$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json) Hash identifier: rBeIxMqpdHbRC6WCn1m6MQUS5NU028q3nYsHIj5FLlc= Subject key identifier: 01:F9:CA:7A:1E:3F:AE:DA:62:EA:25:47:5F:F0:D4:59:5E:B3:06:02 Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0F80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft Manifest number: 0F75 Signing time: Fri 02 Oct 2026 17:42:25 +0000 Manifest this update: Fri 02 Oct 2026 17:42:25 +0000 Manifest next update: Fri 09 Oct 2026 17:42:25 +0000 Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: gyYN9FL/p7w+Rpn6V+ZWoO4XXkObTDFD2/8ISADucPw=) 2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: epuRJDNpLBRjInLcr8wNqAbigHvQWwNVcLarPZoddFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3968 (0xf80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Oct 2 17:42:25 2026 GMT Not After : Oct 9 17:42:25 2026 GMT Subject: CN=6abfed01-e888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:5c:50:c2:1e:b0:39:8e:74:f7:89:8a:ab: 5d:c4:29:79:16:0d:04:b6:05:52:0b:bc:16:bb:b9: e6:ba:8a:57:67:d6:b9:4a:fd:d5:95:c2:df:2f:34: fb:15:ef:eb:f3:7f:44:78:ff:9b:7c:ca:56:7b:04: fa:6f:5e:96:65:eb:6c:8f:fd:8f:33:31:d5:fc:9d: 0a:3c:80:32:37:00:c2:a8:1c:84:05:41:bc:09:e8: 12:ad:fb:dd:b3:3f:f8:30:b9:68:0f:92:db:3a:3e: 23:0c:af:21:d6:4a:e2:54:54:be:82:10:47:3e:e4: 8c:a4:36:41:3e:87:cc:16:4b:43:d2:26:06:c1:ef: 43:29:37:03:6c:f2:ee:29:f8:d3:61:99:69:1d:7a: d6:eb:e3:ce:a7:75:20:6b:cb:82:aa:a0:89:bf:e5: c2:87:c5:92:8b:56:bb:e4:cc:7e:98:0e:95:7d:67: 5b:ed:ed:4d:93:96:3f:60:d8:2a:c2:90:78:57:94: 36:79:90:3d:85:f9:48:a1:3b:c8:35:fb:2f:08:a4: f8:c3:d1:74:9b:65:5f:11:4b:10:3b:85:ba:e1:89: 03:d2:65:33:94:84:99:12:02:08:ab:51:43:65:78: b8:43:5e:4b:cd:01:99:51:89:94:2d:9a:da:12:a4: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F9:CA:7A:1E:3F:AE:DA:62:EA:25:47:5F:F0:D4:59:5E:B3:06:02 X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:07:fa:03:96:21:fb:c3:1e:2f:0c:79:3e:24:60:81:39: b0:9a:6d:27:f3:ad:3b:31:e2:28:7b:f9:f8:03:56:79:49:56: b1:5d:99:38:a8:6a:8c:06:48:9b:b8:ed:af:2c:cd:db:53:5d: 5e:9a:3a:ec:a7:0c:6a:10:64:f3:60:3d:64:a6:9d:3e:03:ec: 2c:e9:dd:90:9d:8f:33:f8:59:18:c6:09:9b:7d:a9:1f:c9:64: f8:9c:92:cd:85:92:8d:2f:c7:19:d8:db:e1:61:5a:95:d6:de: 03:5d:b6:e2:d4:0a:c8:4b:10:f9:53:4c:6c:d8:b2:fc:45:52: 21:a0:4e:de:b4:d4:48:af:7d:34:0f:69:8e:02:7d:f9:2b:ed: fc:1b:1e:98:83:a6:82:4f:bc:a4:44:1c:49:c6:e0:0e:11:af: db:5e:1c:91:5c:a1:4e:e5:d1:0f:69:90:9a:e5:fe:ca:d1:41: c3:37:af:ba:2b:06:cf:ae:34:35:c9:ac:fb:9c:29:0a:4f:36: 1e:bc:35:87:4e:5b:41:48:98:df:3c:69:49:f3:21:7f:6a:8d: e7:68:fa:6d:97:7c:68:d7:0b:99:e2:5b:b1:2c:45:00:a8:a5: 34:40:b7:6e:88:cc:0d:d7:85:a7:4a:eb:2b:df:dd:69:2c:8e: 8e:ca:4a:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjYxMDAyMTc0MjI1WhcNMjYxMDA5MTc0MjI1WjAYMRYwFAYD VQQDEw02YWJmZWQwMS1lODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9tcUMIesDmOdPeJiqtdxCl5Fg0EtgVSC7wWu7nmuopXZ9a5Sv3VlcLfLzT7 Fe/r839EeP+bfMpWewT6b16WZetsj/2PMzHV/J0KPIAyNwDCqByEBUG8CegSrfvd sz/4MLloD5LbOj4jDK8h1kriVFS+ghBHPuSMpDZBPofMFktD0iYGwe9DKTcDbPLu KfjTYZlpHXrW6+POp3Uga8uCqqCJv+XCh8WSi1a75Mx+mA6VfWdb7e1Nk5Y/YNgq wpB4V5Q2eZA9hflIoTvINfsvCKT4w9F0m2VfEUsQO4W64YkD0mUzlISZEgIIq1FD ZXi4Q15LzQGZUYmULZraEqR6MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAH5ynoe P67aYuolR1/w1FleswYCMB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdL d1pHc09Rb3NrbDJNQTFxRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlAH+gOWIfvDHi8MeT4kYIE5sJptJ/OtOzHiKHv5+ANWeUlWsV2ZOKhqjAZI m7jtryzN21NdXpo67KcMahBk82A9ZKadPgPsLOndkJ2PM/hZGMYJm32pH8lk+JyS zYWSjS/HGdjb4WFaldbeA1224tQKyEsQ+VNMbNiy/EVSIaBO3rTUSK99NA9pjgJ9 +Svt/BsemIOmgk+8pEQcScbgDhGv214ckVyhTuXRD2mQmuX+ytFBwzevuisGz640 Ncms+5wpCk82Hrw1h05bQUiY3zxpSfMhf2qN52j6bZd8aNcLmeJbsSxFAKilNEC3 bojMDdeFp0rrK9/daSyOjspKYw== -----END CERTIFICATE-----Generated at Sun Oct 4 07:20:29 2026 by rpki-client