$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: Op31x70vpV7uUyoPr7tvwdEXEjHcGXOmIfByTb7d+PA= Subject key identifier: 43:B6:FD:AC:46:75:A9:B7:72:CE:B9:E9:DD:B0:E5:A7:60:1C:E7:97 Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: E3 Signing time: Wed 07 Oct 2026 07:05:38 +0000 Manifest this update: Wed 07 Oct 2026 07:05:38 +0000 Manifest next update: Wed 14 Oct 2026 07:05:38 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: U+G9MO9GMXMYGlvj3QqybgGkOzseehkPboB1REAMfLw=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Oct 7 07:05:38 2026 GMT Not After : Oct 14 07:05:38 2026 GMT Subject: CN=6ac5ef42-b2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:9a:3c:42:27:7d:c2:2f:f0:cb:6b:c8:d6: 9b:5e:95:85:37:b4:b5:35:16:fb:be:fd:1c:54:49: d8:51:fc:12:27:cb:44:54:d5:db:6a:cc:a1:5e:01: c3:2c:74:27:85:03:4c:85:fb:6c:7f:26:43:80:70: c9:af:1f:16:3b:8c:fb:4f:eb:1b:4e:97:0c:1c:f9: 7e:82:63:73:ec:f5:a7:0e:6d:a8:68:ac:55:24:d8: 3f:22:c0:cd:52:99:6c:2f:63:04:32:0d:01:68:96: 05:4e:87:cf:94:05:71:0c:d9:ca:b1:63:2f:e1:1f: ae:ed:b1:f3:ca:d5:57:2c:d2:b4:6d:cb:dc:aa:44: a4:0c:b3:5f:a6:48:3c:2e:7c:47:fc:a3:36:66:ba: 79:a9:91:9f:95:49:74:9b:2f:ba:32:bf:02:c0:ae: 59:c2:ba:a2:93:72:fc:63:fb:d1:6c:7b:35:16:71: a5:cb:45:94:57:d4:db:55:0e:9f:84:8f:bd:a9:6f: bc:b7:40:3f:25:08:b6:c2:ca:df:1b:d5:e0:7f:3c: 23:78:3b:4b:07:2f:cc:9c:59:33:98:b4:c6:3a:88: ea:3e:97:5c:02:8e:4c:03:56:a8:b4:d0:5c:d5:1f: f6:a8:6c:7e:4e:90:1f:61:6d:29:72:07:57:7c:6c: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:FD:AC:46:75:A9:B7:72:CE:B9:E9:DD:B0:E5:A7:60:1C:E7:97 X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:da:fb:7a:5b:84:48:0f:5b:94:7f:8b:fb:9a:7f:4a:46:ee: 57:3d:57:8f:ec:69:81:a5:75:96:f6:09:f8:11:89:d2:71:e5: 08:25:b1:b9:55:90:d3:c1:a6:24:3f:6c:82:a4:1a:4d:30:67: 0a:63:8f:88:72:02:ad:cb:f9:fe:89:f7:da:5a:02:60:ac:8d: 34:d9:39:6a:ce:2e:86:32:db:b5:b1:4d:fa:fa:3a:8b:1a:e4: b9:3f:9f:dc:81:63:b3:53:df:35:fb:00:31:db:be:03:ef:be: 3b:9c:ad:25:14:e2:86:18:ad:3e:cc:c4:5f:30:1f:15:66:c0: 89:88:22:f2:c2:fe:de:16:a7:9b:a6:62:98:0a:ab:38:ae:f2: 4e:21:22:9e:57:60:b8:de:c6:29:1a:7f:8c:8f:bd:cf:91:54: 05:4c:a2:9d:d0:3c:c8:47:3f:ba:49:16:68:a2:77:d8:40:83: 58:90:46:f1:68:f5:2f:6e:57:02:07:89:5c:6e:28:f3:93:a5: a5:13:b4:e3:30:24:38:9f:e9:e8:64:cf:53:91:e6:15:ef:0c: 9f:65:14:ad:b3:46:69:a6:36:bf:e4:cf:66:f3:92:53:80:59: 7f:31:90:07:fb:5b:d9:17:cb:39:db:21:76:ff:1a:07:91:f3: 68:84:fd:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYxMDA3MDcwNTM4WhcNMjYxMDE0MDcwNTM4WjAYMRYwFAYD VQQDEw02YWM1ZWY0Mi1iMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp92aPEInfcIv8MtryNabXpWFN7S1NRb7vv0cVEnYUfwSJ8tEVNXbasyhXgHD LHQnhQNMhftsfyZDgHDJrx8WO4z7T+sbTpcMHPl+gmNz7PWnDm2oaKxVJNg/IsDN UplsL2MEMg0BaJYFTofPlAVxDNnKsWMv4R+u7bHzytVXLNK0bcvcqkSkDLNfpkg8 LnxH/KM2Zrp5qZGflUl0my+6Mr8CwK5Zwrqik3L8Y/vRbHs1FnGly0WUV9TbVQ6f hI+9qW+8t0A/JQi2wsrfG9XgfzwjeDtLBy/MnFkzmLTGOojqPpdcAo5MA1aotNBc 1R/2qGx+TpAfYW0pcgdXfGwxeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEO2/axG dam3cs656d2w5adgHOeXMB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEtr7eluESA9blH+L+5p/SkbuVz1Xj+xpgaV1lvYJ+BGJ0nHlCCWxuVWQ08Gm JD9sgqQaTTBnCmOPiHICrcv5/on32loCYKyNNNk5as4uhjLbtbFN+vo6ixrkuT+f 3IFjs1PfNfsAMdu+A+++O5ytJRTihhitPszEXzAfFWbAiYgi8sL+3hanm6ZimAqr OK7yTiEinldguN7GKRp/jI+9z5FUBUyindA8yEc/ukkWaKJ32ECDWJBG8Wj1L25X AgeJXG4o85OlpRO04zAkOJ/p6GTPU5HmFe8Mn2UUrbNGaaY2v+TPZvOSU4BZfzGQ B/tb2RfLOdshdv8aB5HzaIT9Pw== -----END CERTIFICATE-----Generated at Thu Oct 8 13:18:29 2026 by rpki-client