$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft File: 3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json) Hash identifier: TZsFLAKA1PBcXpXRV4VcF98VtwzqOn1VCBnC6qFupak= Subject key identifier: 43:B9:16:A0:B7:C0:85:05:33:F0:CB:91:54:4D:25:E3:6F:34:E4:87 Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F Certificate issuer: /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft Manifest number: 0111 Signing time: Sat 05 Sep 2026 05:57:40 +0000 Manifest this update: Sat 05 Sep 2026 05:57:40 +0000 Manifest next update: Sat 12 Sep 2026 05:57:40 +0000 Files and hashes: 1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: BLzUazBH99D/1QXmfwIeRiWzDZ2SiPDxb8riwm2jHZQ=) 2: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=) 3: B28E01329B0711F199CD6D115E11F970.roa (hash: u/s9p3ptKydcBVwdA+lqK9E1OMc1aWdkwOrHDlz9hYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Validity Not Before: Sep 5 05:57:40 2026 GMT Not After : Sep 12 05:57:40 2026 GMT Subject: CN=6a9baf54-1e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:3a:b6:49:b4:43:fd:99:f2:28:32:94:17: 2f:76:2f:0a:ab:8e:10:22:16:7f:84:4b:fe:bd:0d: 6f:8f:17:a8:a5:c7:2d:a2:2c:26:41:df:ce:e3:14: 09:f0:18:9a:a7:e8:2e:c6:e4:14:cf:3e:11:10:66: 4d:3d:30:bd:4a:45:2b:87:00:8f:87:4a:fa:e2:ee: 97:a4:20:ae:59:ea:b4:ea:46:4c:c2:ba:15:06:fe: aa:dc:8a:89:82:2e:bb:f3:67:72:71:a2:ac:0d:87: 5b:cc:34:ac:9e:dc:ec:f7:7c:1f:a5:f8:ee:c3:dc: 37:77:5f:90:25:17:da:e1:ff:f6:e3:9f:a5:fe:e7: 88:f4:f1:9a:34:cb:c2:80:99:38:71:77:7d:7e:59: 64:5a:25:17:86:d2:59:29:ac:a1:58:72:7f:38:b5: f7:11:e8:40:32:b5:75:4c:88:f0:cb:cd:2d:06:c6: 42:84:e5:31:0b:31:c5:c2:fd:fb:32:b2:95:b2:3c: e2:97:14:62:98:78:6b:fe:5a:ce:81:f2:1a:fe:b2: 9a:d5:f4:bc:5e:b6:44:46:aa:2d:94:9e:1e:eb:53: 74:5f:8a:60:f5:5b:4e:74:36:ac:be:7a:44:f9:98: dd:5d:9f:6d:6e:58:28:f3:d9:25:86:1d:b2:7d:0d: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B9:16:A0:B7:C0:85:05:33:F0:CB:91:54:4D:25:E3:6F:34:E4:87 X509v3 Authority Key Identifier: keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1a:c6:55:56:cc:44:11:06:17:0a:b1:de:23:b4:1b:03:42: 52:44:60:4c:d9:79:1e:1b:10:4a:04:4d:f2:dc:8c:1a:43:45: 06:37:e6:cf:e4:52:4e:97:28:48:2e:c6:9e:ec:41:3f:4b:ef: cf:4b:d8:1d:b4:4c:6b:e5:80:dd:d9:52:79:3b:0d:2f:c9:e8: 44:4a:0a:f9:d0:30:3f:a3:37:55:4d:86:c1:e6:41:1f:66:3e: 6a:88:e7:40:b4:a1:e8:55:36:f6:1d:f0:31:79:4e:30:87:f6: 48:fd:6b:9f:24:9f:e5:ae:c0:5d:98:f7:59:e5:e0:5b:0d:a0: 33:c9:bc:02:0c:da:9c:ec:5b:f6:b4:75:31:df:0a:7c:d1:70: d5:46:55:81:75:6f:65:25:a0:b4:aa:21:0f:97:5d:79:49:c7: c8:dc:6a:91:3a:93:c3:0a:14:52:39:03:13:ab:b2:e6:63:63: 21:0c:1e:0e:c0:50:f9:ff:84:23:cc:c4:89:0a:92:54:15:5d: 31:63:9b:f8:fd:99:91:0a:bf:45:81:6d:ed:c5:97:78:2e:03: 1e:b9:90:e6:e1:e6:06:06:34:8e:91:96:61:58:ec:4a:ae:73: 0f:39:71:82:b2:10:41:d5:46:3e:20:65:24:b2:02:c9:81:9a: 27:32:4d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVFQ0YxMTAvBgNVBAUTKERGMzFDRjE4NTA5MEUxNTQ5NjVFRkZGQkM2NjRCREQ3 MjFEODA3NUYwHhcNMjYwOTA1MDU1NzQwWhcNMjYwOTEyMDU1NzQwWjAYMRYwFAYD VQQDEw02YTliYWY1NC0xZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfU6tkm0Q/2Z8igylBcvdi8Kq44QIhZ/hEv+vQ1vjxeopcctoiwmQd/O4xQJ 8Biap+guxuQUzz4REGZNPTC9SkUrhwCPh0r64u6XpCCuWeq06kZMwroVBv6q3IqJ gi6782dycaKsDYdbzDSsntzs93wfpfjuw9w3d1+QJRfa4f/245+l/ueI9PGaNMvC gJk4cXd9fllkWiUXhtJZKayhWHJ/OLX3EehAMrV1TIjwy80tBsZChOUxCzHFwv37 MrKVsjzilxRimHhr/lrOgfIa/rKa1fS8XrZERqotlJ4e61N0X4pg9VtOdDasvnpE +ZjdXZ9tblgo89klhh2yfQ0cxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEO5FqC3 wIUFM/DLkVRNJeNvNOSHMB8GA1UdIwQYMBaAFN8xzxhQkOFUll7/+8Zkvdch2Adf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUVDRi9FRjZCOTA1QzI1 RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRWU1dYdl83eG1TOTF5SFlC MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN6SFBHRkNRNFZTV1h2Xzd4bVM5MXlIWUIxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUVDRi9FRjZCOTA1QzI1RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRW U1dYdl83eG1TOTF5SFlCMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxrGVVbMRBEGFwqx3iO0GwNCUkRgTNl5HhsQSgRN8tyMGkNFBjfmz+RSTpco SC7GnuxBP0vvz0vYHbRMa+WA3dlSeTsNL8noREoK+dAwP6M3VU2GweZBH2Y+aojn QLSh6FU29h3wMXlOMIf2SP1rnySf5a7AXZj3WeXgWw2gM8m8AgzanOxb9rR1Md8K fNFw1UZVgXVvZSWgtKohD5ddeUnHyNxqkTqTwwoUUjkDE6uy5mNjIQweDsBQ+f+E I8zEiQqSVBVdMWOb+P2ZkQq/RYFt7cWXeC4DHrmQ5uHmBgY0jpGWYVjsSq5zDzlx grIQQdVGPiBlJLICyYGaJzJNyQ== -----END CERTIFICATE-----Generated at Sat Sep 5 17:46:03 2026 by rpki-client