$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: rRyKhaa2cKywLbKNm6sJGBOa8j3FN3l4BbFXiJpiOsE= Subject key identifier: 4B:59:38:20:01:AE:A6:B3:92:1F:FE:D0:16:66:C5:04:34:F8:60:53 Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 07D1 Signing time: Wed 28 Oct 2026 21:34:29 +0000 Manifest this update: Wed 28 Oct 2026 21:34:28 +0000 Manifest next update: Wed 04 Nov 2026 21:34:28 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: M9YZ7AhtXIqtOy/2XSJjPPB/fwwstucN9Ai2eb+HZvI=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: EqmRIjquU+tSmDMjC7w1ByfOqPCzO7OzMl+YIXKJh6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: Oct 28 21:34:28 2026 GMT Not After : Nov 4 21:34:28 2026 GMT Subject: CN=6ae26a65-b57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:d6:5a:64:05:22:73:6f:27:8c:d8:c8:ea: 78:61:85:03:b1:fd:34:8d:36:ea:59:30:ec:21:72: a3:d3:61:12:b6:9b:7c:17:26:d2:ec:f7:4d:27:be: a9:2a:70:50:32:66:ab:51:ec:85:82:a9:a7:fa:56: a8:96:64:e1:cb:53:9e:11:45:c5:d2:fd:98:b1:dd: d2:60:e8:8d:6d:ef:0e:cb:5c:dc:de:fb:b2:ea:ce: 88:f7:f3:d2:6e:fc:dc:d0:b3:6c:d4:0e:62:dd:50: 92:ec:f4:24:b6:8d:d3:c8:14:03:d4:b1:65:6c:2f: ae:f0:19:a6:1c:86:e7:0c:75:45:8c:0e:7c:cb:03: 10:3c:86:d1:31:d0:1f:67:71:7f:50:a3:1b:68:65: 9b:99:34:95:3a:59:e7:a1:0b:12:b5:04:a6:5b:ce: cd:b0:44:ed:2c:fa:4b:24:e4:86:c4:9f:0b:0e:b1: 67:22:42:41:d8:1c:71:bc:20:f9:18:88:ba:ee:41: 1f:84:5a:36:04:02:da:bf:24:f3:b3:19:86:b2:2e: e3:a0:98:f1:42:ed:f6:0f:51:1a:01:a5:a9:e0:32: f4:25:77:0d:8a:25:82:f1:59:c7:6b:db:35:b9:61: c9:20:89:05:3d:fa:31:58:d3:e5:eb:f4:ae:93:c0: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:38:20:01:AE:A6:B3:92:1F:FE:D0:16:66:C5:04:34:F8:60:53 X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f8:3a:60:60:5d:dc:90:57:ba:29:93:20:9a:4b:c8:5c:c6: 94:59:30:49:cf:a9:11:7f:49:9a:71:b6:6f:fc:ed:52:7f:3c: 32:cd:22:3c:e6:90:42:10:f2:f7:0f:b4:c0:f8:26:f5:35:77: e8:b0:8f:e4:2c:7d:96:97:36:0c:44:39:ce:49:5f:70:b9:ef: 53:b5:66:97:2e:df:ec:70:6e:13:88:ea:51:48:96:f6:92:3c: 24:f3:0e:db:22:21:68:46:48:73:dc:f5:94:59:c9:ca:b8:ab: dd:0e:a9:22:be:96:ec:2c:27:cd:56:4c:53:a3:fd:46:18:94: f7:12:3f:a7:13:e3:63:15:e8:ed:42:35:8c:2e:a7:34:12:a4: 61:89:3d:52:44:dc:88:14:3a:bb:fa:88:07:4f:92:cf:ef:b7: 33:5b:40:a4:94:1a:10:c0:f8:97:3c:66:16:5c:8b:47:a3:76: 14:a1:50:05:40:0c:d8:25:d9:5c:cc:90:4d:de:19:92:37:69: 2a:96:f7:58:aa:60:37:c1:52:ee:ae:8b:5d:89:2f:25:6f:84: 9f:f4:e4:76:9a:8f:a5:f4:67:12:0e:9b:17:88:c9:e5:93:27: 09:0e:7b:d9:8a:0d:57:c1:21:bf:9a:e5:84:5b:6e:d4:f0:e5: b1:67:f3:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjYxMDI4MjEzNDI4WhcNMjYxMTA0MjEzNDI4WjAYMRYwFAYD VQQDEw02YWUyNmE2NS1iNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRbWWmQFInNvJ4zYyOp4YYUDsf00jTbqWTDsIXKj02EStpt8FybS7PdNJ76p KnBQMmarUeyFgqmn+laolmThy1OeEUXF0v2Ysd3SYOiNbe8Oy1zc3vuy6s6I9/PS bvzc0LNs1A5i3VCS7PQkto3TyBQD1LFlbC+u8BmmHIbnDHVFjA58ywMQPIbRMdAf Z3F/UKMbaGWbmTSVOlnnoQsStQSmW87NsETtLPpLJOSGxJ8LDrFnIkJB2BxxvCD5 GIi67kEfhFo2BALavyTzsxmGsi7joJjxQu32D1EaAaWp4DL0JXcNiiWC8VnHa9s1 uWHJIIkFPfoxWNPl6/Suk8BdtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtZOCAB rqazkh/+0BZmxQQ0+GBTMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfg6YGBd3JBXuimTIJpLyFzGlFkwSc+pEX9JmnG2b/ztUn88Ms0iPOaQQhDy 9w+0wPgm9TV36LCP5Cx9lpc2DEQ5zklfcLnvU7Vmly7f7HBuE4jqUUiW9pI8JPMO 2yIhaEZIc9z1lFnJyrir3Q6pIr6W7CwnzVZMU6P9RhiU9xI/pxPjYxXo7UI1jC6n NBKkYYk9UkTciBQ6u/qIB0+Sz++3M1tApJQaEMD4lzxmFlyLR6N2FKFQBUAM2CXZ XMyQTd4ZkjdpKpb3WKpgN8FS7q6LXYkvJW+En/TkdpqPpfRnEg6bF4jJ5ZMnCQ57 2YoNV8Ehv5rlhFtu1PDlsWfzWQ== -----END CERTIFICATE-----Generated at Fri Oct 30 20:26:21 2026 by rpki-client