$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: fQ+h8IJDKXK9LYKgkj8h2TfivqeARdXUolTIdeq0j+Y= Subject key identifier: EA:F9:41:EA:C9:4B:EE:96:54:D2:B6:7F:06:EA:9A:93:A4:1E:FA:4C Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0445 Signing time: Wed 19 Aug 2026 00:35:42 +0000 Manifest this update: Wed 19 Aug 2026 00:35:41 +0000 Manifest next update: Wed 26 Aug 2026 00:35:41 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: Z4RqRGjeYMgKxbqj4uFxMIvbFLM3XOdoXj08Wi+3Xw4=) 2: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) 3: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Aug 19 00:35:41 2026 GMT Not After : Aug 26 00:35:41 2026 GMT Subject: CN=6a84fa5d-1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:67:de:a8:a4:56:af:c1:ad:09:25:03:95: bb:b2:9e:44:2d:bf:b9:43:48:fb:e1:27:96:50:26: ce:a1:c5:81:4f:df:4e:0d:67:52:a9:c3:87:30:bf: 45:5a:8b:81:1a:3d:96:39:c7:f5:1a:09:fc:a2:91: ab:c6:42:e8:d4:f4:50:ef:3f:d9:60:94:2c:3f:fa: 2d:da:0e:f9:19:75:cd:c4:0e:72:7c:4c:dc:d1:a2: d1:5b:1c:42:c3:cd:c4:34:86:11:d1:a1:26:73:3b: 49:42:e3:88:29:4c:4b:13:d8:95:e7:2f:5d:d9:8a: 74:77:31:a1:64:45:b1:16:31:2f:a9:c2:24:40:a5: e5:06:0b:91:4d:a2:3f:a5:4f:35:96:d0:18:fa:e9: 48:f4:bf:5a:a7:a0:4d:50:dd:4d:3e:18:19:bc:7d: 02:ef:ed:a4:64:68:00:fa:13:30:b3:e3:e1:4d:89: 3e:ab:1a:bc:73:9c:16:1c:80:77:01:4c:5f:52:98: af:11:07:6b:8c:8c:54:33:b7:fb:c1:1c:2f:21:0f: af:c6:66:90:e8:96:34:45:c8:9a:dd:4d:e3:f9:bd: 55:d6:e8:fd:1e:b4:89:84:bf:95:d9:a9:ef:b2:d6: 1a:ee:45:2f:c2:e4:88:b1:9e:06:6b:f8:aa:ee:1e: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:41:EA:C9:4B:EE:96:54:D2:B6:7F:06:EA:9A:93:A4:1E:FA:4C X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3c:f9:e3:77:68:6d:7c:d6:94:cd:8c:94:24:01:16:df:cc: de:4f:34:d3:06:17:37:00:d8:7d:43:cb:82:4b:0f:1f:2c:9e: 6f:ad:8c:56:94:7e:91:05:04:a2:b5:d7:5d:f5:90:9e:eb:9b: dd:30:7b:f9:7d:49:a0:37:e0:80:ba:01:e6:9b:ab:7a:3e:b6: 55:18:2a:a9:0b:39:b9:eb:92:37:fc:64:fc:67:a8:69:56:66: b4:a1:7e:46:69:d0:82:d5:25:11:98:c3:f9:bd:6e:dd:65:32: 42:71:8b:63:2d:e9:4e:91:d6:90:91:30:bf:77:ce:ba:85:09: 2b:f4:4d:36:cf:3f:41:3f:dd:9c:40:74:8b:3c:9e:fa:25:df: ac:ba:9b:5b:72:58:a5:f8:65:6f:a0:20:4a:da:75:64:f9:ba: cb:d7:d7:a2:37:eb:43:f1:1b:75:bf:ee:da:ed:1d:5a:94:07: 1b:38:77:83:46:fb:94:a2:34:5f:dd:3c:aa:bc:23:e0:04:47: 2c:21:39:98:fa:6c:f4:f3:36:f5:4d:7a:5b:c7:bd:da:56:45: 38:70:59:a8:1a:c1:5e:0a:06:7c:e6:4b:d8:3e:66:0a:ee:6a: 63:04:1a:86:b3:e2:35:31:03:f2:da:6d:fc:ad:dd:f5:35:75: 43:4b:b4:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwODE5MDAzNTQxWhcNMjYwODI2MDAzNTQxWjAYMRYwFAYD VQQDEw02YTg0ZmE1ZC0xNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Vn3qikVq/BrQklA5W7sp5ELb+5Q0j74SeWUCbOocWBT99ODWdSqcOHML9F WouBGj2WOcf1Ggn8opGrxkLo1PRQ7z/ZYJQsP/ot2g75GXXNxA5yfEzc0aLRWxxC w83ENIYR0aEmcztJQuOIKUxLE9iV5y9d2Yp0dzGhZEWxFjEvqcIkQKXlBguRTaI/ pU81ltAY+ulI9L9ap6BNUN1NPhgZvH0C7+2kZGgA+hMws+PhTYk+qxq8c5wWHIB3 AUxfUpivEQdrjIxUM7f7wRwvIQ+vxmaQ6JY0Rcia3U3j+b1V1uj9HrSJhL+V2anv stYa7kUvwuSIsZ4Ga/iq7h7W2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOr5QerJ S+6WVNK2fwbqmpOkHvpMMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApDz543dobXzWlM2MlCQBFt/M3k800wYXNwDYfUPLgksPHyyeb62MVpR+kQUE orXXXfWQnuub3TB7+X1JoDfggLoB5purej62VRgqqQs5ueuSN/xk/GeoaVZmtKF+ RmnQgtUlEZjD+b1u3WUyQnGLYy3pTpHWkJEwv3fOuoUJK/RNNs8/QT/dnEB0izye +iXfrLqbW3JYpfhlb6AgStp1ZPm6y9fXojfrQ/Ebdb/u2u0dWpQHGzh3g0b7lKI0 X908qrwj4ARHLCE5mPps9PM29U16W8e92lZFOHBZqBrBXgoGfOZL2D5mCu5qYwQa hrPiNTED8tpt/K3d9TV1Q0u0mg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:56:37 2026 by rpki-client