$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft File: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft (raw, json) Hash identifier: xQ2FnyrgmIcAAiB8E47l/GV95l3DGph7Mrclqn/nLvQ= Subject key identifier: 0E:8E:45:8D:FF:E0:DF:F8:AC:17:1D:08:CB:39:26:9C:96:97:F6:7B Authority key identifier: CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 Certificate issuer: /CN=A9124C06/serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft Manifest number: 30 Signing time: Sun 15 Nov 2026 08:56:59 +0000 Manifest this update: Sun 15 Nov 2026 08:56:58 +0000 Manifest next update: Sun 22 Nov 2026 08:56:58 +0000 Files and hashes: 1: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl (hash: uJdTZ53AAeSPIm9YkzSoTYYHVelsRn5ABzmujdSJlHk=) 2: EF2CC9E0A29911F1827177C63211F970.roa (hash: HJA/q04RDyl2JEG0dRoW3kH0vkMNWEvJkvC8X6wdzMQ=) 3: 8597EE8AA4E011F1A0ADAD456711F970.roa (hash: DV23XeE7JQliptVufUxF5lM38uYKhAPS5yKJOSyijiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124C06, serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Validity Not Before: Nov 15 08:56:58 2026 GMT Not After : Nov 22 08:56:58 2026 GMT Subject: CN=6af973da-3cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:0f:23:e1:9f:d0:ac:6c:01:c7:db:75:fd: 12:a1:b8:e0:30:9d:3a:5c:2b:8d:29:5a:0c:95:1e: 04:d0:71:34:f7:ed:e0:07:1f:82:42:f0:2b:1f:77: 73:86:b6:7b:eb:33:bc:f6:7c:a4:94:f2:75:7f:b2: 4a:a2:ae:f9:55:85:31:db:84:8d:0b:0f:3a:08:44: ee:0d:4f:f5:66:04:3a:bb:99:f7:b2:c1:f3:25:13: 27:e4:3c:40:63:76:a5:9b:53:25:b0:9a:b5:32:38: ff:9c:37:74:72:98:a5:b8:99:8c:f7:eb:c2:49:7d: 3c:b7:2b:37:0e:7a:c0:49:6d:14:cd:ec:d9:9d:02: b4:01:47:18:07:90:1b:a4:35:58:56:c3:ed:04:36: 0c:c0:e3:02:16:4d:5f:08:a4:04:a1:aa:f7:58:61: 72:2d:18:32:f5:16:9d:2a:f1:2d:eb:0f:af:45:83: b2:c9:45:33:13:4a:8e:29:e2:c9:f9:aa:ef:34:43: e2:98:af:40:11:ce:ef:29:b3:67:47:8e:78:ba:03: 98:62:23:fa:fe:4b:ab:f2:de:29:49:bc:89:e6:23: e4:54:b6:a9:5e:ab:cd:cd:ec:88:01:f7:b2:a9:82: e4:b7:3a:7f:7e:fb:43:f8:45:45:ee:c6:cc:44:ad: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:45:8D:FF:E0:DF:F8:AC:17:1D:08:CB:39:26:9C:96:97:F6:7B X509v3 Authority Key Identifier: keyid:CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:30:07:df:2e:56:69:dd:a5:a6:f8:72:57:bc:e4:45:e0:b7: dd:dd:81:57:9e:b7:13:59:47:6d:b1:b3:1b:08:5d:11:92:da: 7a:e7:61:31:a4:dd:d6:12:f4:58:83:99:8c:97:ea:bd:97:62: 25:f0:f7:e4:0f:f0:c5:26:0e:34:57:5a:df:56:a0:58:55:53: 68:e1:33:5e:ac:2c:e6:1d:42:49:e0:c2:cb:34:7b:62:4b:d5: 6d:0b:79:67:ad:68:0d:cb:de:98:e9:a2:9a:0c:96:5a:cb:2b: 05:35:88:36:dd:75:b8:4a:45:db:18:d2:d0:9a:3c:28:b7:e5: 4c:02:e6:fb:02:82:48:0f:52:a0:9b:3e:a9:a5:87:45:c9:dd: 8d:42:82:34:e7:95:ad:d9:9f:d9:2a:66:96:26:92:8e:27:ff: cf:28:8a:2e:cf:55:cf:64:36:c5:4f:5c:ce:dc:f2:7d:d2:be: 62:80:d9:c7:75:9d:63:e4:bf:fe:d3:45:43:47:83:df:87:da: 9c:f4:52:4e:59:b9:68:24:ff:ed:5f:7e:10:85:f4:9c:d2:1c: 34:dc:60:08:dd:81:1a:ca:3a:3a:30:a9:6e:9b:e5:67:52:41: 6a:6d:c2:19:62:00:2a:e1:97:52:7e:b9:05:48:f2:6a:76:a7: 5f:02:e1:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEMwNjExMC8GA1UEBRMoQ0MyQkNBRUM1NzNERkU1NDI4RUMzMzc1QzZGQTVENzBD NUVBMzU3MDAeFw0yNjExMTUwODU2NThaFw0yNjExMjIwODU2NThaMBgxFjAUBgNV BAMTDTZhZjk3M2RhLTNjZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzxA8j4Z/QrGwBx9t1/RKhuOAwnTpcK40pWgyVHgTQcTT37eAHH4JC8Csfd3OG tnvrM7z2fKSU8nV/skqirvlVhTHbhI0LDzoIRO4NT/VmBDq7mfeywfMlEyfkPEBj dqWbUyWwmrUyOP+cN3RymKW4mYz368JJfTy3KzcOesBJbRTN7NmdArQBRxgHkBuk NVhWw+0ENgzA4wIWTV8IpAShqvdYYXItGDL1Fp0q8S3rD69Fg7LJRTMTSo4p4sn5 qu80Q+KYr0ARzu8ps2dHjni6A5hiI/r+S6vy3ilJvInmI+RUtqleq83N7IgB97Kp guS3On9++0P4RUXuxsxErWozAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDo5Fjf/g 3/isFx0IyzkmnJaX9nswHwYDVR0jBBgwFoAUzCvK7Fc9/lQo7DN1xvpdcMXqNXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QzA2LzcxRkNDNjI4QTFD QzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xRbzdETjF4dnBkY01YcU5Y QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekN2SzdGYzlfbFFvN0ROMXh2cGRjTVhxTlhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QzA2LzcxRkNDNjI4QTFDQzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xR bzdETjF4dnBkY01YcU5YQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbMAffLlZp3aWm+HJXvORF4Lfd3YFXnrcTWUdtsbMbCF0Rktp652ExpN3WEvRY g5mMl+q9l2Il8PfkD/DFJg40V1rfVqBYVVNo4TNerCzmHUJJ4MLLNHtiS9VtC3ln rWgNy96Y6aKaDJZayysFNYg23XW4SkXbGNLQmjwot+VMAub7AoJID1Kgmz6ppYdF yd2NQoI055Wt2Z/ZKmaWJpKOJ//PKIouz1XPZDbFT1zO3PJ90r5igNnHdZ1j5L/+ 00VDR4Pfh9qc9FJOWbloJP/tX34QhfSc0hw03GAI3YEayjo6MKlum+VnUkFqbcIZ YgAq4ZdSfrkFSPJqdqdfAuHZ -----END CERTIFICATE-----Generated at Sun Nov 15 20:38:54 2026 by rpki-client