:17:74:50:42 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 0AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft Manifest number: 0AD8 Signing time: Sun 30 Aug 2026 19:28:55 +0000 Manifest this update: Sun 30 Aug 2026 19:28:55 +0000 Manifest next update: Sun 06 Sep 2026 19:28:55 +0000 Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: GxUv96r9+dvVP0uWEypcsG78sxpCTmn+kjBn/1bhxvQ=) 2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: To2SD2tNBDc4eW/OhRZGvUrX6miaNNQeREHTTJIGg6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 19:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: Aug 30 19:28:55 2026 GMT Not After : Sep 6 19:28:55 2026 GMT Subject: CN=6a948477-440d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:1f:f3:9a:ef:7a:9a:f9:05:39:75:34:fb: b4:7e:c8:30:1d:11:91:98:cd:61:d3:79:ae:a4:e1: 54:39:04:09:6b:80:39:16:7f:7b:7a:5a:3a:bb:1d: 42:8a:4e:20:90:e2:9a:1e:42:4f:e8:ee:af:35:4f: 75:bf:02:4e:d0:d5:cc:a6:41:53:84:0f:6b:d9:61: 40:6c:a5:15:72:e9:71:e2:5e:82:4f:25:9b:3a:3a: dd:74:bc:fb:cf:35:c4:84:e9:b2:df:ff:a9:2e:cc: 40:e9:81:d0:5d:c9:84:16:89:5c:b8:10:d8:29:2b: b6:1e:fc:c2:90:10:3f:90:09:b9:14:a5:59:d5:cf: 2e:1c:24:44:3e:11:d5:30:18:aa:73:60:e1:37:70: 93:ec:e1:6d:ac:e6:fd:a6:e9:22:e6:3f:4c:d2:7f: ec:f1:7f:16:fc:8e:24:1d:1d:77:5c:03:03:5c:a6: d0:70:df:11:36:d6:87:83:bf:c2:f0:25:26:61:90: ff:fc:d4:c7:2f:9d:8f:a9:a2:86:ec:4c:65:ce:b5: bd:56:bf:ed:6d:03:bf:4f:d4:10:92:cf:ec:bc:62: e2:cd:31:e1:cc:de:ae:51:13:f0:01:06:f0:15:74: ef:51:47:6e:bf:7c:ad:8c:f3:51:42:3b:0b:fd:3f: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:F8:51:92:9E:34:D7:38:48:44:DA:56:CF:9E:7D:17:74:50:42 X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:81:d2:31:07:95:78:7b:19:e8:49:74:9e:ff:c4:34:fa:2d: b8:7f:d9:58:23:ef:97:50:52:49:70:10:6f:72:24:27:26:f0: 8c:3b:c5:c3:2e:13:9d:97:fa:89:ea:4f:eb:99:ae:a6:55:a9: 8b:0d:ab:bd:d9:0f:f5:56:e0:b3:34:b9:e8:47:40:06:97:7c: 78:78:50:22:7b:bd:1d:47:86:e7:97:65:ca:ba:c4:d3:ae:d7: ed:65:8b:fd:32:d3:47:d8:eb:cc:19:9b:4c:23:64:ec:d4:53: 93:38:7b:d2:96:46:87:ef:10:b5:13:8e:fc:99:c2:6c:11:bf: 71:90:d9:49:94:e2:43:3d:db:49:a0:91:02:95:82:c7:09:5d: 4a:9b:b8:72:ae:ca:cd:03:df:26:51:85:85:e7:90:aa:34:0c: 63:97:41:cc:10:8e:14:77:08:0b:58:db:e1:8b:dd:31:11:b1: 1b:cc:72:89:be:89:0e:33:97:d0:17:a3:e2:c3:4b:6d:25:64: b1:e7:48:41:dd:b7:f7:44:d2:fc:3c:8e:0a:a0:e0:33:54:a6: c1:59:93:b6:6d:aa:ae:d2:b4:5e:1b:63:28:6f:41:5d:42:53: f4:eb:62:60:df:7e:80:03:d7:b9:9b:5f:c0:74:c6:b1:93:cf: 39:45:53:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjYwODMwMTkyODU1WhcNMjYwOTA2MTkyODU1WjAYMRYwFAYD VQQDEw02YTk0ODQ3Ny00NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww0f85rvepr5BTl1NPu0fsgwHRGRmM1h03mupOFUOQQJa4A5Fn97elo6ux1C ik4gkOKaHkJP6O6vNU91vwJO0NXMpkFThA9r2WFAbKUVculx4l6CTyWbOjrddLz7 zzXEhOmy3/+pLsxA6YHQXcmEFolcuBDYKSu2HvzCkBA/kAm5FKVZ1c8uHCREPhHV MBiqc2DhN3CT7OFtrOb9puki5j9M0n/s8X8W/I4kHR13XAMDXKbQcN8RNtaHg7/C 8CUmYZD//NTHL52PqaKG7ExlzrW9Vr/tbQO/T9QQks/svGLizTHhzN6uURPwAQbw FXTvUUduv3ytjPNRQjsL/T8DDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHp+FGS njTXOEhE2lbPnn0XdFBCMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDM1QS8zQzYwOUI0NDdDNjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJV Sy1LaVZKUTBrYS1xaEZTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt4HSMQeVeHsZ6El0nv/ENPotuH/ZWCPvl1BSSXAQb3IkJybwjDvFwy4TnZf6 iepP65muplWpiw2rvdkP9VbgszS56EdABpd8eHhQInu9HUeG55dlyrrE067X7WWL /TLTR9jrzBmbTCNk7NRTkzh70pZGh+8QtROO/JnCbBG/cZDZSZTiQz3bSaCRApWC xwldSpu4cq7KzQPfJlGFheeQqjQMY5dBzBCOFHcIC1jb4YvdMRGxG8xyib6JDjOX 0Bej4sNLbSVksedIQd2390TS/DyOCqDgM1SmwVmTtm2qrtK0XhtjKG9BXUJT9Oti YN9+gAPXuZtfwHTGsZPPOUVTtw== -----END CERTIFICATE-----Generated at Mon Aug 31 14:15:09 2026 by rpki-client