$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft File: RnF4Q-fTSLOez3uSSVUB_jVQujw.mft (raw, json) Hash identifier: QmsGLKBjXiPfhH8BnMdyci6VcEcenAKLeGPYyIpBSBI= Subject key identifier: DA:A6:01:CF:FD:62:EB:5A:D3:E3:6D:DB:F1:80:77:14:5F:D1:4D:F5 Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C Certificate issuer: /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft Manifest number: 3A Signing time: Sat 19 Sep 2026 08:35:01 +0000 Manifest this update: Sat 19 Sep 2026 08:35:01 +0000 Manifest next update: Sat 26 Sep 2026 08:35:01 +0000 Files and hashes: 1: RnF4Q-fTSLOez3uSSVUB_jVQujw.crl (hash: GRQ6Nz36MMcR79PfF0zr+YK3aS2Vt+6nNW/z1mp/Qps=) 2: 27B6241C6EC111F198F60F1C67A30FBC.roa (hash: 1vqnDMCOkfAA0RhjR6F0sutamrJDfPdesHktqXu9g8s=) 3: 270496C06EC111F198F60F1C67A30FBC.roa (hash: JtKOBE4F8rwYsWTEwFLdbKDrbkNvr+908F7G3Dfu+ec=) 4: g8XYHoulscOdIzPLr2d3D2E_Iq4.asa (hash: xRoqthOZmfDfJDQzpKsFdbAkLfGrB9YrhCDM68yWLys=) 5: 0B73271E6BAB11F1817F09047447A888.roa (hash: xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=) 6: 83C1CE04704D11F1AE17E0CA6AA30FBC.roa (hash: +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C Validity Not Before: Sep 19 08:35:01 2026 GMT Not After : Sep 26 08:35:01 2026 GMT Subject: CN=6aae4935-01aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:b7:13:94:a5:9f:95:bd:85:fd:7e:23:90: 9e:05:b0:4f:e9:53:7e:3c:41:cc:0f:b1:76:15:e2: 95:de:c8:9f:a6:93:23:5a:b1:ff:e1:77:86:79:03: e3:35:31:f3:10:ad:f8:bc:85:e3:e6:d9:ea:5b:40: 2f:c3:17:e7:1a:b1:2f:6c:cb:89:01:ad:ff:d0:18: d0:e5:fe:30:07:c8:06:a7:95:2e:b1:c4:22:10:5f: d1:c8:5d:87:9b:c2:c3:b3:67:e5:12:12:b0:67:57: a2:c8:33:c9:14:4a:e5:07:fd:9b:6f:f4:2d:f5:8c: 1a:89:ed:8f:d9:bb:76:70:f1:81:22:5e:3c:b0:fc: c0:27:19:01:30:ed:48:03:ad:77:98:02:58:38:49: ea:09:18:29:97:b5:02:c8:f8:cb:83:c8:15:6b:b1: c5:9e:93:83:5e:ca:cb:08:a7:f1:6a:17:ea:52:23: 83:2d:03:cf:75:4a:e5:67:6d:0f:f4:8d:c9:8c:cc: d1:30:66:b6:9a:bc:2f:22:4a:77:2f:9a:08:33:93: 92:09:eb:12:3d:35:c1:c5:21:55:14:6c:fd:6f:67: 2b:be:d4:51:b5:1a:81:15:fb:07:ca:28:ab:4e:89: 98:f7:8f:08:eb:92:46:68:51:13:23:6a:08:79:f0: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A6:01:CF:FD:62:EB:5A:D3:E3:6D:DB:F1:80:77:14:5F:D1:4D:F5 X509v3 Authority Key Identifier: keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:23:81:a8:5b:1d:82:14:0d:af:6b:76:e9:fd:79:0c:10:ec: 3c:70:5a:b9:0f:d5:55:2d:b0:f2:c2:d5:13:33:f7:cb:e4:0d: 23:0b:45:44:4d:de:1a:05:67:87:7f:81:57:0c:0b:ad:77:b6: 40:5e:3a:35:32:5a:10:a6:36:09:a1:f6:4a:c9:91:32:8b:2e: 3d:2d:28:31:32:df:73:6f:80:bd:4a:57:9f:81:21:40:9b:d7: 49:1c:6d:ae:95:d5:aa:ed:54:a0:07:f5:b6:e2:9f:4a:8b:23: 5f:10:e4:09:d1:99:47:fa:70:06:22:af:e8:be:68:31:53:d3: 13:96:cc:84:af:1b:c5:b6:ad:5c:40:a5:e0:6f:59:c0:c2:43: 13:40:ae:cc:12:8e:0c:97:e8:e5:30:20:77:4d:34:4a:cf:c2: c4:ab:7e:9d:08:d3:65:07:d2:93:c3:4b:c2:b1:c6:28:48:b9: 95:7f:cf:fe:86:b6:c6:52:9e:76:97:e2:7f:9f:16:b8:fc:d0: 67:a6:a2:08:64:c4:59:e4:94:b8:47:a5:1e:52:d5:38:1d:66: 3d:e3:f0:15:96:66:92:8a:7d:97:24:37:9a:b0:69:a4:6b:f8: 28:bd:61:cf:6b:49:4d:42:b5:5a:59:bc:3e:23:02:3a:c1:23: 9f:d2:45:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEFDRTExMC8GA1UEBRMoNDY3MTc4NDNFN0QzNDhCMzlFQ0Y3QjkyNDk1NTAxRkUz NTUwQkEzQzAeFw0yNjA5MTkwODM1MDFaFw0yNjA5MjYwODM1MDFaMBgxFjAUBgNV BAMTDTZhYWU0OTM1LTAxYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTSrcTlKWflb2F/X4jkJ4FsE/pU348QcwPsXYV4pXeyJ+mkyNasf/hd4Z5A+M1 MfMQrfi8hePm2epbQC/DF+casS9sy4kBrf/QGNDl/jAHyAanlS6xxCIQX9HIXYeb wsOzZ+USErBnV6LIM8kUSuUH/Ztv9C31jBqJ7Y/Zu3Zw8YEiXjyw/MAnGQEw7UgD rXeYAlg4SeoJGCmXtQLI+MuDyBVrscWek4NeyssIp/FqF+pSI4MtA891SuVnbQ/0 jcmMzNEwZraavC8iSncvmggzk5IJ6xI9NcHFIVUUbP1vZyu+1FG1GoEV+wfKKKtO iZj3jwjrkkZoURMjagh58BFFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2qYBz/1i 61rT423b8YB3FF/RTfUwHwYDVR0jBBgwFoAURnF4Q+fTSLOez3uSSVUB/jVQujww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QUNFLzE1QjQ1MjU0NkFB MDExRjFBNkQyN0MxOUIxRUU1MjhFL1JuRjRRLWZUU0xPZXozdVNTVlVCX2pWUXVq dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvUm5GNFEtZlRTTE9lejN1U1NWVUJfalZRdWp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QUNFLzE1QjQ1MjU0NkFBMDExRjFBNkQyN0MxOUIxRUU1MjhFL1JuRjRRLWZUU0xP ZXozdVNTVlVCX2pWUXVqdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7I4GoWx2CFA2va3bp/XkMEOw8cFq5D9VVLbDywtUTM/fL5A0jC0VETd4aBWeH f4FXDAutd7ZAXjo1MloQpjYJofZKyZEyiy49LSgxMt9zb4C9SlefgSFAm9dJHG2u ldWq7VSgB/W24p9KiyNfEOQJ0ZlH+nAGIq/ovmgxU9MTlsyErxvFtq1cQKXgb1nA wkMTQK7MEo4Ml+jlMCB3TTRKz8LEq36dCNNlB9KTw0vCscYoSLmVf8/+hrbGUp52 l+J/nxa4/NBnpqIIZMRZ5JS4R6UeUtU4HWY94/AVlmaSin2XJDeasGmka/govWHP a0lNQrVaWbw+IwI6wSOf0kXd -----END CERTIFICATE-----Generated at Sun Sep 20 21:42:36 2026 by rpki-client