$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: 0DaQ5CtBdf84/YyzpobSZEG9L2g7p7lBKMNMdDlZDoo= Subject key identifier: 33:AC:1A:A5:4E:0D:FD:8F:F8:CE:E7:57:AC:F5:DF:DF:3A:66:D7:39 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0D21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0D16 Signing time: Tue 06 Oct 2026 18:28:10 +0000 Manifest this update: Tue 06 Oct 2026 18:28:09 +0000 Manifest next update: Tue 13 Oct 2026 18:28:09 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: JlWt95XFTxN7Qr6B2sY+vbdNd6ATvmrfj3G83YMX3GY=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: LIB+jPRrNcX48j1VF+KjCprRK7AM8JBY+SFqwnYaTaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Oct 6 18:28:09 2026 GMT Not After : Oct 13 18:28:09 2026 GMT Subject: CN=6ac53dba-5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a4:38:1a:b3:fa:24:ad:09:32:47:9f:ca:94: 6a:20:ed:e6:93:9b:59:92:ed:c7:10:13:32:8d:af: 3e:0d:bc:dc:46:5b:ea:a5:44:0c:59:24:e0:6e:6a: f7:48:b1:c2:76:4b:6c:75:a6:32:f6:0f:76:e6:b9: f2:da:55:d3:8f:c5:c3:29:34:fb:eb:a4:d1:0f:87: c1:bd:ca:96:d2:7a:4d:a4:ce:e7:8a:45:1a:6f:6a: 64:31:e8:9f:73:67:d1:aa:28:22:32:f1:1f:18:9b: c2:ed:27:1e:6f:22:b2:3d:f5:22:35:3f:0f:d0:fc: fe:61:92:ea:91:20:fc:b9:af:83:92:03:19:69:d5: eb:da:11:6f:7a:de:f7:96:23:e4:3e:9b:33:d8:be: 81:61:3a:b1:c5:33:39:e9:92:12:36:17:88:73:02: a3:44:e8:4d:32:d3:cd:e6:ca:7e:c1:9a:43:bf:69: 91:62:d6:f4:71:05:90:a8:ff:8e:28:51:22:f2:92: 4a:40:c6:4a:bc:3e:4d:8e:11:16:f8:f2:29:ee:8e: c6:8f:43:3f:f4:33:7d:ae:f0:33:ed:65:6f:9b:70: 67:d9:4a:ee:1a:f2:42:23:6b:5d:d3:5d:04:48:1b: 4c:1a:b5:bf:a5:b0:5f:4f:51:e3:71:a4:8b:dd:7d: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:1A:A5:4E:0D:FD:8F:F8:CE:E7:57:AC:F5:DF:DF:3A:66:D7:39 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:05:39:08:ab:e6:d8:b3:50:e4:fb:16:ef:e7:cb:65:ca:c4: 7d:48:ca:84:b0:5a:99:75:37:58:2f:7c:4b:61:2f:c2:49:dc: b6:e3:9a:3a:b0:66:3a:33:70:06:60:7e:ba:bc:f4:b2:ff:6d: dd:89:1f:a1:5f:7b:2c:27:9d:1c:38:90:72:c7:f7:2b:27:df: f1:e4:3a:26:57:0e:55:ed:1b:b0:0c:02:87:f9:e3:b8:b2:3c: c3:6e:23:a3:3c:55:24:a2:21:80:ef:68:bd:1c:bd:d5:be:7d: fb:b4:b9:67:f3:f9:3a:9f:43:b3:c7:b8:a2:1a:0f:58:1a:6c: 23:e0:ff:88:54:95:73:4f:02:82:19:2a:a4:8f:04:aa:b0:1d: 6e:fc:fe:71:db:6e:26:58:02:91:12:7d:c8:55:1e:f7:26:54: 0d:4a:7f:84:eb:8c:ec:44:52:6c:3a:b8:25:e1:31:94:51:49: 9d:a8:6f:8f:7d:8f:2d:0d:0d:65:b2:c8:25:f9:24:8f:33:d1: 74:35:2e:7e:05:71:77:3d:15:ed:f8:e6:f2:61:29:03:69:c7: e3:44:e3:0c:5b:78:6e:c9:13:77:5b:e7:6d:e9:75:b4:a4:f5: 12:dc:3d:dc:93:b9:ae:41:1c:77:02:d3:a6:93:72:94:e5:ad: dc:d8:26:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYxMDA2MTgyODA5WhcNMjYxMDEzMTgyODA5WjAYMRYwFAYD VQQDEw02YWM1M2RiYS01MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qQ4GrP6JK0JMkefypRqIO3mk5tZku3HEBMyja8+DbzcRlvqpUQMWSTgbmr3 SLHCdktsdaYy9g925rny2lXTj8XDKTT766TRD4fBvcqW0npNpM7nikUab2pkMeif c2fRqigiMvEfGJvC7ScebyKyPfUiNT8P0Pz+YZLqkSD8ua+DkgMZadXr2hFvet73 liPkPpsz2L6BYTqxxTM56ZISNheIcwKjROhNMtPN5sp+wZpDv2mRYtb0cQWQqP+O KFEi8pJKQMZKvD5NjhEW+PIp7o7Gj0M/9DN9rvAz7WVvm3Bn2UruGvJCI2td010E SBtMGrW/pbBfT1HjcaSL3X15tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOsGqVO Df2P+M7nV6z13986Ztc5MB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVAU5CKvm2LNQ5PsW7+fLZcrEfUjKhLBamXU3WC98S2EvwknctuOaOrBmOjNw BmB+urz0sv9t3YkfoV97LCedHDiQcsf3Kyff8eQ6JlcOVe0bsAwCh/njuLI8w24j ozxVJKIhgO9ovRy91b59+7S5Z/P5Op9Ds8e4ohoPWBpsI+D/iFSVc08CghkqpI8E qrAdbvz+cdtuJlgCkRJ9yFUe9yZUDUp/hOuM7ERSbDq4JeExlFFJnahvj32PLQ0N ZbLIJfkkjzPRdDUufgVxdz0V7fjm8mEpA2nH40TjDFt4bskTd1vnbel1tKT1Etw9 3JO5rkEcdwLTppNylOWt3Ngmqg== -----END CERTIFICATE-----Generated at Thu Oct 8 18:03:46 2026 by rpki-client