$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft File: S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json) Hash identifier: LaE7J515LYrObllv+U5Lnv1b5mTTsiS1t762HidhArI= Subject key identifier: D3:F1:22:6F:86:7B:E7:91:F5:83:C8:1F:C3:EC:E3:B9:41:E1:41:9F Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft Manifest number: 0272 Signing time: Sun 25 Oct 2026 02:24:13 +0000 Manifest this update: Sun 25 Oct 2026 02:24:12 +0000 Manifest next update: Sun 01 Nov 2026 02:24:12 +0000 Files and hashes: 1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: XbI9Ysx6RZFtAbKWot8jwzqzAT2M6L22LUkURQ8m+6Y=) 2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: 59D9zQ+RBL5Fvi3gvp0OtvuM1QHSjOAbItynN8Kr7yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Oct 25 02:24:12 2026 GMT Not After : Nov 1 02:24:12 2026 GMT Subject: CN=6add684d-32c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:6f:b1:98:20:c2:1e:b6:ba:2a:14:1f:65: 2b:e4:d1:b4:b9:4b:7e:97:61:55:8b:6d:87:76:f0: 18:cc:28:35:7c:f2:42:47:bb:94:5b:71:21:e5:9c: cd:07:1f:11:15:29:db:e9:d2:03:8e:ed:21:91:c3: 36:02:ec:e1:23:d8:b8:ee:73:44:ad:fc:eb:8d:11: 3a:23:31:59:1c:20:d0:5f:5d:bf:bb:68:c1:03:c1: d4:d3:c7:a4:ab:fb:7b:5e:ba:51:1f:ae:5c:7a:08: 19:74:f9:16:73:57:de:23:ac:eb:84:08:5d:51:af: 26:c6:9d:73:eb:32:b1:9a:b5:ae:8b:57:c3:50:48: 5a:1a:8f:68:20:d7:be:a3:9c:20:0e:59:de:96:0f: b7:14:3e:0d:27:0e:56:26:d8:71:20:c6:42:68:14: c7:9c:49:65:4d:6f:5a:f2:d8:a3:68:fe:f0:50:c0: 34:ea:94:15:0c:96:c2:cd:f7:5f:a8:e2:46:2a:14: e9:e4:d5:d1:bc:4d:e9:4e:53:8f:5a:bc:80:e8:91: 90:fd:88:84:0f:a3:aa:46:1f:b0:7c:fd:b4:32:c7: 22:c2:b8:0f:21:f6:db:eb:74:28:2b:2b:9f:35:d2: d7:c4:2d:8c:81:fe:af:36:a0:20:d0:05:9f:2a:45: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:22:6F:86:7B:E7:91:F5:83:C8:1F:C3:EC:E3:B9:41:E1:41:9F X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:80:02:5a:fe:90:37:9d:a7:13:08:9e:ac:7b:1e:9e:eb:82: e8:07:30:5b:f2:8f:be:ae:69:94:9b:64:14:fe:f7:0c:f5:26: 49:96:82:df:87:88:fb:4a:21:b1:ff:93:21:de:8e:77:55:e8: ae:c0:a2:96:fa:3b:0f:e6:a5:91:30:17:0e:28:6b:91:c1:d7: 2f:b3:db:0b:01:4f:2a:3a:dd:d1:54:4a:22:f2:dd:1d:96:c6: b3:f3:f1:43:43:f0:c4:15:e2:10:28:ff:e1:11:d2:7c:90:bb: bd:b6:a4:d4:ad:eb:d2:04:cb:a2:98:4d:5f:20:f6:bd:05:09: 8b:35:bc:04:ae:d1:20:d2:61:36:f8:1f:88:dc:f6:9c:73:8d: a3:4d:44:98:da:97:4d:87:20:67:35:07:7b:f9:4d:96:ee:dd: 23:1b:74:48:cd:d3:63:72:76:8e:68:ba:f7:f4:b5:ef:15:86: 17:48:94:83:85:35:34:88:22:c1:a3:74:ff:bf:ea:7a:92:80: 68:67:a9:26:51:04:59:fc:6a:80:da:1e:a9:ce:7c:ef:bb:7b: f9:52:2c:b2:98:46:89:48:27:ef:51:9e:7b:2a:ae:ad:70:4a: 90:d5:f5:2c:4b:dc:79:89:ce:f9:48:05:0c:13:6d:b3:04:f4: 7a:17:c7:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjYxMDI1MDIyNDEyWhcNMjYxMTAxMDIyNDEyWjAYMRYwFAYD VQQDEw02YWRkNjg0ZC0zMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTtvsZggwh62uioUH2Ur5NG0uUt+l2FVi22HdvAYzCg1fPJCR7uUW3Eh5ZzN Bx8RFSnb6dIDju0hkcM2AuzhI9i47nNErfzrjRE6IzFZHCDQX12/u2jBA8HU08ek q/t7XrpRH65ceggZdPkWc1feI6zrhAhdUa8mxp1z6zKxmrWui1fDUEhaGo9oINe+ o5wgDlnelg+3FD4NJw5WJthxIMZCaBTHnEllTW9a8tijaP7wUMA06pQVDJbCzfdf qOJGKhTp5NXRvE3pTlOPWryA6JGQ/YiED6OqRh+wfP20MsciwrgPIfbb63QoKyuf NdLXxC2Mgf6vNqAg0AWfKkUNmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPxIm+G e+eR9YPIH8Ps47lB4UGfMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6 TEp2UFV1VG5jdUNtODZZeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKoACWv6QN52nEwierHsenuuC6AcwW/KPvq5plJtkFP73DPUmSZaC34eI+0oh sf+TId6Od1XorsCilvo7D+alkTAXDihrkcHXL7PbCwFPKjrd0VRKIvLdHZbGs/Px Q0PwxBXiECj/4RHSfJC7vbak1K3r0gTLophNXyD2vQUJizW8BK7RINJhNvgfiNz2 nHONo01EmNqXTYcgZzUHe/lNlu7dIxt0SM3TY3J2jmi69/S17xWGF0iUg4U1NIgi waN0/7/qepKAaGepJlEEWfxqgNoeqc5877t7+VIssphGiUgn71GeeyqurXBKkNX1 LEvceYnO+UgFDBNtswT0ehfHQw== -----END CERTIFICATE-----Generated at Tue Oct 27 01:18:28 2026 by rpki-client