$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: enfJ8CMbMOgujd3RP2IX4IentT5bo4XTuBOlQBW+s6Y= Subject key identifier: 75:85:30:1A:C1:64:36:81:0B:68:A5:84:45:32:83:A5:12:00:69:C8 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0208 Signing time: Sat 03 Oct 2026 03:42:56 +0000 Manifest this update: Sat 03 Oct 2026 03:42:55 +0000 Manifest next update: Sat 10 Oct 2026 03:42:55 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 1YSEu963sYqr2H/0aSh5xGXYVRjrNBaPI+TVmv/tKm8=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Oct 3 03:42:55 2026 GMT Not After : Oct 10 03:42:55 2026 GMT Subject: CN=6ac079bf-0483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:c3:e4:d9:bf:ad:39:ae:21:1b:dc:37:c3: ef:df:cc:e1:fd:6e:06:4f:b2:5c:73:55:1f:52:51: 3d:e4:37:c0:90:63:aa:75:03:13:bc:66:f6:95:ae: 2f:47:1d:7b:55:a9:bd:70:4c:3e:d2:a8:aa:dc:86: 4c:cc:24:03:e4:5f:7b:12:18:f5:0b:d2:36:f9:ad: 7b:49:73:73:20:e5:d0:7a:91:44:5e:47:93:ad:aa: 3d:cc:f3:b1:bd:6c:11:88:fc:3e:3b:2d:17:5d:fe: 35:3c:30:c9:25:a9:b5:58:f6:50:69:58:53:e8:a6: aa:f6:87:bf:24:12:bd:5d:c5:a1:29:06:19:7b:de: ab:bd:7e:8a:74:cf:0a:d7:64:31:8f:7c:9f:ff:08: a1:89:ee:26:6b:39:af:07:0b:76:ff:59:ee:de:8c: af:5f:38:c5:97:98:4b:1a:d6:c4:29:e3:f6:aa:b4: be:ce:d7:e1:3d:cb:68:3a:7f:18:cf:ea:e4:b7:c6: ea:6b:e9:59:64:5f:d4:8a:70:79:58:e0:0d:db:27: d8:c7:77:c4:3b:57:39:72:ab:8b:97:25:1a:39:f5: 38:07:fa:5f:29:b4:bb:f2:05:d5:fb:83:a1:82:2d: 77:c4:66:b5:18:77:ea:2c:a2:5b:a2:9d:76:05:67: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:30:1A:C1:64:36:81:0B:68:A5:84:45:32:83:A5:12:00:69:C8 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:49:c7:4e:21:df:a9:5d:af:ca:c6:b6:98:16:bd:c4:ed: cf:59:ab:22:3d:c1:90:3b:05:74:38:90:7a:bd:4d:a4:1b:9b: c5:6c:2f:03:dd:37:b8:02:d6:b3:06:56:21:27:5c:26:48:1a: 67:44:6b:25:90:b7:b7:0a:31:d5:3f:06:fa:41:28:94:60:09: 26:cc:ef:b4:79:df:68:68:40:1c:19:8f:59:9a:b5:7d:18:71: 1f:d1:ec:b4:be:97:03:46:68:43:97:01:12:f6:b4:e5:68:37: 10:18:8e:06:cb:e0:ca:9d:a7:6e:b1:d2:b4:76:16:49:42:16: b1:ce:72:c0:50:42:b5:2b:98:14:05:59:1b:27:62:9a:d0:f7: 64:cb:ca:42:67:fc:e9:f2:0f:69:3f:31:28:d3:47:24:85:62: 68:61:46:b7:dc:ab:27:da:61:de:ee:12:e2:ff:02:56:08:40: 2b:89:c1:5f:ea:8a:b4:f4:c4:fc:18:f9:e7:74:10:7c:22:34: a4:33:54:47:68:dd:fa:53:15:63:95:b4:72:51:b5:85:bc:09: 32:01:67:75:ed:a9:10:87:bb:60:d6:dc:61:7b:0d:fc:cd:63: 41:46:37:23:e5:77:05:4f:2b:7a:86:8a:72:33:c1:6b:68:9d: 7d:e1:af:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYxMDAzMDM0MjU1WhcNMjYxMDEwMDM0MjU1WjAYMRYwFAYD VQQDEw02YWMwNzliZi0wNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ezD5Nm/rTmuIRvcN8Pv38zh/W4GT7Jcc1UfUlE95DfAkGOqdQMTvGb2la4v Rx17Vam9cEw+0qiq3IZMzCQD5F97Ehj1C9I2+a17SXNzIOXQepFEXkeTrao9zPOx vWwRiPw+Oy0XXf41PDDJJam1WPZQaVhT6Kaq9oe/JBK9XcWhKQYZe96rvX6KdM8K 12Qxj3yf/wihie4mazmvBwt2/1nu3oyvXzjFl5hLGtbEKeP2qrS+ztfhPctoOn8Y z+rkt8bqa+lZZF/UinB5WOAN2yfYx3fEO1c5cquLlyUaOfU4B/pfKbS78gXV+4Oh gi13xGa1GHfqLKJbop12BWf9cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWFMBrB ZDaBC2ilhEUyg6USAGnIMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAej9Jx04h36ldr8rGtpgWvcTtz1mrIj3BkDsFdDiQer1NpBubxWwvA903uALW swZWISdcJkgaZ0RrJZC3twox1T8G+kEolGAJJszvtHnfaGhAHBmPWZq1fRhxH9Hs tL6XA0ZoQ5cBEva05Wg3EBiOBsvgyp2nbrHStHYWSUIWsc5ywFBCtSuYFAVZGydi mtD3ZMvKQmf86fIPaT8xKNNHJIViaGFGt9yrJ9ph3u4S4v8CVghAK4nBX+qKtPTE /Bj553QQfCI0pDNUR2jd+lMVY5W0clG1hbwJMgFnde2pEIe7YNbcYXsN/M1jQUY3 I+V3BU8reoaKcjPBa2idfeGvNw== -----END CERTIFICATE-----Generated at Sun Oct 4 12:00:25 2026 by rpki-client