$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: RdjSJdM6BmItLcav2YK8bRpdDxcFUPPYGIp/wgjMbjk= Subject key identifier: 45:9A:94:12:23:57:96:DC:EC:CC:80:74:54:80:A2:F1:CE:7E:1A:B8 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 02EF Signing time: Mon 21 Sep 2026 01:00:41 +0000 Manifest this update: Mon 21 Sep 2026 01:00:40 +0000 Manifest next update: Mon 28 Sep 2026 01:00:40 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: nsNFkFtLFKJgnoJnFO/Ntr6d0J12K7A7iDVLvhOuZzU=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Sep 21 01:00:40 2026 GMT Not After : Sep 28 01:00:40 2026 GMT Subject: CN=6ab081b8-9cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:03:4c:5b:a1:b9:23:93:48:fd:c3:96:fa: aa:59:ef:d9:52:69:c9:4b:17:62:0a:51:f5:23:5a: 4d:b4:53:0b:47:36:80:3b:0a:16:90:cd:97:8b:c4: 52:8e:64:e5:13:d6:a3:6a:53:9e:d4:88:50:f2:05: 54:cd:71:b8:99:a8:44:f3:c8:eb:81:8d:dc:22:ca: dc:37:06:9d:4f:db:8d:65:ab:ff:d0:b5:8f:ff:4a: cb:54:b5:80:3d:58:e2:96:68:67:d1:57:ba:51:c7: 87:fd:88:e1:d9:e0:6d:cc:87:a0:98:1a:97:5c:6b: 4d:84:40:cd:ac:f8:e1:38:ad:96:b8:69:bf:79:e9: 0f:1b:bc:56:50:a6:ed:3b:d4:b1:e6:c1:d0:20:ad: 47:b1:77:f3:12:95:a0:ee:d6:e9:28:06:9b:2f:a8: a0:05:35:87:b9:7f:18:d3:d6:ab:79:01:00:e2:72: fd:41:61:ef:27:fb:10:25:fb:e0:3b:9b:37:fc:9a: 4d:ae:5d:e9:b3:aa:96:61:18:e7:c0:14:08:61:36: 8c:04:a5:bc:80:9d:2e:3a:be:9b:99:27:43:42:03: 4c:d6:2b:d4:55:4d:ae:6a:29:ec:58:94:3a:df:da: 61:49:51:68:2c:ec:75:34:19:d9:ea:6d:ac:6e:75: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9A:94:12:23:57:96:DC:EC:CC:80:74:54:80:A2:F1:CE:7E:1A:B8 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ec:13:2f:23:6c:49:6e:d2:bf:ee:ad:33:0c:ab:54:5b:c1: 76:94:0b:ed:b6:2c:a2:fb:45:d4:e1:f8:67:47:cc:73:4d:9a: 64:09:45:08:ff:62:74:e9:35:e6:0e:4c:73:52:a2:8a:c8:b2: 93:e5:31:0b:1e:6d:b9:2e:0d:e0:af:7b:17:4b:6b:c4:78:7f: c3:21:7b:a2:42:4a:0e:a6:1c:28:34:23:a4:b8:81:b4:9e:1d: 57:b2:17:bf:0d:e5:ae:16:13:13:bc:5a:89:48:1a:a3:af:9e: 31:47:c1:fe:16:23:86:e2:55:79:b3:75:bf:ab:e4:4b:4a:6c: 85:e8:1b:79:cf:92:8e:ef:a7:e7:73:bd:ca:15:d4:84:dc:81: af:04:19:2c:c6:72:f9:71:a5:35:43:d2:e1:bd:bf:a5:28:ba: df:90:c5:25:1a:44:54:61:fb:ed:8e:1c:5b:2b:6b:5b:58:d9: f3:23:3e:64:70:64:92:b1:71:55:01:29:3a:d1:5a:9e:a4:2f: a0:0b:30:4e:ec:68:17:6c:86:f6:0c:ca:92:e7:18:c5:54:6b: 59:15:eb:39:6e:0c:04:b7:20:cb:5b:c0:b2:b2:21:94:f8:23: c7:77:1b:af:b5:cc:48:68:94:3e:3c:a3:7e:63:b0:b9:de:da: 88:df:d1:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjYwOTIxMDEwMDQwWhcNMjYwOTI4MDEwMDQwWjAYMRYwFAYD VQQDEw02YWIwODFiOC05Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweQDTFuhuSOTSP3DlvqqWe/ZUmnJSxdiClH1I1pNtFMLRzaAOwoWkM2Xi8RS jmTlE9ajalOe1IhQ8gVUzXG4mahE88jrgY3cIsrcNwadT9uNZav/0LWP/0rLVLWA PVjilmhn0Ve6UceH/Yjh2eBtzIegmBqXXGtNhEDNrPjhOK2WuGm/eekPG7xWUKbt O9Sx5sHQIK1HsXfzEpWg7tbpKAabL6igBTWHuX8Y09areQEA4nL9QWHvJ/sQJfvg O5s3/JpNrl3ps6qWYRjnwBQIYTaMBKW8gJ0uOr6bmSdDQgNM1ivUVU2uainsWJQ6 39phSVFoLOx1NBnZ6m2sbnWmFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWalBIj V5bc7MyAdFSAovHOfhq4MB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABOwTLyNsSW7Sv+6tMwyrVFvBdpQL7bYsovtF1OH4Z0fMc02aZAlFCP9idOk1 5g5Mc1Kiisiyk+UxCx5tuS4N4K97F0trxHh/wyF7okJKDqYcKDQjpLiBtJ4dV7IX vw3lrhYTE7xaiUgao6+eMUfB/hYjhuJVebN1v6vkS0pshegbec+Sju+n53O9yhXU hNyBrwQZLMZy+XGlNUPS4b2/pSi635DFJRpEVGH77Y4cWytrW1jZ8yM+ZHBkkrFx VQEpOtFanqQvoAswTuxoF2yG9gzKkucYxVRrWRXrOW4MBLcgy1vAsrIhlPgjx3cb r7XMSGiUPjyjfmOwud7aiN/RyQ== -----END CERTIFICATE-----Generated at Tue Sep 22 15:11:58 2026 by rpki-client