$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: xm0+bAkfK0EcIEPcwgRRqRPQA59GaJcrhWITOnq/KG0= Subject key identifier: 7D:97:ED:DE:17:67:2B:D3:7E:5C:77:B1:8A:83:F6:ED:82:C2:04:D6 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 08A6 Signing time: Sat 14 Nov 2026 20:35:23 +0000 Manifest this update: Sat 14 Nov 2026 20:35:22 +0000 Manifest next update: Sat 21 Nov 2026 20:35:22 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: GAM8G3Xyz0jU+/7sEQWLLNL4H4S8re6UBd0bgg6lUGA=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Nov 14 20:35:22 2026 GMT Not After : Nov 21 20:35:22 2026 GMT Subject: CN=6af8c60b-c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:5f:30:43:9f:85:8e:fb:3e:c0:a1:75:c1: bc:59:47:d5:bb:a7:60:41:79:06:d1:f4:9c:cd:97: a1:f0:b6:5e:0c:75:61:8f:14:ce:b6:6d:d3:4d:9f: de:a8:e9:1c:e1:db:4a:61:26:0b:e1:73:f3:fd:03: 0d:2f:a4:b6:f3:e4:d1:21:d5:6c:f2:a0:a3:95:0d: 30:4f:b3:74:96:42:ec:67:e2:e1:4f:0f:d3:b6:dc: e2:94:26:be:70:b4:19:23:0d:76:a2:37:f9:e9:34: 63:8d:42:0a:77:e9:4b:ce:78:e8:b0:37:a2:1d:4f: c0:0b:50:3e:1b:2f:4f:98:cc:b2:45:28:74:67:9e: 4e:92:81:de:3b:21:5a:28:19:c5:28:64:54:e9:5c: 2b:c6:b7:8a:30:04:53:ab:f1:9f:d5:b1:b1:f5:bc: c4:2e:37:0a:87:47:c9:65:40:82:d3:f1:b1:4a:30: e9:c6:df:52:9a:08:d4:35:50:18:4e:9d:e4:4a:1c: c8:55:32:bb:10:76:fb:81:8c:3b:15:ae:27:af:b1: f2:5c:ff:2c:59:55:15:6a:e1:f9:91:73:1f:63:e0: b0:6c:06:4a:e9:21:99:e1:7a:9d:46:be:8a:2c:fc: af:e2:cc:a5:56:d9:3c:34:c4:f8:ec:f7:2e:da:b7: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:ED:DE:17:67:2B:D3:7E:5C:77:B1:8A:83:F6:ED:82:C2:04:D6 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4b:10:32:ee:06:22:f4:2e:8d:dc:df:06:9e:3c:f5:cf:30: b3:01:83:4d:8e:c5:ae:4b:e5:02:4f:85:12:25:94:76:a3:c0: cf:54:39:64:bb:76:e9:f6:f9:7e:ba:31:ee:65:ab:b8:a7:f2: 8e:bc:62:33:f8:2d:29:d0:32:e4:d0:c9:bb:f8:69:11:4e:67: ff:77:9d:ca:47:2f:e4:fe:3f:ac:36:31:98:01:a7:b3:60:f3: 3d:fc:b6:dd:6d:6e:9c:03:68:ce:af:85:20:21:0a:55:ae:66: b2:5a:8c:26:28:11:f6:c2:80:c0:ae:9f:0f:d5:07:4c:5e:8f: 03:66:a2:2d:78:ee:04:59:55:bd:41:e7:49:55:b1:01:92:9f: 24:5a:70:ef:27:8e:04:d4:dd:81:97:05:09:a5:c4:1a:2f:b0: 2f:01:1b:e4:7a:28:1a:53:ee:b9:82:ff:63:23:53:e6:e6:65: 38:61:05:62:cb:a2:ea:88:a2:ff:96:37:b7:d1:58:d6:cf:5f: 09:5b:bb:1e:a8:89:65:ad:c5:f7:7e:99:fd:80:3d:16:40:a7: fd:86:4f:c1:d4:45:4b:e2:55:2e:95:28:f6:d6:fa:74:3e:ff: b4:69:0b:e9:a3:8f:9f:be:d2:cd:14:8d:66:81:7f:fe:dc:da: ea:cf:72:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjYxMTE0MjAzNTIyWhcNMjYxMTIxMjAzNTIyWjAYMRYwFAYD VQQDEw02YWY4YzYwYi1jMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxhfMEOfhY77PsChdcG8WUfVu6dgQXkG0fSczZeh8LZeDHVhjxTOtm3TTZ/e qOkc4dtKYSYL4XPz/QMNL6S28+TRIdVs8qCjlQ0wT7N0lkLsZ+LhTw/TttzilCa+ cLQZIw12ojf56TRjjUIKd+lLznjosDeiHU/AC1A+Gy9PmMyyRSh0Z55OkoHeOyFa KBnFKGRU6VwrxreKMARTq/Gf1bGx9bzELjcKh0fJZUCC0/GxSjDpxt9SmgjUNVAY Tp3kShzIVTK7EHb7gYw7Fa4nr7HyXP8sWVUVauH5kXMfY+CwbAZK6SGZ4XqdRr6K LPyv4sylVtk8NMT47Pcu2reCWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2X7d4X ZyvTflx3sYqD9u2CwgTWMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0sQMu4GIvQujdzfBp489c8wswGDTY7FrkvlAk+FEiWUdqPAz1Q5ZLt26fb5 frox7mWruKfyjrxiM/gtKdAy5NDJu/hpEU5n/3edykcv5P4/rDYxmAGns2DzPfy2 3W1unANozq+FICEKVa5mslqMJigR9sKAwK6fD9UHTF6PA2aiLXjuBFlVvUHnSVWx AZKfJFpw7yeOBNTdgZcFCaXEGi+wLwEb5HooGlPuuYL/YyNT5uZlOGEFYsui6oii /5Y3t9FY1s9fCVu7HqiJZa3F936Z/YA9FkCn/YZPwdRFS+JVLpUo9tb6dD7/tGkL 6aOPn77SzRSNZoF//tza6s9yYg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:03:11 2026 by rpki-client