$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: CJK9D8+9JemDQNJR9eb55odoX3xYQEzbt6SseS+Rfgs= Subject key identifier: E1:8F:4F:74:8A:DC:DC:89:81:96:DE:8D:52:37:67:7B:BF:00:8E:81 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 02F4 Signing time: Sun 15 Nov 2026 01:16:09 +0000 Manifest this update: Sun 15 Nov 2026 01:16:08 +0000 Manifest next update: Sun 22 Nov 2026 01:16:08 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: Bejcsb7GGTUVhaU01tn77glQ872U3ccuOdm0gRKp2Wk=) 2: M8jBNirzp-FPjI2dNrVehbsa11Q.asa (hash: ZDZzGQIxLYumQFcobn7nkzlTWAEhcjsopzajkoxdG2w=) 3: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Nov 15 01:16:08 2026 GMT Not After : Nov 22 01:16:08 2026 GMT Subject: CN=6af907d9-10a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:ec:f6:24:bc:16:14:67:8b:9e:ac:6b:97: fe:f1:47:36:dc:da:70:16:83:5a:ad:5f:d8:51:32: ac:0c:94:91:0c:26:a8:dc:c4:d7:2a:0e:98:1d:3e: 17:82:98:20:7c:a7:ed:05:92:fd:f0:c0:9e:bc:42: 3c:4e:56:c9:93:59:77:14:d0:24:c8:c4:ff:1f:95: e1:0f:1a:7a:bf:57:c2:5c:db:d9:5e:1a:d8:b4:19: 94:73:c8:95:14:17:53:08:27:65:79:c6:91:c5:de: ad:d5:cd:d6:59:e8:8a:79:98:a5:66:e7:76:90:6e: 9f:28:7b:09:b8:c7:65:ec:ed:84:b3:82:1b:a5:1e: 68:ba:12:c8:79:e7:80:58:25:15:6d:5b:23:00:1d: da:67:a3:8c:b7:52:b5:39:3c:a4:1d:d2:28:55:05: 39:00:ac:c2:6a:37:cb:ae:a1:8c:42:f2:ee:ff:38: a7:17:82:84:65:51:42:16:21:c3:0f:eb:97:2d:5c: 8e:4c:33:04:9e:4a:67:51:26:97:64:ea:8b:04:c4: b5:aa:d0:d2:93:9f:85:96:9e:4a:9e:82:5c:5f:e7: 2c:8c:d5:d5:d1:2a:1f:89:09:5c:4e:10:7f:58:cf: 36:f4:d2:a0:86:26:45:23:93:c5:41:d4:17:d2:aa: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:4F:74:8A:DC:DC:89:81:96:DE:8D:52:37:67:7B:BF:00:8E:81 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3f:de:64:bf:00:cb:cd:70:43:c2:ac:26:96:2e:4f:7c:8f: d2:f2:66:03:fa:6c:f7:15:17:9e:73:b1:55:98:7d:e6:ba:13: d4:7e:68:31:58:86:43:2a:69:66:a0:8a:e8:a0:c7:9c:74:d0: 05:0e:49:6f:27:f9:72:c2:9a:a7:52:dc:14:1d:0f:e6:2d:30: cf:7b:85:5f:5f:de:90:b0:4b:1f:b9:90:7e:ed:50:a2:cd:06: 25:f7:ad:54:28:44:92:3a:fa:fc:b8:65:85:53:23:dc:3d:9f: df:74:09:7b:3b:b6:4a:92:cd:6b:eb:1b:03:a5:ef:73:78:22: 51:da:81:1e:84:70:66:35:b8:c8:3b:b9:4d:41:56:09:93:dd: e3:0e:1d:1b:b2:aa:c9:8f:53:d2:04:77:a7:31:db:ba:bf:57: ed:0b:bf:e2:b3:6e:b7:98:13:67:90:55:51:4e:3c:cd:b9:1c: 7c:88:c8:80:d3:84:6f:3e:c5:e4:e1:6a:19:b2:01:c1:42:46: 4e:70:2e:6b:4e:2d:c7:21:b8:01:f0:b1:95:53:0f:34:3f:be: 64:9b:cb:a2:a4:5a:f2:d3:89:fa:4d:d4:bf:1e:62:64:0f:1a: d0:46:4f:f8:fb:be:df:67:72:27:01:f4:91:ba:58:8f:0c:f8: 9a:84:6f:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYxMTE1MDExNjA4WhcNMjYxMTIyMDExNjA4WjAYMRYwFAYD VQQDEw02YWY5MDdkOS0xMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I/s9iS8FhRni56sa5f+8Uc23NpwFoNarV/YUTKsDJSRDCao3MTXKg6YHT4X gpggfKftBZL98MCevEI8TlbJk1l3FNAkyMT/H5XhDxp6v1fCXNvZXhrYtBmUc8iV FBdTCCdlecaRxd6t1c3WWeiKeZilZud2kG6fKHsJuMdl7O2Es4IbpR5ouhLIeeeA WCUVbVsjAB3aZ6OMt1K1OTykHdIoVQU5AKzCajfLrqGMQvLu/zinF4KEZVFCFiHD D+uXLVyOTDMEnkpnUSaXZOqLBMS1qtDSk5+Flp5KnoJcX+csjNXV0SofiQlcThB/ WM829NKghiZFI5PFQdQX0qrScwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGPT3SK 3NyJgZbejVI3Z3u/AI6BMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVD/eZL8Ay81wQ8KsJpYuT3yP0vJmA/ps9xUXnnOxVZh95roT1H5oMViGQypp ZqCK6KDHnHTQBQ5Jbyf5csKap1LcFB0P5i0wz3uFX1/ekLBLH7mQfu1Qos0GJfet VChEkjr6/LhlhVMj3D2f33QJezu2SpLNa+sbA6Xvc3giUdqBHoRwZjW4yDu5TUFW CZPd4w4dG7KqyY9T0gR3pzHbur9X7Qu/4rNut5gTZ5BVUU48zbkcfIjIgNOEbz7F 5OFqGbIBwUJGTnAua04txyG4AfCxlVMPND++ZJvLoqRa8tOJ+k3Uvx5iZA8a0EZP +Pu+32dyJwH0kbpYjwz4moRv2w== -----END CERTIFICATE-----Generated at Sun Nov 15 15:54:35 2026 by rpki-client