$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: tA4pWkNzB78YGE6cYe+mkJtf9imYUVYOgYyQAFhJOmk= Subject key identifier: 83:D5:5C:39:CF:AC:84:0F:37:8E:D8:B9:53:B0:AB:7D:B4:AC:5E:27 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1E07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1DFA Signing time: Tue 06 Oct 2026 16:07:11 +0000 Manifest this update: Tue 06 Oct 2026 16:07:11 +0000 Manifest next update: Tue 13 Oct 2026 16:07:11 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: dbGAsW07jK/BZ9o05LL+FfPXenfqnEmlr/M7rRVbN9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7687 (0x1e07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Oct 6 16:07:11 2026 GMT Not After : Oct 13 16:07:11 2026 GMT Subject: CN=6ac51caf-908c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:64:db:34:7d:a6:74:ec:ba:ea:8a:a1:f0: 5c:b8:57:c7:7f:de:85:0f:f7:07:d3:6e:a9:b4:cc: 20:1f:a4:27:45:6e:48:53:66:3d:4b:f8:99:92:d9: 54:13:7b:d8:3e:b0:00:63:4c:84:98:dc:56:86:34: 4b:e4:6e:13:d9:80:11:bd:18:1c:e9:f8:ef:ae:77: 5c:d6:28:51:b4:2a:61:28:b9:20:7d:89:e1:61:59: 03:fc:f7:23:9b:88:ee:1f:2b:3a:66:66:cf:17:ee: 97:83:99:dc:05:5d:06:86:22:28:e6:34:a3:b9:7d: 8c:12:df:7c:bf:3d:d1:f2:03:4f:4e:07:64:fa:b7: ab:55:19:91:2d:14:56:0d:5a:53:41:1e:75:73:8b: 73:92:02:55:94:68:e0:a3:3c:21:bd:5a:cb:5f:d5: e7:7b:3e:33:f4:b2:4e:ed:f8:18:4c:6d:01:b3:30: ff:cb:6a:a6:ca:f9:b8:ac:20:66:31:15:ad:4d:40: 2f:bc:76:38:31:f1:1a:dd:f7:09:a4:4d:f3:ff:00: 39:ef:f5:bb:bf:91:0f:30:8e:2c:6c:f5:ad:ef:e8: 1a:a0:88:14:98:da:2d:61:21:63:00:e1:4d:99:f6: 89:ef:84:8a:63:36:cf:29:33:7b:2e:83:e8:78:13: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D5:5C:39:CF:AC:84:0F:37:8E:D8:B9:53:B0:AB:7D:B4:AC:5E:27 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:cb:15:1f:cd:e1:8a:5f:66:50:4a:2f:54:69:f1:36:9c: 95:a7:df:98:ad:7f:c4:98:df:12:eb:31:4c:69:a3:19:77:69: e5:51:71:63:16:34:6e:4f:6d:01:3d:5a:f1:1e:4a:0b:7c:0a: 94:cb:8b:72:4e:fc:01:77:40:4f:18:e7:d5:4a:b4:30:f1:e8: 2e:8e:b9:0a:34:cb:57:20:47:ef:70:a6:37:68:06:75:3a:09: cc:6a:1c:02:0c:25:74:69:9e:f2:45:85:80:d1:c1:46:6c:51: d8:fc:16:97:56:3a:de:42:1e:f5:70:aa:85:6b:b6:1b:c4:5a: 66:98:ca:59:7c:3f:50:6b:f0:69:5a:d4:e6:41:b7:72:ce:cc: 2b:70:2a:25:b7:21:d6:e4:0e:a0:78:2d:f7:f4:b6:e9:78:65: b0:77:84:b4:04:27:c6:b3:18:fe:c7:8c:fa:5f:7a:91:57:4c: ee:d1:bd:14:1a:83:c9:a7:06:32:1e:53:73:b2:46:6e:bf:66: cf:db:bf:d2:80:2e:9f:7b:4b:2c:34:50:50:9d:4e:fa:a1:e6: 78:d6:43:78:b4:39:a4:cd:2e:15:88:79:e9:5a:37:f3:db:06: 17:a5:4a:ea:71:b3:08:3b:c6:3f:03:3b:23:71:ad:33:50:6a: 18:26:e6:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjYxMDA2MTYwNzExWhcNMjYxMDEzMTYwNzExWjAYMRYwFAYD VQQDEw02YWM1MWNhZi05MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQRk2zR9pnTsuuqKofBcuFfHf96FD/cH026ptMwgH6QnRW5IU2Y9S/iZktlU E3vYPrAAY0yEmNxWhjRL5G4T2YARvRgc6fjvrndc1ihRtCphKLkgfYnhYVkD/Pcj m4juHys6ZmbPF+6Xg5ncBV0GhiIo5jSjuX2MEt98vz3R8gNPTgdk+rerVRmRLRRW DVpTQR51c4tzkgJVlGjgozwhvVrLX9Xnez4z9LJO7fgYTG0BszD/y2qmyvm4rCBm MRWtTUAvvHY4MfEa3fcJpE3z/wA57/W7v5EPMI4sbPWt7+gaoIgUmNotYSFjAOFN mfaJ74SKYzbPKTN7LoPoeBPbXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPVXDnP rIQPN47YuVOwq320rF4nMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApYzLFR/N4YpfZlBKL1Rp8TaclaffmK1/xJjfEusxTGmjGXdp5VFxYxY0bk9t AT1a8R5KC3wKlMuLck78AXdATxjn1Uq0MPHoLo65CjTLVyBH73CmN2gGdToJzGoc AgwldGme8kWFgNHBRmxR2PwWl1Y63kIe9XCqhWu2G8RaZpjKWXw/UGvwaVrU5kG3 cs7MK3AqJbch1uQOoHgt9/S26XhlsHeEtAQnxrMY/seM+l96kVdM7tG9FBqDyacG Mh5Tc7JGbr9mz9u/0oAun3tLLDRQUJ1O+qHmeNZDeLQ5pM0uFYh56Vo389sGF6VK 6nGzCDvGPwM7I3GtM1BqGCbmCg== -----END CERTIFICATE-----Generated at Thu Oct 8 09:01:03 2026 by rpki-client