$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: zmmHhtkSeOqOAPZmKdnoCA0mPoaZ+AD/J1bpXvkpykc= Subject key identifier: CB:F3:5F:94:ED:84:17:3F:61:E4:8A:8C:DC:45:7F:E4:F2:C2:77:30 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0414 Signing time: Wed 21 Oct 2026 00:30:41 +0000 Manifest this update: Wed 21 Oct 2026 00:30:40 +0000 Manifest next update: Wed 28 Oct 2026 00:30:40 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: a75K340lgumchSGm240PppW+WLv45Nbq6D4JPsV/QOs=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: LpWdecCaZjYDqnwlofOF98ADZ9wJd8dslMfZKWc8i2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Oct 21 00:30:40 2026 GMT Not After : Oct 28 00:30:40 2026 GMT Subject: CN=6ad807b0-3ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:a6:c4:5f:0d:fa:38:e1:39:1b:10:f9:c3: 72:c0:cc:45:75:c2:fb:71:2e:aa:e5:e9:46:65:31: 56:60:dc:2e:d8:7d:01:be:b5:16:c7:a8:4e:d9:c2: ef:0b:b7:14:63:31:ef:05:e9:a1:d0:ae:e6:2d:64: 7e:81:37:c4:58:7d:d3:ae:1f:01:85:60:ae:5c:de: e4:fa:be:fa:70:ae:6e:7e:01:c5:bf:d3:4a:f9:b6: f9:25:90:6e:ee:70:d7:7c:c4:1d:47:d2:cc:94:b9: 71:e4:1f:87:6f:29:ca:c7:53:47:9c:34:38:cd:6b: b9:1f:86:86:52:5d:c0:eb:68:41:2f:53:6d:4a:c4: 98:03:e0:ac:20:a8:4b:4d:d5:8f:35:4e:e5:fc:03: 50:9f:31:38:62:01:9d:c5:9b:60:53:bd:2a:67:fd: 01:09:72:28:b9:bc:a3:d2:f3:cc:b5:26:29:ed:ac: d6:21:b9:98:5d:99:19:4a:af:dd:cd:fe:12:72:00: f2:94:e4:25:5a:c5:40:14:ba:60:a5:28:3a:56:4c: 25:ca:97:9e:88:2b:d7:8b:55:f3:0d:1a:b5:4d:83: 95:41:00:ff:15:58:9e:9a:c3:91:48:79:7b:c5:a4: e6:e6:3a:d6:d1:e4:95:c7:92:e3:f9:fb:78:cb:e2: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:5F:94:ED:84:17:3F:61:E4:8A:8C:DC:45:7F:E4:F2:C2:77:30 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:d7:cd:c2:92:da:d1:3a:0c:dc:fa:64:04:07:8f:e1:ba: a6:24:d0:3b:21:a9:f0:8e:85:61:4c:e8:06:55:08:28:e1:7c: 46:cf:be:1b:79:3a:f8:74:85:b6:02:d8:8f:9a:e8:85:cc:a2: d4:b5:c2:93:35:f5:b6:ba:1f:33:72:6c:e8:dd:be:32:90:dc: 74:90:00:9f:26:11:f2:3a:ac:9d:39:77:6f:88:56:b2:f6:83: 62:73:f6:be:9e:c2:f4:d3:40:b4:e3:2e:b0:38:3c:0f:11:7a: dd:a0:c8:2c:b4:1c:7a:ee:45:8e:c5:de:1b:9c:d0:4b:d7:ac: 81:d7:a7:4f:ed:52:82:91:3f:ad:6d:f6:f0:97:76:fd:9b:15: 76:ab:11:0b:14:df:08:c9:4e:87:86:35:0d:8b:13:01:d3:01: 2b:9f:a4:ff:8e:f9:0c:ba:67:5a:79:f8:2a:39:aa:11:8a:c9: 80:39:fb:65:c8:da:db:f7:c2:cd:96:f9:ef:32:b9:61:d0:80: 98:80:bd:50:75:ec:c5:56:7c:b3:47:17:59:ba:bd:85:70:ed: 6a:e9:41:1d:1a:01:17:3f:b0:f2:64:0d:4e:4d:2b:4e:4d:04: c7:f7:b6:a7:fe:ee:15:44:0c:00:4a:bf:c9:9f:61:86:eb:11: 09:ba:4b:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYxMDIxMDAzMDQwWhcNMjYxMDI4MDAzMDQwWjAYMRYwFAYD VQQDEw02YWQ4MDdiMC0zZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sGmxF8N+jjhORsQ+cNywMxFdcL7cS6q5elGZTFWYNwu2H0BvrUWx6hO2cLv C7cUYzHvBemh0K7mLWR+gTfEWH3Trh8BhWCuXN7k+r76cK5ufgHFv9NK+bb5JZBu 7nDXfMQdR9LMlLlx5B+HbynKx1NHnDQ4zWu5H4aGUl3A62hBL1NtSsSYA+CsIKhL TdWPNU7l/ANQnzE4YgGdxZtgU70qZ/0BCXIoubyj0vPMtSYp7azWIbmYXZkZSq/d zf4ScgDylOQlWsVAFLpgpSg6VkwlypeeiCvXi1XzDRq1TYOVQQD/FViemsORSHl7 xaTm5jrW0eSVx5Lj+ft4y+KsGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvzX5Tt hBc/YeSKjNxFf+TywncwMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAijbXzcKS2tE6DNz6ZAQHj+G6piTQOyGp8I6FYUzoBlUIKOF8Rs++G3k6+HSF tgLYj5rohcyi1LXCkzX1trofM3Js6N2+MpDcdJAAnyYR8jqsnTl3b4hWsvaDYnP2 vp7C9NNAtOMusDg8DxF63aDILLQceu5FjsXeG5zQS9esgdenT+1SgpE/rW328Jd2 /ZsVdqsRCxTfCMlOh4Y1DYsTAdMBK5+k/475DLpnWnn4KjmqEYrJgDn7Zcja2/fC zZb57zK5YdCAmIC9UHXsxVZ8s0cXWbq9hXDtaulBHRoBFz+w8mQNTk0rTk0Ex/e2 p/7uFUQMAEq/yZ9hhusRCbpLQA== -----END CERTIFICATE-----Generated at Fri Oct 23 00:29:33 2026 by rpki-client