$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: GNZXud+5htC+nnePaboTc4Wb1yyLaLRdCs+qEAmHcy4= Subject key identifier: 6C:AF:1B:E5:9A:94:B5:09:60:0D:B5:1C:25:5E:82:B4:3F:22:0C:23 Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0CE0 Signing time: Thu 10 Sep 2026 18:26:44 +0000 Manifest this update: Thu 10 Sep 2026 18:26:43 +0000 Manifest next update: Thu 17 Sep 2026 18:26:43 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: wUPasuq3N8kIKn7o4oXFeixAnIB3/39/xOd41qtk4wE=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: 2ZECssZFKej2Bnmujg65SvPR+m2K68FZcUfUc+ikvVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3326 (0xcfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Sep 10 18:26:43 2026 GMT Not After : Sep 17 18:26:43 2026 GMT Subject: CN=6aa2f663-4638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:1b:3f:b9:f0:ef:50:d9:7b:7a:5d:19:4e: ff:d5:f8:67:ca:66:33:3d:b1:bf:df:7e:30:aa:55: 8f:d1:f4:14:5e:ac:ee:a7:5e:13:57:84:de:62:f0: 58:19:aa:b3:02:68:ee:85:2f:70:0a:e8:56:6d:76: cd:97:5c:89:a2:33:be:b3:8e:34:ae:14:d9:1b:6a: da:80:c8:35:e5:77:22:9a:21:54:3b:29:8b:1e:6c: 01:d7:53:52:cf:3d:9d:e7:23:19:ce:cf:5a:08:80: 1b:44:12:90:8d:51:c0:6a:55:28:86:98:cb:61:a9: 6b:ec:7d:0c:75:f4:52:a1:0a:1e:d0:65:d4:a5:b7: 85:c5:91:50:33:64:3d:f0:e3:e8:90:30:83:6e:07: 59:21:b3:58:27:04:e0:91:06:0c:a6:92:6d:7f:66: c7:28:02:f7:29:8f:14:9d:f3:38:9d:30:c3:28:33: 84:8e:29:1b:bd:59:b7:47:07:7c:1d:ea:2b:44:90: c9:6a:07:3d:75:e4:27:04:bb:47:4d:65:02:72:47: 77:31:40:b0:6a:ea:17:50:95:a4:99:a3:4f:e0:eb: 24:64:98:9d:18:10:2a:1f:3a:c7:f0:84:86:b3:43: 0c:d8:6b:7a:29:27:ed:af:d8:65:75:ff:19:a2:25: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:1B:E5:9A:94:B5:09:60:0D:B5:1C:25:5E:82:B4:3F:22:0C:23 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8d:3b:09:1a:24:31:20:31:f8:67:95:97:c9:27:1b:ce:80: 79:e2:ca:43:df:93:3b:73:7c:22:62:4a:97:35:6c:3c:1b:2d: 45:15:6e:e0:26:18:e6:6a:09:52:56:d9:96:68:29:40:f9:62: 0e:7a:5b:db:73:c4:8f:c7:fb:37:3b:0c:89:17:36:df:51:b8: 36:c2:e5:99:95:7f:76:10:60:8c:89:90:ed:29:ec:73:05:cc: 3c:f5:54:c6:b7:ed:7d:50:31:32:55:ec:50:87:82:26:0c:0c: 06:bb:e6:11:db:c4:14:f5:89:ac:45:6a:34:d5:d6:28:92:a1: f4:4e:22:39:35:f0:5a:1a:7b:52:88:c0:02:a4:47:19:84:e5: bf:61:ad:0c:2c:e2:e3:3c:de:99:d2:96:33:9e:67:12:c0:33: 77:d3:30:99:c4:74:ca:92:a9:e6:4a:bf:0f:20:1b:4c:6b:38: 53:3c:be:f3:0d:9b:1d:f3:50:e7:6b:0c:39:81:2a:c8:9a:b9: 68:ae:1d:61:3a:0e:ef:81:7e:b6:30:fb:33:c0:6f:b2:3f:f3: 07:b8:e0:1e:52:ee:fd:2c:1b:18:6e:75:e3:c5:2c:d0:b5:34: e7:fa:fc:8e:52:8d:f7:08:16:75:24:e2:df:b0:b4:e0:8c:79: 10:69:b7:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYwOTEwMTgyNjQzWhcNMjYwOTE3MTgyNjQzWjAYMRYwFAYD VQQDEw02YWEyZjY2My00NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/cbP7nw71DZe3pdGU7/1fhnymYzPbG/334wqlWP0fQUXqzup14TV4TeYvBY GaqzAmjuhS9wCuhWbXbNl1yJojO+s440rhTZG2ragMg15XcimiFUOymLHmwB11NS zz2d5yMZzs9aCIAbRBKQjVHAalUohpjLYalr7H0MdfRSoQoe0GXUpbeFxZFQM2Q9 8OPokDCDbgdZIbNYJwTgkQYMppJtf2bHKAL3KY8UnfM4nTDDKDOEjikbvVm3Rwd8 HeorRJDJagc9deQnBLtHTWUCckd3MUCwauoXUJWkmaNP4OskZJidGBAqHzrH8ISG s0MM2Gt6KSftr9hldf8ZoiVyDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyvG+Wa lLUJYA21HCVegrQ/IgwjMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGY07CRokMSAx+GeVl8knG86AeeLKQ9+TO3N8ImJKlzVsPBstRRVu4CYY5moJ UlbZlmgpQPliDnpb23PEj8f7NzsMiRc231G4NsLlmZV/dhBgjImQ7SnscwXMPPVU xrftfVAxMlXsUIeCJgwMBrvmEdvEFPWJrEVqNNXWKJKh9E4iOTXwWhp7UojAAqRH GYTlv2GtDCzi4zzemdKWM55nEsAzd9MwmcR0ypKp5kq/DyAbTGs4Uzy+8w2bHfNQ 52sMOYEqyJq5aK4dYToO74F+tjD7M8Bvsj/zB7jgHlLu/SwbGG5148Us0LU05/r8 jlKN9wgWdSTi37C04Ix5EGm3ag== -----END CERTIFICATE-----Generated at Fri Sep 11 08:28:48 2026 by rpki-client