$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: DSVqqVTqVawiM9cLxaeKH96SQ28TzdUJfNPbTbzd7Jw= Subject key identifier: D4:21:9B:D6:CB:11:AA:76:CA:D0:F4:94:56:95:01:02:02:63:BF:5E Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0A33 Signing time: Sun 20 Sep 2026 19:40:21 +0000 Manifest this update: Sun 20 Sep 2026 19:40:20 +0000 Manifest next update: Sun 27 Sep 2026 19:40:20 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: B63SVOlqwoz2URfN5hkSkrdLwjggfyGyI4aW7sBdnZ8=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: bK5JtuAMehcD9XYzYVafvwJjwmCtOyauMhM2qhcRTw0=) 3: D3EAA0323F5A11F1AA7533B3A4833773.roa (hash: OAnsfIL7LYJfkjA3H2budmiw9oleIIiWJ+Q1lysZcqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Sep 20 19:40:20 2026 GMT Not After : Sep 27 19:40:20 2026 GMT Subject: CN=6ab036a4-ec51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:55:3e:91:6a:ea:28:ab:85:41:7c:aa:3d: 4e:99:3b:ba:3c:ae:c5:66:91:6a:4c:b5:d4:83:3d: 9a:a8:f3:5e:64:c6:37:53:e3:7e:be:e8:cf:d8:60: ba:6c:ad:86:76:05:d2:ec:07:77:00:6c:f8:5d:24: 33:c8:12:72:86:fb:ca:eb:92:e3:7f:4c:ee:61:1d: 90:33:83:c2:38:d2:18:a6:b1:6d:90:cb:d7:4d:d6: 72:1e:fd:d0:c1:a1:ce:ef:2c:18:8c:c6:e4:0a:d5: 98:c1:fe:98:58:f5:55:73:19:d9:af:e6:87:dc:35: 3e:49:e2:24:eb:3b:73:7c:fa:60:7a:c8:d2:51:bf: f8:08:9a:06:70:1a:c5:73:6d:c7:4c:7b:4a:5b:b9: 28:bb:89:40:49:2e:18:b9:b2:cc:f9:7e:03:2a:ae: 85:54:e8:82:41:d1:22:71:0e:f4:12:6a:16:6b:99: 3b:c3:4f:30:10:da:20:c8:6b:b3:83:ba:f4:80:7d: d3:44:c8:ee:8d:04:94:68:e5:39:04:a7:ac:57:e0: 20:43:c5:2a:d1:3b:04:11:82:46:4c:eb:9b:4e:50: fe:ab:ec:97:f3:4f:19:46:cf:08:37:58:55:54:a9: 5d:3d:d1:72:f3:a7:46:40:24:e6:cc:9e:da:03:6f: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:21:9B:D6:CB:11:AA:76:CA:D0:F4:94:56:95:01:02:02:63:BF:5E X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:44:38:76:4b:17:20:4a:69:45:56:13:63:4e:60:d9:5c: d1:bd:e8:ef:41:d7:99:91:bf:44:b6:97:16:77:80:e0:55:0f: 8d:85:83:53:1d:43:c2:31:c0:3c:16:c5:4d:51:9e:d9:79:84: ef:ce:ca:33:93:56:70:93:e0:d3:ca:3e:80:b4:b0:d6:b8:98: 62:96:19:ed:e6:65:30:6b:30:1b:10:ec:01:52:53:f6:bc:7b: a3:3f:b5:52:c7:0b:b6:79:29:bb:56:bd:48:d0:50:42:79:cb: f9:93:a9:ae:32:19:66:d7:25:94:72:f5:d7:43:d9:43:fa:13: ac:97:85:a9:32:25:76:b6:bb:b9:52:0f:9a:8f:e6:e8:3b:80: 20:1a:9e:73:e0:03:04:71:09:61:5b:5b:b1:88:fd:88:bd:95: c9:77:8e:74:ef:b4:6f:d8:bd:15:38:96:b8:58:c7:df:2e:e8: d8:60:4b:0f:e1:d0:6b:2e:91:7a:dd:68:c6:1f:08:d3:c7:40: 0c:c9:87:ff:45:66:6c:47:17:e9:7b:82:ed:0b:1c:14:92:b0: 88:e0:8f:e7:13:99:f0:c4:a6:2e:d0:f5:75:9f:bb:83:ba:ca: 8b:ed:8a:0f:84:bd:8f:16:78:39:a1:11:f1:0c:f7:66:9b:7d: 70:34:fc:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwOTIwMTk0MDIwWhcNMjYwOTI3MTk0MDIwWjAYMRYwFAYD VQQDEw02YWIwMzZhNC1lYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD5VPpFq6iirhUF8qj1OmTu6PK7FZpFqTLXUgz2aqPNeZMY3U+N+vujP2GC6 bK2GdgXS7Ad3AGz4XSQzyBJyhvvK65Ljf0zuYR2QM4PCONIYprFtkMvXTdZyHv3Q waHO7ywYjMbkCtWYwf6YWPVVcxnZr+aH3DU+SeIk6ztzfPpgesjSUb/4CJoGcBrF c23HTHtKW7kou4lASS4YubLM+X4DKq6FVOiCQdEicQ70EmoWa5k7w08wENogyGuz g7r0gH3TRMjujQSUaOU5BKesV+AgQ8Uq0TsEEYJGTOubTlD+q+yX808ZRs8IN1hV VKldPdFy86dGQCTmzJ7aA2/H7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQhm9bL Eap2ytD0lFaVAQICY79eMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyNEOHZLFyBKaUVWE2NOYNlc0b3o70HXmZG/RLaXFneA4FUPjYWDUx1DwjHA PBbFTVGe2XmE787KM5NWcJPg08o+gLSw1riYYpYZ7eZlMGswGxDsAVJT9rx7oz+1 UscLtnkpu1a9SNBQQnnL+ZOprjIZZtcllHL110PZQ/oTrJeFqTIldra7uVIPmo/m 6DuAIBqec+ADBHEJYVtbsYj9iL2VyXeOdO+0b9i9FTiWuFjH3y7o2GBLD+HQay6R et1oxh8I08dADMmH/0VmbEcX6XuC7QscFJKwiOCP5xOZ8MSmLtD1dZ+7g7rKi+2K D4S9jxZ4OaER8Qz3Zpt9cDT8Gg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:59:29 2026 by rpki-client