$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: nUNLg0kxnB7fElZ/ltBs3fiOTeaWXwuEBW4lEOY1i6s= Subject key identifier: C3:A7:78:D8:DC:92:7E:BC:7A:97:DE:9C:20:9B:6D:95:B2:EF:8A:4C Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0453 Signing time: Mon 19 Oct 2026 00:19:17 +0000 Manifest this update: Mon 19 Oct 2026 00:19:17 +0000 Manifest next update: Mon 26 Oct 2026 00:19:17 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: tXmbvGGL4pZnVxiFkSdGRqCxbGBUZmKb/Mxhnzz68uk=) 2: 9D36B0548E6911F1B54A9B403C11F970.roa (hash: MpuHHeKvctqtrAjZGjy9GRFYaSEPkBQflR/6O17qU0s=) 3: B18B4F928E6911F18BD9FF403C11F970.roa (hash: UTRa99Fy9FPq7q5R0rWgcHldc6ZYmjVdNqMG3ubrCnw=) 4: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: tXiBPn9WKqPR3A495dpcgE5SO+VgxVPY4ijGQaSknoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Oct 19 00:19:17 2026 GMT Not After : Oct 26 00:19:17 2026 GMT Subject: CN=6ad56205-cba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:34:a8:9e:63:f1:dd:b8:6c:27:7f:ac:b9: 50:a5:00:3e:65:c5:c3:ad:c3:11:21:96:57:33:3e: c9:76:c6:60:57:24:91:ba:0f:f1:23:1f:76:54:98: b3:24:0c:83:51:7d:a7:58:d3:25:35:dc:79:18:12: 48:a5:8b:eb:5c:c6:ce:bb:ea:9d:fb:a8:3e:e5:06: 7f:9b:d1:40:c5:ae:31:e4:e7:5b:92:b4:5f:1f:09: db:29:50:b0:bd:dd:3a:0f:bc:d9:d4:7e:65:db:eb: 02:60:2c:80:57:1f:1a:8f:73:e0:68:12:47:dc:4d: 30:f3:8a:cf:8e:e5:d2:2d:6d:53:bf:cb:7c:d4:a2: 5c:f2:08:3e:a3:3c:9a:92:b1:f7:38:e3:2f:5e:09: ac:5c:76:b6:c0:2b:c1:4c:4e:1b:de:3f:9d:b7:f5: a1:d0:db:ba:96:f7:21:6b:6a:0e:29:28:99:83:e9: 15:46:c2:ec:0c:60:85:d1:75:00:9d:a1:bd:39:4a: 3e:ad:9b:a8:42:11:bf:71:56:14:30:4a:7f:9a:d1: 94:f2:d8:89:9e:d2:4f:20:b7:47:59:bc:4a:3b:eb: 8d:81:63:1c:89:a0:9c:3e:da:59:59:77:e3:40:8b: f9:d2:06:e8:cf:cd:88:83:ca:6c:1e:72:5d:6d:e8: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A7:78:D8:DC:92:7E:BC:7A:97:DE:9C:20:9B:6D:95:B2:EF:8A:4C X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6d:6b:fc:c4:69:84:2d:b9:29:7a:c6:10:f2:ba:42:21:67: 3b:75:ab:5b:98:d9:e8:75:1d:b0:25:63:d8:5f:da:e4:79:3c: 65:8d:b7:11:6e:bc:37:54:bd:dc:4d:5a:b8:7d:3e:ef:1e:eb: dd:cb:56:a5:93:59:31:78:e4:80:3a:cb:1d:e7:b5:0b:64:07: 95:5c:7d:12:6d:44:f5:2d:0d:02:87:6e:ed:32:e2:16:43:ed: 33:88:ff:ce:ba:63:db:53:7f:f1:74:7e:3f:44:56:0a:d4:80: c3:74:a3:4e:1f:4a:3b:d0:f1:ef:48:1d:47:6a:24:5e:cd:9c: c8:7b:3f:41:41:37:0c:af:a3:a5:b4:24:a0:ef:c7:98:76:4b: 1b:6a:fe:d5:29:e7:7c:0c:66:38:36:d6:94:38:ff:76:0e:a5: 11:d7:e8:a6:47:63:4c:74:5b:6f:fe:2c:fc:a2:a9:fb:a9:6f: 8c:d3:3d:8a:c0:e5:33:3e:4e:99:b0:a1:d9:06:4a:27:74:25: e6:0d:61:01:94:a1:ed:4b:f7:a4:6f:29:c9:e9:ac:7d:e3:c6: 1d:e6:f4:b9:9b:1a:34:40:08:fd:3d:e0:1b:a8:8e:fa:7d:cc: 2f:08:72:df:03:68:77:70:0b:94:6e:6d:9e:20:36:c7:f4:1f: a7:29:98:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYxMDE5MDAxOTE3WhcNMjYxMDI2MDAxOTE3WjAYMRYwFAYD VQQDEw02YWQ1NjIwNS1jYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXk0qJ5j8d24bCd/rLlQpQA+ZcXDrcMRIZZXMz7JdsZgVySRug/xIx92VJiz JAyDUX2nWNMlNdx5GBJIpYvrXMbOu+qd+6g+5QZ/m9FAxa4x5OdbkrRfHwnbKVCw vd06D7zZ1H5l2+sCYCyAVx8aj3PgaBJH3E0w84rPjuXSLW1Tv8t81KJc8gg+ozya krH3OOMvXgmsXHa2wCvBTE4b3j+dt/Wh0Nu6lvcha2oOKSiZg+kVRsLsDGCF0XUA naG9OUo+rZuoQhG/cVYUMEp/mtGU8tiJntJPILdHWbxKO+uNgWMciaCcPtpZWXfj QIv50gboz82Ig8psHnJdbegWZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOneNjc kn68epfenCCbbZWy74pMMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALW1r/MRphC25KXrGEPK6QiFnO3WrW5jZ6HUdsCVj2F/a5Hk8ZY23EW68N1S9 3E1auH0+7x7r3ctWpZNZMXjkgDrLHee1C2QHlVx9Em1E9S0NAodu7TLiFkPtM4j/ zrpj21N/8XR+P0RWCtSAw3SjTh9KO9Dx70gdR2okXs2cyHs/QUE3DK+jpbQkoO/H mHZLG2r+1SnnfAxmODbWlDj/dg6lEdfopkdjTHRbb/4s/KKp+6lvjNM9isDlMz5O mbCh2QZKJ3Ql5g1hAZSh7Uv3pG8pyemsfePGHeb0uZsaNEAI/T3gG6iO+n3MLwhy 3wNod3ALlG5tniA2x/QfpymYFw== -----END CERTIFICATE-----Generated at Wed Oct 21 00:24:36 2026 by rpki-client