$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: jI0xxI3bc59EvDOpzx1ba5eix2G80ovg9uCQA9d80iQ= Subject key identifier: 4D:65:8C:40:89:04:F3:34:5C:FB:E2:3B:76:FD:0F:DD:22:71:6F:56 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 1187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1B1D Signing time: Sun 04 Oct 2026 17:14:25 +0000 Manifest this update: Sun 04 Oct 2026 17:14:25 +0000 Manifest next update: Sun 11 Oct 2026 17:14:25 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: 0GAWp4oHFTZT+XMPS6V4a2I1H8qDpeFZnbDU53eLGcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Oct 4 17:14:25 2026 GMT Not After : Oct 11 17:14:25 2026 GMT Subject: CN=6ac28971-66e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:3d:c6:21:d0:b4:6a:31:87:77:b0:2b:d3: 6f:73:21:d2:c5:49:f6:43:4f:06:cc:7a:8f:9a:6a: 1f:00:73:96:8a:50:dc:08:3d:a3:7a:55:c3:4d:27: 11:a2:81:02:61:46:1d:9c:73:a3:71:b2:cb:a8:2e: f9:09:21:80:3a:48:51:68:34:b0:aa:7c:8a:8c:de: 86:c5:9a:2c:8b:05:35:65:db:ca:2e:5c:d3:8b:8e: 04:c3:17:33:52:77:fd:c4:11:00:9f:af:b9:6f:7a: 52:24:59:1f:28:a9:4b:46:5e:52:74:1e:22:e5:bf: b9:95:4e:c4:11:ea:6d:a6:98:a2:67:b3:03:53:cc: 72:36:1b:2c:c8:59:fc:3e:d1:20:2c:ee:90:33:58: 5b:99:cc:15:3c:04:a6:33:d4:26:34:d5:ce:f8:68: 39:bd:2f:81:f5:b1:d1:db:5f:02:27:05:eb:89:1d: 5e:b5:a6:be:0d:c6:68:f1:37:be:d2:23:ad:87:9f: e3:92:35:bb:56:c7:0f:b8:9f:e3:89:10:a7:d4:3e: 59:26:3a:fa:ce:82:ba:64:c2:a4:3a:5e:61:a5:6b: 2a:ac:23:b0:0e:99:37:d2:c3:0f:e3:60:ad:2c:2f: 70:20:57:fe:ce:c1:9f:f5:f6:9b:ab:97:d1:ff:06: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:8C:40:89:04:F3:34:5C:FB:E2:3B:76:FD:0F:DD:22:71:6F:56 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3b:8c:1e:a0:45:48:1b:fa:1d:cf:82:da:5c:b6:49:a2:a2: cf:c8:b4:71:64:ad:34:30:4f:c1:a4:19:27:3a:21:04:1b:ff: ec:22:90:a1:e4:ac:ff:a0:4d:93:69:ef:83:8d:24:01:d4:1a: 9e:7a:57:73:54:47:a6:ce:bb:a2:d5:12:2f:a1:b0:9e:f4:3f: 69:64:f1:55:7f:e0:92:7d:d4:52:d9:7e:97:a7:3f:df:d9:bb: c1:f3:1f:67:73:81:09:68:f2:40:91:8c:5d:c0:86:79:db:c9: 40:af:73:61:39:dc:2a:ae:3f:75:39:ad:71:a4:aa:b2:02:6a: df:95:22:0c:9d:58:5f:0b:14:53:f6:c0:af:6a:3b:15:99:d2: 36:98:bf:96:8b:0a:3b:50:eb:f2:60:1e:b1:9b:16:26:27:2b: fa:d0:61:79:90:b2:4d:f8:02:5c:a6:74:41:20:6c:8f:32:66: 5f:e7:01:58:dd:00:21:2b:23:d3:08:67:bd:f1:ce:35:da:d7: 32:2d:87:ff:9e:f6:3f:da:49:2f:26:19:40:ed:c4:4c:d1:5b: 2f:26:2b:16:da:b4:7f:17:71:78:46:8f:dd:6e:1b:41:91:35: 98:6e:09:a2:c7:bc:d7:6c:70:c0:66:e1:e7:b4:4f:f3:58:b3: 28:cb:64:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjYxMDA0MTcxNDI1WhcNMjYxMDExMTcxNDI1WjAYMRYwFAYD VQQDEw02YWMyODk3MS02NmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWQ9xiHQtGoxh3ewK9NvcyHSxUn2Q08GzHqPmmofAHOWilDcCD2jelXDTScR ooECYUYdnHOjcbLLqC75CSGAOkhRaDSwqnyKjN6GxZosiwU1ZdvKLlzTi44Ewxcz Unf9xBEAn6+5b3pSJFkfKKlLRl5SdB4i5b+5lU7EEeptppiiZ7MDU8xyNhssyFn8 PtEgLO6QM1hbmcwVPASmM9QmNNXO+Gg5vS+B9bHR218CJwXriR1etaa+DcZo8Te+ 0iOth5/jkjW7VscPuJ/jiRCn1D5ZJjr6zoK6ZMKkOl5hpWsqrCOwDpk30sMP42Ct LC9wIFf+zsGf9fabq5fR/wZwFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1ljECJ BPM0XPviO3b9D90icW9WMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMjuMHqBFSBv6Hc+C2ly2SaKiz8i0cWStNDBPwaQZJzohBBv/7CKQoeSs/6BN k2nvg40kAdQannpXc1RHps67otUSL6GwnvQ/aWTxVX/gkn3UUtl+l6c/39m7wfMf Z3OBCWjyQJGMXcCGedvJQK9zYTncKq4/dTmtcaSqsgJq35UiDJ1YXwsUU/bAr2o7 FZnSNpi/losKO1Dr8mAesZsWJicr+tBheZCyTfgCXKZ0QSBsjzJmX+cBWN0AISsj 0whnvfHONdrXMi2H/572P9pJLyYZQO3ETNFbLyYrFtq0fxdxeEaP3W4bQZE1mG4J ose812xwwGbh57RP81izKMtkeg== -----END CERTIFICATE-----Generated at Tue Oct 6 19:41:50 2026 by rpki-client