$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: SfyNSOudlBBV1ZHnc0oaMC7eAveM11/aptfdrzCCFeE= Subject key identifier: 93:B0:9D:9A:FD:03:46:3A:42:97:BB:21:8D:C0:08:32:A5:A4:B0:05 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1F94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1F77 Signing time: Tue 18 Aug 2026 16:06:39 +0000 Manifest this update: Tue 18 Aug 2026 16:06:39 +0000 Manifest next update: Tue 25 Aug 2026 16:06:39 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: hx1AeMmak+kPjqkqaN0MA29iZq49l8tQV1ZKGe+S6PE=) 2: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: ZQGkVblUeaBQpEuqoVPq5XzQKgpGACzTE5sIWyJcuEI=) 3: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: 7/gwqGUBAOb3hEJ8slgdeW3dddqMQy1lCsCPeg2AjSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8084 (0x1f94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Aug 18 16:06:39 2026 GMT Not After : Aug 25 16:06:39 2026 GMT Subject: CN=6a84830f-bab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:6d:b7:68:fc:d3:a1:45:5e:1f:ec:32:e7: 56:9a:ac:60:66:c2:68:b2:98:4f:ff:8d:d7:ee:c2: a4:f0:f6:fe:8e:a8:89:c7:5e:c8:8d:31:ff:1b:ca: c6:ff:56:37:dd:15:16:a1:74:7f:eb:25:05:f7:bb: b4:a9:54:df:45:7e:ff:d8:3b:78:9e:93:9c:60:0e: bb:b0:68:79:66:a0:18:0c:b8:7b:eb:8f:b9:50:b7: 10:c8:e2:41:4c:b6:8d:82:56:8c:1a:de:cb:6e:cd: 87:5e:05:68:ea:ce:aa:53:f7:6d:b1:bd:19:f4:af: d2:f0:0e:8e:47:9a:86:77:e3:6a:6b:a2:99:ad:2f: a9:1f:3f:fe:4e:ed:7e:9a:4d:cf:1c:d5:d1:74:b4: db:97:a9:f8:74:53:4a:80:52:52:9d:65:71:94:31: 05:f0:9a:67:5e:16:86:61:b3:35:3f:10:d3:48:45: 0e:a9:da:2a:5d:84:1d:26:a4:80:1e:17:3f:e7:80: bb:20:9b:96:31:1b:8d:b7:1d:12:8d:64:b8:09:ca: 5b:44:06:3a:15:b8:98:6d:81:ae:e0:91:b9:99:21: 45:61:ba:43:db:97:be:27:f5:41:ad:b5:fb:8a:3f: 0c:64:e4:3d:bd:b3:ba:29:d1:e2:4e:c8:92:7f:dc: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:9D:9A:FD:03:46:3A:42:97:BB:21:8D:C0:08:32:A5:A4:B0:05 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:08:2f:0a:5c:62:1c:4c:a3:bd:b8:97:fd:81:79:17:c1:3a: c1:1f:a5:87:62:28:15:d0:9e:0c:a6:97:0f:40:bb:27:c9:68: 12:b1:15:d2:1b:1b:07:7d:02:1c:a0:7b:7d:23:3c:3d:e5:fc: 8d:ef:4d:81:1f:a1:12:34:a2:1a:bb:dd:df:8b:44:78:0c:3c: a8:42:5e:16:cd:20:d0:c1:9e:30:62:82:19:58:eb:35:f7:7c: e9:05:dc:50:17:f3:fd:2d:5d:3b:97:29:ff:54:27:04:7a:50: 70:42:12:9a:1d:c1:95:0d:b5:0e:8b:6e:6d:81:31:04:9a:da: 68:72:1f:60:9f:ae:2b:d9:da:6e:99:fd:16:6e:57:dd:5e:c6: f5:e5:f9:fa:39:6f:1f:e6:3f:dc:f5:f6:28:92:8c:5e:3a:72: b9:5f:e8:aa:36:29:71:3c:6b:51:c6:5d:b8:3c:bb:aa:75:9c: f2:ce:51:b3:54:86:3a:f0:0f:2c:9a:34:9b:60:e7:05:f4:a0: b6:08:aa:40:fd:6f:e0:09:07:5c:10:e9:a3:5e:a5:a4:9b:e6: ef:e3:6f:06:2d:6d:11:71:d3:91:56:bc:ad:3e:13:0d:52:44: 8a:3f:0f:54:97:79:01:2c:83:59:d9:1a:29:8e:32:b4:0e:53: 87:c2:ad:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjYwODE4MTYwNjM5WhcNMjYwODI1MTYwNjM5WjAYMRYwFAYD VQQDEw02YTg0ODMwZi1iYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFFtt2j806FFXh/sMudWmqxgZsJosphP/43X7sKk8Pb+jqiJx17IjTH/G8rG /1Y33RUWoXR/6yUF97u0qVTfRX7/2Dt4npOcYA67sGh5ZqAYDLh764+5ULcQyOJB TLaNglaMGt7Lbs2HXgVo6s6qU/dtsb0Z9K/S8A6OR5qGd+Nqa6KZrS+pHz/+Tu1+ mk3PHNXRdLTbl6n4dFNKgFJSnWVxlDEF8JpnXhaGYbM1PxDTSEUOqdoqXYQdJqSA Hhc/54C7IJuWMRuNtx0SjWS4CcpbRAY6FbiYbYGu4JG5mSFFYbpD25e+J/VBrbX7 ij8MZOQ9vbO6KdHiTsiSf9xQlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOwnZr9 A0Y6Qpe7IY3ACDKlpLAFMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvwgvClxiHEyjvbiX/YF5F8E6wR+lh2IoFdCeDKaXD0C7J8loErEV0hsbB30C HKB7fSM8PeX8je9NgR+hEjSiGrvd34tEeAw8qEJeFs0g0MGeMGKCGVjrNfd86QXc UBfz/S1dO5cp/1QnBHpQcEISmh3BlQ21DotubYExBJraaHIfYJ+uK9nabpn9Fm5X 3V7G9eX5+jlvH+Y/3PX2KJKMXjpyuV/oqjYpcTxrUcZduDy7qnWc8s5Rs1SGOvAP LJo0m2DnBfSgtgiqQP1v4AkHXBDpo16lpJvm7+NvBi1tEXHTkVa8rT4TDVJEij8P VJd5ASyDWdkaKY4ytA5Th8KtgA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:35 2026 by rpki-client