$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json) Hash identifier: J3NWHAFWcMshG2lOTGXQX9HMBWtXAc3ikD8nIJOsyT4= Subject key identifier: C0:E9:C6:3E:52:0C:F7:F9:BC:D0:41:A8:90:96:8A:23:0E:3E:A2:F4 Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Certificate serial: 3585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft Manifest number: 3583 Signing time: Fri 02 Oct 2026 14:46:20 +0000 Manifest this update: Fri 02 Oct 2026 14:46:20 +0000 Manifest next update: Fri 09 Oct 2026 14:46:20 +0000 Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: kWyMyK9VCuJcLojqMA4UaciXvMXjQ1wPNOIKtm3k8eA=) 2: E4FC42B4AA6B11F1A625801A6311F970.roa (hash: MwQK/rkMedIHbWxvuuhvYzNXRO6W1Kz0RQ01ry7aASY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 14:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13701 (0x3585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Validity Not Before: Oct 2 14:46:20 2026 GMT Not After : Oct 9 14:46:20 2026 GMT Subject: CN=6abfc3bc-f4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:bd:13:38:c1:db:38:46:5d:57:ae:0a:6c: 53:77:b4:26:e5:57:f3:d7:16:13:66:46:fe:5b:d2: 6e:4a:3e:9c:f5:89:09:9f:97:13:29:a8:06:88:32: 84:9c:a0:b6:4c:fe:15:dc:6a:91:f1:a3:38:01:ed: 4c:88:69:d4:9b:83:24:49:b7:fb:2e:00:99:2c:a9: 12:f5:34:e2:f2:f5:09:9b:47:3c:f9:f7:de:e4:ab: 96:26:f5:2f:c5:52:14:29:d7:6f:66:f9:bb:c3:6a: d3:38:7f:dd:ce:c1:4f:c3:8b:e7:da:3e:62:5d:ea: 68:3b:82:92:c4:3e:74:14:9b:d5:c4:70:bd:b4:42: 30:a4:67:be:c3:15:f7:b2:14:9e:da:77:36:3f:db: 15:5b:ba:56:7b:fb:c5:6f:01:b4:59:d4:ed:2c:53: c1:3b:fd:fd:f4:0f:84:36:ad:78:3b:25:b4:59:7c: 69:f7:7e:c9:70:88:bb:e9:77:7b:1d:2d:7f:dc:0d: 85:3b:a4:b2:24:d8:9d:eb:22:05:e4:92:9c:f0:09: bb:df:06:96:c2:86:e7:c4:6f:bb:8e:ac:dd:a6:14: b6:1f:58:4a:dd:29:2f:1d:12:53:7a:a2:3d:34:37: 44:68:ee:3d:c5:a0:1d:7d:fe:9e:8b:fe:0a:76:c1: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:C6:3E:52:0C:F7:F9:BC:D0:41:A8:90:96:8A:23:0E:3E:A2:F4 X509v3 Authority Key Identifier: keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a0:23:01:46:d6:ba:24:53:a0:84:84:fc:1f:dd:49:c5:c2: bf:12:73:f7:23:64:5c:96:dc:0f:93:af:7d:a8:e8:d6:16:c4: 61:f8:f5:81:43:a4:7a:e6:fc:c9:dc:f3:2e:cc:9c:7c:4b:af: 03:93:73:49:13:07:af:d6:2c:25:a2:68:b1:b5:a2:52:02:16: 35:9a:65:ff:5f:38:e4:1a:a2:5c:77:62:23:2b:64:0f:63:28: e3:3b:e0:77:8f:93:9f:a0:c8:10:92:95:20:84:99:a8:39:71: e3:0f:0a:a1:7c:7d:09:d8:26:ac:39:ef:43:ed:57:c1:29:3b: 6c:57:d5:af:cc:e5:f7:5a:31:88:db:b6:b6:df:55:11:e8:18: 4d:f6:33:b4:c8:f1:91:b9:e4:f6:e4:2c:88:6d:a6:63:df:1f: 12:58:3f:58:8e:14:0f:ff:cf:5e:1b:f9:dd:ad:bb:04:34:7b: e6:04:0e:e9:b4:ec:0b:fb:d6:7b:0d:d4:0f:94:f2:fb:de:98: 76:48:64:26:9e:fe:2b:3f:f8:c6:a6:49:15:72:ba:08:ac:5f: 18:31:c2:3a:5f:9d:d9:bd:8b:a0:09:07:4e:a9:3a:b2:c6:c3: 6f:98:88:3a:b0:1c:58:ff:e2:6c:ee:88:28:0a:e5:e4:75:f6: 5a:24:da:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2NjkxMTAvBgNVBAUTKEFENEQ2NTNCODM1QzRFMURFOThFQzY2Mzc2ODg5QTlB ODM3NjRCMDIwHhcNMjYxMDAyMTQ0NjIwWhcNMjYxMDA5MTQ0NjIwWjAYMRYwFAYD VQQDEw02YWJmYzNiYy1mNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8u9EzjB2zhGXVeuCmxTd7Qm5Vfz1xYTZkb+W9JuSj6c9YkJn5cTKagGiDKE nKC2TP4V3GqR8aM4Ae1MiGnUm4MkSbf7LgCZLKkS9TTi8vUJm0c8+ffe5KuWJvUv xVIUKddvZvm7w2rTOH/dzsFPw4vn2j5iXepoO4KSxD50FJvVxHC9tEIwpGe+wxX3 shSe2nc2P9sVW7pWe/vFbwG0WdTtLFPBO/399A+ENq14OyW0WXxp937JcIi76Xd7 HS1/3A2FO6SyJNid6yIF5JKc8Am73waWwobnxG+7jqzdphS2H1hK3SkvHRJTeqI9 NDdEaO49xaAdff6ei/4KdsGBlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDpxj5S DPf5vNBBqJCWiiMOPqL0MB8GA1UdIwQYMBaAFK1NZTuDXE4d6Y7GY3aImpqDdksC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjY2OS85RDVCRjZGRTFE OTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1RoM3Bqc1pqZG9pYW1vTjJT d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVMWxPNE5jVGgzcGpzWmpkb2lhbW9OMlN3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjY2OS85RDVCRjZGRTFEOTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1Ro M3Bqc1pqZG9pYW1vTjJTd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqAjAUbWuiRToISE/B/dScXCvxJz9yNkXJbcD5Ovfajo1hbEYfj1gUOkeub8 ydzzLsycfEuvA5NzSRMHr9YsJaJosbWiUgIWNZpl/1845BqiXHdiIytkD2Mo4zvg d4+Tn6DIEJKVIISZqDlx4w8KoXx9CdgmrDnvQ+1XwSk7bFfVr8zl91oxiNu2tt9V EegYTfYztMjxkbnk9uQsiG2mY98fElg/WI4UD//PXhv53a27BDR75gQO6bTsC/vW ew3UD5Ty+96YdkhkJp7+Kz/4xqZJFXK6CKxfGDHCOl+d2b2LoAkHTqk6ssbDb5iI OrAcWP/ibO6IKArl5HX2WiTa7w== -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:17 2026 by rpki-client