$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: xsKks84nZByaJXd0on3kkK0/b+7wFyV//juBcEFf90I= Subject key identifier: 67:6C:C8:15:F2:F9:63:F7:BE:22:C8:8C:02:CC:F2:C5:B2:25:5F:09 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: CB Signing time: Sat 03 Oct 2026 07:30:41 +0000 Manifest this update: Sat 03 Oct 2026 07:30:41 +0000 Manifest next update: Sat 10 Oct 2026 07:30:41 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: 1huppfI1d23ovwjCV0xWbM+P180HtnnJo7e3uQaU9IA=) 2: 3FC9B39A85F311F1B9F14C6174A30FBC.roa (hash: qJ2bVAouoKIVfVIofWHiZscX7T1VX94hLapNol1xSzg=) 3: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: Yhm7+m6I9lWu4bRq4rLXmeSCG3dRSGkgkhbHl5g6RH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Oct 3 07:30:41 2026 GMT Not After : Oct 10 07:30:41 2026 GMT Subject: CN=6ac0af21-9bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:ee:54:39:e7:a7:14:a5:ca:56:53:c6:39: 03:f3:aa:c3:f7:c4:8f:f0:af:6d:89:18:78:04:c0: a2:61:9e:df:a8:0c:43:3e:6a:89:ea:0b:a7:9c:b9: b1:d7:5e:b2:34:41:6b:f4:94:e8:45:51:5f:fe:99: 23:12:71:53:f0:56:96:46:13:2b:f4:1a:58:87:d6: 57:39:95:4d:d1:37:45:51:31:cf:f5:1c:19:41:3a: 66:95:9c:21:e3:58:8e:99:d6:f6:6d:f1:de:5d:51: f0:f3:93:7d:78:80:70:ea:37:f2:e2:0f:92:18:af: c7:dd:bd:37:b9:f4:e2:35:fe:51:da:a1:20:0f:41: 66:9f:92:00:66:f4:e3:7a:46:d6:7d:df:8b:2a:85: ca:a8:d5:fc:d1:87:61:ca:25:a0:5d:fa:1d:53:9f: d0:42:b1:c0:e4:dd:78:8a:d6:e8:cc:86:bd:00:77: 20:7c:54:e7:6f:88:fb:f7:a5:15:57:b2:cd:2b:44: c8:52:96:cb:bf:eb:ef:4f:54:d5:4f:fd:2e:f2:d3: 87:2c:7c:be:7c:ed:a3:9f:ba:85:33:b5:e5:4b:c8: f8:90:8d:ed:11:53:9a:87:1b:22:4b:f9:fa:64:e7: 37:a0:8a:6d:3c:13:f0:6b:31:e5:34:88:23:8b:a1: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:C8:15:F2:F9:63:F7:BE:22:C8:8C:02:CC:F2:C5:B2:25:5F:09 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c8:64:fd:b3:30:c6:4d:91:1a:01:21:d2:e5:a3:5d:30:ff: cb:15:31:d5:22:38:c6:98:15:7f:a4:ee:87:4b:94:19:59:90: e9:09:91:bf:ea:11:6a:69:b2:55:56:6c:f2:fa:c9:3c:1c:b1: 4b:f7:7a:34:ad:07:31:09:94:b2:b6:8a:db:2e:0e:cc:f7:b5: eb:b8:d7:c0:aa:60:9e:1b:6a:27:a0:e3:cf:36:e5:51:77:7c: 49:8b:f6:d6:aa:ab:14:25:8c:e8:58:95:a4:cb:b4:f0:79:b5: c3:1c:cd:61:96:c8:08:73:ae:ef:48:79:0d:90:d1:e9:c2:4a: 0f:37:6e:dd:9b:ae:66:74:c8:1b:00:4b:78:85:78:e8:48:cb: 21:7f:11:5d:6a:1c:4b:99:c5:ce:83:d5:46:ca:cb:88:5f:39: 2b:f0:ee:2c:22:94:71:76:35:ab:7e:0f:f3:e8:16:66:84:ce: ae:63:7c:43:6a:60:1a:e7:33:53:bb:a0:03:ba:39:5c:23:46: e5:64:fc:bb:bd:65:f7:b2:6f:9a:47:e8:54:0b:5c:61:1a:42: be:76:7b:bb:e5:ac:02:a2:bd:b4:4e:dc:66:58:e3:93:c7:29: d1:c0:43:2c:a7:18:3b:a4:53:33:ce:29:db:78:5a:e6:95:28: 06:eb:d6:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc2MTUxMTAvBgNVBAUTKDIzNzQ3ODZFODdDNEEwRUMzRDZGQTRDMEI3ODRFNDJG RUUwMDNBNkQwHhcNMjYxMDAzMDczMDQxWhcNMjYxMDEwMDczMDQxWjAYMRYwFAYD VQQDEw02YWMwYWYyMS05YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkPuVDnnpxSlylZTxjkD86rD98SP8K9tiRh4BMCiYZ7fqAxDPmqJ6gunnLmx 116yNEFr9JToRVFf/pkjEnFT8FaWRhMr9BpYh9ZXOZVN0TdFUTHP9RwZQTpmlZwh 41iOmdb2bfHeXVHw85N9eIBw6jfy4g+SGK/H3b03ufTiNf5R2qEgD0Fmn5IAZvTj ekbWfd+LKoXKqNX80YdhyiWgXfodU5/QQrHA5N14itbozIa9AHcgfFTnb4j796UV V7LNK0TIUpbLv+vvT1TVT/0u8tOHLHy+fO2jn7qFM7XlS8j4kI3tEVOahxsiS/n6 ZOc3oIptPBPwazHlNIgji6G/UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdsyBXy +WP3viLIjALM8sWyJV8JMB8GA1UdIwQYMBaAFCN0eG6HxKDsPW+kwLeE5C/uADpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzYxNS9CQUYzOEU4QTkx RjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9mRW9PdzliNlRBdDRUa0wtNEFP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzYxNS9CQUYzOEU4QTkxRjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9mRW9P dzliNlRBdDRUa0wtNEFPbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfchk/bMwxk2RGgEh0uWjXTD/yxUx1SI4xpgVf6Tuh0uUGVmQ6QmRv+oRammy VVZs8vrJPByxS/d6NK0HMQmUsraK2y4OzPe167jXwKpgnhtqJ6DjzzblUXd8SYv2 1qqrFCWM6FiVpMu08Hm1wxzNYZbICHOu70h5DZDR6cJKDzdu3ZuuZnTIGwBLeIV4 6EjLIX8RXWocS5nFzoPVRsrLiF85K/DuLCKUcXY1q34P8+gWZoTOrmN8Q2pgGucz U7ugA7o5XCNG5WT8u71l97JvmkfoVAtcYRpCvnZ7u+WsAqK9tE7cZljjk8cp0cBD LKcYO6RTM84p23ha5pUoBuvWtA== -----END CERTIFICATE-----Generated at Sun Oct 4 16:55:09 2026 by rpki-client