$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: MYD5sdgvg9PcaRzz8xVyH+BmD3OW08H0ZR5enYkOs7k= Subject key identifier: F2:3D:87:4A:B2:7E:8A:CC:36:E1:AF:EC:D4:C4:9B:8A:42:2F:0F:19 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0348 Signing time: Mon 21 Sep 2026 00:46:46 +0000 Manifest this update: Mon 21 Sep 2026 00:46:46 +0000 Manifest next update: Mon 28 Sep 2026 00:46:46 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: DRF7zm3Y6oB99XGQhj6x+ABU2a2NoRjVZotie9ofud0=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Sep 21 00:46:46 2026 GMT Not After : Sep 28 00:46:46 2026 GMT Subject: CN=6ab07e76-d995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:c1:ce:19:ab:55:f4:a2:5f:ff:09:11:89: 2d:b3:58:2d:4f:38:f4:87:22:60:6a:7e:a8:c7:bf: aa:35:84:1e:ac:8a:58:b1:2b:51:66:37:9f:ab:a9: ae:2e:30:f7:37:10:3b:06:af:83:33:d5:b7:8d:52: 75:bd:9f:24:92:c6:cf:2b:09:f7:10:99:c7:5d:a2: cd:9c:b2:d8:32:b6:fc:72:ed:10:c7:e3:73:1a:93: 34:b3:6c:6c:fb:90:da:77:98:b6:2d:f5:c1:74:01: b6:5c:a6:c8:7b:0d:ca:7c:8e:2d:76:68:64:a8:6d: 73:10:b7:4c:b0:1e:60:7a:e7:f1:16:23:72:de:59: 16:a6:43:e0:e6:f7:6c:15:40:4d:ca:ae:0f:eb:7b: 6c:17:d4:9a:c8:65:3f:91:00:e1:5c:1f:1a:cd:a8: 7b:f3:9e:8c:fc:18:5b:24:91:10:e8:95:ef:57:69: 29:2c:38:a6:3c:e8:ab:09:25:82:40:e7:83:97:70: fb:df:07:3e:7e:1e:13:7b:fe:fe:f0:c7:4d:05:81: a6:55:3b:b1:13:34:22:5d:ab:85:25:e8:5b:95:ed: e3:8d:f1:da:00:e2:67:b6:ee:c2:af:52:2c:c8:57: e1:2e:a0:10:28:84:e4:c0:e5:5e:cf:95:82:fd:2f: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:87:4A:B2:7E:8A:CC:36:E1:AF:EC:D4:C4:9B:8A:42:2F:0F:19 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c3:8e:01:66:f5:d0:4a:80:d2:7c:51:f2:ed:a2:58:1b:69: eb:f3:fe:19:ee:2a:ae:b6:1e:e4:4d:3c:dc:e6:4c:5f:6f:72: 56:f8:46:c5:a0:40:92:7e:39:d7:43:ec:38:31:87:7d:73:ec: 13:72:3c:b5:ce:db:47:22:24:a8:53:54:68:12:f5:61:29:d0: 41:1f:89:b8:43:c7:be:32:38:ac:ef:05:5a:dc:6a:17:56:7c: 88:b3:f4:3b:15:d5:5c:0d:bb:46:f3:f2:b5:fb:61:25:f5:a8: ad:e1:40:c0:a5:27:3f:1f:eb:7c:67:33:c7:58:1e:df:f5:16: d7:6a:0f:f4:36:e2:3e:d1:6f:cb:60:4c:ee:1e:37:3a:ae:23: c2:6a:7a:41:ec:a2:5c:2b:93:8a:77:de:27:07:e8:ce:a6:02: e6:bf:2e:4d:46:37:57:5b:24:2a:94:f4:5b:5b:f3:0a:85:74: 5b:bb:23:c7:9a:ed:d6:2b:7e:40:a7:f5:8e:1e:63:3d:e5:80: b0:a9:3b:ee:c8:10:21:b9:b2:8a:e1:ec:9f:fc:82:e8:8f:6a: 95:c2:97:db:90:54:1a:79:12:fa:db:ff:f7:8c:f3:86:42:fd: 57:fc:6f:de:08:74:9e:e6:33:1e:27:4f:f2:64:2b:9e:f3:ff: c9:fe:ec:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjYwOTIxMDA0NjQ2WhcNMjYwOTI4MDA0NjQ2WjAYMRYwFAYD VQQDEw02YWIwN2U3Ni1kOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iDBzhmrVfSiX/8JEYkts1gtTzj0hyJgan6ox7+qNYQerIpYsStRZjefq6mu LjD3NxA7Bq+DM9W3jVJ1vZ8kksbPKwn3EJnHXaLNnLLYMrb8cu0Qx+NzGpM0s2xs +5Dad5i2LfXBdAG2XKbIew3KfI4tdmhkqG1zELdMsB5geufxFiNy3lkWpkPg5vds FUBNyq4P63tsF9SayGU/kQDhXB8azah7856M/BhbJJEQ6JXvV2kpLDimPOirCSWC QOeDl3D73wc+fh4Te/7+8MdNBYGmVTuxEzQiXauFJehble3jjfHaAOJntu7Cr1Is yFfhLqAQKITkwOVez5WC/S9AfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPI9h0qy forMNuGv7NTEm4pCLw8ZMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcOOAWb10EqA0nxR8u2iWBtp6/P+Ge4qrrYe5E083OZMX29yVvhGxaBAkn45 10PsODGHfXPsE3I8tc7bRyIkqFNUaBL1YSnQQR+JuEPHvjI4rO8FWtxqF1Z8iLP0 OxXVXA27RvPytfthJfWoreFAwKUnPx/rfGczx1ge3/UW12oP9DbiPtFvy2BM7h43 Oq4jwmp6QeyiXCuTinfeJwfozqYC5r8uTUY3V1skKpT0W1vzCoV0W7sjx5rt1it+ QKf1jh5jPeWAsKk77sgQIbmyiuHsn/yC6I9qlcKX25BUGnkS+tv/94zzhkL9V/xv 3gh0nuYzHidP8mQrnvP/yf7szA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:26 2026 by rpki-client