$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: fAWOLZxEJlYOJ2Y+n/naeFklMN/Xgz4oQ6SX5CQkHwo= Subject key identifier: 76:02:45:31:74:7D:02:2D:43:73:B7:F0:57:CA:23:08:EF:6A:0C:4D Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2DC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2DA5 Signing time: Sat 10 Oct 2026 15:29:29 +0000 Manifest this update: Sat 10 Oct 2026 15:29:28 +0000 Manifest next update: Sat 17 Oct 2026 15:29:28 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: vp3FXl4izegAbeZrciddlJ9+1cmZyiLfov9v3dieWSw=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: ihG6N7QFwm0XDvC2GLafH4eo/h3mkm9Smxv2CwczyKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11716 (0x2dc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Oct 10 15:29:28 2026 GMT Not After : Oct 17 15:29:28 2026 GMT Subject: CN=6aca59d9-ce37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:67:95:d7:f2:0d:c4:78:9f:59:1e:ac:23: a3:5e:db:47:72:d1:ce:5c:bf:50:16:6a:d6:15:7f: 4d:e0:8e:f5:62:2c:eb:51:5a:f1:b9:43:90:49:7b: c5:4f:1b:bc:a7:73:f0:26:15:14:27:92:62:02:66: ed:22:e9:0a:19:a7:98:97:c6:5f:d4:a3:3a:cd:f6: c0:7a:bd:b4:f8:1d:16:be:49:28:d0:18:d5:ee:d2: e1:88:3b:7a:65:b5:e0:2c:3c:45:f0:ee:f9:81:75: e5:5b:3c:db:7f:80:b5:3d:ec:00:c7:72:0b:35:48: 72:de:14:be:5c:2e:c3:89:44:df:d2:4d:9d:d8:c2: 0c:d2:8a:b8:c1:8d:e1:99:a4:c0:ca:4d:aa:34:89: 68:fb:4a:4e:fa:01:aa:bc:84:be:a6:5a:f7:44:4c: 0e:da:6b:29:96:ce:ff:dd:ca:5b:f4:98:af:d8:98: 32:db:9a:2f:ba:99:29:64:67:ea:72:32:49:e1:cc: 4e:74:3e:32:d5:08:4d:a4:b8:ee:6b:8a:de:dc:e9: 9a:69:e5:f5:95:21:0b:02:06:95:85:76:a9:92:22: 0d:97:36:ff:f6:db:5c:c5:00:34:c8:f8:bf:cf:64: 47:ad:b5:b5:61:a1:9f:31:31:8d:e0:89:90:f9:ab: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:45:31:74:7D:02:2D:43:73:B7:F0:57:CA:23:08:EF:6A:0C:4D X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:cd:d9:6d:93:bc:fa:a8:11:86:ef:33:85:09:81:6a:1a: 62:1b:c3:b7:93:91:67:cd:cc:f4:7a:bd:d9:a0:82:49:2d:5b: 7e:b3:d1:39:a9:f7:2f:94:e0:0e:e7:75:31:25:f5:1f:a0:d6: 7c:ab:86:8e:1c:56:83:7f:d2:47:95:b4:cb:18:e6:c1:76:cc: 67:f2:99:8c:21:a0:fd:9a:cb:5d:b0:2c:51:3c:56:16:79:73: 0c:ec:e7:cf:65:cb:84:1e:6d:36:b8:a1:a1:2c:79:6b:42:46: b0:29:86:95:12:50:2b:84:73:08:90:5e:df:34:fe:a3:15:81: 41:f0:4b:af:5c:d8:b7:fb:73:03:0e:54:d6:8b:af:34:54:e4: 0d:b7:21:75:5e:9e:f2:66:c2:42:a6:74:93:83:a2:9f:4b:a5: 63:1b:b5:f1:ba:3d:1c:5d:2b:09:7f:e8:c2:3a:ad:ec:83:60: 88:99:1b:89:d6:c9:b4:a7:8c:4a:ce:3f:b6:17:c4:99:df:89: 0c:f9:ef:1c:78:99:aa:00:2b:ca:59:ed:81:f6:07:2e:a2:a2: 1c:cf:55:15:06:0e:05:a4:c4:1b:a9:07:53:69:69:73:15:48: 49:07:51:5d:85:af:4e:be:fb:6d:88:fb:e2:c6:b0:c7:20:d4: b7:7a:0f:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYxMDEwMTUyOTI4WhcNMjYxMDE3MTUyOTI4WjAYMRYwFAYD VQQDEw02YWNhNTlkOS1jZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIpnldfyDcR4n1kerCOjXttHctHOXL9QFmrWFX9N4I71YizrUVrxuUOQSXvF Txu8p3PwJhUUJ5JiAmbtIukKGaeYl8Zf1KM6zfbAer20+B0Wvkko0BjV7tLhiDt6 ZbXgLDxF8O75gXXlWzzbf4C1PewAx3ILNUhy3hS+XC7DiUTf0k2d2MIM0oq4wY3h maTAyk2qNIlo+0pO+gGqvIS+plr3REwO2mspls7/3cpb9Jiv2Jgy25ovupkpZGfq cjJJ4cxOdD4y1QhNpLjua4re3OmaaeX1lSELAgaVhXapkiINlzb/9ttcxQA0yPi/ z2RHrbW1YaGfMTGN4ImQ+asAhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYCRTF0 fQItQ3O38FfKIwjvagxNMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqFHN2W2TvPqoEYbvM4UJgWoaYhvDt5ORZ83M9Hq92aCCSS1bfrPROan3L5Tg Dud1MSX1H6DWfKuGjhxWg3/SR5W0yxjmwXbMZ/KZjCGg/ZrLXbAsUTxWFnlzDOzn z2XLhB5tNrihoSx5a0JGsCmGlRJQK4RzCJBe3zT+oxWBQfBLr1zYt/tzAw5U1ouv NFTkDbchdV6e8mbCQqZ0k4Oin0ulYxu18bo9HF0rCX/owjqt7INgiJkbidbJtKeM Ss4/thfEmd+JDPnvHHiZqgArylntgfYHLqKiHM9VFQYOBaTEG6kHU2lpcxVISQdR XYWvTr77bYj74sawxyDUt3oPdA== -----END CERTIFICATE-----Generated at Sun Oct 11 08:19:40 2026 by rpki-client