$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: Cd2xxaYmkcHmjFOiZZIhiubRt+Hc+u0JKmfoXj20nEA= Subject key identifier: 3B:84:CA:00:9A:CF:2E:75:DB:46:E8:7A:86:FE:CB:83:CD:CB:F2:CB Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: E1 Signing time: Wed 23 Sep 2026 06:18:11 +0000 Manifest this update: Wed 23 Sep 2026 06:18:10 +0000 Manifest next update: Wed 30 Sep 2026 06:18:10 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: UpMIKCtOzmYouu6N6veQrnRF+K92Ri/pKxwVDttL7tk=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Sep 23 06:18:10 2026 GMT Not After : Sep 30 06:18:10 2026 GMT Subject: CN=6ab36f23-2631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:79:16:8c:ca:81:5b:3e:7c:41:72:e6:56: d6:3b:12:c1:5c:da:ed:9c:46:38:fb:89:75:68:42: 12:91:86:fc:c9:30:95:0e:bb:a6:9a:6a:0f:b6:c9: cd:e8:e7:8c:d2:4a:2a:7d:90:b7:42:70:42:63:0e: 4e:74:87:2f:cb:7a:4d:4d:61:45:34:0e:1f:9a:74: bb:b5:94:5a:f0:aa:e8:07:6c:0a:3e:7b:cb:da:bd: 1a:d8:bb:d8:9b:e7:c8:5d:64:75:a7:41:ba:ed:a4: cb:19:e4:f0:78:23:fe:79:a3:38:c0:5e:67:3f:b1: 20:e8:bc:64:5a:05:4a:3f:20:82:42:b1:d0:29:81: 95:c2:cc:03:13:1e:f6:67:73:b1:1f:ec:6f:41:97: 63:01:ba:96:99:08:1d:06:53:48:f7:c4:18:c0:c0: f8:76:7d:54:5f:d3:52:2d:5c:4c:33:cd:80:0b:f5: 93:1e:9a:ad:02:78:8d:f2:30:ee:86:30:fa:21:63: 1e:9a:5d:1c:72:d2:73:05:b1:c1:e8:30:9c:63:22: 1b:f2:2f:ef:d3:be:0c:dd:93:1a:ff:1f:6c:4a:c4: 42:6e:49:dc:3d:bc:fd:7d:2a:8f:28:46:1b:17:da: b2:fc:19:04:3b:a1:eb:78:c1:c8:30:27:36:15:50: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:84:CA:00:9A:CF:2E:75:DB:46:E8:7A:86:FE:CB:83:CD:CB:F2:CB X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:6e:21:aa:d9:27:e3:3c:db:ce:f6:00:db:f6:d8:df:d4:ae: 6f:20:69:60:db:b2:73:13:f2:54:42:62:3a:4c:a8:1d:5c:21: ed:4f:fb:34:9b:8c:c8:19:c8:da:b9:b8:1b:a4:9c:ce:fb:83: a1:db:d8:b3:8c:66:f4:27:63:a5:b2:5e:b1:cf:53:49:76:65: 86:d0:74:cb:ee:dc:f0:7f:54:4e:b2:ff:86:7b:a5:5e:d1:3a: 6b:04:1e:22:c7:3c:23:6a:dc:9d:89:0e:92:85:6c:4f:64:60: 0e:b9:2d:92:cf:a3:df:42:d4:cb:b1:9d:6a:ce:d2:e4:7b:1b: ff:6d:2c:92:18:50:3e:25:3d:36:6b:c4:f7:4e:20:3e:e5:75: d6:87:db:f0:3f:38:8e:3e:84:c0:24:2e:8e:bb:b9:a6:a4:e9: b9:57:91:2d:7a:ce:1b:88:60:31:aa:47:90:53:01:25:61:55: 15:ea:63:66:d2:df:ba:cd:af:5d:8f:6a:e2:01:ef:cd:bf:89: b8:20:ce:02:47:da:21:b7:eb:a0:9f:0e:76:76:d5:6e:a7:ab: 56:99:e4:81:3a:1c:34:2e:9e:f2:ee:73:a8:7e:1a:c8:8c:f7: 0e:65:c1:b5:b8:fd:36:87:98:bc:ef:c2:85:55:6b:3f:78:ce: 0d:c5:bb:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0NzMxMTAvBgNVBAUTKEZCN0IwNTg3ODM2NTFFOTNGQTMwREQ5NkQ2MjY1RTZF MkYzNTI1NTQwHhcNMjYwOTIzMDYxODEwWhcNMjYwOTMwMDYxODEwWjAYMRYwFAYD VQQDEw02YWIzNmYyMy0yNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Kx5FozKgVs+fEFy5lbWOxLBXNrtnEY4+4l1aEISkYb8yTCVDrummmoPtsnN 6OeM0koqfZC3QnBCYw5OdIcvy3pNTWFFNA4fmnS7tZRa8KroB2wKPnvL2r0a2LvY m+fIXWR1p0G67aTLGeTweCP+eaM4wF5nP7Eg6LxkWgVKPyCCQrHQKYGVwswDEx72 Z3OxH+xvQZdjAbqWmQgdBlNI98QYwMD4dn1UX9NSLVxMM82AC/WTHpqtAniN8jDu hjD6IWMeml0cctJzBbHB6DCcYyIb8i/v074M3ZMa/x9sSsRCbkncPbz9fSqPKEYb F9qy/BkEO6HreMHIMCc2FVCu9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuEygCa zy5120boeob+y4PNy/LLMB8GA1UdIwQYMBaAFPt7BYeDZR6T+jDdltYmXm4vNSVU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzQ3My9GRUFFMTJBMjVE REYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhwUDZNTjJXMWlaZWJpODFK VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzQ3My9GRUFFMTJBMjVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhw UDZNTjJXMWlaZWJpODFKVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASW4hqtkn4zzbzvYA2/bY39SubyBpYNuycxPyVEJiOkyoHVwh7U/7NJuMyBnI 2rm4G6SczvuDodvYs4xm9CdjpbJesc9TSXZlhtB0y+7c8H9UTrL/hnulXtE6awQe Isc8I2rcnYkOkoVsT2RgDrktks+j30LUy7Gdas7S5Hsb/20skhhQPiU9NmvE904g PuV11ofb8D84jj6EwCQujru5pqTpuVeRLXrOG4hgMapHkFMBJWFVFepjZtLfus2v XY9q4gHvzb+JuCDOAkfaIbfroJ8OdnbVbqerVpnkgTocNC6e8u5zqH4ayIz3DmXB tbj9NoeYvO/ChVVrP3jODcW7mA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:59:13 2026 by rpki-client