$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: d9XPDL+7B4gTvU6hcr2hyHMTpLqXE4GQ+Pz5XytnVdE= Subject key identifier: 81:36:F9:EF:C7:77:69:B8:0F:2D:27:77:01:60:96:4D:74:C2:96:99 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 08E5 Signing time: Sat 14 Nov 2026 20:15:08 +0000 Manifest this update: Sat 14 Nov 2026 20:15:08 +0000 Manifest next update: Sat 21 Nov 2026 20:15:08 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: 3E5gmQNZFxhS6LxvQK3h2gAjE2JQAcWDvHN0ovFRuCU=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Nov 14 20:15:08 2026 GMT Not After : Nov 21 20:15:08 2026 GMT Subject: CN=6af8c14c-fa3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:bd:f2:85:a0:a3:af:ac:f2:2e:c4:79:62: 85:6f:c2:ad:54:5a:3e:aa:dc:c1:ea:f9:d4:70:14: 08:97:82:82:e7:e0:2b:8c:8b:d8:3e:d1:aa:22:73: ee:e7:3c:22:77:5a:a6:1f:45:8e:27:91:86:59:f5: 1b:5f:75:50:fa:4d:72:f6:23:fb:f3:f8:d1:76:a4: 19:4f:0e:c4:a4:9c:a6:30:6f:b7:40:16:51:1b:a3: 3a:2c:e3:99:43:7e:38:16:e0:92:f3:fe:2c:09:40: 23:e5:b9:c8:5e:aa:77:ed:2e:be:2e:65:09:44:e6: de:26:e5:9c:0a:39:f9:96:f5:4f:f5:23:d0:45:c8: 29:82:c7:55:61:a3:78:ed:5c:ad:22:8f:ff:26:2e: fb:a7:43:32:bf:0b:f2:ab:8d:f5:94:a7:f5:96:23: aa:ba:af:1e:61:a4:96:81:9f:c2:02:a4:f9:ab:3f: 3b:c6:ad:f9:bd:7c:cc:08:9a:7f:81:b9:9f:75:53: e7:b0:20:fd:6e:e6:c7:6a:2d:f9:0d:c1:2b:b5:2c: 56:2f:20:ec:51:30:21:82:3f:ff:bb:03:5e:63:46: e7:b4:de:81:77:78:22:b8:e0:76:06:d7:7c:0b:34: a1:34:af:02:a2:8e:df:3e:ca:28:d0:f4:f2:43:49: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:F9:EF:C7:77:69:B8:0F:2D:27:77:01:60:96:4D:74:C2:96:99 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:4b:2b:aa:82:15:20:06:0c:2e:3a:ad:23:44:7b:5e:c0:d4: 15:11:81:eb:0d:3a:bb:8c:13:d7:9e:4f:1b:c8:05:08:ba:ab: 51:5c:0a:01:45:33:8e:00:32:2c:fd:c6:41:e1:f4:8a:f7:6c: 76:ac:9e:d7:c9:1f:89:74:a9:20:e6:e0:28:cd:29:86:e2:b6: d4:ae:1e:00:b6:40:d9:c0:53:98:ce:08:af:3a:8f:ac:42:aa: ab:81:8b:3e:61:dc:f9:8e:72:7a:ac:09:9a:8a:36:3f:fb:0e: cb:28:69:74:77:f8:cb:24:f4:25:ff:70:5e:40:df:a5:a6:5f: 7f:b2:24:87:61:81:d9:8a:35:72:45:70:83:b1:0a:61:a0:0d: 1a:b3:56:97:6c:2f:14:42:0e:60:9c:65:64:31:b7:1f:8b:8d: c8:bb:ab:90:11:ef:57:28:2b:5c:dd:ef:cb:1a:ab:d5:f8:2b: 1e:a6:22:d0:2e:94:d5:ff:59:50:68:98:dc:d3:9f:f9:7f:bb: a2:6c:ac:aa:2c:d9:e7:78:a9:80:e0:ce:87:c1:5d:da:39:ba: 84:05:d3:f9:81:fd:40:91:50:87:55:bc:ea:37:73:1a:b0:8b: 10:e3:a7:26:43:68:9a:f7:44:9d:60:69:87:60:bd:20:75:41: 99:14:12:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjYxMTE0MjAxNTA4WhcNMjYxMTIxMjAxNTA4WjAYMRYwFAYD VQQDEw02YWY4YzE0Yy1mYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWC98oWgo6+s8i7EeWKFb8KtVFo+qtzB6vnUcBQIl4KC5+ArjIvYPtGqInPu 5zwid1qmH0WOJ5GGWfUbX3VQ+k1y9iP78/jRdqQZTw7EpJymMG+3QBZRG6M6LOOZ Q344FuCS8/4sCUAj5bnIXqp37S6+LmUJRObeJuWcCjn5lvVP9SPQRcgpgsdVYaN4 7VytIo//Ji77p0Myvwvyq431lKf1liOquq8eYaSWgZ/CAqT5qz87xq35vXzMCJp/ gbmfdVPnsCD9bubHai35DcErtSxWLyDsUTAhgj//uwNeY0bntN6Bd3giuOB2Btd8 CzShNK8Coo7fPsoo0PTyQ0kBjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE2+e/H d2m4Dy0ndwFglk10wpaZMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsEsrqoIVIAYMLjqtI0R7XsDUFRGB6w06u4wT155PG8gFCLqrUVwKAUUzjgAy LP3GQeH0ivdsdqye18kfiXSpIObgKM0phuK21K4eALZA2cBTmM4IrzqPrEKqq4GL PmHc+Y5yeqwJmoo2P/sOyyhpdHf4yyT0Jf9wXkDfpaZff7Ikh2GB2Yo1ckVwg7EK YaANGrNWl2wvFEIOYJxlZDG3H4uNyLurkBHvVygrXN3vyxqr1fgrHqYi0C6U1f9Z UGiY3NOf+X+7omysqizZ53ipgODOh8Fd2jm6hAXT+YH9QJFQh1W86jdzGrCLEOOn JkNomvdEnWBph2C9IHVBmRQSiA== -----END CERTIFICATE-----Generated at Sun Nov 15 21:28:24 2026 by rpki-client