$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: NUl1KJJ8bI+aRZ2sNaW4ixx57Q6GLix7wxTK5qg/I34= Subject key identifier: 56:B3:6C:A5:16:4C:E2:66:AE:74:DC:3A:41:3B:48:EB:AA:F6:0A:DD Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 045E Signing time: Wed 07 Oct 2026 00:16:29 +0000 Manifest this update: Wed 07 Oct 2026 00:16:28 +0000 Manifest next update: Wed 14 Oct 2026 00:16:28 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: Yav4lrNMDtSIacwZg6YBu2dZmtoobkT81ft3oZfrC7w=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Oct 7 00:16:28 2026 GMT Not After : Oct 14 00:16:28 2026 GMT Subject: CN=6ac58f5d-f030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:f4:bc:4b:39:83:b2:de:2d:01:85:ce:01: e2:7c:b4:dc:f3:59:15:2e:c1:f2:11:ef:a8:20:11: 49:08:b3:cc:12:af:a6:72:6c:25:65:f3:fb:e4:8c: e0:0e:0e:dc:93:11:4d:94:be:de:84:f3:4c:9d:e5: ac:56:94:57:0d:4b:54:44:58:85:5e:ab:73:64:79: 6c:20:a3:a9:15:bc:06:37:88:4b:c6:6b:fe:ac:8b: 7f:b9:d6:3f:3a:60:15:5b:d6:51:80:3a:d0:50:0b: d6:c2:7f:55:12:44:e0:96:5d:ba:83:b8:d6:41:e0: c8:82:ea:4b:8e:bb:75:9a:88:13:4d:4e:40:92:5b: 04:03:0e:15:e3:fa:b4:ea:45:0a:3c:2a:d7:ea:eb: 5e:cc:78:c1:c7:10:1e:77:43:fb:fb:e5:ff:f7:a2: 0b:b9:ea:cb:ff:8d:65:32:de:3a:98:44:0c:92:05: 4a:48:5a:e2:5e:e2:af:05:89:72:4f:4a:7e:10:c8: 12:a8:c0:ba:42:0f:84:4c:e9:a7:ee:63:50:1e:40: 92:07:c8:c1:ea:60:f7:eb:fe:66:68:47:14:57:43: 91:f9:5e:f4:d1:d5:3b:9e:ef:13:a3:84:32:9f:c9: 20:5a:80:4d:a7:50:af:80:11:ac:ef:fe:8d:93:70: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B3:6C:A5:16:4C:E2:66:AE:74:DC:3A:41:3B:48:EB:AA:F6:0A:DD X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e8:1a:4d:c4:0f:0c:16:b2:dc:cb:0a:5f:8a:98:42:5e:94: 7a:b4:76:4c:63:c5:ba:fd:a1:15:1b:16:29:e8:72:74:06:17: dd:4d:84:6f:0f:85:8e:a3:88:c6:38:c7:77:d4:a3:6a:97:40: 8f:9b:c9:39:ec:bf:ef:6d:ad:da:d8:03:fe:04:aa:82:b8:8b: 0b:78:22:61:4e:23:2d:c3:5c:d2:a6:e6:2d:96:b9:c5:e1:5d: 5c:10:b2:e4:93:32:23:e3:0a:72:9f:19:bf:d7:a1:22:64:8f: aa:44:67:08:84:f1:ad:8a:da:87:39:c2:a2:cd:0c:6c:7e:bd: 57:bc:32:f7:e3:9d:50:98:7e:a9:ac:3f:16:8f:b5:c9:b6:2a: f4:90:d0:a3:f5:f6:34:84:44:fa:d9:23:43:0d:01:33:2a:6c: 36:64:ec:5e:51:58:a1:34:83:a7:86:39:97:08:27:11:f6:52: 3f:ed:f8:aa:26:54:dc:f0:6d:b6:92:0b:c7:7e:43:f6:50:88: 3a:75:3a:93:ca:d1:14:f5:6f:e3:8a:cb:5c:22:a1:eb:91:87: 0c:49:92:83:7c:42:6b:0f:38:36:1d:2b:87:49:2d:83:05:bf: 93:e1:82:31:e3:77:b7:ad:85:ff:1f:f0:d6:c1:26:45:8c:af: d9:4c:2f:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYxMDA3MDAxNjI4WhcNMjYxMDE0MDAxNjI4WjAYMRYwFAYD VQQDEw02YWM1OGY1ZC1mMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9b0vEs5g7LeLQGFzgHifLTc81kVLsHyEe+oIBFJCLPMEq+mcmwlZfP75Izg Dg7ckxFNlL7ehPNMneWsVpRXDUtURFiFXqtzZHlsIKOpFbwGN4hLxmv+rIt/udY/ OmAVW9ZRgDrQUAvWwn9VEkTgll26g7jWQeDIgupLjrt1mogTTU5AklsEAw4V4/q0 6kUKPCrX6utezHjBxxAed0P7++X/96ILuerL/41lMt46mEQMkgVKSFriXuKvBYly T0p+EMgSqMC6Qg+ETOmn7mNQHkCSB8jB6mD36/5maEcUV0OR+V700dU7nu8To4Qy n8kgWoBNp1CvgBGs7/6Nk3DN6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFazbKUW TOJmrnTcOkE7SOuq9grdMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgOgaTcQPDBay3MsKX4qYQl6UerR2TGPFuv2hFRsWKehydAYX3U2Ebw+FjqOI xjjHd9SjapdAj5vJOey/722t2tgD/gSqgriLC3giYU4jLcNc0qbmLZa5xeFdXBCy 5JMyI+MKcp8Zv9ehImSPqkRnCITxrYrahznCos0MbH69V7wy9+OdUJh+qaw/Fo+1 ybYq9JDQo/X2NIRE+tkjQw0BMypsNmTsXlFYoTSDp4Y5lwgnEfZSP+34qiZU3PBt tpILx35D9lCIOnU6k8rRFPVv44rLXCKh65GHDEmSg3xCaw84Nh0rh0ktgwW/k+GC MeN3t62F/x/w1sEmRYyv2Uwvng== -----END CERTIFICATE-----Generated at Thu Oct 8 10:42:51 2026 by rpki-client