$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft File: 3MnOwPy4zLyvexzByLIVJW33h48.mft (raw, json) Hash identifier: a8jgYY206uPomHr8ZlWEHriieR9mofdKqruJMDJ+MsQ= Subject key identifier: 1A:8D:EC:73:AB:31:B9:84:DD:1A:6B:E1:2F:8A:F7:F7:B9:36:47:4A Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F Certificate issuer: /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft Manifest number: 2C Signing time: Sun 11 Oct 2026 09:23:34 +0000 Manifest this update: Sun 11 Oct 2026 09:23:33 +0000 Manifest next update: Sun 18 Oct 2026 09:23:33 +0000 Files and hashes: 1: 3MnOwPy4zLyvexzByLIVJW33h48.crl (hash: YzwwdkqyfStWlnnRcPlcl+6zU50H++tUmmTgF2HaCJk=) 2: 21FFC88285BB11F18D64891761A30FBC.roa (hash: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Validity Not Before: Oct 11 09:23:33 2026 GMT Not After : Oct 18 09:23:33 2026 GMT Subject: CN=6acb5596-631f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:63:10:09:b5:ba:82:41:21:7d:45:8a:1b:85: c0:cb:c4:31:6e:d8:97:82:e5:94:39:58:4c:71:cb: 94:15:96:1b:1e:85:d3:8e:70:40:ca:5a:86:59:bf: 3e:01:94:22:cb:b9:b2:6d:00:65:39:9e:02:75:bc: 53:fc:c9:c4:84:7f:4a:b5:3d:ae:ae:03:96:cc:1c: f0:a3:fe:35:98:18:d8:e1:cc:bc:d7:1d:8e:86:23: f0:b2:ad:4d:7b:b0:c1:f7:c8:0e:d4:39:34:0c:2b: 56:e4:5d:c9:c0:ee:92:63:55:de:b2:08:76:44:40: 78:d7:b8:d5:c9:95:7f:7b:e7:6a:57:ab:c7:bf:f3: 4d:61:f6:99:b7:d2:df:ee:cd:85:1c:46:3e:a0:0e: a0:33:c3:14:cc:d2:64:c1:4f:9a:46:7b:77:47:5a: 02:31:0e:b3:7c:b0:bd:cd:3c:55:85:b5:f1:f1:40: f7:66:f9:91:76:c5:ed:1f:98:1d:0c:e3:2c:ec:b5: df:da:39:d5:0b:26:37:6b:cd:07:56:7b:fa:cd:04: a2:fe:97:e8:e4:62:ec:36:c7:11:2f:5e:fb:24:2b: 2f:b1:a3:6c:b2:ac:ac:55:9c:83:9c:62:16:57:25: ff:6c:9d:f3:23:2b:93:6c:56:70:09:24:2f:01:81: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8D:EC:73:AB:31:B9:84:DD:1A:6B:E1:2F:8A:F7:F7:B9:36:47:4A X509v3 Authority Key Identifier: keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7c:86:60:0c:a4:e2:d0:aa:6a:59:4e:8e:2c:02:cc:be:8b: a0:f4:16:fb:8d:17:2a:e1:af:5c:4f:d8:a3:74:10:f0:15:7d: e2:ba:a2:19:f2:ac:0c:ac:cd:51:d6:23:ef:00:85:a4:51:7e: 29:e3:d9:85:8e:00:d8:34:ad:8c:76:ef:22:99:43:bc:c2:64: df:cb:17:35:6a:ec:fb:a2:99:c4:9a:49:3a:ee:0c:2d:51:21: ab:e7:e1:bb:00:f4:8e:b6:d3:63:25:53:55:0c:f8:a2:22:9d: af:2f:b4:28:08:7f:32:0f:67:94:49:7c:d8:21:79:c4:98:5c: 88:59:94:94:f0:26:f2:64:18:13:51:d6:4f:57:45:07:f0:6b: ac:65:fb:1f:30:ee:0c:71:35:ac:77:e2:8d:4d:bd:ee:51:85: c2:be:04:60:9c:86:fb:9f:4a:e4:d4:d3:4e:95:5f:cf:89:da: 7e:ed:78:7d:79:a9:42:e7:35:24:4a:fa:9e:39:6e:8c:29:30: 28:02:27:f6:e1:0f:01:03:7a:65:31:b9:1d:8e:9f:ea:e9:57: 98:c7:25:0e:b3:7a:41:67:ea:c4:02:40:18:bb:07:1b:8b:3f: 40:58:4a:4c:1d:2d:ce:03:3e:7d:6f:32:98:6b:0e:a0:c8:32: 65:ad:0b:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTEwQjExMC8GA1UEBRMoRENDOUNFQzBGQ0I4Q0NCQ0FGN0IxQ0MxQzhCMjE1MjU2 REY3ODc4RjAeFw0yNjEwMTEwOTIzMzNaFw0yNjEwMTgwOTIzMzNaMBgxFjAUBgNV BAMTDTZhY2I1NTk2LTYzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4YxAJtbqCQSF9RYobhcDLxDFu2JeC5ZQ5WExxy5QVlhsehdOOcEDKWoZZvz4B lCLLubJtAGU5ngJ1vFP8ycSEf0q1Pa6uA5bMHPCj/jWYGNjhzLzXHY6GI/CyrU17 sMH3yA7UOTQMK1bkXcnA7pJjVd6yCHZEQHjXuNXJlX9752pXq8e/801h9pm30t/u zYUcRj6gDqAzwxTM0mTBT5pGe3dHWgIxDrN8sL3NPFWFtfHxQPdm+ZF2xe0fmB0M 4yzstd/aOdULJjdrzQdWe/rNBKL+l+jkYuw2xxEvXvskKy+xo2yyrKxVnIOcYhZX Jf9snfMjK5NsVnAJJC8BgWNdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGo3sc6sx uYTdGmvhL4r397k2R0owHwYDVR0jBBgwFoAU3MnOwPy4zLyvexzByLIVJW33h48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMTBCLzFCNDBEMkIyODVC QTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5dmV4ekJ5TElWSlczM2g0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM01uT3dQeTR6THl2ZXh6QnlMSVZKVzMzaDQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MTBCLzFCNDBEMkIyODVCQTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5 dmV4ekJ5TElWSlczM2g0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXfIZgDKTi0KpqWU6OLALMvoug9Bb7jRcq4a9cT9ijdBDwFX3iuqIZ8qwMrM1R 1iPvAIWkUX4p49mFjgDYNK2Mdu8imUO8wmTfyxc1auz7opnEmkk67gwtUSGr5+G7 APSOttNjJVNVDPiiIp2vL7QoCH8yD2eUSXzYIXnEmFyIWZSU8CbyZBgTUdZPV0UH 8GusZfsfMO4McTWsd+KNTb3uUYXCvgRgnIb7n0rk1NNOlV/Pidp+7Xh9ealC5zUk SvqeOW6MKTAoAif24Q8BA3plMbkdjp/q6VeYxyUOs3pBZ+rEAkAYuwcbiz9AWEpM HS3OAz59bzKYaw6gyDJlrQvy -----END CERTIFICATE-----Generated at Mon Oct 12 19:07:25 2026 by rpki-client