$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json) Hash identifier: JgVCm590tbYQP1/K75zusRBhYLVAz2v+3lWbbmckWws= Subject key identifier: A8:3C:BA:A6:28:73:A9:45:CA:60:84:2B:C2:A9:19:9E:37:BF:C1:37 Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft Manifest number: 0C16 Signing time: Sun 20 Sep 2026 19:22:57 +0000 Manifest this update: Sun 20 Sep 2026 19:22:56 +0000 Manifest next update: Sun 27 Sep 2026 19:22:56 +0000 Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: KvObscohA3hkTHh4tJVG9NRnYp3tdKbJUs1XESTnmcI=) 2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Validity Not Before: Sep 20 19:22:56 2026 GMT Not After : Sep 27 19:22:56 2026 GMT Subject: CN=6ab03290-efac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:79:4b:5c:fe:7c:00:3f:ae:06:ea:08:a6: 9a:06:22:b7:f7:ce:08:b6:e0:fe:31:f2:f7:24:9d: d5:fa:19:07:2a:6a:7c:72:c8:45:82:9c:e1:62:2d: 97:d5:69:fa:77:09:2d:c2:9e:f6:70:b3:fd:ea:c3: 8a:8c:09:fa:1c:ca:99:8f:bd:4d:fd:8e:0e:15:ff: 84:28:c9:b4:0b:8d:0f:28:a5:ce:6e:14:54:7a:44: 21:bf:77:81:0f:26:a1:b1:8b:f8:1e:2a:7b:96:a9: 85:5d:68:f7:0d:5d:cb:d9:57:b1:2b:7a:4a:9e:ae: 62:5c:d4:1b:45:4d:02:fd:97:1b:83:a4:4c:ad:45: b1:40:29:dd:82:9f:8b:c6:39:0e:25:eb:54:5d:40: 0e:ba:35:83:b6:a7:e8:95:5b:bf:2a:a7:62:68:13: 5a:ce:11:8f:94:bf:ff:f3:a3:65:de:26:8e:5c:48: e1:68:07:c9:78:33:0d:cb:cb:a0:fa:f8:8a:ac:88: 21:11:c4:6b:7c:40:e0:9a:c5:b2:86:12:51:03:b9: 68:7d:bf:43:a0:af:c6:41:be:0a:3c:2b:a1:54:c2: db:b2:96:d0:bb:fa:02:c1:83:7e:30:62:4b:d9:ab: ca:b9:fc:70:45:06:bb:be:16:f3:50:9f:ad:d6:f4: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3C:BA:A6:28:73:A9:45:CA:60:84:2B:C2:A9:19:9E:37:BF:C1:37 X509v3 Authority Key Identifier: keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a3:de:00:83:8b:cc:94:99:b8:cb:82:7a:bd:bf:43:83:2e: 94:77:11:6b:cc:ce:6e:1d:94:7b:0d:f8:80:81:1f:bc:80:89: 2f:a7:82:d7:ad:90:c0:19:09:88:17:c1:58:2e:89:10:e0:fd: 48:7a:d8:de:43:91:41:25:36:96:14:74:4e:c0:5a:01:64:c2: 76:1d:ed:30:54:8d:26:4d:7b:82:37:c7:b7:ae:d4:98:5c:4c: 3c:b9:18:66:74:7f:3e:ef:80:bc:19:42:e6:0b:c9:5a:0a:8b: 95:32:38:81:03:34:5d:d1:4e:76:6e:ce:92:9e:6d:e5:98:c0: 42:e9:cf:25:0a:12:ab:eb:a1:d4:40:3e:6d:79:51:7f:aa:7e: cb:45:99:36:c2:af:10:eb:a0:68:6c:fb:07:61:be:16:98:c4: b2:e3:60:6e:28:db:f7:46:c4:53:00:76:72:20:25:34:01:e6: 9b:4e:bf:d5:5b:a7:ca:1b:64:d3:65:a1:9c:aa:b4:c0:d7:67: 93:8b:58:7a:63:d5:16:96:a0:8c:38:de:11:bd:39:c9:4e:c6: f7:c5:50:71:7d:17:32:30:45:bc:a8:5d:34:84:40:f6:c4:9a: 20:75:84:65:bf:7a:54:6b:2e:06:e0:6e:48:59:21:26:17:2a: 10:41:0e:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKERFNENFOTYwQTM5MzBBQjRDMjI3RkNFOEY4NTdDMDg0 MTk3RjA4RDAwHhcNMjYwOTIwMTkyMjU2WhcNMjYwOTI3MTkyMjU2WjAYMRYwFAYD VQQDEw02YWIwMzI5MC1lZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWF5S1z+fAA/rgbqCKaaBiK3984ItuD+MfL3JJ3V+hkHKmp8cshFgpzhYi2X 1Wn6dwktwp72cLP96sOKjAn6HMqZj71N/Y4OFf+EKMm0C40PKKXObhRUekQhv3eB DyahsYv4Hip7lqmFXWj3DV3L2VexK3pKnq5iXNQbRU0C/Zcbg6RMrUWxQCndgp+L xjkOJetUXUAOujWDtqfolVu/KqdiaBNazhGPlL//86Nl3iaOXEjhaAfJeDMNy8ug +viKrIghEcRrfEDgmsWyhhJRA7lofb9DoK/GQb4KPCuhVMLbspbQu/oCwYN+MGJL 2avKufxwRQa7vhbzUJ+t1vR3WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg8uqYo c6lFymCEK8KpGZ43v8E3MB8GA1UdIwQYMBaAFN5M6WCjkwq0wif86PhXwIQZfwjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENyVENKX3pvLUZmQWhCbF9D TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNrenBZS09UQ3JUQ0pfem8tRmZBaEJsX0NOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENy VENKX3pvLUZmQWhCbF9DTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6PeAIOLzJSZuMuCer2/Q4MulHcRa8zObh2Uew34gIEfvICJL6eC162QwBkJ iBfBWC6JEOD9SHrY3kORQSU2lhR0TsBaAWTCdh3tMFSNJk17gjfHt67UmFxMPLkY ZnR/Pu+AvBlC5gvJWgqLlTI4gQM0XdFOdm7Okp5t5ZjAQunPJQoSq+uh1EA+bXlR f6p+y0WZNsKvEOugaGz7B2G+FpjEsuNgbijb90bEUwB2ciAlNAHmm06/1Vunyhtk 02WhnKq0wNdnk4tYemPVFpagjDjeEb05yU7G98VQcX0XMjBFvKhdNIRA9sSaIHWE Zb96VGsuBuBuSFkhJhcqEEEO9Q== -----END CERTIFICATE-----Generated at Mon Sep 21 06:24:54 2026 by rpki-client