$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft File: 3q8cjeT-PFHGkVP8r5_owq1vjiY.mft (raw, json) Hash identifier: IpgVwKRsGVTxHFjO3XCPfm17V7+RaSJKtW+ZRLGVRYY= Subject key identifier: D2:02:54:0B:F5:45:3D:4E:49:A2:6F:45:E4:C3:D8:2A:8C:5E:CB:9C Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft Manifest number: 0214 Signing time: Sat 03 Oct 2026 03:36:12 +0000 Manifest this update: Sat 03 Oct 2026 03:36:11 +0000 Manifest next update: Sat 10 Oct 2026 03:36:11 +0000 Files and hashes: 1: 3q8cjeT-PFHGkVP8r5_owq1vjiY.crl (hash: p0wXB6YecXmlm6+GmE9QpTq3PbmCUOfIPxkFWcbINGQ=) 2: 1C2EA330925011EE9571EE40C4F9AE02.roa (hash: XfdGm7eKGJG4mI4OlbsmvCWQLht74XpIFUZS0ZbYwl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Validity Not Before: Oct 3 03:36:11 2026 GMT Not After : Oct 10 03:36:11 2026 GMT Subject: CN=6ac0782b-50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:b1:5b:97:55:09:56:6d:77:56:2f:c3:cb: 6b:86:c1:ba:be:2a:db:21:aa:f8:51:63:d6:ae:72: 03:52:d8:48:31:c8:b2:0d:8d:d9:c8:11:b2:fb:02: b7:4d:c6:b6:f3:e9:18:b4:3a:67:85:be:7a:e7:a3: a2:68:df:99:d6:01:cc:d7:f4:b6:1d:7a:62:f3:6a: d2:82:40:e3:87:40:16:b7:b0:61:b2:6d:54:0e:fa: f3:53:af:3d:1f:d4:eb:bd:49:56:55:cb:a3:40:a5: 31:ea:c3:61:b6:5b:d4:a4:90:e9:9b:4b:0f:2d:99: af:b4:ef:4f:17:47:84:51:ef:c1:b2:2c:10:af:ad: 44:8a:6c:03:c3:c9:a9:23:f1:56:66:8c:c8:86:cc: 23:d5:a7:73:7d:d8:0d:60:ad:f5:a9:ae:71:fd:25: d1:bb:b6:53:d6:95:be:5c:f6:12:0c:6f:b4:c4:48: e1:4a:a5:68:8e:76:0f:6e:13:6e:6a:41:b6:0c:34: c1:27:df:f5:52:70:19:d4:8d:1b:9b:85:12:2c:e6: f9:7a:f1:e1:ec:dd:ac:73:91:30:69:17:4e:d8:9c: 50:c1:90:4b:21:59:de:98:d8:c4:37:03:66:b3:18: b3:bc:a9:48:f4:ae:1d:75:00:a3:15:75:3d:a6:38: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:02:54:0B:F5:45:3D:4E:49:A2:6F:45:E4:C3:D8:2A:8C:5E:CB:9C X509v3 Authority Key Identifier: keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:09:03:84:76:2d:be:a0:a1:78:22:19:88:68:cf:e3:16:50: ca:99:1e:00:cb:d7:d0:19:b1:8c:dc:4d:26:31:7b:74:8b:fd: ea:9c:fb:e4:af:b6:a4:d1:ec:a8:89:b7:3a:db:d1:f7:16:55: e8:b4:bc:6b:3c:b4:25:6e:39:3c:b5:7d:63:19:f6:fe:7c:69: 81:83:06:0a:42:e6:6e:29:b5:6e:83:13:a3:c2:ce:8e:55:0d: af:d8:a0:51:f5:14:6f:c3:85:33:0c:7a:64:1f:1f:c4:a5:65: 18:d1:bb:86:9a:1c:1d:b0:2d:4c:87:8e:95:78:6f:21:a6:ec: a2:bc:26:1a:9f:45:d1:3b:1c:cc:ba:c5:ff:11:5f:84:b7:7d: 29:bb:d4:11:00:0a:39:3c:ea:f4:7e:89:fb:cd:fa:84:3f:50: be:ad:ad:4e:54:df:29:69:08:fb:07:79:de:d9:fa:37:c3:96: 01:7b:94:5a:d9:fc:d0:67:6a:f4:b9:f4:27:c8:fd:04:e0:4c: ee:76:c4:1f:e9:61:e1:c3:2b:c7:aa:5b:1d:87:31:b0:e7:e1: f0:5a:66:49:9f:4c:95:f8:17:9c:ab:09:2d:f3:9d:20:ef:5b: 73:39:06:59:4f:44:4f:dd:c2:27:be:1a:fe:39:77:3b:b1:a9: 73:ca:12:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDMzMxMTAvBgNVBAUTKERFQUYxQzhERTRGRTNDNTFDNjkxNTNGQ0FGOUZFOEMy QUQ2RjhFMjYwHhcNMjYxMDAzMDMzNjExWhcNMjYxMDEwMDMzNjExWjAYMRYwFAYD VQQDEw02YWMwNzgyYi01MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/yxW5dVCVZtd1Yvw8trhsG6virbIar4UWPWrnIDUthIMciyDY3ZyBGy+wK3 Tca28+kYtDpnhb5656OiaN+Z1gHM1/S2HXpi82rSgkDjh0AWt7Bhsm1UDvrzU689 H9TrvUlWVcujQKUx6sNhtlvUpJDpm0sPLZmvtO9PF0eEUe/BsiwQr61EimwDw8mp I/FWZozIhswj1adzfdgNYK31qa5x/SXRu7ZT1pW+XPYSDG+0xEjhSqVojnYPbhNu akG2DDTBJ9/1UnAZ1I0bm4USLOb5evHh7N2sc5EwaRdO2JxQwZBLIVnemNjENwNm sxizvKlI9K4ddQCjFXU9pjg0CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNICVAv1 RT1OSaJvReTD2CqMXsucMB8GA1UdIwQYMBaAFN6vHI3k/jxRxpFT/K+f6MKtb44m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzMy9CMEJGQUMzNDky NEYxMUVFQThDMjI0NDBDNEY5QUUwMi8zcThjamVULVBGSEdrVlA4cjVfb3dxMXZq aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxOGNqZVQtUEZIR2tWUDhyNV9vd3ExdmppWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzMy9CMEJGQUMzNDkyNEYxMUVFQThDMjI0NDBDNEY5QUUwMi8zcThjamVULVBG SEdrVlA4cjVfb3dxMXZqaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQkDhHYtvqCheCIZiGjP4xZQypkeAMvX0BmxjNxNJjF7dIv96pz75K+2pNHs qIm3OtvR9xZV6LS8azy0JW45PLV9Yxn2/nxpgYMGCkLmbim1boMTo8LOjlUNr9ig UfUUb8OFMwx6ZB8fxKVlGNG7hpocHbAtTIeOlXhvIabsorwmGp9F0TsczLrF/xFf hLd9KbvUEQAKOTzq9H6J+836hD9Qvq2tTlTfKWkI+wd53tn6N8OWAXuUWtn80Gdq 9Ln0J8j9BOBM7nbEH+lh4cMrx6pbHYcxsOfh8FpmSZ9MlfgXnKsJLfOdIO9bczkG WU9ET93CJ74a/jl3O7Gpc8oS9g== -----END CERTIFICATE-----Generated at Sun Oct 4 15:23:22 2026 by rpki-client