$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft File: 3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json) Hash identifier: VxFYh0U89+f25MVG2PN2/1TrevoC6Ri7xyvlVqhEQ5k= Subject key identifier: BF:C2:F5:BA:C4:95:85:67:89:83:8C:EB:AD:0C:CE:D3:AC:44:B5:44 Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F Certificate issuer: /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft Manifest number: 0129 Signing time: Fri 23 Oct 2026 06:29:32 +0000 Manifest this update: Fri 23 Oct 2026 06:29:32 +0000 Manifest next update: Fri 30 Oct 2026 06:29:32 +0000 Files and hashes: 1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: fB4H6IMytCgis+7aa0N7TZi+GeNCxrhtAdk9XU82o+I=) 2: B28E01329B0711F199CD6D115E11F970.roa (hash: u/s9p3ptKydcBVwdA+lqK9E1OMc1aWdkwOrHDlz9hYI=) 3: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 06:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Validity Not Before: Oct 23 06:29:32 2026 GMT Not After : Oct 30 06:29:32 2026 GMT Subject: CN=6adafecc-eaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:ed:e3:5b:9d:48:af:82:50:b9:6a:9b:46: b3:86:da:b2:b0:d5:75:6d:5a:81:6c:77:cf:0b:03: 77:cd:6d:6d:61:ea:f4:79:d3:9a:09:93:1f:e5:12: ac:d0:b0:ab:07:f4:85:35:2b:f6:c2:0b:fb:94:d5: aa:fc:c7:56:39:1b:3e:24:3d:b5:65:6c:8c:29:70: e7:b9:87:2d:7a:81:64:fb:49:f5:53:b5:21:81:92: 6c:07:cd:2f:75:7b:e1:9c:85:cc:98:40:61:9b:19: 47:dc:a6:11:43:90:2d:ca:0f:9b:60:04:08:dc:52: 4c:a5:c4:29:b7:21:20:fb:24:ba:58:83:70:00:7f: 6f:df:0c:46:dc:fa:d4:a8:3b:1b:1d:de:83:d9:03: 18:73:39:0b:cb:f5:a7:81:6f:40:0b:4f:aa:3d:a4: 01:e3:e8:1e:e7:75:89:75:d7:37:9a:60:02:64:88: ab:2e:5f:f1:20:8d:0d:69:cd:94:27:a5:30:79:f7: f5:9a:e4:5c:fd:a6:b4:6c:78:1c:b8:e9:e0:89:15: f8:a2:7b:e1:96:03:6b:85:83:55:02:62:d9:18:f6: b0:a1:0d:07:46:3e:a4:b4:47:5e:f8:15:4f:37:87: dd:10:aa:bb:ab:6a:88:8c:41:59:63:ee:ed:fa:a9: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C2:F5:BA:C4:95:85:67:89:83:8C:EB:AD:0C:CE:D3:AC:44:B5:44 X509v3 Authority Key Identifier: keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:97:6b:91:df:65:89:f7:88:fb:e7:37:8a:56:19:b2:cb:e7: c1:00:43:a8:a3:50:82:09:84:f7:7f:1e:7e:ac:06:f6:58:c1: 92:2b:6c:96:6b:4e:97:a9:1c:24:39:6c:60:01:d4:82:4f:9b: 89:2b:e3:23:27:ce:fb:1d:a9:ad:5d:5b:3b:8f:d1:85:b9:c8: b1:5c:72:25:40:26:9d:74:b7:f4:39:b3:23:0d:bb:2f:e0:86: 73:36:7f:f5:0e:94:8a:5f:62:9c:e2:01:6b:44:4e:2e:6c:47: a2:3e:9f:17:45:e7:b7:cf:10:52:fb:a2:9e:c5:c7:85:1d:f4: 74:02:ae:77:97:3b:fc:7d:37:fc:9e:11:38:14:eb:cb:e5:e0: 10:5d:f0:db:e6:5a:e6:df:54:51:c2:a3:c1:4e:01:4a:51:85: 47:61:e1:17:b4:a0:eb:8e:e0:65:fa:25:84:c3:ab:24:4e:6c: 3e:5e:e4:d0:9b:f0:5d:de:97:4b:e9:5e:f4:13:20:39:51:04: 65:98:47:a1:b5:42:95:9d:5c:da:51:b2:50:df:65:15:fa:9f: f9:bf:1a:1e:1b:e7:a7:77:b6:10:49:41:bc:74:da:82:f8:4b: 4d:ca:44:b1:9b:5e:7e:a8:93:cd:e3:0a:94:1b:e5:29:e3:ad: da:2d:a6:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVFQ0YxMTAvBgNVBAUTKERGMzFDRjE4NTA5MEUxNTQ5NjVFRkZGQkM2NjRCREQ3 MjFEODA3NUYwHhcNMjYxMDIzMDYyOTMyWhcNMjYxMDMwMDYyOTMyWjAYMRYwFAYD VQQDEw02YWRhZmVjYy1lYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB/t41udSK+CULlqm0azhtqysNV1bVqBbHfPCwN3zW1tYer0edOaCZMf5RKs 0LCrB/SFNSv2wgv7lNWq/MdWORs+JD21ZWyMKXDnuYcteoFk+0n1U7UhgZJsB80v dXvhnIXMmEBhmxlH3KYRQ5Atyg+bYAQI3FJMpcQptyEg+yS6WINwAH9v3wxG3PrU qDsbHd6D2QMYczkLy/WngW9AC0+qPaQB4+ge53WJddc3mmACZIirLl/xII0Nac2U J6Uweff1muRc/aa0bHgcuOngiRX4onvhlgNrhYNVAmLZGPawoQ0HRj6ktEde+BVP N4fdEKq7q2qIjEFZY+7t+qn/qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/C9brE lYVniYOM660MztOsRLVEMB8GA1UdIwQYMBaAFN8xzxhQkOFUll7/+8Zkvdch2Adf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUVDRi9FRjZCOTA1QzI1 RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRWU1dYdl83eG1TOTF5SFlC MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN6SFBHRkNRNFZTV1h2Xzd4bVM5MXlIWUIxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUVDRi9FRjZCOTA1QzI1RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRW U1dYdl83eG1TOTF5SFlCMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5drkd9lifeI++c3ilYZssvnwQBDqKNQggmE938efqwG9ljBkitslmtOl6kc JDlsYAHUgk+biSvjIyfO+x2prV1bO4/RhbnIsVxyJUAmnXS39DmzIw27L+CGczZ/ 9Q6Uil9inOIBa0ROLmxHoj6fF0Xnt88QUvuinsXHhR30dAKud5c7/H03/J4ROBTr y+XgEF3w2+Za5t9UUcKjwU4BSlGFR2HhF7Sg647gZfolhMOrJE5sPl7k0JvwXd6X S+le9BMgOVEEZZhHobVClZ1c2lGyUN9lFfqf+b8aHhvnp3e2EElBvHTagvhLTcpE sZtefqiTzeMKlBvlKeOt2i2mug== -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:53 2026 by rpki-client