$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json) Hash identifier: 3qBTatpfHW6xTu0DrHdyagmbJxh4qpDjl3DZOy3xh+A= Subject key identifier: 12:B8:D4:3A:86:01:AA:58:DE:DF:66:BD:6C:E9:7B:59:5A:B8:83:E3 Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft Manifest number: B2 Signing time: Fri 11 Sep 2026 07:11:53 +0000 Manifest this update: Fri 11 Sep 2026 07:11:53 +0000 Manifest next update: Fri 18 Sep 2026 07:11:53 +0000 Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: QhxPDIcX6dt3bEanu0REP+5LKZKrfmPSSKfrSAUEujc=) 2: 9CBDB3D273C211F18F47108281A30FBC.roa (hash: QzjpXPwZ05RXkz8fbxHltT903W4r3GjO2bGz/Fnh4bQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Validity Not Before: Sep 11 07:11:53 2026 GMT Not After : Sep 18 07:11:53 2026 GMT Subject: CN=6aa3a9b9-5ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:f1:4b:ba:6f:c1:c3:6b:d0:0a:f7:f2:a1: 2b:15:f8:66:76:42:48:ec:e0:88:50:b9:0f:a0:be: 0c:6e:9c:77:a6:6e:15:a5:84:b7:2f:77:6f:7b:08: 4f:a0:58:b7:8e:b4:da:3b:54:5b:f1:c1:62:66:a0: e5:6c:65:90:27:9d:93:e3:1d:fb:79:93:ab:43:bc: b2:ab:8e:20:17:86:c6:e5:fb:06:38:a2:1c:47:e9: d5:fa:11:3d:21:09:5e:f3:61:87:c5:d6:d5:62:f1: e2:e1:95:a3:35:7a:aa:9e:45:9f:6b:95:25:67:eb: cc:3f:9a:60:13:8c:98:40:a4:ae:76:51:00:1c:30: 57:95:81:c4:70:f7:fe:1c:29:b8:29:ba:3d:99:b4: 70:09:15:ac:b2:a0:51:38:b1:58:7b:07:c2:c1:47: 6b:67:a7:ec:b4:a4:49:f0:9c:60:5a:06:34:06:d3: 71:f6:e6:e6:e5:2a:1b:d5:6d:ca:7b:21:23:b7:08: 7b:67:89:49:9e:7b:de:46:60:25:af:17:02:4d:c8: 76:b1:84:a6:e1:01:83:fb:4e:34:bf:c2:b2:66:28: 5b:36:5b:09:0d:73:5c:23:64:24:8f:19:2c:d9:a1: de:c2:70:ba:ee:75:00:1f:6b:e8:46:dd:47:d7:4a: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B8:D4:3A:86:01:AA:58:DE:DF:66:BD:6C:E9:7B:59:5A:B8:83:E3 X509v3 Authority Key Identifier: keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:25:ca:f0:88:78:ef:5f:9a:0e:88:e8:39:6e:03:57:ef:bd: cb:4c:48:87:e3:aa:0c:e3:26:e8:8a:4e:e2:d3:13:14:c4:24: 71:87:e6:f6:b4:69:d4:44:57:f9:d5:82:3d:1e:32:63:93:62: c4:55:66:8f:27:50:dd:ff:39:53:00:1b:83:a8:c6:6b:3d:3c: 33:a2:e9:4f:2b:ba:74:fd:a4:3b:8d:55:8a:b9:ef:d3:dc:74: 71:2c:a4:29:6d:08:16:ab:c1:16:e8:6d:5f:93:88:ff:40:b2: cd:aa:33:5d:88:22:8f:27:65:25:5e:4d:2c:28:76:04:e2:4b: 70:fe:76:97:35:79:71:02:b0:c9:2d:a5:41:9c:c1:e6:20:c9: 25:ee:aa:72:99:c1:b5:e0:18:87:2f:23:f8:30:a9:3d:3d:66: 40:de:3b:1a:67:63:cb:30:76:22:91:91:b8:38:d4:06:06:9b: b5:58:4a:f9:1b:a0:7b:2c:aa:45:e3:c0:a3:df:12:74:df:33: b7:7d:93:e4:82:ed:b6:c8:e7:ab:b1:09:b8:63:77:7c:7a:cd: 42:87:da:25:68:1e:3b:48:62:6c:65:0b:23:66:e2:7b:b9:2e: d6:f8:76:c8:23:76:2d:46:fe:18:9c:04:0e:27:1c:69:10:e2: e9:59:b5:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2NTYxMTAvBgNVBAUTKERDOTkzRkFFODgxMEU5MzE0RjVBN0RGMDhENkYwQ0Q1 N0VBNTkxNkUwHhcNMjYwOTExMDcxMTUzWhcNMjYwOTE4MDcxMTUzWjAYMRYwFAYD VQQDEw02YWEzYTliOS01ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDLxS7pvwcNr0Ar38qErFfhmdkJI7OCIULkPoL4Mbpx3pm4VpYS3L3dvewhP oFi3jrTaO1Rb8cFiZqDlbGWQJ52T4x37eZOrQ7yyq44gF4bG5fsGOKIcR+nV+hE9 IQle82GHxdbVYvHi4ZWjNXqqnkWfa5UlZ+vMP5pgE4yYQKSudlEAHDBXlYHEcPf+ HCm4Kbo9mbRwCRWssqBROLFYewfCwUdrZ6fstKRJ8JxgWgY0BtNx9ubm5Sob1W3K eyEjtwh7Z4lJnnveRmAlrxcCTch2sYSm4QGD+040v8KyZihbNlsJDXNcI2Qkjxks 2aHewnC67nUAH2voRt1H10pRYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBK41DqG AapY3t9mvWzpe1lauIPjMB8GA1UdIwQYMBaAFNyZP66IEOkxT1p98I1vDNV+pZFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni81NDFDQzZGQUIw MEQxMUYwOERFNEVEN0JDNEY5QUUwMi8zSmtfcm9nUTZURlBXbjN3alc4TTFYNmxr VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKa19yb2dRNlRGUFduM3dqVzhNMVg2bGtXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni81NDFDQzZGQUIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi8zSmtfcm9nUTZU RlBXbjN3alc4TTFYNmxrVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtSXK8Ih471+aDojoOW4DV++9y0xIh+OqDOMm6IpO4tMTFMQkcYfm9rRp1ERX +dWCPR4yY5NixFVmjydQ3f85UwAbg6jGaz08M6LpTyu6dP2kO41Virnv09x0cSyk KW0IFqvBFuhtX5OI/0CyzaozXYgijydlJV5NLCh2BOJLcP52lzV5cQKwyS2lQZzB 5iDJJe6qcpnBteAYhy8j+DCpPT1mQN47GmdjyzB2IpGRuDjUBgabtVhK+Rugeyyq RePAo98SdN8zt32T5ILttsjnq7EJuGN3fHrNQofaJWgeO0hibGULI2bie7ku1vh2 yCN2LUb+GJwEDiccaRDi6Vm1fg== -----END CERTIFICATE-----Generated at Fri Sep 11 14:52:59 2026 by rpki-client