$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: bbpXjo+o65VR8EkFOocfLuvmsNcPZCLZ4f1FrwR+HPc= Subject key identifier: 4C:A1:EC:A9:D4:4D:C5:44:A6:3B:F2:BD:B4:80:21:48:0D:85:56:21 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0405 Signing time: Mon 21 Sep 2026 02:46:06 +0000 Manifest this update: Mon 21 Sep 2026 02:46:06 +0000 Manifest next update: Mon 28 Sep 2026 02:46:06 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: qsg0fTqA7RRzSGHJ5OSTe9QV9Hx3yhEOT9fldgISHPs=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: LpWdecCaZjYDqnwlofOF98ADZ9wJd8dslMfZKWc8i2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Sep 21 02:46:06 2026 GMT Not After : Sep 28 02:46:06 2026 GMT Subject: CN=6ab09a6e-9180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:d1:01:73:fe:36:65:90:d2:90:b7:74:b0: d0:a9:f2:59:da:2b:e5:bf:29:9b:81:c1:6a:75:bb: 37:1e:15:b6:2c:1c:12:e9:6d:5c:8a:49:de:4c:7c: 98:37:6a:de:7f:2f:2c:1c:57:a0:c5:c4:0f:d0:43: e2:47:54:bc:d3:6d:b3:a7:9b:23:0b:d1:da:a2:d5: 7c:09:1a:ce:d8:5e:46:73:c9:ae:2f:ab:dc:3b:3b: 78:af:ce:45:3d:b2:e0:25:99:5c:f1:b9:ba:4f:32: 5b:12:38:52:a5:60:eb:9d:cb:77:f7:b5:81:80:e5: b1:8a:18:5a:52:0a:61:0f:fe:e5:92:7a:c9:b3:ec: 9f:ff:dd:7c:99:b1:99:cf:fa:c7:ef:f5:7b:8b:62: 7d:39:4b:35:8f:c1:e2:62:58:8e:de:08:a2:36:8c: 3e:42:b0:b8:b7:ea:b0:70:f5:f5:50:23:f6:8f:fc: a2:58:5f:21:ae:05:da:cb:ff:1e:fa:7c:f0:0c:b2: 7c:5c:cc:73:1d:99:73:2e:e4:06:5a:05:e1:34:f7: 20:d8:a4:14:75:89:c4:81:5a:ea:25:02:76:55:99: 1c:5f:3f:c1:81:4a:a4:c7:ff:3b:da:24:f3:df:7d: 3a:d2:04:67:70:88:62:77:41:32:67:2d:b5:f8:0e: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A1:EC:A9:D4:4D:C5:44:A6:3B:F2:BD:B4:80:21:48:0D:85:56:21 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a7:7e:45:0a:ae:e8:8d:93:92:94:6c:16:a8:b1:1c:98:1c: 7f:54:bc:1d:db:8f:40:57:1f:c0:40:2b:94:bd:f9:8a:56:6c: 69:e9:b9:99:31:c8:9c:58:0b:f8:91:2c:ca:92:bf:9d:14:e2: 34:d6:4b:a1:a7:72:4e:39:da:17:a9:2b:b7:39:d3:30:42:f1: 05:f4:72:04:ba:09:b3:67:3e:3d:f6:76:e0:b9:3a:62:ef:68: dd:ea:ef:69:d5:4b:eb:ee:bc:af:cc:3f:96:c2:b7:f2:29:6a: 78:a5:68:28:6f:61:97:94:f7:28:28:9d:b7:79:f5:20:0f:0e: ef:60:48:4b:24:e4:af:30:b5:13:2a:b4:d3:f0:d2:7f:72:3f: f4:ca:ad:c7:94:82:aa:56:8c:07:5d:5a:b1:fb:e8:99:e8:34: 8a:75:80:90:ac:b9:1d:47:bc:e0:af:23:06:9b:94:72:58:0a: 03:b9:98:ae:70:f6:8e:18:13:80:d4:a4:48:70:ff:a1:00:b2: d5:93:ab:e9:a2:3e:d1:5c:02:49:ee:c1:e8:40:d3:f6:f4:5d: ae:7a:7e:9b:1f:ce:75:71:10:ee:d1:c7:e9:4a:d5:94:11:02: 87:19:5f:b7:1f:a1:3b:ca:43:54:ba:10:35:8d:8d:d2:60:d8: e3:d5:95:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwOTIxMDI0NjA2WhcNMjYwOTI4MDI0NjA2WjAYMRYwFAYD VQQDEw02YWIwOWE2ZS05MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLfRAXP+NmWQ0pC3dLDQqfJZ2ivlvymbgcFqdbs3HhW2LBwS6W1cikneTHyY N2refy8sHFegxcQP0EPiR1S8022zp5sjC9HaotV8CRrO2F5Gc8muL6vcOzt4r85F PbLgJZlc8bm6TzJbEjhSpWDrnct397WBgOWxihhaUgphD/7lknrJs+yf/918mbGZ z/rH7/V7i2J9OUs1j8HiYliO3giiNow+QrC4t+qwcPX1UCP2j/yiWF8hrgXay/8e +nzwDLJ8XMxzHZlzLuQGWgXhNPcg2KQUdYnEgVrqJQJ2VZkcXz/BgUqkx/872iTz 33060gRncIhid0EyZy21+A7VWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyh7KnU TcVEpjvyvbSAIUgNhVYhMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqd+RQqu6I2TkpRsFqixHJgcf1S8HduPQFcfwEArlL35ilZsaem5mTHInFgL +JEsypK/nRTiNNZLoadyTjnaF6krtznTMELxBfRyBLoJs2c+PfZ24Lk6Yu9o3erv adVL6+68r8w/lsK38ilqeKVoKG9hl5T3KCidt3n1IA8O72BISyTkrzC1Eyq00/DS f3I/9Mqtx5SCqlaMB11asfvomeg0inWAkKy5HUe84K8jBpuUclgKA7mYrnD2jhgT gNSkSHD/oQCy1ZOr6aI+0VwCSe7B6EDT9vRdrnp+mx/OdXEQ7tHH6UrVlBEChxlf tx+hO8pDVLoQNY2N0mDY49WVdA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:04 2026 by rpki-client