$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: b82oixow7DQ7D8A7WxHoyxIJ544wKXe68l28Z15ESPs= Subject key identifier: E7:34:62:B1:85:00:2F:6C:F9:D4:C4:97:10:B6:66:F7:FC:59:93:5B Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0D29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0D1E Signing time: Thu 22 Oct 2026 18:25:25 +0000 Manifest this update: Thu 22 Oct 2026 18:25:24 +0000 Manifest next update: Thu 29 Oct 2026 18:25:24 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: aV1HXDLsf1w69HU9oDTvQURql2i/Bx+uTg6XlG9QhIY=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: LIB+jPRrNcX48j1VF+KjCprRK7AM8JBY+SFqwnYaTaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 18:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Oct 22 18:25:24 2026 GMT Not After : Oct 29 18:25:24 2026 GMT Subject: CN=6ada5514-9dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:14:70:9e:88:7e:ac:39:ed:98:a6:01:93: 2d:58:01:5e:eb:91:e5:5c:a6:8e:78:5a:bc:e1:4e: 14:a8:99:4d:15:36:e4:d3:e9:37:84:03:03:b8:5a: 9c:a4:68:e4:eb:a0:a9:2b:8c:ae:7f:5a:c2:21:2d: 89:40:f4:cd:1e:12:4c:a3:f2:ee:1f:d1:0d:f5:e4: 5c:1e:e0:da:56:c1:66:79:68:64:df:41:c2:65:48: a9:cd:80:f9:66:eb:09:60:1b:a5:f9:77:18:98:de: 9f:0d:5f:b3:01:b0:1b:ff:9d:ab:1c:5b:c7:4c:ba: a1:79:3f:9c:01:8b:6a:7f:51:e7:5a:dd:5c:d8:a2: f7:c1:b4:4b:eb:aa:d6:15:dd:62:83:6e:df:dd:e8: a8:00:d7:9e:e9:71:d4:0a:b7:00:02:b0:d9:3a:78: 69:ce:e8:28:ec:1f:4c:69:09:b1:54:22:7e:b4:64: 24:e0:e5:55:9f:bd:02:47:29:bf:29:77:c9:12:f7: 56:5c:6e:82:e7:9b:42:72:e9:a0:2b:0d:48:24:a8: 58:c4:7d:cd:3a:2c:fd:de:ad:e0:34:9f:78:da:24: f5:b9:a2:66:81:99:a3:3d:cd:a5:1e:07:9b:36:9f: 21:dc:2f:59:47:78:6f:82:96:6a:08:7c:79:98:17: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:34:62:B1:85:00:2F:6C:F9:D4:C4:97:10:B6:66:F7:FC:59:93:5B X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1c:2c:c8:42:54:db:e5:f5:8a:30:1e:a0:2c:0a:7c:71:0c: 4c:82:67:5c:dc:59:16:13:80:64:68:0b:13:4c:b9:1d:e4:eb: 34:68:a1:d2:00:fa:74:fa:b7:ba:d2:fe:ea:7c:be:8b:f9:88: 26:ae:5e:8f:d8:17:09:75:59:81:31:43:a1:06:66:81:e9:11: d1:73:db:df:2e:3b:04:dc:94:67:f3:e2:23:d8:9a:e4:4d:38: cb:44:01:a9:ef:1c:13:71:52:0b:5a:13:2f:30:e1:0a:4f:0d: 2e:7b:64:3e:e5:10:d9:43:22:6c:f5:7b:98:8b:5b:f1:34:1f: 77:bc:50:fa:f1:de:5a:c1:b7:98:35:d6:fb:e3:34:45:4e:9d: 38:1f:1f:5d:f7:81:a4:34:f1:0e:7b:40:92:60:32:1d:e6:96: 3a:ee:62:5a:a4:81:61:84:08:69:6f:31:b8:f8:80:99:d3:77: 9f:83:16:bc:cc:d1:77:9f:44:50:9e:4b:64:ef:e3:ca:95:dc: 46:05:e2:37:1f:ae:b7:0f:19:48:36:56:ca:09:7e:91:b5:d5: de:60:34:38:66:df:c2:6f:1f:35:72:0e:c3:b2:cb:2b:86:f5: f8:9e:9a:13:30:92:63:6c:dc:f5:0a:3e:9a:9a:41:1a:72:ad: c1:85:9a:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYxMDIyMTgyNTI0WhcNMjYxMDI5MTgyNTI0WjAYMRYwFAYD VQQDEw02YWRhNTUxNC05ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BYUcJ6Ifqw57ZimAZMtWAFe65HlXKaOeFq84U4UqJlNFTbk0+k3hAMDuFqc pGjk66CpK4yuf1rCIS2JQPTNHhJMo/LuH9EN9eRcHuDaVsFmeWhk30HCZUipzYD5 ZusJYBul+XcYmN6fDV+zAbAb/52rHFvHTLqheT+cAYtqf1HnWt1c2KL3wbRL66rW Fd1ig27f3eioANee6XHUCrcAArDZOnhpzugo7B9MaQmxVCJ+tGQk4OVVn70CRym/ KXfJEvdWXG6C55tCcumgKw1IJKhYxH3NOiz93q3gNJ942iT1uaJmgZmjPc2lHgeb Np8h3C9ZR3hvgpZqCHx5mBfv9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOc0YrGF AC9s+dTElxC2Zvf8WZNbMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRwsyEJU2+X1ijAeoCwKfHEMTIJnXNxZFhOAZGgLE0y5HeTrNGih0gD6dPq3 utL+6ny+i/mIJq5ej9gXCXVZgTFDoQZmgekR0XPb3y47BNyUZ/PiI9ia5E04y0QB qe8cE3FSC1oTLzDhCk8NLntkPuUQ2UMibPV7mItb8TQfd7xQ+vHeWsG3mDXW++M0 RU6dOB8fXfeBpDTxDntAkmAyHeaWOu5iWqSBYYQIaW8xuPiAmdN3n4MWvMzRd59E UJ5LZO/jypXcRgXiNx+utw8ZSDZWygl+kbXV3mA0OGbfwm8fNXIOw7LLK4b1+J6a EzCSY2zc9Qo+mppBGnKtwYWaSA== -----END CERTIFICATE-----Generated at Fri Oct 23 09:08:36 2026 by rpki-client