$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json) Hash identifier: 9S0vHDcFW5fDB7SDsJ8Tha8Ji2+3RS5EwktVg7T36qo= Subject key identifier: 11:28:E7:CB:E3:A7:BE:ED:96:E3:0D:38:47:75:E8:84:AA:78:55:0F Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0 Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft Manifest number: 3A Signing time: Thu 03 Sep 2026 08:47:57 +0000 Manifest this update: Thu 03 Sep 2026 08:47:57 +0000 Manifest next update: Thu 10 Sep 2026 08:47:57 +0000 Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: XsE5RKVOXyPYcSO7FeROo7N6KUgnXacJDhzBEgvPY/U=) 2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0 Validity Not Before: Sep 3 08:47:57 2026 GMT Not After : Sep 10 08:47:57 2026 GMT Subject: CN=6a99343d-f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:32:54:81:c5:d6:52:1d:d5:15:fc:29:57: 76:72:11:98:55:b7:f4:41:b8:3f:66:20:22:96:95: 93:bc:60:7f:5d:5f:90:58:7f:69:2e:9f:52:50:b9: e1:f0:60:5c:9e:1b:97:79:0d:8d:6d:24:a4:0b:4a: dc:1b:b6:95:b3:54:77:f4:83:17:4c:e1:27:42:59: d7:1e:a2:0e:60:21:97:b9:84:7c:18:22:8c:f6:50: 67:78:b7:da:aa:9c:e6:e8:9c:75:b6:f6:20:49:7a: ac:55:5b:a0:55:55:37:00:b9:ac:0f:a6:e8:f6:6c: 85:dc:c8:71:a0:09:9b:d6:44:36:c8:01:a5:a7:85: 09:f7:5c:3e:30:e9:5f:27:74:c6:84:98:40:d3:38: e6:25:0c:d4:37:7d:e0:a3:80:e3:7e:28:57:80:90: 2f:f7:5a:4a:aa:45:6b:e8:f0:dd:74:34:4b:42:6e: c6:38:d3:e1:ab:29:31:3e:ec:d3:7d:47:82:4d:eb: 00:c5:ea:8e:d4:a4:9f:ac:23:44:d5:f3:e4:ec:2c: 4a:9d:b7:d1:22:4c:ef:3e:9e:cb:a9:f4:b6:8e:f9: d5:d8:08:dd:c5:cd:75:f0:57:f4:af:8a:5f:4e:57: 56:8a:b3:2c:03:7c:f6:53:75:93:b1:75:33:c8:69: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:E7:CB:E3:A7:BE:ED:96:E3:0D:38:47:75:E8:84:AA:78:55:0F X509v3 Authority Key Identifier: keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:47:e9:e2:45:df:d9:04:d8:15:a5:25:fe:6a:c6:6a:6f:f9: 03:b3:47:7a:5c:4d:a1:d0:05:b4:3a:16:9d:8e:db:40:8f:1d: 31:94:a5:8e:4f:70:83:9c:f4:85:9c:f0:ee:78:53:f7:6f:06: 24:48:cf:1d:8e:22:56:83:01:73:46:0f:d0:16:2c:5d:18:ff: d5:40:dd:ee:d0:90:8b:38:de:46:30:03:7d:7c:73:d9:aa:0a: 5e:29:d6:eb:00:6b:a4:8d:42:c4:e6:0e:ed:44:09:6c:e4:05: e1:05:0c:0d:ed:88:a3:9e:61:d6:c0:ff:32:d5:55:1f:88:3d: 9f:45:69:5a:14:ac:88:8f:ac:41:b8:38:63:08:9d:d7:ea:2d: 41:10:e7:88:a5:2d:18:82:93:b2:25:16:90:aa:1f:a0:a0:97: 4d:8c:43:48:bd:95:1d:04:59:32:30:6c:2b:73:5e:08:a2:d8: 95:25:25:2e:14:44:aa:92:92:e1:32:39:d6:12:6e:57:e5:e2: 45:28:a9:a7:14:f2:16:96:ee:83:16:bd:cc:ca:19:5c:6b:e9: 01:ec:e3:b2:4b:9f:0e:b3:9c:d1:89:33:b7:52:fd:3e:df:7b: a7:c2:60:54:40:00:e5:b8:2c:2f:c8:da:a8:93:89:cd:48:fc: ce:35:66:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REQ0QzExMC8GA1UEBRMoMEQyRkIzNTVDQkRGMEQwMUFBMDU1MjdCQzQ3MTI4RTUw QkIzNUFCMDAeFw0yNjA5MDMwODQ3NTdaFw0yNjA5MTAwODQ3NTdaMBgxFjAUBgNV BAMTDTZhOTkzNDNkLWY0YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3kTJUgcXWUh3VFfwpV3ZyEZhVt/RBuD9mICKWlZO8YH9dX5BYf2kun1JQueHw YFyeG5d5DY1tJKQLStwbtpWzVHf0gxdM4SdCWdceog5gIZe5hHwYIoz2UGd4t9qq nObonHW29iBJeqxVW6BVVTcAuawPpuj2bIXcyHGgCZvWRDbIAaWnhQn3XD4w6V8n dMaEmEDTOOYlDNQ3feCjgON+KFeAkC/3WkqqRWvo8N10NEtCbsY40+GrKTE+7NN9 R4JN6wDF6o7UpJ+sI0TV8+TsLEqdt9EiTO8+nsup9LaO+dXYCN3FzXXwV/Svil9O V1aKsywDfPZTdZOxdTPIaU5vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUESjny+On vu2W4w04R3XohKp4VQ8wHwYDVR0jBBgwFoAUDS+zVcvfDQGqBVJ7xHEo5QuzWrAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERDRDL0U0RjM1NTZDNEY1 MDExRjFCMDhDODdFNUJDODMzNzczL0RTLXpWY3ZmRFFHcUJWSjd4SEVvNVF1eldy QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRFMtelZjdmZEUUdxQlZKN3hIRW81UXV6V3JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RDRDL0U0RjM1NTZDNEY1MDExRjFCMDhDODdFNUJDODMzNzczL0RTLXpWY3ZmRFFH cUJWSjd4SEVvNVF1eldyQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoR+niRd/ZBNgVpSX+asZqb/kDs0d6XE2h0AW0OhadjttAjx0xlKWOT3CDnPSF nPDueFP3bwYkSM8djiJWgwFzRg/QFixdGP/VQN3u0JCLON5GMAN9fHPZqgpeKdbr AGukjULE5g7tRAls5AXhBQwN7YijnmHWwP8y1VUfiD2fRWlaFKyIj6xBuDhjCJ3X 6i1BEOeIpS0YgpOyJRaQqh+goJdNjENIvZUdBFkyMGwrc14IotiVJSUuFESqkpLh MjnWEm5X5eJFKKmnFPIWlu6DFr3Myhlca+kB7OOyS58Os5zRiTO3Uv0+33unwmBU QADluCwvyNqok4nNSPzONWZJ -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:11 2026 by rpki-client