$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: kwcHpTyrd346lADW0R3BKZFOqUDuz6B1fGll7BwIVOg= Subject key identifier: 60:16:26:65:5B:29:2C:61:B6:AA:1A:36:FF:0F:12:84:AA:E4:CD:00 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1FAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1F8C Signing time: Thu 24 Sep 2026 15:58:24 +0000 Manifest this update: Thu 24 Sep 2026 15:58:23 +0000 Manifest next update: Thu 01 Oct 2026 15:58:23 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: M3GYRGfakn6kMr1QQQv52Gx980mcVUKnM0BBuKAbvsI=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: /fHf2RWdustvdg5S47Z7gIzIMDXWlqkBjyrgu7K/3D4=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: yvtzCPV+5W4YoiBOz2OtC6p8mg3AEoj1zptNV9BW/VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8107 (0x1fab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Sep 24 15:58:23 2026 GMT Not After : Oct 1 15:58:23 2026 GMT Subject: CN=6ab5489f-a53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:8e:f5:dc:d5:68:ae:86:3f:56:a7:31:70: bc:bc:b2:60:4c:f8:7d:06:6e:dc:98:0d:f7:e7:0f: ae:a8:75:fe:a9:28:c9:13:bc:68:15:94:a7:0f:9e: 15:ff:35:21:ba:dc:8e:fa:84:1a:33:bf:77:d0:42: 1f:6b:47:f1:d3:4f:24:72:2a:32:77:4b:fe:95:5e: cd:f5:de:02:1f:55:87:b7:20:c4:e1:12:f2:70:62: 5d:2a:fa:69:2e:f2:5b:12:28:48:ce:ba:4c:6d:e7: 31:aa:e9:8f:10:56:76:5a:52:af:c8:b7:72:8f:b5: bb:ef:56:ff:07:a1:41:05:c7:8c:93:ff:8a:10:ea: 4d:97:fa:d9:b3:7b:50:86:b6:1d:55:78:8d:93:e4: 4c:43:91:60:77:df:6a:e5:a6:f3:d8:4c:ce:a7:dd: 4d:de:d2:c3:b2:7e:2a:e5:46:74:e4:70:d0:6d:0d: 0f:26:c1:6b:24:32:2d:ad:ee:be:17:cd:73:83:b5: 83:f5:b7:ca:e1:23:30:42:e8:91:7d:92:8e:bc:a9: 7d:40:4f:e7:3e:96:9a:f7:0c:ca:43:f3:86:87:49: 6d:17:d3:a3:c8:60:6e:09:22:cc:50:6c:b8:55:f5: 0d:c7:f8:b5:f2:76:2d:b0:63:d9:f7:42:b5:d4:4f: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:26:65:5B:29:2C:61:B6:AA:1A:36:FF:0F:12:84:AA:E4:CD:00 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:60:95:b8:01:cb:a8:a5:34:1d:81:03:2f:83:95:0b:69: 16:01:23:11:9a:fb:ef:5a:3f:dc:ec:b8:c1:22:69:4e:11:3b: 2c:66:38:32:24:fc:f4:88:3e:4a:d8:33:34:f2:c8:c1:53:f5: 09:22:d1:66:60:2a:c7:89:13:f1:74:00:c5:1c:34:be:f6:4f: ab:ae:0a:79:f2:e2:54:a8:02:3e:fc:22:fe:5a:62:24:2d:8f: a4:45:b9:c8:c7:49:ac:91:a1:6a:a5:fb:f6:2c:be:33:a6:a4: 47:96:e4:8e:54:f7:32:85:0d:01:6c:4e:c0:57:e9:84:39:c8: d1:8d:fe:94:f8:9f:d0:b9:08:2d:39:7e:ef:92:25:ad:dd:0d: e1:50:d7:e6:40:32:ca:47:6c:c7:38:e1:24:4f:01:74:db:61: 9c:e6:83:f5:75:35:61:a3:5d:16:64:f2:d2:16:52:d0:e7:3c: df:dd:a6:78:3c:8b:63:f4:65:53:3a:d2:f7:77:f9:cf:6f:0e: bd:26:9d:11:8b:17:06:01:ea:d0:c7:1f:d2:8b:c9:cf:50:b5: be:12:90:fb:fb:49:e3:32:8f:d6:08:03:42:a1:21:48:d8:60: 93:57:3d:f4:0a:7c:e7:13:21:13:90:c0:f3:0a:4a:a0:54:1d: 8c:ed:6d:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjYwOTI0MTU1ODIzWhcNMjYxMDAxMTU1ODIzWjAYMRYwFAYD VQQDEw02YWI1NDg5Zi1hNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC2O9dzVaK6GP1anMXC8vLJgTPh9Bm7cmA335w+uqHX+qSjJE7xoFZSnD54V /zUhutyO+oQaM7930EIfa0fx008kcioyd0v+lV7N9d4CH1WHtyDE4RLycGJdKvpp LvJbEihIzrpMbecxqumPEFZ2WlKvyLdyj7W771b/B6FBBceMk/+KEOpNl/rZs3tQ hrYdVXiNk+RMQ5Fgd99q5abz2EzOp91N3tLDsn4q5UZ05HDQbQ0PJsFrJDItre6+ F81zg7WD9bfK4SMwQuiRfZKOvKl9QE/nPpaa9wzKQ/OGh0ltF9OjyGBuCSLMUGy4 VfUNx/i18nYtsGPZ90K11E9KcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAWJmVb KSxhtqoaNv8PEoSq5M0AMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWL9glbgBy6ilNB2BAy+DlQtpFgEjEZr771o/3Oy4wSJpThE7LGY4MiT89Ig+ StgzNPLIwVP1CSLRZmAqx4kT8XQAxRw0vvZPq64KefLiVKgCPvwi/lpiJC2PpEW5 yMdJrJGhaqX79iy+M6akR5bkjlT3MoUNAWxOwFfphDnI0Y3+lPif0LkILTl+75Il rd0N4VDX5kAyykdsxzjhJE8BdNthnOaD9XU1YaNdFmTy0hZS0Oc8392meDyLY/Rl UzrS93f5z28OvSadEYsXBgHq0Mcf0ovJz1C1vhKQ+/tJ4zKP1ggDQqEhSNhgk1c9 9Ap85xMhE5DA8wpKoFQdjO1t0Q== -----END CERTIFICATE-----Generated at Thu Sep 24 22:55:52 2026 by rpki-client