$ rpki-client -vvvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft File: w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json) Hash identifier: J3FN0pSFlHIsz1+PkW4H4GDTHujFjcqC8LdOGR2m5jk= Subject key identifier: 9E:75:B3:BF:76:05:3E:94:2B:8F:D2:DF:97:A7:A4:5C:F0:BD:D8:AC Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F Certificate issuer: /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft Manifest number: 9A Signing time: Sun 15 Nov 2026 07:38:03 +0000 Manifest this update: Sun 15 Nov 2026 07:38:03 +0000 Manifest next update: Sun 22 Nov 2026 07:38:03 +0000 Files and hashes: 1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: hnsU7CbnkXE0C9+qee2pGVMXyactme1ogdsTWL/4Mx8=) 2: 5147C064FFE611F0819299B6756F56BC.roa (hash: PbQ4AYnQxtghraD/LEsa/Ll3mQLAruMXQgHBWCuOIN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F Validity Not Before: Nov 15 07:38:03 2026 GMT Not After : Nov 22 07:38:03 2026 GMT Subject: CN=6af9615b-5ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:36:03:72:6a:32:1d:3a:cf:e7:41:b5:aa: 05:48:2a:6b:9e:bc:88:50:cb:a9:24:36:40:19:af: 04:a9:fd:22:05:f5:48:b1:d5:5f:d3:46:c6:3e:57: 8a:ff:e0:b9:74:32:27:1c:65:a5:54:8e:74:01:e4: 14:29:67:78:1d:b1:7c:a4:e0:33:f7:c9:1b:ec:dc: 88:8f:46:92:36:5c:59:7b:38:5e:ed:87:d9:c4:fd: 89:b1:ab:52:af:8c:dd:d1:84:3b:6e:32:4c:ea:f5: 1f:c7:c1:29:5c:15:bb:33:89:8b:0c:5a:cb:cc:28: c5:70:6f:3b:23:f4:d0:f7:b1:44:e9:69:f3:73:b8: 27:c9:72:d6:4b:43:8d:d4:0e:7d:78:d3:6d:1b:ea: b4:f5:7d:0c:0d:b7:e8:1c:8d:4d:24:f5:0c:67:9d: d9:a8:07:f6:fd:ac:b7:d5:f1:5e:e5:54:87:84:35: af:2b:03:89:42:9b:fc:ca:62:bc:64:b5:f0:4d:d5: e1:a3:30:9e:59:07:10:14:b9:23:0c:bb:f0:5e:76: 85:7b:db:17:a4:58:46:cd:96:60:0a:74:ac:0f:43: d8:6d:f1:6c:f2:c8:a0:50:7d:87:62:b9:ce:59:3c: 83:72:f8:22:6d:3f:61:52:64:83:9f:aa:6f:f2:ca: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:B3:BF:76:05:3E:94:2B:8F:D2:DF:97:A7:A4:5C:F0:BD:D8:AC X509v3 Authority Key Identifier: keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d8:fd:db:a0:76:93:d9:6e:a0:9a:ac:3a:ab:1b:e1:0a:cb: ae:ce:e5:60:9b:1e:95:a2:e7:b4:5f:4e:14:c0:5d:f0:1a:9f: 3d:0f:f5:ab:6a:69:50:7a:ab:08:ae:be:6e:f4:ce:96:ca:37: 0d:84:a7:eb:6b:e8:68:2a:74:3e:b6:54:7d:07:88:db:20:29: e7:b6:c6:52:fd:3e:fe:55:59:d4:80:6f:8c:fd:bd:e4:f2:8b: 86:ee:7a:21:24:26:d8:7c:1a:82:34:b7:09:f5:40:2d:6f:63: 25:77:05:52:f0:d8:15:44:1d:79:1a:bc:81:43:5f:56:a7:1a: 3d:2f:2d:67:e6:1b:0e:f4:88:71:7d:4f:2d:61:0e:ae:00:73: 26:3e:79:c4:97:05:97:8d:29:31:f3:4a:e4:ac:16:bc:3a:4f: 65:6d:b0:fb:74:c5:7e:b3:38:73:8f:1f:47:db:c2:21:50:6f: 5a:95:ec:77:65:7b:05:61:ec:89:c1:28:c3:fd:3d:b3:8a:52: 59:ff:ad:b0:78:c3:b8:cd:df:61:7d:7d:60:d4:e0:67:c2:ef: 65:77:b6:6b:ba:4b:a9:99:6b:21:70:f7:86:30:8d:9d:88:dd: c7:1e:78:79:24:c6:59:53:e8:07:83:77:b4:e2:72:84:8c:72: b6:c4:01:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MEQxMTAvBgNVBAUTKEMzRDBFRTY4OTRDRThGNTZDRjZCMDcwQUIxM0Y5ODE2 OURGRDQxMUYwHhcNMjYxMTE1MDczODAzWhcNMjYxMTIyMDczODAzWjAYMRYwFAYD VQQDEw02YWY5NjE1Yi01ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv02A3JqMh06z+dBtaoFSCprnryIUMupJDZAGa8Eqf0iBfVIsdVf00bGPleK /+C5dDInHGWlVI50AeQUKWd4HbF8pOAz98kb7NyIj0aSNlxZezhe7YfZxP2JsatS r4zd0YQ7bjJM6vUfx8EpXBW7M4mLDFrLzCjFcG87I/TQ97FE6Wnzc7gnyXLWS0ON 1A59eNNtG+q09X0MDbfoHI1NJPUMZ53ZqAf2/ay31fFe5VSHhDWvKwOJQpv8ymK8 ZLXwTdXhozCeWQcQFLkjDLvwXnaFe9sXpFhGzZZgCnSsD0PYbfFs8sigUH2HYrnO WTyDcvgibT9hUmSDn6pv8srzoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ51s792 BT6UK4/S35enpFzwvdisMB8GA1UdIwQYMBaAFMPQ7miUzo9Wz2sHCrE/mBad/UEf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgwRC8xQjA2QzQ0Q0ZE QTExMUYwOThENzQ2QUM1RjZGNTZCQy93OUR1YUpUT2oxYlBhd2NLc1QtWUZwMzlR UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5RHVhSlRPajFiUGF3Y0tzVC1ZRnAzOVFSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgwRC8xQjA2QzQ0Q0ZEQTExMUYwOThENzQ2QUM1RjZGNTZCQy93OUR1YUpUT2ox YlBhd2NLc1QtWUZwMzlRUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqtj926B2k9luoJqsOqsb4QrLrs7lYJselaLntF9OFMBd8BqfPQ/1q2ppUHqr CK6+bvTOlso3DYSn62voaCp0PrZUfQeI2yAp57bGUv0+/lVZ1IBvjP295PKLhu56 ISQm2HwagjS3CfVALW9jJXcFUvDYFUQdeRq8gUNfVqcaPS8tZ+YbDvSIcX1PLWEO rgBzJj55xJcFl40pMfNK5KwWvDpPZW2w+3TFfrM4c48fR9vCIVBvWpXsd2V7BWHs icEow/09s4pSWf+tsHjDuM3fYX19YNTgZ8LvZXe2a7pLqZlrIXD3hjCNnYjdxx54 eSTGWVPoB4N3tOJyhIxytsQBHg== -----END CERTIFICATE-----Generated at Sun Nov 15 17:38:23 2026 by rpki-client