$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: iM5say5tLuaY2sY56DW28OPrUuwWQnechhPkJ1/HROk= Subject key identifier: 78:42:8F:70:96:A2:7E:C9:D1:46:51:97:79:B3:A8:F2:2A:05:F6:BB Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 040D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 03F8 Signing time: Tue 01 Sep 2026 00:24:32 +0000 Manifest this update: Tue 01 Sep 2026 00:24:31 +0000 Manifest next update: Tue 08 Sep 2026 00:24:31 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: R81lPilwA/Iku2xGdOpDqTm2/QNCJ55l/uETJlGpiSw=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: 4btki8MufbxcYjK/3ldd2OyHnoFsKyUfQZm8u1lkOas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 00:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Sep 1 00:24:31 2026 GMT Not After : Sep 8 00:24:31 2026 GMT Subject: CN=6a961b40-415b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:3d:84:4d:0d:4f:bd:30:b7:23:5e:b6:72: fd:3c:e9:73:26:a4:4c:28:0a:48:09:d0:ba:92:44: c7:53:f2:35:b8:7a:fe:fa:7e:1f:72:4e:11:4f:1b: 1c:36:fa:b3:9b:3b:89:3d:96:b1:32:a8:6d:07:fa: da:bb:8d:d8:a1:13:4b:77:34:25:21:b4:76:8d:5a: 38:a3:2d:8a:f5:15:31:01:8b:5b:25:b4:1c:e1:50: 95:48:35:ce:58:cf:15:7a:71:b0:0c:f0:d3:20:a8: 15:32:64:05:ab:78:79:f1:19:ae:4c:06:5a:3b:a4: 57:83:09:9f:ba:ca:5e:9c:38:99:0a:12:2d:40:7d: c8:24:90:73:08:25:f2:cd:4d:e0:3b:f1:93:2f:ae: 13:1e:c4:04:24:a6:5a:ed:e7:7d:af:da:99:b1:61: 96:13:0d:10:c6:2d:7c:a3:f0:c0:42:6b:4a:80:ce: 71:45:4d:26:94:39:cf:ac:e2:67:ac:89:0c:da:90: b8:bd:6e:a0:d5:7e:4c:ee:2a:fd:5a:08:76:68:2e: a4:d7:a5:1e:a0:46:45:6e:1e:f4:31:ef:06:2a:32: 08:c1:62:93:02:0a:54:cd:25:1f:c2:71:3c:ec:58: ae:ec:24:69:10:2a:15:b6:33:6a:52:73:c5:15:0d: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:42:8F:70:96:A2:7E:C9:D1:46:51:97:79:B3:A8:F2:2A:05:F6:BB X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e5:89:9b:af:5d:18:e7:28:70:24:74:9a:71:7b:d5:12:aa: 09:e0:b7:88:3a:da:36:66:bc:8c:d8:16:16:4d:19:2c:b9:7c: 05:33:a2:92:72:20:bf:4c:67:aa:7e:c2:fd:01:7d:f8:d3:86: f6:7d:ea:01:bf:ac:3f:2a:71:40:f9:14:3c:99:9c:b0:48:c9: 9e:71:12:21:59:5d:9b:04:2d:43:c9:f2:49:a0:41:6e:c0:d9: 08:ed:42:c3:50:90:7e:a6:eb:1a:83:d0:ed:ee:81:11:9d:3e: f1:29:cc:54:00:2b:a1:cb:79:7b:a2:d3:d2:73:37:ae:9e:ef: 63:bd:e0:49:5c:58:43:27:5e:7f:96:6f:e6:2e:7b:d4:d3:cc: 50:6c:7d:1b:ae:95:5f:e9:29:c6:5a:61:fa:a5:92:96:4d:e6: c2:5e:40:88:d3:02:fc:33:43:17:52:bc:c9:ac:f6:69:9f:0a: c0:a3:13:25:d3:af:90:06:a8:4a:a5:b9:78:fb:ce:2f:ea:4c: f8:39:70:4a:53:57:89:dd:c8:f3:56:da:a6:02:53:7c:73:36: 00:ed:4c:c3:0a:b9:77:99:7c:c9:19:57:63:66:d5:dd:5c:f9: 1d:c5:d2:cc:a1:bf:48:e3:05:e4:a2:ee:db:32:6f:dd:46:4a: 91:29:cb:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwOTAxMDAyNDMxWhcNMjYwOTA4MDAyNDMxWjAYMRYwFAYD VQQDEw02YTk2MWI0MC00MTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDg9hE0NT70wtyNetnL9POlzJqRMKApICdC6kkTHU/I1uHr++n4fck4RTxsc NvqzmzuJPZaxMqhtB/rau43YoRNLdzQlIbR2jVo4oy2K9RUxAYtbJbQc4VCVSDXO WM8VenGwDPDTIKgVMmQFq3h58RmuTAZaO6RXgwmfuspenDiZChItQH3IJJBzCCXy zU3gO/GTL64THsQEJKZa7ed9r9qZsWGWEw0Qxi18o/DAQmtKgM5xRU0mlDnPrOJn rIkM2pC4vW6g1X5M7ir9Wgh2aC6k16UeoEZFbh70Me8GKjIIwWKTAgpUzSUfwnE8 7Fiu7CRpECoVtjNqUnPFFQ3s9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhCj3CW on7J0UZRl3mzqPIqBfa7MB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuWJm69dGOcocCR0mnF71RKqCeC3iDraNma8jNgWFk0ZLLl8BTOiknIgv0xn qn7C/QF9+NOG9n3qAb+sPypxQPkUPJmcsEjJnnESIVldmwQtQ8nySaBBbsDZCO1C w1CQfqbrGoPQ7e6BEZ0+8SnMVAAroct5e6LT0nM3rp7vY73gSVxYQydef5Zv5i57 1NPMUGx9G66VX+kpxlph+qWSlk3mwl5AiNMC/DNDF1K8yaz2aZ8KwKMTJdOvkAao SqW5ePvOL+pM+DlwSlNXid3I81bapgJTfHM2AO1Mwwq5d5l8yRlXY2bV3Vz5HcXS zKG/SOMF5KLu2zJv3UZKkSnL6w== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:47 2026 by rpki-client