$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: msIiYeWEkI+AmFO/DGUn6pAuLr1F1h8bi1gLIbu3fuU= Subject key identifier: D2:70:A3:11:0C:99:7F:0E:7D:32:83:28:DA:93:0B:EA:C3:09:CB:EB Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: D2 Signing time: Thu 03 Sep 2026 06:58:22 +0000 Manifest this update: Thu 03 Sep 2026 06:58:21 +0000 Manifest next update: Thu 10 Sep 2026 06:58:21 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: bWSDnlQVhdpwnrS4dkHLoY4VLbus6trImjWqF9v/v/s=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Sep 3 06:58:21 2026 GMT Not After : Sep 10 06:58:21 2026 GMT Subject: CN=6a991a8d-1bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:f1:36:2c:4f:15:5b:f7:1a:7f:77:1c:28: 47:3d:f6:c6:2e:7a:1e:aa:07:fd:0d:01:b9:b8:0b: 51:b1:77:5c:e4:0b:2a:ad:ab:47:38:9a:00:2d:3b: 8a:3d:e3:c3:90:9c:dd:bd:49:ba:7c:18:3a:b4:b7: 2d:cc:e3:9e:cb:08:06:0e:ad:fb:b7:9f:13:ec:0a: 13:0a:28:9e:de:f0:08:ea:fc:80:71:53:ae:d0:53: 84:b7:c8:2e:eb:c0:c4:4b:70:3c:ca:c4:50:2e:2a: 9a:4c:c0:e0:00:0d:ca:89:9a:55:79:7d:69:da:48: e1:89:08:56:b9:54:99:09:d0:ef:97:6d:ed:b0:4f: 24:7e:ad:87:7e:34:f3:ca:3d:7b:22:c6:18:a0:e7: 35:df:0c:5e:bd:d0:e7:8f:f9:94:9f:50:79:87:a9: a2:cb:ea:ce:db:db:d7:28:bc:56:54:b4:f9:8c:c6: b0:19:4f:bc:a8:9f:c3:d9:67:00:ed:3b:c1:8d:95: f2:36:46:16:3a:0f:5e:5f:ed:a3:66:a9:da:aa:eb: 38:2f:6a:0c:3d:81:d7:1b:d5:5d:1e:6b:11:d1:e7: 26:46:71:3c:ff:1d:f7:b1:68:f4:4d:88:67:a9:0f: e0:3e:dd:41:41:b7:c8:51:e6:34:e3:85:b9:c0:7c: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:70:A3:11:0C:99:7F:0E:7D:32:83:28:DA:93:0B:EA:C3:09:CB:EB X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:5e:d7:39:18:d7:a2:0d:ea:cd:d5:62:91:dd:6e:f0:a7: 4e:82:95:ad:53:3f:f8:b7:83:44:6c:72:56:35:58:13:c3:56: 58:78:8e:5e:b0:82:f4:95:ec:84:3d:d8:c9:31:2f:73:ed:3c: 2a:fd:a8:19:c6:8e:6b:c0:a3:bd:59:36:6e:d8:6d:22:91:ed: 99:79:f0:b3:47:4c:05:2e:85:7a:eb:55:64:62:2e:27:ca:62: 15:61:f9:d3:37:a3:ec:ee:26:27:51:ae:4c:49:b5:3e:50:6c: 71:ac:4f:ef:32:99:c0:7d:76:15:df:df:13:0e:d4:3b:7e:87: cf:d5:47:9b:9c:1f:fc:85:ed:65:e1:16:17:ef:ba:b5:2e:5f: d2:4e:6c:00:69:1f:b6:6c:2c:1d:93:fe:8f:da:96:25:da:30: 79:e7:d1:4c:a2:89:9a:fa:1c:e7:b2:a0:39:5c:63:ad:ec:e6: 73:c0:fe:37:90:6e:b8:5d:07:53:e4:27:f5:51:62:b2:25:ea: 8e:2a:aa:e8:8f:bd:6f:6e:7d:43:35:3b:b5:1e:3d:c4:a5:32: 3e:e5:ce:61:13:29:dc:74:02:8c:1b:b4:92:53:76:45:58:e8: 16:ea:7c:6f:5e:60:ef:0e:93:f1:cd:5c:23:bc:00:a7:10:d6: 9c:49:5e:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYwOTAzMDY1ODIxWhcNMjYwOTEwMDY1ODIxWjAYMRYwFAYD VQQDEw02YTk5MWE4ZC0xYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2LxNixPFVv3Gn93HChHPfbGLnoeqgf9DQG5uAtRsXdc5AsqratHOJoALTuK PePDkJzdvUm6fBg6tLctzOOeywgGDq37t58T7AoTCiie3vAI6vyAcVOu0FOEt8gu 68DES3A8ysRQLiqaTMDgAA3KiZpVeX1p2kjhiQhWuVSZCdDvl23tsE8kfq2HfjTz yj17IsYYoOc13wxevdDnj/mUn1B5h6miy+rO29vXKLxWVLT5jMawGU+8qJ/D2WcA 7TvBjZXyNkYWOg9eX+2jZqnaqus4L2oMPYHXG9VdHmsR0ecmRnE8/x33sWj0TYhn qQ/gPt1BQbfIUeY044W5wHyPEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJwoxEM mX8OfTKDKNqTC+rDCcvrMB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEepe1zkY16IN6s3VYpHdbvCnToKVrVM/+LeDRGxyVjVYE8NWWHiOXrCC9JXs hD3YyTEvc+08Kv2oGcaOa8CjvVk2bthtIpHtmXnws0dMBS6FeutVZGIuJ8piFWH5 0zej7O4mJ1GuTEm1PlBscaxP7zKZwH12Fd/fEw7UO36Hz9VHm5wf/IXtZeEWF++6 tS5f0k5sAGkftmwsHZP+j9qWJdoweefRTKKJmvoc57KgOVxjrezmc8D+N5BuuF0H U+Qn9VFisiXqjiqq6I+9b259QzU7tR49xKUyPuXOYRMp3HQCjBu0klN2RVjoFup8 b15g7w6T8c1cI7wApxDWnElesA== -----END CERTIFICATE-----Generated at Sat Sep 5 05:20:22 2026 by rpki-client