$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft File: 3MnOwPy4zLyvexzByLIVJW33h48.mft (raw, json) Hash identifier: JtzYqA5aIkp/0FStw4zEk5F8XZR+pHqz5kylIPOW3Xo= Subject key identifier: B7:5F:F0:6E:57:F7:40:1A:2A:11:FB:C2:B7:27:D2:73:78:F3:B5:C8 Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F Certificate issuer: /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft Manifest number: 2E Signing time: Thu 15 Oct 2026 09:51:11 +0000 Manifest this update: Thu 15 Oct 2026 09:51:10 +0000 Manifest next update: Thu 22 Oct 2026 09:51:10 +0000 Files and hashes: 1: 3MnOwPy4zLyvexzByLIVJW33h48.crl (hash: fZqIdmc27z2lIk6Gyi3x3dkP8V9t/5qIwuXuq+/X0KM=) 2: 21FFC88285BB11F18D64891761A30FBC.roa (hash: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 09:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F Validity Not Before: Oct 15 09:51:10 2026 GMT Not After : Oct 22 09:51:10 2026 GMT Subject: CN=6ad0a20f-c0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:12:15:e8:14:80:0c:f0:4c:58:84:01:3c: 04:47:11:e1:88:86:9e:54:66:ff:eb:cb:88:f9:ca: 4e:36:f6:e3:20:ab:c2:1d:d1:47:fb:bf:40:e2:11: d8:a3:f4:8f:ef:e1:45:f2:59:87:16:5a:c7:b8:21: e5:0a:c3:88:d2:36:bb:9f:3a:aa:f3:98:62:5c:7b: 08:a6:c4:aa:39:63:70:32:c6:d9:06:49:4c:8f:da: 2a:ed:bc:cd:4c:5e:ad:5b:ee:3a:04:e3:19:04:22: 31:60:7c:a7:79:2c:a7:65:ce:d1:d5:e4:15:6a:4e: 4d:11:1c:0b:66:66:89:ac:8d:99:e9:af:a1:00:b2: 01:f2:76:1b:69:29:26:bc:32:a3:fd:6d:49:b4:12: 5a:63:7d:a7:d8:19:16:a1:03:4b:d6:1e:9e:56:73: 70:12:53:0c:8d:04:51:d8:79:f8:3e:3b:d6:d3:d1: 58:13:1a:18:35:55:9c:f1:0c:ca:59:38:c2:ed:90: 62:65:5a:ed:ca:66:ee:7b:f7:4d:c8:6d:78:17:d8: d1:e9:b5:d9:0a:00:42:40:9c:10:61:93:1c:8f:81: 5d:ac:b5:b9:96:0a:8b:e1:78:e1:97:41:9c:14:ff: 78:d6:64:81:fc:36:92:c1:d5:12:ed:54:69:9b:d8: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5F:F0:6E:57:F7:40:1A:2A:11:FB:C2:B7:27:D2:73:78:F3:B5:C8 X509v3 Authority Key Identifier: keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:64:00:3d:cd:80:f7:27:0d:9b:73:68:9a:ef:96:96:f0:88: b0:f2:be:4d:90:a2:de:bb:02:bb:c9:65:d2:a4:cb:22:60:9b: 46:92:2e:8f:61:55:b3:1d:dc:b1:03:26:01:25:f6:0a:37:9e: 70:22:45:9c:36:42:c9:ed:19:84:c7:03:64:6f:12:67:6c:98: 92:00:a8:13:47:ff:a5:8d:93:5e:41:9d:17:3d:12:45:4e:ae: 39:0b:94:6f:24:b9:10:9e:38:a6:2d:d7:a5:12:b8:30:ce:fd: 55:52:61:c8:f6:6a:30:7a:f1:2f:de:8f:c8:8d:45:68:65:7f: 09:4e:65:ae:fc:1a:4e:74:97:60:c9:ca:17:34:da:80:41:01: 83:d1:40:ae:d8:52:51:f1:f7:f5:04:b7:16:b6:19:e3:17:4a: b8:9a:c5:73:99:c9:c9:4b:e9:f8:16:8c:e8:35:42:e0:e7:b7: eb:d9:41:c9:28:ca:65:33:fc:b6:35:6c:a3:db:77:61:c0:61: 8a:8e:8f:98:be:b8:49:92:3c:90:ca:bf:64:ce:49:2f:48:b5: ba:47:b3:19:56:3d:54:93:0e:be:d1:b1:25:7f:2c:c8:f4:42: 24:ff:43:97:b2:cd:dc:c0:4c:8e:b6:10:b4:56:83:8b:6a:89: 9f:29:67:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTEwQjExMC8GA1UEBRMoRENDOUNFQzBGQ0I4Q0NCQ0FGN0IxQ0MxQzhCMjE1MjU2 REY3ODc4RjAeFw0yNjEwMTUwOTUxMTBaFw0yNjEwMjIwOTUxMTBaMBgxFjAUBgNV BAMTDTZhZDBhMjBmLWMwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxgRIV6BSADPBMWIQBPARHEeGIhp5UZv/ry4j5yk429uMgq8Id0Uf7v0DiEdij 9I/v4UXyWYcWWse4IeUKw4jSNrufOqrzmGJcewimxKo5Y3AyxtkGSUyP2irtvM1M Xq1b7joE4xkEIjFgfKd5LKdlztHV5BVqTk0RHAtmZomsjZnpr6EAsgHydhtpKSa8 MqP9bUm0ElpjfafYGRahA0vWHp5Wc3ASUwyNBFHYefg+O9bT0VgTGhg1VZzxDMpZ OMLtkGJlWu3KZu57903IbXgX2NHptdkKAEJAnBBhkxyPgV2stbmWCovheOGXQZwU /3jWZIH8NpLB1RLtVGmb2M2hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUt1/wblf3 QBoqEfvCtyfSc3jztcgwHwYDVR0jBBgwFoAU3MnOwPy4zLyvexzByLIVJW33h48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMTBCLzFCNDBEMkIyODVC QTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5dmV4ekJ5TElWSlczM2g0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM01uT3dQeTR6THl2ZXh6QnlMSVZKVzMzaDQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MTBCLzFCNDBEMkIyODVCQTExRjFCNERCQkNBNDYwQTMwRkJDLzNNbk93UHk0ekx5 dmV4ekJ5TElWSlczM2g0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATZAA9zYD3Jw2bc2ia75aW8Iiw8r5NkKLeuwK7yWXSpMsiYJtGki6PYVWzHdyx AyYBJfYKN55wIkWcNkLJ7RmExwNkbxJnbJiSAKgTR/+ljZNeQZ0XPRJFTq45C5Rv JLkQnjimLdelErgwzv1VUmHI9mowevEv3o/IjUVoZX8JTmWu/BpOdJdgycoXNNqA QQGD0UCu2FJR8ff1BLcWthnjF0q4msVzmcnJS+n4FozoNULg57fr2UHJKMplM/y2 NWyj23dhwGGKjo+YvrhJkjyQyr9kzkkvSLW6R7MZVj1Ukw6+0bElfyzI9EIk/0OX ss3cwEyOthC0VoOLaomfKWd/ -----END CERTIFICATE-----Generated at Thu Oct 15 14:23:30 2026 by rpki-client