$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json) Hash identifier: SVIKAEWfAqQ5Z0CMTsAdqaMl6d1EaZ7IIWdBJkkJHEU= Subject key identifier: 66:9D:2F:E1:C3:7F:A9:00:B8:C1:21:1F:0B:BC:DF:93:C7:AE:C0:50 Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0F81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft Manifest number: 0F76 Signing time: Sun 04 Oct 2026 17:33:25 +0000 Manifest this update: Sun 04 Oct 2026 17:33:24 +0000 Manifest next update: Sun 11 Oct 2026 17:33:24 +0000 Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: S9tJoMzW7nS6zUAfSLNIAZflzSQZegPk1gtxPkZ/gOU=) 2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: epuRJDNpLBRjInLcr8wNqAbigHvQWwNVcLarPZoddFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3969 (0xf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Oct 4 17:33:24 2026 GMT Not After : Oct 11 17:33:24 2026 GMT Subject: CN=6ac28de5-fb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:17:92:68:1a:a6:b8:96:33:2e:ff:a3:d7: cc:8c:ec:0e:6f:80:26:79:7a:e2:af:87:35:39:38: 47:08:50:b9:ca:98:11:62:1d:35:72:fe:cd:6c:c4: e2:6f:d5:1c:88:0e:67:3b:ae:eb:a8:19:2d:fa:58: f3:68:df:54:95:aa:ff:d2:5b:40:51:37:1d:21:ad: da:d6:20:88:87:3e:de:2d:27:57:7e:c9:47:ce:bd: 58:f3:5d:b4:90:a4:0d:80:d5:cb:83:06:5d:71:e6: 2c:09:20:09:72:bf:61:b7:1f:2b:ce:fd:1d:a3:d3: 2f:fc:2e:6d:00:04:a8:61:86:8c:b8:63:8a:e2:d7: d1:21:a6:b4:c0:c0:a4:73:eb:65:6f:97:b6:2e:09: 4b:bc:f0:44:f0:27:68:b8:e5:6c:3c:66:be:ed:48: 0a:15:25:1b:b0:11:7f:a1:97:39:8f:0f:5c:e5:40: 30:99:4c:4e:20:89:d9:f8:ab:34:1d:ac:69:fb:6a: a1:b3:d9:be:58:37:6e:50:1f:f1:60:e4:c4:7a:24: cb:4b:6e:d9:7b:c2:4f:44:1d:1f:4d:4c:8f:ad:5b: 3e:a2:12:c3:20:f0:1e:e2:d0:e7:17:57:9b:37:05: 8f:ea:94:46:d9:2a:77:43:21:71:aa:df:23:97:38: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:2F:E1:C3:7F:A9:00:B8:C1:21:1F:0B:BC:DF:93:C7:AE:C0:50 X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3d:aa:df:b0:ac:5d:6f:fa:25:3c:08:9d:54:ab:61:ff:4c: 7d:39:0d:a0:9e:58:64:4f:4f:67:68:69:4d:0a:85:22:fa:e8: ee:0e:1b:dd:9f:77:e5:d4:77:e8:e5:43:9c:95:04:6e:10:35: 3b:38:60:2c:99:f8:e6:89:f4:ab:21:24:a0:78:fb:c6:4c:c8: 2b:86:04:c0:1a:a2:ca:9a:5f:e1:56:86:87:03:3c:3b:83:41: ac:7a:f3:5d:94:db:67:25:37:81:f2:8f:e5:47:6c:9e:a6:be: ab:7a:9d:5f:1e:28:f2:78:0c:0d:41:25:7c:33:42:b9:c4:76: 4b:dd:cd:bc:6f:bf:46:07:b9:fc:71:aa:d3:ac:db:5a:17:38: 10:2a:20:b9:91:e4:a9:f5:77:d8:67:4a:c2:a3:62:8a:f4:54: c3:f3:a0:ba:9d:e3:de:93:05:09:28:5b:b8:94:7f:1f:7c:2c: ae:a9:a9:ae:ad:93:ce:ee:29:64:58:b8:a1:77:97:81:6f:04: 0d:f7:b1:10:36:81:cb:35:9c:e2:61:cb:be:db:f4:f7:50:e0: 05:50:98:38:6b:b4:a1:c6:87:d6:a4:05:9b:26:32:b2:ab:79: bf:18:c0:df:2a:eb:f3:d7:b6:0a:e9:fd:0e:b8:39:68:fd:d7: 27:f2:29:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjYxMDA0MTczMzI0WhcNMjYxMDExMTczMzI0WjAYMRYwFAYD VQQDEw02YWMyOGRlNS1mYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2REXkmgapriWMy7/o9fMjOwOb4AmeXrir4c1OThHCFC5ypgRYh01cv7NbMTi b9UciA5nO67rqBkt+ljzaN9Ular/0ltAUTcdIa3a1iCIhz7eLSdXfslHzr1Y8120 kKQNgNXLgwZdceYsCSAJcr9htx8rzv0do9Mv/C5tAASoYYaMuGOK4tfRIaa0wMCk c+tlb5e2LglLvPBE8CdouOVsPGa+7UgKFSUbsBF/oZc5jw9c5UAwmUxOIInZ+Ks0 Haxp+2qhs9m+WDduUB/xYOTEeiTLS27Ze8JPRB0fTUyPrVs+ohLDIPAe4tDnF1eb NwWP6pRG2Sp3QyFxqt8jlzgSrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGadL+HD f6kAuMEhHwu835PHrsBQMB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdL d1pHc09Rb3NrbDJNQTFxRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOj2q37CsXW/6JTwInVSrYf9MfTkNoJ5YZE9PZ2hpTQqFIvro7g4b3Z935dR3 6OVDnJUEbhA1OzhgLJn45on0qyEkoHj7xkzIK4YEwBqiyppf4VaGhwM8O4NBrHrz XZTbZyU3gfKP5Udsnqa+q3qdXx4o8ngMDUElfDNCucR2S93NvG+/Rge5/HGq06zb Whc4ECoguZHkqfV32GdKwqNiivRUw/Ogup3j3pMFCShbuJR/H3wsrqmprq2Tzu4p ZFi4oXeXgW8EDfexEDaByzWc4mHLvtv091DgBVCYOGu0ocaH1qQFmyYysqt5vxjA 3yrr89e2Cun9Drg5aP3XJ/Ip3g== -----END CERTIFICATE-----Generated at Tue Oct 6 15:45:17 2026 by rpki-client