$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: xrzDhZ2GdOe5e2CM3tdHIKZlF4UWiSiumfM4wIFws8w= Subject key identifier: 9C:01:DA:70:24:CB:C6:74:9A:F0:08:30:EA:CD:44:94:83:1E:01:9E Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 08E8 Signing time: Wed 02 Sep 2026 20:23:53 +0000 Manifest this update: Wed 02 Sep 2026 20:23:53 +0000 Manifest next update: Wed 09 Sep 2026 20:23:53 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: 3U+yh6JxxpXwzXQiLgIY96SkLHLFecZPLe65mn6LHZg=) 2: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=) 3: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 20:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Sep 2 20:23:53 2026 GMT Not After : Sep 9 20:23:53 2026 GMT Subject: CN=6a9885d9-dda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:cc:8f:8f:b1:37:44:c9:ce:55:50:54:4c: e2:10:53:7f:21:e8:a7:4b:a9:34:e6:35:e1:cc:de: 3c:65:18:91:ac:ef:f4:a3:59:5a:0e:b6:e3:87:59: 06:9b:91:fe:c7:8c:70:0c:36:6a:cb:5c:e0:f6:75: 5f:d2:70:5e:39:dc:fe:b8:22:d7:a9:84:5a:e7:37: dc:2c:e8:67:d9:0b:93:26:7c:5f:15:59:e2:d1:24: 3b:26:ae:49:65:34:bd:2b:34:88:64:90:89:69:cd: 38:3c:85:12:7d:95:34:48:94:cb:2d:67:28:12:0d: 0c:0a:ba:33:92:6d:8c:74:5c:45:3f:7e:a9:84:a3: b4:d6:0b:a4:4f:f8:97:c4:e9:1b:66:8b:70:27:1a: 14:65:96:c1:fe:42:aa:1e:fc:ca:d1:53:b1:c5:f8: bc:39:0b:3f:a3:9c:e8:c5:15:89:a8:09:8c:71:ea: 1b:cf:f1:6b:44:10:88:37:bd:3a:a3:85:d2:64:95: 7a:68:39:98:71:75:8f:70:46:04:16:86:5a:31:20: 67:88:5b:0e:2f:77:a1:9a:b5:d8:73:37:89:2d:7b: 73:73:3f:35:de:48:3b:89:81:18:52:b7:9d:29:46: 3c:53:12:2e:74:f8:cb:47:26:75:e0:01:0a:58:ad: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:DA:70:24:CB:C6:74:9A:F0:08:30:EA:CD:44:94:83:1E:01:9E X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3d:33:48:89:a5:99:58:08:06:4b:20:c1:4e:a9:1b:bb:d0: 58:4d:6d:87:be:2e:07:88:35:e4:ff:1b:fe:fa:6e:76:27:1c: 01:42:92:26:c6:29:70:46:be:de:47:a4:2d:1d:98:f9:ea:ff: 4f:4e:de:83:7b:e4:02:90:0f:21:85:59:89:cd:9c:29:3c:60: 25:68:52:0b:6b:35:21:3a:b1:39:e8:5f:ad:e3:21:4b:2e:d5: ad:fb:f5:37:72:01:5e:ce:a9:a8:08:d0:e9:bd:63:e3:f5:3f: 61:eb:9a:2d:f6:f3:75:d7:c6:dc:ba:b4:d2:9b:12:40:e4:2a: d8:77:e2:c2:5a:4b:0c:17:9c:c7:44:02:60:ac:0c:cf:1b:c1: 95:db:6e:41:cc:cf:92:c8:7e:e3:a9:18:fc:10:63:78:df:a0: b5:b1:c3:ae:3a:03:48:31:f8:0e:3b:c8:b5:f3:65:20:b5:23: 3e:84:7b:f8:94:75:9a:b1:5b:d7:f7:be:1d:04:f8:0f:1c:08: 8d:d8:78:96:1d:9c:bc:ce:9c:0c:a2:b6:78:fa:32:6c:24:d7: 20:5e:60:bf:77:d4:f4:45:b2:b9:ad:b1:0d:85:12:0b:aa:e7: 00:6e:31:75:31:ee:3d:6f:f8:28:8a:c9:bc:83:48:90:69:8f: 1e:74:db:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwOTAyMjAyMzUzWhcNMjYwOTA5MjAyMzUzWjAYMRYwFAYD VQQDEw02YTk4ODVkOS1kZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufvMj4+xN0TJzlVQVEziEFN/IeinS6k05jXhzN48ZRiRrO/0o1laDrbjh1kG m5H+x4xwDDZqy1zg9nVf0nBeOdz+uCLXqYRa5zfcLOhn2QuTJnxfFVni0SQ7Jq5J ZTS9KzSIZJCJac04PIUSfZU0SJTLLWcoEg0MCrozkm2MdFxFP36phKO01gukT/iX xOkbZotwJxoUZZbB/kKqHvzK0VOxxfi8OQs/o5zoxRWJqAmMceobz/FrRBCIN706 o4XSZJV6aDmYcXWPcEYEFoZaMSBniFsOL3ehmrXYczeJLXtzcz813kg7iYEYUred KUY8UxIudPjLRyZ14AEKWK0xcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwB2nAk y8Z0mvAIMOrNRJSDHgGeMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEz0zSImlmVgIBksgwU6pG7vQWE1th74uB4g15P8b/vpudiccAUKSJsYpcEa+ 3kekLR2Y+er/T07eg3vkApAPIYVZic2cKTxgJWhSC2s1ITqxOehfreMhSy7Vrfv1 N3IBXs6pqAjQ6b1j4/U/YeuaLfbzddfG3Lq00psSQOQq2HfiwlpLDBecx0QCYKwM zxvBldtuQczPksh+46kY/BBjeN+gtbHDrjoDSDH4DjvItfNlILUjPoR7+JR1mrFb 1/e+HQT4DxwIjdh4lh2cvM6cDKK2ePoybCTXIF5gv3fU9EWyua2xDYUSC6rnAG4x dTHuPW/4KIrJvINIkGmPHnTbOw== -----END CERTIFICATE-----Generated at Fri Sep 4 21:20:17 2026 by rpki-client