$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft File: 3hf-sZrsTfV-srV4rPueEDE5byA.mft (raw, json) Hash identifier: 41hWsDLa6TQ8nIu4BqLCS21ADB252DRVrZny7JaDJlk= Subject key identifier: 7E:28:95:87:07:0D:1E:1A:70:6E:F4:A0:D0:F7:4D:97:51:8E:D1:04 Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft Manifest number: 16 Signing time: Mon 21 Sep 2026 09:03:44 +0000 Manifest this update: Mon 21 Sep 2026 09:03:43 +0000 Manifest next update: Mon 28 Sep 2026 09:03:43 +0000 Files and hashes: 1: 3hf-sZrsTfV-srV4rPueEDE5byA.crl (hash: bfIRbVfnUsNpiKEKkqnzAgEswIDNI1bCXB+b1dfNeEk=) 2: 3E5CDF8CAC4A11F199EB65634211F970.roa (hash: euLOWcKgKWGURDYxgn0BH7WUOGhmBm81XkTnvH0nRaw=) 3: 3DC9CCC4AC4A11F199EB65634211F970.roa (hash: 9ASxwF0gTHSlKzDFapefVUpz6ogFigYAOzKtxdpXqvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Validity Not Before: Sep 21 09:03:43 2026 GMT Not After : Sep 28 09:03:43 2026 GMT Subject: CN=6ab0f2ef-2466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:be:4f:ac:a5:b7:39:2c:93:d8:0e:75:d1: 1c:aa:e3:7c:32:59:34:04:73:24:57:ce:c3:67:20: 46:da:71:81:a2:27:89:27:c5:24:7a:89:3e:5f:01: 34:2c:c2:7d:d7:41:53:3d:49:be:68:9c:74:09:ba: 2a:7b:9a:c7:13:4b:ae:bc:27:f5:39:af:52:0f:fb: aa:2f:de:15:04:45:63:2a:30:ba:a9:ab:fb:ed:db: b1:51:10:f6:db:4c:8c:47:9f:8d:86:5a:9f:d5:28: 4e:b6:53:60:42:42:c2:f8:d7:66:ba:f3:14:b8:f9: bc:74:2e:97:7f:3c:ea:cd:44:4f:06:8a:4e:89:29: 85:20:03:dc:6d:7f:5c:b2:85:f9:be:b7:a6:19:21: b2:d7:e9:89:fc:ea:48:3c:59:e6:37:92:7d:c4:35: 65:7b:02:59:a6:92:22:8b:4d:da:fa:ce:90:cb:d8: 8f:25:b4:cb:d4:b8:cb:69:26:3e:ba:84:63:c5:ac: 49:ad:c4:8a:69:73:2a:7e:43:ba:a3:81:23:b4:30: 27:46:e8:6c:4e:12:70:0c:f5:24:5c:3b:fd:59:3f: 39:28:da:89:b8:bc:cb:0a:6f:75:97:26:85:50:93: e2:bd:39:5e:36:7d:a9:de:ba:ba:39:6a:35:d8:75: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:95:87:07:0D:1E:1A:70:6E:F4:A0:D0:F7:4D:97:51:8E:D1:04 X509v3 Authority Key Identifier: keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:c8:f6:63:3d:43:37:9b:be:13:46:15:2a:03:0d:25:54: 43:52:2f:37:43:a8:96:2e:bb:cb:af:c8:18:8a:c5:02:e0:f7: c9:d1:43:30:10:11:b5:96:f0:4e:2b:59:06:e6:9e:25:b2:da: 57:ad:f3:c5:7b:47:9a:b5:d5:19:0b:1e:02:6f:3b:f8:e8:62: 10:c3:b0:57:fc:66:15:1e:87:0f:f1:4e:6c:c3:92:17:c3:65: 27:00:f6:ef:18:fe:24:10:2a:8e:4f:32:e6:98:76:2a:5f:54: b2:46:ed:47:97:36:9e:2d:7c:53:0c:80:d8:95:32:25:fc:ec: 75:68:89:4b:7e:86:57:45:e4:5d:30:6c:d6:aa:fd:eb:3e:f0: 4e:a6:c4:f4:9e:a1:0a:69:f9:d8:c3:54:f0:ca:bd:58:97:7f: 2a:a6:e3:8c:10:bf:02:9f:2e:d9:c5:69:21:5f:9c:4d:65:cd: b3:49:2f:f1:41:89:10:05:74:4a:27:ac:18:2c:b0:91:43:81: 52:bf:7c:47:d6:d6:08:41:4f:c3:48:b2:b0:5d:57:e5:06:c4: fb:9b:5b:c6:89:1a:f8:3f:d8:0b:78:64:ba:be:ec:7a:f7:5b: 75:9b:67:59:72:d3:eb:af:3c:a1:08:c8:61:b1:c1:84:50:ab: 30:43:20:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoREUxN0ZFQjE5QUVDNERGNTdFQjJCNTc4QUNGQjlFMTAz MTM5NkYyMDAeFw0yNjA5MjEwOTAzNDNaFw0yNjA5MjgwOTAzNDNaMBgxFjAUBgNV BAMTDTZhYjBmMmVmLTI0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJRb5PrKW3OSyT2A510Ryq43wyWTQEcyRXzsNnIEbacYGiJ4knxSR6iT5fATQs wn3XQVM9Sb5onHQJuip7mscTS668J/U5r1IP+6ov3hUERWMqMLqpq/vt27FREPbb TIxHn42GWp/VKE62U2BCQsL412a68xS4+bx0Lpd/POrNRE8Gik6JKYUgA9xtf1yy hfm+t6YZIbLX6Yn86kg8WeY3kn3ENWV7AlmmkiKLTdr6zpDL2I8ltMvUuMtpJj66 hGPFrEmtxIppcyp+Q7qjgSO0MCdG6GxOEnAM9SRcO/1ZPzko2om4vMsKb3WXJoVQ k+K9OV42faneuro5ajXYdX5FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfiiVhwcN HhpwbvSg0PdNl1GO0QQwHwYDVR0jBBgwFoAU3hf+sZrsTfV+srV4rPueEDE5byAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzNFNkUyRURDOUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZWLXNyVjRyUHVlRURFNWJ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2hmLXNacnNUZlYtc3JWNHJQdWVFREU1YnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw REM4LzNFNkUyRURDOUMwNDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZW LXNyVjRyUHVlRURFNWJ5QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBc8sj2Yz1DN5u+E0YVKgMNJVRDUi83Q6iWLrvLr8gYisUC4PfJ0UMwEBG1lvBO K1kG5p4lstpXrfPFe0eatdUZCx4Cbzv46GIQw7BX/GYVHocP8U5sw5IXw2UnAPbv GP4kECqOTzLmmHYqX1SyRu1HlzaeLXxTDIDYlTIl/Ox1aIlLfoZXReRdMGzWqv3r PvBOpsT0nqEKafnYw1Twyr1Yl38qpuOMEL8Cny7ZxWkhX5xNZc2zSS/xQYkQBXRK J6wYLLCRQ4FSv3xH1tYIQU/DSLKwXVflBsT7m1vGiRr4P9gLeGS6vux691t1m2dZ ctPrrzyhCMhhscGEUKswQyDu -----END CERTIFICATE-----Generated at Mon Sep 21 12:28:02 2026 by rpki-client