$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: Ob0XT9glkV3a8kswbAYrP5pgNeO+L9CQdBICNf5vG3M= Subject key identifier: 43:F5:55:19:B4:BE:4A:3C:C3:15:D2:77:1C:C1:D3:C5:A3:8B:0A:1A Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 02FD Signing time: Mon 19 Oct 2026 01:18:50 +0000 Manifest this update: Mon 19 Oct 2026 01:18:50 +0000 Manifest next update: Mon 26 Oct 2026 01:18:50 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: beBx1cM+RXtGkPBI/7Oiev95phyrZCU/PfOzBUtvdic=) 2: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=) 3: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Oct 19 01:18:50 2026 GMT Not After : Oct 26 01:18:50 2026 GMT Subject: CN=6ad56ffa-22b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:06:d7:46:2b:30:c3:f4:ac:7f:b5:41:13: ca:46:e5:a4:93:b7:49:2e:af:f3:c6:d7:99:0a:ac: 39:b5:93:4e:c7:ee:8e:64:ef:b0:6f:a6:d3:d1:bc: 17:b0:d2:b6:13:cf:ef:b1:5e:4b:b9:68:df:6e:c5: be:f5:ec:a7:30:f9:d7:b6:e4:32:60:e3:d7:d0:69: 54:e7:c7:d4:18:d1:00:75:bb:ef:55:b9:2d:ff:a0: c9:68:f7:e2:35:23:93:0a:f9:34:4f:33:30:7c:71: 4c:bb:88:90:01:c9:1b:13:97:37:99:f5:c6:0c:8a: 46:da:8f:73:22:22:d0:08:d4:c5:1e:8f:40:93:45: 6c:a9:44:9c:0e:fd:d4:3f:15:b4:a5:57:67:4a:11: c7:01:11:bc:4d:ad:91:c3:34:4b:73:9b:56:b1:50: 24:fc:01:9d:62:30:d1:de:32:a3:29:b4:c8:a9:92: 19:b3:ae:70:9d:23:bd:6e:be:f1:8a:75:89:d5:70: ce:44:34:7a:55:2a:59:15:a8:63:f0:cb:ec:65:e2: 20:8a:d4:70:2f:5e:1f:39:a9:6c:96:cc:e6:8a:da: b3:59:12:df:04:a8:2d:1a:c4:a9:f0:92:b9:58:04: 8a:f3:b2:f5:cc:f9:62:83:48:07:62:49:fc:21:be: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F5:55:19:B4:BE:4A:3C:C3:15:D2:77:1C:C1:D3:C5:A3:8B:0A:1A X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:50:25:bc:ec:62:2e:4b:60:ec:90:09:6f:da:93:2f:9d: 22:aa:75:6c:21:15:e5:88:26:8d:e2:35:a8:35:66:02:76:b5: 49:6e:6b:83:47:65:3b:f8:ac:ce:60:8a:ad:a3:93:71:c0:9d: 57:64:61:8f:f8:6c:32:a1:58:bc:76:78:c5:d2:c0:f3:77:52: e8:d0:9a:b9:b4:d1:86:1a:dd:92:37:1e:3a:40:80:a3:43:52: 1f:85:1e:76:63:5f:92:59:5d:ec:ab:0f:b7:67:7b:9b:9a:44: 57:c6:ba:85:56:01:c3:b3:d3:da:8c:c6:cb:d8:88:c9:a1:54: b2:e8:28:bf:cd:60:ea:3b:b3:7f:ff:a4:42:5a:f0:44:9a:cd: 80:52:27:54:af:a7:ec:50:6f:63:9a:eb:63:9c:34:e9:bf:99: 2c:96:ce:d2:53:dc:99:e7:6f:fc:12:ad:0b:66:c1:da:25:af: cf:b5:5f:52:d1:d8:7a:46:40:99:12:fd:a4:a6:0f:21:c2:38: ee:84:80:62:96:d7:2d:b1:04:c1:4a:09:df:52:32:a1:bf:78: e1:e5:de:b7:ad:5a:87:4f:4e:71:7a:11:71:57:21:7f:66:be: af:76:9d:16:57:79:1d:4c:c5:0b:18:e6:d4:27:6f:cc:ad:23: 9b:20:90:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjYxMDE5MDExODUwWhcNMjYxMDI2MDExODUwWjAYMRYwFAYD VQQDEw02YWQ1NmZmYS0yMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeUG10YrMMP0rH+1QRPKRuWkk7dJLq/zxteZCqw5tZNOx+6OZO+wb6bT0bwX sNK2E8/vsV5LuWjfbsW+9eynMPnXtuQyYOPX0GlU58fUGNEAdbvvVbkt/6DJaPfi NSOTCvk0TzMwfHFMu4iQAckbE5c3mfXGDIpG2o9zIiLQCNTFHo9Ak0VsqUScDv3U PxW0pVdnShHHARG8Ta2RwzRLc5tWsVAk/AGdYjDR3jKjKbTIqZIZs65wnSO9br7x inWJ1XDORDR6VSpZFahj8MvsZeIgitRwL14fOalslszmitqzWRLfBKgtGsSp8JK5 WASK87L1zPlig0gHYkn8Ib5bVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP1VRm0 vko8wxXSdxzB08WjiwoaMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF/RQJbzsYi5LYOyQCW/aky+dIqp1bCEV5YgmjeI1qDVmAna1SW5rg0dlO/is zmCKraOTccCdV2Rhj/hsMqFYvHZ4xdLA83dS6NCaubTRhhrdkjceOkCAo0NSH4Ue dmNfklld7KsPt2d7m5pEV8a6hVYBw7PT2ozGy9iIyaFUsugov81g6juzf/+kQlrw RJrNgFInVK+n7FBvY5rrY5w06b+ZLJbO0lPcmedv/BKtC2bB2iWvz7VfUtHYekZA mRL9pKYPIcI47oSAYpbXLbEEwUoJ31Iyob944eXet61ah09OcXoRcVchf2a+r3ad Fld5HUzFCxjm1CdvzK0jmyCQFw== -----END CERTIFICATE-----Generated at Tue Oct 20 14:11:32 2026 by rpki-client