$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: x77vHh+X6yURmtFtMhg0sIYf9z5r51WQPxIE+xl9hVM= Subject key identifier: 57:83:C0:35:0C:3A:A4:78:04:A9:4D:19:5F:85:18:8A:7C:5F:E8:94 Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 01D7 Signing time: Mon 21 Sep 2026 03:37:20 +0000 Manifest this update: Mon 21 Sep 2026 03:37:20 +0000 Manifest next update: Mon 28 Sep 2026 03:37:20 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: pR31xuh9v1SNmQbY8jcupR41JO6HsSS0GEdk13KGX+M=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Sep 21 03:37:20 2026 GMT Not After : Sep 28 03:37:20 2026 GMT Subject: CN=6ab0a670-7532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:99:c7:5c:c8:63:1a:27:b5:03:25:2b:5a: 80:e6:7c:ab:16:8b:03:c1:fd:e2:59:38:1a:d8:b0: 93:4f:28:77:2b:8e:bf:06:39:a3:46:4f:22:63:78: c5:fc:f0:7e:3c:02:51:03:4b:fe:ba:8f:e2:55:01: 1d:fa:51:20:8b:0c:9f:87:fd:f8:34:e5:dc:00:8b: 51:8d:cc:22:3b:ea:c8:2b:6f:0e:d7:6d:cd:83:44: ef:e0:24:08:29:f0:99:4f:7a:d3:da:c6:c7:79:78: 26:6d:d7:a9:6a:9f:60:24:24:da:ef:bd:37:33:3e: 4a:c7:ec:17:59:c8:4e:d2:14:f5:5d:06:3e:39:f3: 03:63:93:30:3c:c6:61:bc:c9:d7:cc:00:ac:05:05: 70:ba:24:20:3e:20:37:76:04:dc:46:8c:ef:3d:bb: 60:c1:60:4f:85:3c:f0:f4:b2:37:5b:43:fb:1b:f4: 71:0d:09:2e:82:ee:36:9f:04:7e:34:f0:66:ec:ad: 4b:c6:97:c2:c3:91:1b:ee:6b:b9:ab:75:d5:bb:ca: 48:1d:be:21:fe:e9:72:48:b1:56:34:63:85:4e:85: 4e:b5:e4:64:42:8b:9f:3a:52:7a:c0:0c:ed:b9:0a: 4d:79:0d:47:72:e1:35:85:d4:04:9c:ea:88:b3:d0: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:C0:35:0C:3A:A4:78:04:A9:4D:19:5F:85:18:8A:7C:5F:E8:94 X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ea:14:43:65:51:01:ba:b3:13:8f:8f:f6:ed:b3:2d:f0:6a: bf:d4:19:6e:bf:6e:31:04:72:da:d3:b6:b9:eb:53:8d:1a:d4: 5c:01:c1:b4:64:d2:83:b2:91:0d:07:99:bd:ef:3f:06:ed:24: 80:1f:be:81:f9:45:52:3b:e3:6c:62:94:8e:9d:fe:79:d9:49: c7:24:12:51:e1:a4:fe:ec:06:c5:5d:df:99:a8:23:57:ef:65: e0:e1:e5:60:a3:5f:45:88:bc:ef:35:65:22:c8:d7:3e:4c:b2: 76:f5:04:10:55:37:f2:d3:0c:cb:bb:b9:48:85:13:80:65:76: e7:c1:8b:cf:00:55:c7:58:95:52:c2:4f:a4:03:27:ef:54:3b: 60:fc:80:ca:b8:e3:2b:0c:f2:bf:05:c8:8b:09:fb:ae:48:d2: a4:49:0a:ce:3c:b8:b6:54:04:a4:e4:e9:57:8e:e8:87:e9:8b: 28:bb:01:35:c0:7f:82:08:f8:29:4f:3f:21:21:70:64:c9:81: 34:66:93:e6:d3:dd:dd:5b:20:78:fe:09:8e:90:85:23:8c:d4: dd:43:cc:f8:42:14:9b:e6:28:d3:34:7b:9a:90:21:50:b3:56: 59:9a:da:d3:39:55:82:87:60:af:a3:97:35:4e:95:b0:ac:ac: d6:b7:2e:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjYwOTIxMDMzNzIwWhcNMjYwOTI4MDMzNzIwWjAYMRYwFAYD VQQDEw02YWIwYTY3MC03NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/iZx1zIYxontQMlK1qA5nyrFosDwf3iWTga2LCTTyh3K46/BjmjRk8iY3jF /PB+PAJRA0v+uo/iVQEd+lEgiwyfh/34NOXcAItRjcwiO+rIK28O123Ng0Tv4CQI KfCZT3rT2sbHeXgmbdepap9gJCTa7703Mz5Kx+wXWchO0hT1XQY+OfMDY5MwPMZh vMnXzACsBQVwuiQgPiA3dgTcRozvPbtgwWBPhTzw9LI3W0P7G/RxDQkugu42nwR+ NPBm7K1LxpfCw5Eb7mu5q3XVu8pIHb4h/ulySLFWNGOFToVOteRkQoufOlJ6wAzt uQpNeQ1HcuE1hdQEnOqIs9DtNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFeDwDUM OqR4BKlNGV+FGIp8X+iUMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhuoUQ2VRAbqzE4+P9u2zLfBqv9QZbr9uMQRy2tO2uetTjRrUXAHBtGTSg7KR DQeZve8/Bu0kgB++gflFUjvjbGKUjp3+edlJxyQSUeGk/uwGxV3fmagjV+9l4OHl YKNfRYi87zVlIsjXPkyydvUEEFU38tMMy7u5SIUTgGV258GLzwBVx1iVUsJPpAMn 71Q7YPyAyrjjKwzyvwXIiwn7rkjSpEkKzjy4tlQEpOTpV47oh+mLKLsBNcB/ggj4 KU8/ISFwZMmBNGaT5tPd3VsgeP4JjpCFI4zU3UPM+EIUm+Yo0zR7mpAhULNWWZra 0zlVgodgr6OXNU6VsKys1rcubg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:23 2026 by rpki-client