$ rpki-client -vvvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json) Hash identifier: 55zpMYe5WP+8odjDMSLOgin0UgHD1yITMxCDhRrmU8E= Subject key identifier: 60:1D:A7:A3:C2:1C:98:25:4F:C6:40:10:8F:8F:20:2D:BB:4C:60:96 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft Manifest number: 0AF5 Signing time: Mon 26 Oct 2026 19:23:12 +0000 Manifest this update: Mon 26 Oct 2026 19:23:12 +0000 Manifest next update: Mon 02 Nov 2026 19:23:12 +0000 Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: BBdHocNNrV27ox1sK6PcdKviMB6Jxy8hBbaQqKL0h0Y=) 2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: To2SD2tNBDc4eW/OhRZGvUrX6miaNNQeREHTTJIGg6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: Oct 26 19:23:12 2026 GMT Not After : Nov 2 19:23:12 2026 GMT Subject: CN=6adfa8a0-257d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:a4:51:52:c0:16:3c:2c:9b:2f:79:5f:14: 51:9e:85:b0:b2:27:a8:2d:13:2c:ad:64:5d:b2:0d: cb:65:a3:93:53:6e:b6:76:96:67:fc:50:93:8f:f1: 42:03:5e:81:cd:1b:18:af:2f:2c:dc:05:a1:b4:99: b0:28:47:49:75:85:0c:a8:d0:dd:90:02:bc:22:e6: e0:2f:12:b1:a4:24:0e:6a:24:91:f8:e5:88:86:3a: 15:f2:7e:d6:83:0e:bd:3a:ea:e0:78:bb:c9:f5:29: c6:7b:70:c6:0e:06:1f:d1:4c:65:83:da:22:fe:be: a2:07:81:eb:e4:45:49:e3:a5:7a:c3:28:f8:e9:8c: 33:d3:73:14:ca:e7:e7:94:74:c1:6d:e1:09:a5:02: 0c:de:20:ba:ec:20:1b:4f:66:1d:81:6a:f0:82:3f: 73:75:5a:38:5e:44:eb:6a:4a:c8:bd:2e:e1:91:06: 91:a8:2b:b6:3a:b4:5d:ec:b5:1d:76:c0:9f:50:4d: 84:53:f1:62:97:8d:bc:f8:aa:42:42:5e:6a:34:d0: d9:c5:e1:aa:6a:77:ab:88:7f:6a:f6:8b:eb:e0:0f: 50:a0:43:a9:86:9e:0e:72:d1:50:af:d8:48:d8:70: d5:c9:2d:78:7f:18:0c:46:3c:78:ac:91:7a:97:2e: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1D:A7:A3:C2:1C:98:25:4F:C6:40:10:8F:8F:20:2D:BB:4C:60:96 X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b9:a7:58:82:66:30:b6:ad:0c:1b:5e:4c:67:ce:b6:7b:37: 5e:05:6e:69:3c:66:a0:1b:da:64:fe:c9:59:33:82:b7:a8:97: 64:68:93:3c:7a:9b:12:42:24:12:58:db:f5:79:d0:ad:29:09: f3:0a:c3:1b:9a:06:65:56:b7:bc:c3:2a:8c:84:d7:fc:27:11: af:c1:e1:28:cd:8f:66:18:5a:d0:a3:3e:b8:ab:4c:0d:00:7c: 0d:bf:29:1b:b6:25:f9:c6:83:72:87:1a:cd:2c:f9:a3:47:ef: c4:c7:ff:73:35:d0:00:a7:d6:f7:a3:f8:7d:c9:b4:1f:96:ca: ad:00:ce:4c:e6:d9:5d:ec:f0:9a:27:a7:ba:8b:de:ab:d0:50: 31:ac:de:ac:d3:25:7e:bb:d2:f7:a5:f7:df:cd:52:91:97:91: d0:ff:62:2f:75:75:ab:f6:aa:44:fa:ba:8b:d7:e9:85:99:a1: 38:9c:36:90:31:ab:c5:03:1d:d9:d9:83:38:94:3c:e8:36:63: 31:a3:7a:c0:1d:9d:bc:fe:88:e6:b2:0b:ff:19:ec:e1:c9:f8: 26:9b:81:0a:14:56:ff:f6:37:7f:f5:76:e1:d1:ba:ea:ff:c6: 33:dc:3d:d3:a7:71:54:32:07:46:15:12:36:cf:b3:f7:b8:23: 32:cc:92:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjYxMDI2MTkyMzEyWhcNMjYxMTAyMTkyMzEyWjAYMRYwFAYD VQQDEw02YWRmYThhMC0yNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8qkUVLAFjwsmy95XxRRnoWwsieoLRMsrWRdsg3LZaOTU262dpZn/FCTj/FC A16BzRsYry8s3AWhtJmwKEdJdYUMqNDdkAK8IubgLxKxpCQOaiSR+OWIhjoV8n7W gw69OurgeLvJ9SnGe3DGDgYf0Uxlg9oi/r6iB4Hr5EVJ46V6wyj46Ywz03MUyufn lHTBbeEJpQIM3iC67CAbT2YdgWrwgj9zdVo4XkTrakrIvS7hkQaRqCu2OrRd7LUd dsCfUE2EU/Fil428+KpCQl5qNNDZxeGqaneriH9q9ovr4A9QoEOphp4OctFQr9hI 2HDVyS14fxgMRjx4rJF6ly7WbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAdp6PC HJglT8ZAEI+PIC27TGCWMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDM1QS8zQzYwOUI0NDdDNjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJV Sy1LaVZKUTBrYS1xaEZTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLmnWIJmMLatDBteTGfOtns3XgVuaTxmoBvaZP7JWTOCt6iXZGiTPHqbEkIk Eljb9XnQrSkJ8wrDG5oGZVa3vMMqjITX/CcRr8HhKM2PZhha0KM+uKtMDQB8Db8p G7Yl+caDcocazSz5o0fvxMf/czXQAKfW96P4fcm0H5bKrQDOTObZXezwmienuove q9BQMazerNMlfrvS96X3381SkZeR0P9iL3V1q/aqRPq6i9fphZmhOJw2kDGrxQMd 2dmDOJQ86DZjMaN6wB2dvP6I5rIL/xns4cn4JpuBChRW//Y3f/V24dG66v/GM9w9 06dxVDIHRhUSNs+z97gjMsySCQ== -----END CERTIFICATE-----Generated at Tue Oct 27 11:57:24 2026 by rpki-client