$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft File: 3hf-sZrsTfV-srV4rPueEDE5byA.mft (raw, json) Hash identifier: xM1+CCFiC+jtJZx4+0rne8zMzdr6MUNSAmo+54EJ1Zw= Subject key identifier: FA:32:FC:74:2E:B8:EC:B7:A3:EE:A9:7B:1D:16:18:D8:3F:AD:81:97 Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft Manifest number: 22 Signing time: Thu 15 Oct 2026 10:05:07 +0000 Manifest this update: Thu 15 Oct 2026 10:05:06 +0000 Manifest next update: Thu 22 Oct 2026 10:05:06 +0000 Files and hashes: 1: 3hf-sZrsTfV-srV4rPueEDE5byA.crl (hash: ByaeWIvtEU9mHSVi5RoELoNfJSqlP+2IVLLQ3YEcwW8=) 2: 3DC9CCC4AC4A11F199EB65634211F970.roa (hash: 9ASxwF0gTHSlKzDFapefVUpz6ogFigYAOzKtxdpXqvc=) 3: 3E5CDF8CAC4A11F199EB65634211F970.roa (hash: euLOWcKgKWGURDYxgn0BH7WUOGhmBm81XkTnvH0nRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 10:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Validity Not Before: Oct 15 10:05:06 2026 GMT Not After : Oct 22 10:05:06 2026 GMT Subject: CN=6ad0a552-bc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:6d:e9:d1:41:39:0d:21:c3:04:72:a7:e2: 4b:0b:fc:aa:58:08:5d:b4:09:86:79:ac:60:c1:09: 3a:9b:96:65:a8:45:6a:af:8f:af:49:86:7a:0d:66: cf:3f:7b:5f:b3:06:01:e4:57:f7:87:a0:c8:2b:b7: 7d:6d:32:19:1f:db:45:ae:1e:fa:54:df:50:d7:f3: 51:30:e3:78:3b:41:0c:61:47:b9:74:ff:68:1f:62: 83:4c:89:5f:13:fd:e2:e6:d2:bf:b8:da:fe:a2:67: 39:c9:78:bb:2b:7c:99:52:b0:2a:73:14:01:c0:ce: bb:91:f7:84:eb:f6:24:81:67:13:9c:7d:5a:8a:c3: 29:0f:b9:15:14:5b:9c:aa:7b:69:2f:31:1c:bb:a2: cd:e1:89:a4:a2:08:4c:b2:53:c2:4e:d6:0b:24:8f: 8d:ef:23:0d:ba:1b:4a:e9:9d:e6:23:49:30:98:ce: 71:a1:bf:ab:8e:94:75:cb:b5:58:b3:e5:b3:54:b7: 31:d3:cf:06:a3:7f:ae:28:c3:b7:b8:1c:99:b8:dc: f6:b7:a5:34:01:68:31:02:c0:d1:b4:79:b7:22:7b: 65:0a:b3:99:9c:4d:ac:46:30:1f:2f:e4:77:8f:9e: 13:25:89:dc:54:84:38:d5:77:65:75:ab:fb:e3:af: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:FC:74:2E:B8:EC:B7:A3:EE:A9:7B:1D:16:18:D8:3F:AD:81:97 X509v3 Authority Key Identifier: keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:e6:77:85:7c:66:3a:01:2f:6c:e5:5c:10:7e:cd:da:45:1d: 28:10:ef:cd:9f:b4:02:03:1d:02:9b:e0:46:76:5f:2a:90:51: b4:87:c7:19:9d:f8:c5:44:22:bf:f8:e8:57:d3:42:7f:92:82: 8f:e2:3c:74:9b:7c:f1:62:a7:d6:d2:05:97:23:31:b3:37:23: 01:9d:2a:28:5f:11:e3:06:82:c3:e8:ec:94:38:83:f3:1f:e1: 03:e6:96:be:b9:54:22:d0:41:44:db:15:05:e8:51:92:28:f0: 75:a0:ae:76:c5:32:ea:e0:35:53:10:a6:da:b6:eb:07:6f:82: e0:63:fb:ea:ff:98:93:21:96:0a:89:77:8b:f7:c6:2d:0a:a7: 21:1b:70:d4:2c:d1:b5:20:82:a3:17:f4:26:cc:4f:a2:01:bc: b9:95:98:3d:d0:5e:9e:22:7c:54:50:1a:0c:4c:80:50:67:c4: 39:06:07:5a:b0:c7:3d:33:e4:c9:05:62:cb:01:03:82:af:96: 2d:08:a5:d6:3a:4c:9b:c1:40:8d:8f:40:4c:40:05:eb:99:66: 81:07:64:57:15:26:df:98:e2:4c:47:f4:86:1c:c5:f5:af:95: 76:67:96:7f:3e:3a:c7:15:67:76:cb:66:e4:3c:65:e0:09:00: 32:be:9d:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoREUxN0ZFQjE5QUVDNERGNTdFQjJCNTc4QUNGQjlFMTAz MTM5NkYyMDAeFw0yNjEwMTUxMDA1MDZaFw0yNjEwMjIxMDA1MDZaMBgxFjAUBgNV BAMTDTZhZDBhNTUyLWJjNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1wm3p0UE5DSHDBHKn4ksL/KpYCF20CYZ5rGDBCTqblmWoRWqvj69JhnoNZs8/ e1+zBgHkV/eHoMgrt31tMhkf20WuHvpU31DX81Ew43g7QQxhR7l0/2gfYoNMiV8T /eLm0r+42v6iZznJeLsrfJlSsCpzFAHAzruR94Tr9iSBZxOcfVqKwykPuRUUW5yq e2kvMRy7os3hiaSiCEyyU8JO1gskj43vIw26G0rpneYjSTCYznGhv6uOlHXLtViz 5bNUtzHTzwajf64ow7e4HJm43Pa3pTQBaDECwNG0ebcie2UKs5mcTaxGMB8v5HeP nhMlidxUhDjVd2V1q/vjr3l/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+jL8dC64 7Lej7ql7HRYY2D+tgZcwHwYDVR0jBBgwFoAU3hf+sZrsTfV+srV4rPueEDE5byAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzNFNkUyRURDOUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZWLXNyVjRyUHVlRURFNWJ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2hmLXNacnNUZlYtc3JWNHJQdWVFREU1YnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw REM4LzNFNkUyRURDOUMwNDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZW LXNyVjRyUHVlRURFNWJ5QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDX5neFfGY6AS9s5VwQfs3aRR0oEO/Nn7QCAx0Cm+BGdl8qkFG0h8cZnfjFRCK/ +OhX00J/koKP4jx0m3zxYqfW0gWXIzGzNyMBnSooXxHjBoLD6OyUOIPzH+ED5pa+ uVQi0EFE2xUF6FGSKPB1oK52xTLq4DVTEKbatusHb4LgY/vq/5iTIZYKiXeL98Yt CqchG3DULNG1IIKjF/QmzE+iAby5lZg90F6eInxUUBoMTIBQZ8Q5BgdasMc9M+TJ BWLLAQOCr5YtCKXWOkybwUCNj0BMQAXrmWaBB2RXFSbfmOJMR/SGHMX1r5V2Z5Z/ PjrHFWd2y2bkPGXgCQAyvp2f -----END CERTIFICATE-----Generated at Sat Oct 17 05:49:54 2026 by rpki-client