$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft File: 3hf-sZrsTfV-srV4rPueEDE5byA.mft (raw, json) Hash identifier: pRSpIQkFChjnGU3Jr5WaPn/lozkd5JiTGgx9ETYK5TY= Subject key identifier: 1C:DE:E1:57:10:47:87:09:F0:3B:C9:54:C2:9F:C4:FD:2F:B3:1C:67 Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft Manifest number: 09 Signing time: Mon 31 Aug 2026 09:37:00 +0000 Manifest this update: Mon 31 Aug 2026 09:37:00 +0000 Manifest next update: Mon 07 Sep 2026 09:37:00 +0000 Files and hashes: 1: 3hf-sZrsTfV-srV4rPueEDE5byA.crl (hash: LvrtUBkWdrECirjeibbFIieqaVDzgzzr2Q/+TZz6GSk=) 2: B9E472609C0411F19B0A551E6B11F970.roa (hash: W9ajXAaa/aJ/h3Z8yYRoZBKfYFtDP2fJjqDya4amGXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Validity Not Before: Aug 31 09:37:00 2026 GMT Not After : Sep 7 09:37:00 2026 GMT Subject: CN=6a954b3c-d556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:2b:8e:32:3a:b2:28:f7:0f:0f:bc:3d:a6: 14:6b:40:8e:c1:7d:ba:ee:6f:2d:1f:87:8f:a4:a4: 1e:38:9c:91:99:b3:b5:a5:53:b0:46:68:44:50:c1: 89:a0:1a:1f:80:5c:16:79:11:ac:19:bc:06:c7:09: 4e:3b:e3:ed:83:e5:a8:17:34:f6:14:41:e7:90:b5: 8b:c1:48:7e:e6:16:8b:b6:cf:d9:77:fe:56:9c:68: e3:9a:8c:d0:73:79:0c:3f:07:22:3a:84:f4:53:b0: a8:f9:e1:ea:c1:99:c9:6b:9e:83:63:ef:91:62:ce: fa:68:aa:e9:a2:01:d5:fa:65:bf:f5:c0:25:d6:c4: 95:af:73:57:eb:3d:d4:40:6b:8c:64:d5:e1:77:58: b2:07:06:ee:b6:09:af:0f:b1:48:05:f4:48:9c:a1: 78:b1:85:49:a1:30:be:58:fc:48:f0:0c:ed:bf:a0: 7b:27:9a:8e:25:d2:4b:85:0f:2e:f7:e2:90:58:e6: a3:aa:07:ff:2c:54:87:45:62:5a:61:c0:17:a8:a3: e1:b1:44:16:c6:1c:a1:54:e5:70:14:3f:db:fb:7d: f8:e9:e3:01:c8:d0:da:5d:3e:da:f4:e6:ed:f5:86: 83:d5:2d:2d:b2:37:8a:bc:02:99:e2:47:50:53:a6: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:E1:57:10:47:87:09:F0:3B:C9:54:C2:9F:C4:FD:2F:B3:1C:67 X509v3 Authority Key Identifier: keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b7:ea:08:fe:1c:46:e2:e7:0c:d7:8d:76:4b:2f:1c:0f:52: dd:2d:b7:39:bf:79:3c:ea:05:cd:ba:ff:60:fa:a1:bb:65:c1: e1:8a:8e:b0:b8:c3:fb:25:23:e5:d4:13:79:a6:a8:84:f7:58: 45:ae:79:06:38:63:d5:5f:34:e2:68:1f:95:bb:c3:61:00:65: 82:d1:e0:32:d3:76:46:f5:fa:da:5b:aa:69:23:c8:de:74:8b: 22:4c:2a:a3:fe:17:a7:94:9f:a9:0a:8d:6f:94:75:9b:17:0c: 0e:03:b6:50:ca:f7:5c:f7:e1:07:9f:18:0a:4c:87:ea:10:e2: d0:ac:28:a0:44:e5:97:5d:b0:fb:d0:85:cf:fb:4d:94:92:37: c8:8a:25:80:15:22:1a:60:c8:9f:78:32:ba:6c:30:7b:38:14: 2d:2c:4d:9b:f0:4b:24:ff:8d:94:40:02:2d:1c:ad:f6:be:b2: 26:b7:4e:31:9a:3a:59:41:a3:07:9a:f2:8b:85:29:73:45:20: a3:29:1f:be:8f:35:bf:67:77:6c:3d:31:fa:27:6a:a7:1c:95: c0:bc:28:8c:44:0e:5a:5a:38:e1:a0:68:54:f7:6b:7b:21:d9: d9:f0:38:6a:ef:be:bb:65:c2:4e:f0:71:f2:19:bf:6d:88:9a: a1:65:41:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoREUxN0ZFQjE5QUVDNERGNTdFQjJCNTc4QUNGQjlFMTAz MTM5NkYyMDAeFw0yNjA4MzEwOTM3MDBaFw0yNjA5MDcwOTM3MDBaMBgxFjAUBgNV BAMTDTZhOTU0YjNjLWQ1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWWCuOMjqyKPcPD7w9phRrQI7Bfbruby0fh4+kpB44nJGZs7WlU7BGaERQwYmg Gh+AXBZ5EawZvAbHCU474+2D5agXNPYUQeeQtYvBSH7mFou2z9l3/lacaOOajNBz eQw/ByI6hPRTsKj54erBmclrnoNj75FizvpoqumiAdX6Zb/1wCXWxJWvc1frPdRA a4xk1eF3WLIHBu62Ca8PsUgF9EicoXixhUmhML5Y/EjwDO2/oHsnmo4l0kuFDy73 4pBY5qOqB/8sVIdFYlphwBeoo+GxRBbGHKFU5XAUP9v7ffjp4wHI0NpdPtr05u31 hoPVLS2yN4q8ApniR1BTpvRBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHN7hVxBH hwnwO8lUwp/E/S+zHGcwHwYDVR0jBBgwFoAU3hf+sZrsTfV+srV4rPueEDE5byAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzNFNkUyRURDOUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZWLXNyVjRyUHVlRURFNWJ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2hmLXNacnNUZlYtc3JWNHJQdWVFREU1YnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw REM4LzNFNkUyRURDOUMwNDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZW LXNyVjRyUHVlRURFNWJ5QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKt+oI/hxG4ucM1412Sy8cD1LdLbc5v3k86gXNuv9g+qG7ZcHhio6wuMP7JSPl 1BN5pqiE91hFrnkGOGPVXzTiaB+Vu8NhAGWC0eAy03ZG9fraW6ppI8jedIsiTCqj /henlJ+pCo1vlHWbFwwOA7ZQyvdc9+EHnxgKTIfqEOLQrCigROWXXbD70IXP+02U kjfIiiWAFSIaYMifeDK6bDB7OBQtLE2b8Esk/42UQAItHK32vrImt04xmjpZQaMH mvKLhSlzRSCjKR++jzW/Z3dsPTH6J2qnHJXAvCiMRA5aWjjhoGhU92t7IdnZ8Dhq 7767ZcJO8HHyGb9tiJqhZUFh -----END CERTIFICATE-----Generated at Tue Sep 1 02:28:24 2026 by rpki-client