$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: zMT/+7GFPJty5olS30UkKgLS345QQ0yXDhBkmdCqGEo= Subject key identifier: 35:2E:69:B8:92:DA:D3:59:87:88:F4:D4:25:03:8C:5C:F9:03:38:CF Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0445 Signing time: Mon 21 Sep 2026 00:02:30 +0000 Manifest this update: Mon 21 Sep 2026 00:02:29 +0000 Manifest next update: Mon 28 Sep 2026 00:02:29 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: yh2gkoazGeRCI8xKpCcKsWBD/LowWQujuJR/XvUh0Ms=) 2: B18B4F928E6911F18BD9FF403C11F970.roa (hash: UTRa99Fy9FPq7q5R0rWgcHldc6ZYmjVdNqMG3ubrCnw=) 3: 9D36B0548E6911F1B54A9B403C11F970.roa (hash: MpuHHeKvctqtrAjZGjy9GRFYaSEPkBQflR/6O17qU0s=) 4: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: tXiBPn9WKqPR3A495dpcgE5SO+VgxVPY4ijGQaSknoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Sep 21 00:02:29 2026 GMT Not After : Sep 28 00:02:29 2026 GMT Subject: CN=6ab07415-e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:e7:66:e1:fc:07:6c:e1:31:7a:6f:c1:3e: c9:2f:7d:3a:81:9f:64:53:47:0a:26:5e:e3:0c:27: eb:46:ab:4b:0f:65:44:76:e0:0f:f4:2c:aa:1e:fb: e2:2f:1f:a8:41:d7:2c:0d:e4:23:95:0e:69:9e:c9: 03:3e:36:50:64:25:d6:74:b0:97:88:5b:1e:57:75: b5:30:d9:84:55:c3:dc:61:80:1d:44:db:03:49:ad: 07:1d:b5:96:4d:30:bb:0f:38:86:a7:c4:0c:52:b0: d8:30:02:e3:e7:49:ef:b6:05:29:ea:fe:d3:cb:50: 86:32:4e:dd:74:c0:1a:85:4a:90:ac:de:9a:5c:0f: 6a:4b:ec:9e:70:43:02:82:ee:01:9a:1b:99:b5:e4: f3:64:32:10:1c:ce:a2:2e:cf:b1:9f:04:f0:7c:53: a6:1a:5c:4e:f9:1f:c8:af:f0:f9:61:52:9f:9b:73: 4d:74:97:c8:4d:c5:bc:f1:20:ab:fe:4a:8f:fe:f1: fe:6e:82:42:f8:3f:2b:c5:0f:58:01:51:9b:32:be: 84:27:9d:c8:c4:ac:bc:0e:40:5f:a6:1b:17:5c:20: 3f:18:28:b0:d2:26:4d:b7:9e:eb:04:e0:94:8f:54: 87:42:a7:a6:b9:f8:54:7e:5e:67:2d:c8:aa:5f:3a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2E:69:B8:92:DA:D3:59:87:88:F4:D4:25:03:8C:5C:F9:03:38:CF X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:85:11:5f:00:57:7b:00:6b:2d:9a:0f:87:5b:90:1f:a0:de: 10:aa:40:b7:2f:65:58:f4:b8:a5:2f:4f:ac:b6:d6:83:ac:28: 6c:d6:9b:3b:80:ba:e2:3c:89:79:7b:b6:f3:6e:91:6e:ba:eb: 57:e2:4e:23:cd:1d:7c:dd:67:09:9e:4b:9e:4a:fd:8e:7b:5d: a6:ee:ce:ed:e6:55:a9:53:20:4b:65:99:03:53:62:dc:e9:03: ae:7a:f5:ee:95:1b:21:b3:9a:0c:d7:c1:bb:94:f6:7b:59:8c: 5e:4c:d6:2f:10:82:b8:4e:30:12:76:02:81:ac:9c:41:42:52: 93:97:e7:af:c7:e4:cb:93:e9:f1:51:17:d1:ca:dd:9e:fd:2f: a3:a5:93:1d:b7:fa:14:6e:52:09:81:99:b8:3e:88:6e:36:31: 6a:5f:0f:6b:93:54:4a:48:50:1d:7c:2c:bb:d1:20:58:95:08: 42:98:5b:b0:1c:ce:05:62:ba:aa:98:1a:ef:31:1e:92:96:86: 35:76:cb:73:b1:57:43:3d:a9:47:76:c9:2c:bb:6e:e0:31:ff: 1b:74:e8:26:94:a1:49:8d:d7:5a:0d:5c:7e:9c:82:ec:c4:81: fb:fa:18:66:56:9c:82:a9:80:cb:a8:33:7a:d8:52:ed:fa:d6: 67:c9:14:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwOTIxMDAwMjI5WhcNMjYwOTI4MDAwMjI5WjAYMRYwFAYD VQQDEw02YWIwNzQxNS1lNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n3nZuH8B2zhMXpvwT7JL306gZ9kU0cKJl7jDCfrRqtLD2VEduAP9CyqHvvi Lx+oQdcsDeQjlQ5pnskDPjZQZCXWdLCXiFseV3W1MNmEVcPcYYAdRNsDSa0HHbWW TTC7DziGp8QMUrDYMALj50nvtgUp6v7Ty1CGMk7ddMAahUqQrN6aXA9qS+yecEMC gu4BmhuZteTzZDIQHM6iLs+xnwTwfFOmGlxO+R/Ir/D5YVKfm3NNdJfITcW88SCr /kqP/vH+boJC+D8rxQ9YAVGbMr6EJ53IxKy8DkBfphsXXCA/GCiw0iZNt57rBOCU j1SHQqemufhUfl5nLciqXzoRXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUuabiS 2tNZh4j01CUDjFz5AzjPMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs4URXwBXewBrLZoPh1uQH6DeEKpAty9lWPS4pS9PrLbWg6wobNabO4C64jyJ eXu2826RbrrrV+JOI80dfN1nCZ5Lnkr9jntdpu7O7eZVqVMgS2WZA1Ni3OkDrnr1 7pUbIbOaDNfBu5T2e1mMXkzWLxCCuE4wEnYCgaycQUJSk5fnr8fky5Pp8VEX0crd nv0vo6WTHbf6FG5SCYGZuD6IbjYxal8Pa5NUSkhQHXwsu9EgWJUIQphbsBzOBWK6 qpga7zEekpaGNXbLc7FXQz2pR3bJLLtu4DH/G3ToJpShSY3XWg1cfpyC7MSB+/oY ZlacgqmAy6gzethS7frWZ8kUZA== -----END CERTIFICATE-----Generated at Mon Sep 21 22:29:08 2026 by rpki-client