$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: KDIpD137zpOdlzC4+VBYzaM65202j3qZz692Ky3TdUE= Subject key identifier: 5B:B4:F8:60:9A:7B:0D:A7:49:CF:7F:B8:41:40:4E:B2:31:2E:2A:94 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 01E4 Signing time: Fri 13 Nov 2026 03:41:28 +0000 Manifest this update: Fri 13 Nov 2026 03:41:27 +0000 Manifest next update: Fri 20 Nov 2026 03:41:27 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: PClNHeEVVnb7d1I2v+2NML1SXHOLpAjbZeWbtzGWesU=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 03:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Nov 13 03:41:27 2026 GMT Not After : Nov 20 03:41:27 2026 GMT Subject: CN=6af686e7-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:a2:51:a5:60:66:49:40:76:30:ba:79:e9: f0:c4:d6:f5:81:e0:03:f6:c4:fc:bb:d3:92:85:10: 4a:1f:57:7e:b4:a3:5b:0c:ea:b8:4e:e7:43:89:e0: 46:67:0a:c5:72:e3:40:1c:dd:45:fa:f3:18:2c:da: cd:05:c2:69:b7:6e:b2:bf:45:40:d8:a0:70:8b:0c: 48:3e:ce:91:67:14:50:f8:f0:63:3e:b7:bf:3a:e3: 2a:c5:60:e4:31:52:3d:ff:66:f8:64:dc:cb:c6:4a: f6:0b:20:6b:d4:91:06:67:27:ea:92:c5:33:5f:17: 36:59:c5:4d:f3:85:bb:1c:55:eb:e0:48:f4:ba:c5: 12:71:8f:9e:56:d3:c6:04:9c:7f:70:3f:2a:f8:5b: 75:ca:79:88:c7:aa:85:6c:26:ce:4c:a5:8f:77:b6: 22:ea:ed:1a:e0:0e:52:78:e6:0e:f0:01:1e:94:7f: a6:63:f4:af:6c:f0:7d:a2:44:ef:3d:42:02:10:35: 57:38:32:f0:67:a6:bd:c7:75:b0:26:7e:4a:dc:7d: 45:59:70:05:01:1a:aa:81:e8:b7:2a:da:d4:ac:72: a5:37:c5:cf:57:55:f6:d7:07:3b:ee:c6:f1:c2:ee: 34:88:0b:77:41:e6:60:62:41:93:99:eb:2a:a1:4d: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:F8:60:9A:7B:0D:A7:49:CF:7F:B8:41:40:4E:B2:31:2E:2A:94 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:05:50:e8:6a:c5:91:4a:66:23:73:09:2c:d8:e7:a0:d3: 8b:98:29:41:a1:c9:04:c4:87:e1:b9:7a:1f:f0:54:e2:e5:71: bd:b4:21:5d:a2:c4:4f:db:de:08:96:ae:2e:f1:4c:33:56:bc: 04:f6:ca:fc:c6:9c:4e:f2:97:1c:6e:f6:2a:bd:0c:a5:8f:44: 1c:ed:2c:3a:0a:eb:d9:81:21:44:40:f3:1a:18:3d:8f:73:85: 46:32:d2:be:57:6b:10:43:c6:f7:6d:98:50:db:5b:f0:4d:a1: 99:e0:86:1c:34:04:53:88:79:1f:b9:a7:88:d1:3d:ff:6f:e7: 31:f8:dc:1e:77:a3:52:89:6d:11:7c:e8:ef:98:e8:bf:14:06: bf:dc:74:3c:3f:51:42:d7:b2:a5:57:15:ad:ff:18:6b:c3:7f: d6:24:a5:06:38:fb:8b:c9:3b:f3:fe:12:2b:8a:00:b6:c1:ef: e0:7c:58:51:44:55:ec:1e:69:e1:a2:c6:03:31:fb:9f:a0:f4: 70:5d:27:59:25:da:37:fa:b5:00:fb:9b:17:60:87:4d:3f:ae: b5:d7:19:5c:34:e4:d9:b2:07:77:a3:d7:6e:ec:69:86:b6:07: b1:91:80:82:3f:8a:8f:90:05:cf:76:12:16:dc:29:4f:3f:ad: a7:b5:c2:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYxMTEzMDM0MTI3WhcNMjYxMTIwMDM0MTI3WjAYMRYwFAYD VQQDEw02YWY2ODZlNy03YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0aiUaVgZklAdjC6eenwxNb1geAD9sT8u9OShRBKH1d+tKNbDOq4TudDieBG ZwrFcuNAHN1F+vMYLNrNBcJpt26yv0VA2KBwiwxIPs6RZxRQ+PBjPre/OuMqxWDk MVI9/2b4ZNzLxkr2CyBr1JEGZyfqksUzXxc2WcVN84W7HFXr4Ej0usUScY+eVtPG BJx/cD8q+Ft1ynmIx6qFbCbOTKWPd7Yi6u0a4A5SeOYO8AEelH+mY/SvbPB9okTv PUICEDVXODLwZ6a9x3WwJn5K3H1FWXAFARqqgei3KtrUrHKlN8XPV1X21wc77sbx wu40iAt3QeZgYkGTmesqoU14TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu0+GCa ew2nSc9/uEFATrIxLiqUMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGwoFUOhqxZFKZiNzCSzY56DTi5gpQaHJBMSH4bl6H/BU4uVxvbQhXaLET9ve CJauLvFMM1a8BPbK/MacTvKXHG72Kr0MpY9EHO0sOgrr2YEhREDzGhg9j3OFRjLS vldrEEPG922YUNtb8E2hmeCGHDQEU4h5H7mniNE9/2/nMfjcHnejUoltEXzo75jo vxQGv9x0PD9RQteypVcVrf8Ya8N/1iSlBjj7i8k78/4SK4oAtsHv4HxYUURV7B5p 4aLGAzH7n6D0cF0nWSXaN/q1APubF2CHTT+utdcZXDTk2bIHd6PXbuxphrYHsZGA gj+Kj5AFz3YSFtwpTz+tp7XCEg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:24:49 2026 by rpki-client