$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: Bp7zCRmwwYLr8nuVyBGDsmGI56/gVAjRIOK/kXNnfh0= Subject key identifier: 73:E5:46:E7:59:96:AE:2A:05:AB:6B:BC:D4:1C:E2:D8:98:ED:E1:24 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 0149 Signing time: Tue 25 Aug 2026 05:36:00 +0000 Manifest this update: Tue 25 Aug 2026 05:35:59 +0000 Manifest next update: Tue 01 Sep 2026 05:35:59 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: TPiFxlzWzXqXXK8ZB5cev9T2foV2MiKy2Nwsj9gEj1I=) 2: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=) 3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 05:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Aug 25 05:35:59 2026 GMT Not After : Sep 1 05:35:59 2026 GMT Subject: CN=6a8d29c0-3fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:f1:e9:bf:1c:33:b4:12:03:4c:1a:ac:ab: 25:a3:a0:c4:4a:f0:d4:60:aa:f8:cd:e5:d1:76:a4: ff:41:a5:c8:1e:e5:18:25:d4:04:58:ed:6a:6b:9d: 96:5a:d6:06:92:44:79:bb:fc:64:5c:32:7d:ff:08: e8:34:19:83:0c:dc:72:40:eb:c0:ea:c0:48:87:54: 71:bc:f3:e2:92:36:5c:7e:f9:58:46:aa:fa:db:f0: 6d:88:23:15:ee:f1:4a:43:bc:08:74:37:da:81:9f: 8f:1e:08:c0:57:95:7c:a2:38:e5:ea:77:b3:ef:97: 6b:2a:2a:d8:fb:e8:4f:35:f0:70:50:94:83:ba:35: 5c:a9:b2:8b:b5:bb:2c:03:38:9b:9e:18:93:0e:bc: 7d:f3:d1:c5:a4:43:aa:b6:cb:ce:45:11:a2:40:cd: f9:9f:27:17:23:19:91:90:bf:e7:2c:89:a8:ca:7e: ba:5c:35:76:13:db:1a:a0:49:a2:eb:e5:b9:42:0a: e2:f8:0a:aa:16:e2:73:26:a4:54:3b:cd:6a:27:b2: c6:60:16:6f:5a:0a:82:8e:9f:2b:cc:c4:ba:05:95: 0a:09:72:86:ee:dd:83:f0:eb:19:c3:f5:e6:6a:fb: a5:6c:d8:e8:cf:55:9e:92:b2:9e:12:2a:21:d6:dc: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:46:E7:59:96:AE:2A:05:AB:6B:BC:D4:1C:E2:D8:98:ED:E1:24 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f8:a9:f7:ba:9a:a7:e2:ce:4d:de:19:4d:a8:7c:2c:63:b9: d6:bb:c2:3c:68:60:f8:8c:a5:56:6a:c3:d8:13:f0:5f:58:48: 45:da:57:2f:25:92:00:dd:37:d6:a3:40:b6:00:bb:b7:4b:f0: 06:95:7f:d6:ba:4b:07:04:b3:0c:d3:c8:a9:52:a4:e5:39:b0: 71:d6:3e:9a:fa:2d:6b:da:17:bc:52:33:d5:e9:fb:87:cf:e7: 15:5c:44:58:23:42:de:04:63:e4:e3:95:b2:fe:0d:9d:f6:71: 3b:fb:d7:32:6b:3f:f2:6e:8b:c0:50:10:26:1b:7a:13:5d:5b: 12:54:00:f2:3f:1e:28:cc:fc:a9:98:ac:78:28:fc:ce:b9:47: e5:cc:d0:fb:66:37:f2:e3:a4:04:7e:17:97:b6:21:a8:82:1e: 03:cc:88:e7:c6:05:99:f6:db:47:d1:a4:c3:bd:4c:e7:18:e3: 2d:01:0c:42:e5:5d:ea:12:79:2b:fc:c7:a6:d7:7c:b6:16:6a: a7:96:26:bb:e3:94:bc:c1:96:76:f7:55:de:a2:09:5c:fc:15: 78:ac:08:11:3a:a9:95:24:54:c7:31:99:d3:25:8c:42:aa:8a: ae:3c:89:89:11:ef:75:f0:f6:32:d8:15:20:d5:79:56:21:61: cd:9d:40:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4 QTZFRENGQjkwHhcNMjYwODI1MDUzNTU5WhcNMjYwOTAxMDUzNTU5WjAYMRYwFAYD VQQDEw02YThkMjljMC0zZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBDx6b8cM7QSA0warKslo6DESvDUYKr4zeXRdqT/QaXIHuUYJdQEWO1qa52W WtYGkkR5u/xkXDJ9/wjoNBmDDNxyQOvA6sBIh1RxvPPikjZcfvlYRqr62/BtiCMV 7vFKQ7wIdDfagZ+PHgjAV5V8ojjl6nez75drKirY++hPNfBwUJSDujVcqbKLtbss AzibnhiTDrx989HFpEOqtsvORRGiQM35nycXIxmRkL/nLImoyn66XDV2E9saoEmi 6+W5Qgri+AqqFuJzJqRUO81qJ7LGYBZvWgqCjp8rzMS6BZUKCXKG7t2D8OsZw/Xm avulbNjoz1WekrKeEioh1txFnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPlRudZ lq4qBatrvNQc4tiY7eEkMB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5 dXFKN18tUC1XbnVLYnR6N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAavip97qap+LOTd4ZTah8LGO51rvCPGhg+IylVmrD2BPwX1hIRdpXLyWSAN03 1qNAtgC7t0vwBpV/1rpLBwSzDNPIqVKk5TmwcdY+mvota9oXvFIz1en7h8/nFVxE WCNC3gRj5OOVsv4NnfZxO/vXMms/8m6LwFAQJht6E11bElQA8j8eKMz8qZiseCj8 zrlH5czQ+2Y38uOkBH4Xl7YhqIIeA8yI58YFmfbbR9Gkw71M5xjjLQEMQuVd6hJ5 K/zHptd8thZqp5Ymu+OUvMGWdvdV3qIJXPwVeKwIETqplSRUxzGZ0yWMQqqKrjyJ iRHvdfD2MtgVINV5ViFhzZ1AHg== -----END CERTIFICATE-----Generated at Wed Aug 26 22:36:04 2026 by rpki-client