$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: he1tVuHmwfohZ2P+QWs7hl/j6S6odgrVI5aK6VgMueg= Subject key identifier: C1:00:48:27:86:27:D7:18:8B:A1:37:E8:CE:9E:67:6D:C3:23:7E:CB Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 01BA Signing time: Wed 19 Aug 2026 04:33:04 +0000 Manifest this update: Wed 19 Aug 2026 04:33:03 +0000 Manifest next update: Wed 26 Aug 2026 04:33:03 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: 93aP15DR4Ha4FIYDhLenrgUkR0ZdF2DV303JVxRa5t4=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Aug 19 04:33:03 2026 GMT Not After : Aug 26 04:33:03 2026 GMT Subject: CN=6a8531ff-de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:be:17:17:c0:8e:d6:38:60:18:cd:73:f9: 3b:b0:2e:4d:a7:d5:62:3d:1f:b5:8f:88:ff:11:4c: 81:4f:69:8b:dd:ee:61:87:33:da:ee:1b:e6:75:42: 32:1b:8f:05:7f:5d:61:27:c2:30:65:8e:f4:f4:0a: 7d:12:8b:16:7f:02:c9:b9:06:8a:cb:8a:ca:45:2f: 41:0a:23:eb:f1:52:23:e2:98:93:77:03:91:51:03: cc:ae:47:47:5f:39:30:d9:b8:c7:35:21:bb:18:be: 36:18:3b:92:b5:ea:80:f8:79:39:fd:ec:b7:f1:68: d6:13:02:5d:4a:99:d8:8f:33:f3:4f:d3:c6:a4:b6: 67:85:bf:15:67:9b:11:1d:97:58:7a:af:67:36:1f: f1:f3:8a:a4:f0:5e:6d:03:97:67:3d:15:5a:23:78: 80:22:65:b8:03:f7:3a:a1:97:00:00:db:b2:e7:88: 91:06:84:73:1b:da:7a:ec:da:16:c2:4a:77:42:37: e2:ab:42:ec:e4:5c:9c:69:45:2f:59:d1:94:2e:cb: f3:25:0e:da:f9:b9:df:56:f9:e2:69:b4:3c:87:6a: fb:88:5a:13:9a:52:63:53:a1:0b:ec:cf:86:5a:b8: e3:eb:c4:ba:c7:a4:38:d4:01:19:2f:f4:81:41:c2: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:00:48:27:86:27:D7:18:8B:A1:37:E8:CE:9E:67:6D:C3:23:7E:CB X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e6:f2:04:e1:80:79:c1:e4:18:c6:1c:03:36:9f:fd:64:98: de:30:24:46:eb:f5:20:45:32:15:ee:bd:57:1b:a2:19:ea:69: 88:40:53:af:02:64:51:c6:7e:e3:3d:cd:bb:2c:c8:7e:c8:21: ad:f3:41:58:a7:95:06:9c:b6:8f:d8:7f:c1:44:24:ad:2e:c0: bf:3b:9a:ef:5f:9e:94:2f:49:5a:8c:97:fc:47:8f:19:13:13: e2:43:53:f4:60:33:cf:3e:78:62:19:8b:21:b8:05:9f:4b:f7: 80:aa:61:1b:18:18:14:8c:6c:88:46:ce:58:2e:1e:a2:b0:4c: 00:27:92:2a:16:64:12:a1:56:18:b0:af:ff:a4:79:09:c2:79: 8d:85:e7:df:f7:fe:4d:05:1c:34:91:a0:4d:16:b3:37:f1:cb: eb:17:65:fb:09:23:fe:60:56:63:a0:2d:5b:be:da:73:d7:82: 70:ed:fc:9c:b3:bd:a3:c8:44:bf:5b:33:12:ab:0f:3e:d6:8c: 70:b7:fa:1e:de:71:4d:ec:ad:b2:33:92:e1:61:cc:01:bd:25: 1f:c3:fb:4e:6d:38:c5:32:87:d7:f4:f6:63:36:69:37:4c:81: e6:d0:ac:91:f5:74:ca:25:9a:5b:10:f6:00:a6:fe:01:21:3e: 55:77:1f:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwODE5MDQzMzAzWhcNMjYwODI2MDQzMzAzWjAYMRYwFAYD VQQDEw02YTg1MzFmZi1kZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUS+FxfAjtY4YBjNc/k7sC5Np9ViPR+1j4j/EUyBT2mL3e5hhzPa7hvmdUIy G48Ff11hJ8IwZY709Ap9EosWfwLJuQaKy4rKRS9BCiPr8VIj4piTdwORUQPMrkdH Xzkw2bjHNSG7GL42GDuSteqA+Hk5/ey38WjWEwJdSpnYjzPzT9PGpLZnhb8VZ5sR HZdYeq9nNh/x84qk8F5tA5dnPRVaI3iAImW4A/c6oZcAANuy54iRBoRzG9p67NoW wkp3Qjfiq0Ls5FycaUUvWdGULsvzJQ7a+bnfVvniabQ8h2r7iFoTmlJjU6EL7M+G Wrjj68S6x6Q41AEZL/SBQcLRAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEASCeG J9cYi6E36M6eZ23DI37LMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiebyBOGAecHkGMYcAzaf/WSY3jAkRuv1IEUyFe69VxuiGeppiEBTrwJkUcZ+ 4z3NuyzIfsghrfNBWKeVBpy2j9h/wUQkrS7Avzua71+elC9JWoyX/EePGRMT4kNT 9GAzzz54YhmLIbgFn0v3gKphGxgYFIxsiEbOWC4eorBMACeSKhZkEqFWGLCv/6R5 CcJ5jYXn3/f+TQUcNJGgTRazN/HL6xdl+wkj/mBWY6AtW77ac9eCcO38nLO9o8hE v1szEqsPPtaMcLf6Ht5xTeytsjOS4WHMAb0lH8P7Tm04xTKH1/T2YzZpN0yB5tCs kfV0yiWaWxD2AKb+ASE+VXcfWw== -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:22 2026 by rpki-client