$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json) Hash identifier: e3sVMK6elADNV1MsOXooIMUGMAKb6BhUzFDtsjvLFIE= Subject key identifier: 66:C6:E6:B4:55:F9:A5:D9:8A:23:7E:93:7E:40:A6:D2:01:05:52:24 Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft Manifest number: 3C Signing time: Fri 11 Sep 2026 08:37:58 +0000 Manifest this update: Fri 11 Sep 2026 08:37:57 +0000 Manifest next update: Fri 18 Sep 2026 08:37:57 +0000 Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: HLljrksG3t2I9G7s3R1Ld5alPTOXoYPzuC5NwAY6/Ak=) 2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Validity Not Before: Sep 11 08:37:57 2026 GMT Not After : Sep 18 08:37:57 2026 GMT Subject: CN=6aa3bde6-06e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:af:0b:19:cf:73:08:34:d8:3f:ea:1a:99: b7:86:66:1b:03:b6:ed:28:46:3c:d8:e1:f8:59:8e: 32:eb:e5:76:7d:f0:b4:23:39:c2:28:18:89:92:11: c2:e7:eb:38:62:24:aa:7c:12:e6:98:5d:e5:a7:b2: 9d:1d:25:69:c1:ad:1e:e2:7c:db:01:3f:59:93:8e: 8c:37:a4:0c:74:f0:a6:7b:95:3c:fc:d6:6b:a3:9b: d0:10:f5:21:ae:1f:92:29:03:c5:b5:bd:40:d3:d2: 48:a1:4b:5e:d9:da:f4:8d:78:8e:5d:2e:0b:8f:e1: 72:00:2a:f3:85:4c:f0:3a:bd:1e:83:9e:7e:c3:ae: ea:00:28:05:ea:d7:f8:ac:0b:d1:d5:6a:df:83:03: e4:4d:4c:a6:5a:ce:89:ca:03:14:7c:a0:12:a4:65: 2d:76:21:a3:18:98:41:33:51:2c:97:22:47:8b:65: da:f3:31:a8:21:22:74:da:b6:55:e9:5c:92:b7:51: 3a:58:f9:90:ed:83:6b:a3:d4:e4:ee:a1:70:44:ec: bd:80:4a:96:88:7b:01:ec:54:b1:e7:c2:67:f4:d0: ec:bc:a4:5c:27:98:8f:d1:8c:a2:80:12:b3:b3:cd: 80:2d:02:91:19:d6:05:ff:25:b1:20:0c:4c:55:c4: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:E6:B4:55:F9:A5:D9:8A:23:7E:93:7E:40:A6:D2:01:05:52:24 X509v3 Authority Key Identifier: keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:f2:03:0e:15:ea:7b:92:45:77:59:b9:7d:c1:b6:fe:c2: e9:cc:e8:c7:5a:50:20:e8:43:62:c3:cd:c2:5a:67:40:cd:1e: 67:53:83:0d:72:66:6e:9a:6c:31:8f:17:36:f2:93:94:8e:42: 04:a7:c7:ae:08:ff:76:04:f7:30:5e:80:56:d0:79:a8:a7:cc: f5:55:c9:3f:85:a0:bd:38:ff:0f:ac:0f:ca:9a:65:d1:7a:60: cf:84:42:39:cb:cb:27:c1:6c:9e:2c:69:8e:6d:06:b3:66:e2: de:29:d3:8e:68:d7:2d:e7:b1:78:4e:aa:74:9f:4c:58:21:9c: 66:6d:73:5c:db:68:16:4e:bd:10:30:1a:76:3d:71:b0:d7:d3: 1a:f9:a8:a9:16:18:ac:8e:d8:11:ef:96:e5:45:fa:60:e3:3b: 13:41:49:89:51:d0:47:6a:9d:a7:91:e2:1d:dc:0d:1e:2f:e9: 4a:81:01:96:d5:08:2a:8c:6f:69:a1:b6:80:d8:e0:05:f6:61: 5d:28:41:94:16:1c:49:62:6f:9d:a2:8f:da:8f:80:e2:ef:1c: d1:1c:ca:fe:56:ed:d1:e9:e8:8a:37:b9:59:89:a9:bc:a8:93: 58:7b:4f:e2:71:44:c1:22:05:fb:e1:15:f6:40:4c:48:2e:50: 02:36:5a:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVBMTExMC8GA1UEBRMoRjFBNDYxMkEwNkUxMEVGNUJEOTYzMTczRUMyNjUzOEI3 RDQwMzczNjAeFw0yNjA5MTEwODM3NTdaFw0yNjA5MTgwODM3NTdaMBgxFjAUBgNV BAMTDTZhYTNiZGU2LTA2ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVea8LGc9zCDTYP+oambeGZhsDtu0oRjzY4fhZjjLr5XZ98LQjOcIoGImSEcLn 6zhiJKp8EuaYXeWnsp0dJWnBrR7ifNsBP1mTjow3pAx08KZ7lTz81mujm9AQ9SGu H5IpA8W1vUDT0kihS17Z2vSNeI5dLguP4XIAKvOFTPA6vR6Dnn7DruoAKAXq1/is C9HVat+DA+RNTKZazonKAxR8oBKkZS12IaMYmEEzUSyXIkeLZdrzMaghInTatlXp XJK3UTpY+ZDtg2uj1OTuoXBE7L2ASpaIewHsVLHnwmf00Oy8pFwnmI/RjKKAErOz zYAtApEZ1gX/JbEgDExVxGoFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZsbmtFX5 pdmKI36TfkCm0gEFUiQwHwYDVR0jBBgwFoAU8aRhKgbhDvW9ljFz7CZTi31ANzYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0U3MTM5OEM2NTRF NTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZXOWxqRno3Q1pUaTMxQU56 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGFSaEtnYmhEdlc5bGpGejdDWlRpMzFBTnpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RUExL0U3MTM5OEM2NTRFNTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZX OWxqRno3Q1pUaTMxQU56WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpVvIDDhXqe5JFd1m5fcG2/sLpzOjHWlAg6ENiw83CWmdAzR5nU4MNcmZummwx jxc28pOUjkIEp8euCP92BPcwXoBW0Hmop8z1Vck/haC9OP8PrA/KmmXRemDPhEI5 y8snwWyeLGmObQazZuLeKdOOaNct57F4Tqp0n0xYIZxmbXNc22gWTr0QMBp2PXGw 19Ma+aipFhisjtgR75blRfpg4zsTQUmJUdBHap2nkeId3A0eL+lKgQGW1QgqjG9p obaA2OAF9mFdKEGUFhxJYm+doo/aj4Di7xzRHMr+Vu3R6eiKN7lZiam8qJNYe0/i cUTBIgX74RX2QExILlACNlrA -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:09 2026 by rpki-client