$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json) Hash identifier: zKgLfdvfdMzvfxEukdyS/GwU1RqCbPxd5AgJUqNl0Bg= Subject key identifier: D8:5B:5B:74:6E:E8:A1:F0:E6:0D:06:B5:57:AA:F4:96:43:D5:3C:D1 Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft Manifest number: 0CE8 Signing time: Thu 24 Sep 2026 18:25:11 +0000 Manifest this update: Thu 24 Sep 2026 18:25:10 +0000 Manifest next update: Thu 01 Oct 2026 18:25:10 +0000 Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: qvIo4tAjUaNvu5xKdjTMO0JY0guGDmYbE/nXaMeWtvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Validity Not Before: Sep 24 18:25:10 2026 GMT Not After : Oct 1 18:25:10 2026 GMT Subject: CN=6ab56b07-5a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:e3:5d:6b:be:f6:6a:fe:19:d1:89:61:34: 37:75:36:c2:3f:af:0f:b6:ac:4b:21:1d:3d:4c:72: 26:17:dd:36:f8:4b:92:9c:f4:14:0a:f8:4d:4e:e9: e3:ed:65:21:df:34:d7:8e:5b:5e:33:f2:93:8f:43: ca:95:33:f9:7d:32:de:6b:c3:7e:2d:3a:cc:06:02: da:68:5d:e3:a5:12:cc:b5:c2:c5:01:ac:e4:2c:ae: 5e:ee:22:42:89:f4:57:d3:60:f2:19:cf:46:b9:34: 6a:ca:d8:a8:e2:09:db:2d:58:cc:af:32:72:3a:04: 09:9e:f0:a6:13:39:5f:48:a2:48:85:82:7f:2c:c9: 94:cf:b5:2b:3e:b1:89:56:85:c8:e3:8e:9d:88:f4: d2:6c:60:b6:ba:17:db:2e:85:bd:e8:c8:ad:c2:7d: 81:da:d2:17:6e:ed:4d:30:ff:15:48:1c:ed:fc:c9: 50:31:53:ce:6d:59:28:56:47:81:41:bf:17:4d:45: e0:f5:1f:0a:0e:79:fc:89:63:5e:e0:d5:f8:68:23: fd:84:a3:5f:b2:43:2d:fa:9a:27:bc:ad:81:a2:94: e7:5f:8f:42:13:c2:10:94:ad:68:f6:70:03:78:54: fd:a0:95:6a:ec:65:0a:0d:2c:ff:8c:02:26:90:49: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:5B:74:6E:E8:A1:F0:E6:0D:06:B5:57:AA:F4:96:43:D5:3C:D1 X509v3 Authority Key Identifier: keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:66:60:cd:23:e9:d6:82:64:7f:5f:8c:bb:bb:2e:f6:42:ca: a7:6d:3f:0f:32:2a:ea:2c:39:e1:38:b0:98:a8:19:d0:e1:fd: 04:6d:71:ee:ea:7f:1d:00:08:76:86:36:79:a5:ba:54:aa:44: cf:d5:40:a4:38:f9:82:ff:35:fd:e9:22:5b:0e:74:5a:c7:74: 72:0b:d1:fe:26:7a:47:5c:f0:28:ba:10:a2:36:e3:7f:52:52: 01:c7:c1:16:06:17:a9:b0:42:7f:d7:df:ca:c5:00:1f:3b:13: e4:14:8b:b7:97:02:a1:e0:79:bc:00:d0:4c:88:fc:45:0a:c6: be:90:fe:99:66:d7:79:96:92:20:0e:f8:63:df:5b:e1:48:61: e2:c7:3e:01:5a:b3:9e:cf:22:de:ef:df:3f:23:c2:51:33:91: 17:8f:60:3a:4d:d2:07:e2:8d:78:28:f9:53:46:c2:52:6c:7b: 3c:93:69:67:c9:6a:85:70:e5:1c:8c:49:ec:52:33:d2:bd:5a: 20:24:6b:b5:b6:23:a6:32:18:c0:03:ee:5b:cf:f7:fc:90:59: 1e:6d:c7:09:a8:d4:a1:1d:bb:3b:67:92:5c:67:ee:16:ba:ea: e0:d7:e3:3d:c9:22:bf:17:45:93:9f:99:6b:ae:78:12:c3:52: cc:b8:41:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2 NUY4QjI1NzYwHhcNMjYwOTI0MTgyNTEwWhcNMjYxMDAxMTgyNTEwWjAYMRYwFAYD VQQDEw02YWI1NmIwNy01YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMjjXWu+9mr+GdGJYTQ3dTbCP68PtqxLIR09THImF902+EuSnPQUCvhNTunj 7WUh3zTXjlteM/KTj0PKlTP5fTLea8N+LTrMBgLaaF3jpRLMtcLFAazkLK5e7iJC ifRX02DyGc9GuTRqytio4gnbLVjMrzJyOgQJnvCmEzlfSKJIhYJ/LMmUz7UrPrGJ VoXI446diPTSbGC2uhfbLoW96Mitwn2B2tIXbu1NMP8VSBzt/MlQMVPObVkoVkeB Qb8XTUXg9R8KDnn8iWNe4NX4aCP9hKNfskMt+ponvK2BopTnX49CE8IQlK1o9nAD eFT9oJVq7GUKDSz/jAImkEnriQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhbW3Ru 6KHw5g0GtVeq9JZD1TzRMB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4 NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv ekoyV3FNSktrNXBsLUxKWFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWZgzSPp1oJkf1+Mu7su9kLKp20/DzIq6iw54TiwmKgZ0OH9BG1x7up/HQAI doY2eaW6VKpEz9VApDj5gv81/ekiWw50Wsd0cgvR/iZ6R1zwKLoQojbjf1JSAcfB FgYXqbBCf9ffysUAHzsT5BSLt5cCoeB5vADQTIj8RQrGvpD+mWbXeZaSIA74Y99b 4Uhh4sc+AVqzns8i3u/fPyPCUTORF49gOk3SB+KNeCj5U0bCUmx7PJNpZ8lqhXDl HIxJ7FIz0r1aICRrtbYjpjIYwAPuW8/3/JBZHm3HCajUoR27O2eSXGfuFrrq4Nfj PckivxdFk5+Za654EsNSzLhBxA== -----END CERTIFICATE-----Generated at Sat Sep 26 10:39:50 2026 by rpki-client