$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: 8/mqHf2gF17GEDS7X96MW3GhjotIQMIjSLM5sNnpnOY= Subject key identifier: D1:A6:A3:CE:C6:42:F3:56:69:36:55:BE:4F:44:BA:12:FE:5F:28:FD Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0C14 Signing time: Mon 28 Sep 2026 18:58:17 +0000 Manifest this update: Mon 28 Sep 2026 18:58:17 +0000 Manifest next update: Mon 05 Oct 2026 18:58:17 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: ZGq/7LzMjNcLXNa2tzVbs9ux8SCsr0IJJDF509Vse1w=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: dEh6qqypXxpPh7K7OliXKNGZdaFHm4uxY8VLeBuCnpE=) 3: 67B6B2BE8C0A11F18F5A4FFE4111F970.roa (hash: 5yz6s8mph2niUKU15DvVle38hT/SfFA+5Y4QHdfA4T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: Sep 28 18:58:17 2026 GMT Not After : Oct 5 18:58:17 2026 GMT Subject: CN=6abab8c9-55fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:25:dc:86:21:1b:9f:56:13:ff:64:f9:2c: 05:c0:fd:bd:8a:6b:8a:2b:40:5b:74:53:04:4b:5a: 2c:32:4c:76:7e:34:4d:73:7f:f2:c7:04:85:e7:9d: 2d:7e:ae:5e:80:3d:23:93:58:b6:70:03:39:a9:86: 65:08:e6:1b:e0:db:0a:56:64:00:ed:5e:18:e8:0a: b4:73:d7:5d:a3:8c:b1:f0:88:71:70:df:29:7e:f1: 29:8b:0f:c5:47:5b:41:05:d7:5c:0e:46:d0:b7:92: fa:26:7a:aa:2e:e3:72:42:41:83:67:f9:36:25:64: 80:8b:96:ea:91:f3:7c:70:c5:9d:c7:9f:a5:29:6c: f3:20:80:d8:47:98:51:39:16:b1:08:4b:c6:87:5f: b1:87:fc:a8:e4:ce:35:8a:a1:70:14:65:02:84:b9: d8:40:80:0a:15:33:39:bd:40:f1:20:9f:cc:5c:72: b4:3f:39:8f:18:6f:4e:d0:ff:7b:90:a6:13:ea:1e: f9:fb:be:f2:0f:3e:ce:18:02:32:46:56:54:31:90: c6:76:3e:ad:18:32:50:01:1c:eb:bc:f3:2c:de:5e: 7e:9f:1b:df:55:b4:f2:73:04:76:57:49:34:00:f8: 65:9d:e4:70:31:d1:58:e2:93:6b:c6:78:f1:00:54: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A6:A3:CE:C6:42:F3:56:69:36:55:BE:4F:44:BA:12:FE:5F:28:FD X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:56:76:ac:8d:a6:90:a6:95:35:4b:4e:1f:67:42:56:2d:f6: 8c:b9:4b:9b:dc:60:ef:4a:0f:03:4e:44:0a:14:f7:00:a4:1d: 3d:d7:2e:fc:f1:88:4c:8b:83:91:0e:66:0c:25:60:ba:8a:76: 5c:80:10:62:da:91:e8:25:ce:df:49:ee:10:8d:51:fb:cc:8d: e9:d4:3c:70:f4:16:43:b0:9a:cc:fb:06:81:8e:84:16:21:8e: c8:d3:c2:40:a3:03:4c:9f:cd:e4:c5:fe:aa:b4:50:fe:d5:0e: 23:1c:4b:ed:c8:82:0e:19:36:ba:70:57:1e:e3:fb:03:28:e0: 71:f8:0f:19:2e:66:e0:27:89:f0:de:2a:06:fe:15:3f:11:bc: 6c:a8:84:1d:0a:39:4e:47:22:1d:a1:49:60:aa:c2:79:fa:1c: 94:e0:e5:cb:57:31:28:94:44:3e:ef:02:12:a9:6c:56:37:46: 2e:44:fe:d2:bb:ae:ad:8f:4c:0c:4e:e1:09:9e:08:ec:3c:5f: af:ed:60:cf:48:07:86:27:ac:d1:2e:ac:c3:05:17:50:c3:69: 41:62:41:35:f8:bb:80:8c:1a:a4:9a:39:06:46:d0:c6:44:25: 8e:f0:3d:e1:0d:96:cd:08:ef:85:ae:6d:0f:6d:c9:4f:d6:39: 08:ca:67:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjYwOTI4MTg1ODE3WhcNMjYxMDA1MTg1ODE3WjAYMRYwFAYD VQQDEw02YWJhYjhjOS01NWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/4l3IYhG59WE/9k+SwFwP29imuKK0BbdFMES1osMkx2fjRNc3/yxwSF550t fq5egD0jk1i2cAM5qYZlCOYb4NsKVmQA7V4Y6Aq0c9ddo4yx8IhxcN8pfvEpiw/F R1tBBddcDkbQt5L6JnqqLuNyQkGDZ/k2JWSAi5bqkfN8cMWdx5+lKWzzIIDYR5hR ORaxCEvGh1+xh/yo5M41iqFwFGUChLnYQIAKFTM5vUDxIJ/MXHK0PzmPGG9O0P97 kKYT6h75+77yDz7OGAIyRlZUMZDGdj6tGDJQARzrvPMs3l5+nxvfVbTycwR2V0k0 APhlneRwMdFY4pNrxnjxAFQkXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGmo87G QvNWaTZVvk9EuhL+Xyj9MB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAclZ2rI2mkKaVNUtOH2dCVi32jLlLm9xg70oPA05EChT3AKQdPdcu/PGITIuD kQ5mDCVguop2XIAQYtqR6CXO30nuEI1R+8yN6dQ8cPQWQ7CazPsGgY6EFiGOyNPC QKMDTJ/N5MX+qrRQ/tUOIxxL7ciCDhk2unBXHuP7AyjgcfgPGS5m4CeJ8N4qBv4V PxG8bKiEHQo5TkciHaFJYKrCefoclODly1cxKJREPu8CEqlsVjdGLkT+0ruurY9M DE7hCZ4I7Dxfr+1gz0gHhies0S6swwUXUMNpQWJBNfi7gIwapJo5BkbQxkQljvA9 4Q2WzQjvha5tD23JT9Y5CMpnvw== -----END CERTIFICATE-----Generated at Mon Sep 28 22:55:07 2026 by rpki-client