$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: rid46qaVXdTYr7azvmTmdZ6TgkH7HAXjt71inRQL5nI= Subject key identifier: 70:C9:2E:7C:3D:D8:D5:DD:4F:47:64:D0:60:3E:67:C4:49:13:AB:FF Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: DC Signing time: Sun 13 Sep 2026 06:29:05 +0000 Manifest this update: Sun 13 Sep 2026 06:29:04 +0000 Manifest next update: Sun 20 Sep 2026 06:29:04 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: Ty7bR9wzqulkO8fYUgBcXqSMZHF94nfKuRwJExy9TYw=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Sep 2026 06:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Sep 13 06:29:04 2026 GMT Not After : Sep 20 06:29:04 2026 GMT Subject: CN=6aa642b1-0eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:73:9f:b0:ad:c6:94:b4:bc:6c:80:17:af: b6:3b:0c:a3:65:3b:fc:ce:72:2b:c4:8d:a4:77:f1: b5:89:e0:f9:05:1c:9c:6b:3c:d9:6d:ea:75:11:df: 00:30:3c:cb:8b:99:e8:a0:a8:d7:53:b4:34:67:8c: 70:20:63:d4:bc:2f:20:b5:5f:a8:a1:ab:53:1d:ae: 40:96:8b:1c:3f:94:08:d9:3a:03:de:53:73:ae:34: 44:de:e2:f7:b8:e1:bf:f6:d6:ff:73:d5:38:b0:f8: a3:13:6e:86:18:e9:c6:81:cb:ea:f9:02:86:a2:ff: 6f:3f:48:6f:6b:7e:30:fc:45:fb:1c:45:8e:49:ab: 1d:32:8f:31:47:93:d5:63:05:eb:1b:26:39:f1:d9: 7b:27:be:26:46:c5:d1:79:c1:1e:b1:1c:4c:b3:19: f1:6a:b8:4f:45:28:59:8b:75:ab:a1:8a:72:8f:00: d8:cb:27:52:d9:58:d9:61:45:35:21:1a:54:f9:e2: 9b:c7:6c:21:18:15:2b:e1:8d:07:a1:fa:84:8d:de: 4e:d0:4c:65:d4:63:ee:b1:43:2d:4c:a2:5d:d1:4c: 19:39:ba:90:39:d0:19:b2:a5:bb:f4:0a:de:51:72: c5:74:04:66:86:50:8d:9f:a5:5b:f6:8a:53:1f:0e: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C9:2E:7C:3D:D8:D5:DD:4F:47:64:D0:60:3E:67:C4:49:13:AB:FF X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:33:c0:82:8a:57:92:24:eb:7d:69:64:09:04:59:ce:cb: 5d:ce:27:f5:48:12:7c:05:c4:de:a5:96:44:0e:ac:c3:a0:e7: a8:46:5c:b7:77:6c:15:99:2a:10:9e:16:04:7e:b8:91:2b:4a: 3f:1b:ef:51:75:2d:d2:90:91:ca:b9:43:79:a1:a2:b1:71:bc: 4b:43:03:14:e4:3e:4e:9a:c9:de:4d:c2:33:f8:5b:94:f4:54: c4:45:bc:ad:de:9d:c2:9d:d9:e2:58:ad:bc:1a:44:32:d0:95: 1d:cf:59:f9:9d:9c:52:66:bb:66:41:64:43:76:33:6b:54:be: cb:f7:bd:e5:1f:00:33:6e:df:30:a3:29:51:dc:7e:b0:2b:ff: 95:98:43:c2:8a:c3:a6:d6:bc:a9:75:bf:3c:43:cf:0d:8d:0a: 09:dc:74:09:2a:c0:42:f6:9d:93:e6:0d:67:38:93:7d:f0:87: 11:00:08:33:9c:78:09:f5:93:81:5b:76:78:6d:74:1b:ba:23: 26:05:15:8b:3b:c0:8e:95:31:b9:b7:90:19:98:83:5a:97:cd: 3c:fd:49:67:d2:85:46:d3:22:e3:a6:c8:c1:67:49:05:62:68: af:56:fb:af:aa:1d:a5:45:22:80:11:00:00:2b:5d:af:9f:ce: c3:c1:5f:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0NzMxMTAvBgNVBAUTKEZCN0IwNTg3ODM2NTFFOTNGQTMwREQ5NkQ2MjY1RTZF MkYzNTI1NTQwHhcNMjYwOTEzMDYyOTA0WhcNMjYwOTIwMDYyOTA0WjAYMRYwFAYD VQQDEw02YWE2NDJiMS0wZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2Rzn7CtxpS0vGyAF6+2OwyjZTv8znIrxI2kd/G1ieD5BRycazzZbep1Ed8A MDzLi5nooKjXU7Q0Z4xwIGPUvC8gtV+ooatTHa5AloscP5QI2ToD3lNzrjRE3uL3 uOG/9tb/c9U4sPijE26GGOnGgcvq+QKGov9vP0hva34w/EX7HEWOSasdMo8xR5PV YwXrGyY58dl7J74mRsXRecEesRxMsxnxarhPRShZi3WroYpyjwDYyydS2VjZYUU1 IRpU+eKbx2whGBUr4Y0HofqEjd5O0Exl1GPusUMtTKJd0UwZObqQOdAZsqW79Are UXLFdARmhlCNn6Vb9opTHw4SpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDJLnw9 2NXdT0dk0GA+Z8RJE6v/MB8GA1UdIwQYMBaAFPt7BYeDZR6T+jDdltYmXm4vNSVU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzQ3My9GRUFFMTJBMjVE REYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhwUDZNTjJXMWlaZWJpODFK VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzQ3My9GRUFFMTJBMjVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhw UDZNTjJXMWlaZWJpODFKVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7QzwIKKV5Ik631pZAkEWc7LXc4n9UgSfAXE3qWWRA6sw6DnqEZct3dsFZkq EJ4WBH64kStKPxvvUXUt0pCRyrlDeaGisXG8S0MDFOQ+TprJ3k3CM/hblPRUxEW8 rd6dwp3Z4litvBpEMtCVHc9Z+Z2cUma7ZkFkQ3Yza1S+y/e95R8AM27fMKMpUdx+ sCv/lZhDworDpta8qXW/PEPPDY0KCdx0CSrAQvadk+YNZziTffCHEQAIM5x4CfWT gVt2eG10G7ojJgUVizvAjpUxubeQGZiDWpfNPP1JZ9KFRtMi46bIwWdJBWJor1b7 r6odpUUigBEAACtdr5/Ow8Fftg== -----END CERTIFICATE-----Generated at Sun Sep 13 21:37:26 2026 by rpki-client