$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: 4ZBFU5wY+mX2RSV4ud5gN38KsVn0ztqXxmICuZJKRys= Subject key identifier: 0A:91:66:F7:6A:0D:39:D3:93:37:E8:1D:9E:14:B3:2C:94:2A:F2:17 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0CEE Signing time: Sat 10 Oct 2026 18:29:20 +0000 Manifest this update: Sat 10 Oct 2026 18:29:20 +0000 Manifest next update: Sat 17 Oct 2026 18:29:20 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: ER093zZ76fJj9ECIT0FuGQA7Dc0wTR3l2CLMFtd2YUk=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Oct 10 18:29:20 2026 GMT Not After : Oct 17 18:29:20 2026 GMT Subject: CN=6aca8400-672a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:bc:92:57:ad:11:14:99:d6:47:80:25:b9: d5:cb:00:91:da:66:b4:e1:a2:85:03:20:f7:1d:d6: 9e:2c:bb:14:71:e5:e0:72:66:ab:5e:11:69:72:31: f8:78:af:c1:8a:c7:aa:d3:4d:d7:eb:b1:b7:48:38: ac:9a:6b:ec:cf:3c:b2:28:c9:d7:c6:80:34:97:2e: bf:2d:c7:58:03:f1:3d:39:13:09:4f:9f:95:23:f7: 02:fd:73:36:96:39:c1:a6:9a:8f:90:d8:d3:db:fc: e8:0b:56:34:0a:24:3d:12:38:99:ce:2e:3f:7c:be: 8c:9d:14:e9:b4:30:0c:f8:a4:4e:28:29:f2:f7:6a: c5:ec:59:b1:0e:89:12:0c:1f:6e:6a:f8:e4:36:6a: f5:a6:08:5e:79:4b:18:0f:e1:f1:88:73:e3:f3:be: 71:fa:b3:a8:e4:70:f1:a0:39:fa:5b:82:3b:cd:22: 4a:2c:7f:f0:e6:41:1b:cb:c6:d6:86:a8:c0:f2:a0: c6:31:7c:14:e1:05:47:c8:39:02:97:7d:11:21:d1: 7c:19:dc:04:c5:22:9a:5a:6c:f4:1d:04:5c:51:12: 56:7a:7d:ca:da:2c:5b:f6:af:58:04:7b:5a:61:cd: ba:42:f1:2d:36:82:5e:1a:9d:5b:0d:32:89:9e:72: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:66:F7:6A:0D:39:D3:93:37:E8:1D:9E:14:B3:2C:94:2A:F2:17 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3a:4e:0e:0f:98:f4:ef:01:a4:45:ce:1a:40:0e:65:41:31: 68:35:e2:b7:85:a2:c3:11:01:f0:d8:02:d5:5a:34:f1:30:8f: 18:81:04:9d:a8:15:51:b0:e4:f0:d7:69:eb:e7:91:7f:3b:f3: c2:bb:cb:e8:0c:12:8f:fb:dd:24:ce:63:97:93:90:17:49:ab: 76:d2:d7:1c:d0:68:e9:4b:ed:46:bc:40:41:ac:66:c8:7c:0c: 7a:49:37:5e:ae:52:58:95:33:e9:16:a6:52:6e:0d:0f:26:3f: 77:30:b4:1a:94:c2:39:76:7d:95:4f:e7:b0:21:89:6d:71:23: fb:7a:ca:b5:bf:24:3f:77:97:bd:86:cc:29:10:db:4f:b3:62: da:7b:ca:1a:90:08:c5:c8:32:e6:fb:0c:8f:cc:47:06:fe:3b: 06:ea:0d:de:b0:ab:4b:a5:9c:c8:6e:4e:10:c3:9f:7d:50:91: a9:77:c5:1c:7f:e6:fb:a3:3b:40:25:36:7c:4f:f9:7e:db:8a: cf:32:38:b2:b5:ea:5b:54:71:72:e9:73:58:09:64:cd:00:a4: cf:50:ed:7d:c1:16:b8:30:5b:35:25:9c:29:48:21:70:cc:8d: 7f:cf:94:4f:2f:c5:d2:6f:48:41:f0:a3:3a:95:b4:40:aa:ff: 2e:b3:12:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjYxMDEwMTgyOTIwWhcNMjYxMDE3MTgyOTIwWjAYMRYwFAYD VQQDEw02YWNhODQwMC02NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9+8kletERSZ1keAJbnVywCR2ma04aKFAyD3HdaeLLsUceXgcmarXhFpcjH4 eK/Biseq003X67G3SDismmvszzyyKMnXxoA0ly6/LcdYA/E9ORMJT5+VI/cC/XM2 ljnBppqPkNjT2/zoC1Y0CiQ9EjiZzi4/fL6MnRTptDAM+KROKCny92rF7FmxDokS DB9uavjkNmr1pgheeUsYD+HxiHPj875x+rOo5HDxoDn6W4I7zSJKLH/w5kEby8bW hqjA8qDGMXwU4QVHyDkCl30RIdF8GdwExSKaWmz0HQRcURJWen3K2ixb9q9YBHta Yc26QvEtNoJeGp1bDTKJnnJyeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqRZvdq DTnTkzfoHZ4UsyyUKvIXMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKTpODg+Y9O8BpEXOGkAOZUExaDXit4WiwxEB8NgC1Vo08TCPGIEEnagVUbDk 8Ndp6+eRfzvzwrvL6AwSj/vdJM5jl5OQF0mrdtLXHNBo6UvtRrxAQaxmyHwMekk3 Xq5SWJUz6RamUm4NDyY/dzC0GpTCOXZ9lU/nsCGJbXEj+3rKtb8kP3eXvYbMKRDb T7Ni2nvKGpAIxcgy5vsMj8xHBv47BuoN3rCrS6WcyG5OEMOffVCRqXfFHH/m+6M7 QCU2fE/5ftuKzzI4srXqW1RxculzWAlkzQCkz1DtfcEWuDBbNSWcKUghcMyNf8+U Ty/F0m9IQfCjOpW0QKr/LrMSOg== -----END CERTIFICATE-----Generated at Sun Oct 11 09:28:06 2026 by rpki-client