$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: sspvfvl/lttp3iPTynmC5oDT5Ep+jKtm7OtObUaV1hY= Subject key identifier: C5:24:C9:37:24:D4:34:B1:2A:F5:58:9D:F9:04:1E:74:DC:6D:51:F0 Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 05D2 Signing time: Sat 14 Nov 2026 22:52:41 +0000 Manifest this update: Sat 14 Nov 2026 22:52:41 +0000 Manifest next update: Sat 21 Nov 2026 22:52:41 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: XW3vleHNR2XwVPA6+SGCcwu1/6KSS6ZmNmk7oKFTrSM=) 2: 160CE08CB7C011F1B5CD72D65E11F970.roa (hash: /F54hueLFXXw1X3JstcORnLZqit7wcqFZL2ddPkBo5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Nov 14 22:52:41 2026 GMT Not After : Nov 21 22:52:41 2026 GMT Subject: CN=6af8e639-abec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:88:65:1b:d9:ae:d6:96:49:a6:fa:41:a4: 6d:da:ca:09:b3:31:85:43:33:ec:58:9b:34:cf:4a: e0:b6:d6:51:a7:31:11:4d:80:42:6c:7f:b1:d0:4e: 3a:f1:6e:f5:c2:51:e9:02:5d:0c:58:4d:7b:2c:ad: 39:9e:55:f7:52:66:b5:a9:0c:a8:ac:35:6e:d6:d6: d5:d7:49:94:6f:bf:7e:45:5c:1f:95:a3:66:6c:d6: 01:a1:c4:cb:62:f4:41:24:10:75:37:e6:14:04:ec: 17:92:d0:04:3d:9c:63:93:42:92:8d:46:7e:1c:de: 09:30:29:b5:52:7d:7b:d4:8c:53:e7:dd:5f:f9:55: 88:d3:8e:b4:6c:8f:0b:3b:af:4b:8f:47:de:e7:e7: 3d:40:e7:9d:12:c4:af:a8:d0:fb:08:e1:18:ea:45: 8f:77:90:41:cc:c5:2f:00:de:5f:9a:6b:a4:3e:31: be:a3:ca:eb:5a:40:aa:09:8c:9d:d2:9c:78:4c:1f: 50:2c:fb:7a:fa:d4:30:26:1f:dd:7e:95:55:76:0e: 19:a3:6b:78:8f:e4:c2:68:e6:4d:53:b7:76:ce:aa: df:f2:30:9e:91:10:38:fe:d3:9a:97:85:41:ed:a9: 93:53:f5:30:72:43:30:ad:ea:f2:16:6f:0a:60:8f: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:24:C9:37:24:D4:34:B1:2A:F5:58:9D:F9:04:1E:74:DC:6D:51:F0 X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:55:39:b3:a4:17:8a:95:0d:fb:f9:c6:08:b3:41:61:62:d5: c1:8b:02:ba:d6:66:2c:f2:19:00:fc:8d:22:43:f6:95:88:25: 6b:2a:eb:8d:fc:a6:16:98:c4:1a:e9:e1:12:56:38:84:d5:78: b8:9e:43:e3:c4:fa:1d:7f:27:34:04:7c:bd:f6:0f:dd:9f:2e: 95:69:28:7f:cb:7b:16:99:15:a2:ee:22:eb:46:0b:cf:9d:7d: 09:17:11:91:46:a8:c8:e3:e7:b2:4f:79:6a:5d:1a:62:4a:7b: e9:33:39:90:9a:56:43:62:07:6b:65:63:87:ea:03:9b:ad:8a: e9:ea:bf:0c:1d:45:50:84:41:51:e9:92:e3:05:85:b9:d6:bc: 7a:bc:ef:ed:a8:a1:0d:4f:2d:12:cf:b7:ad:45:00:e2:61:c7: 71:1a:9d:26:25:46:09:4b:41:ce:fc:88:8e:49:63:21:fc:73: 30:68:19:da:57:24:12:28:56:7c:45:9f:40:8b:72:8c:85:ab: ad:cb:45:76:bc:a1:3c:2e:0b:0c:93:d7:31:be:31:8f:98:d3: 7a:2b:72:14:67:be:bf:a9:2f:45:eb:40:ca:ae:64:2c:24:57: 46:02:11:22:09:92:b6:68:5a:f1:2b:b8:15:85:62:53:e9:f5: b2:1f:fe:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjYxMTE0MjI1MjQxWhcNMjYxMTIxMjI1MjQxWjAYMRYwFAYD VQQDEw02YWY4ZTYzOS1hYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypiIZRvZrtaWSab6QaRt2soJszGFQzPsWJs0z0rgttZRpzERTYBCbH+x0E46 8W71wlHpAl0MWE17LK05nlX3Uma1qQyorDVu1tbV10mUb79+RVwflaNmbNYBocTL YvRBJBB1N+YUBOwXktAEPZxjk0KSjUZ+HN4JMCm1Un171IxT591f+VWI0460bI8L O69Lj0fe5+c9QOedEsSvqND7COEY6kWPd5BBzMUvAN5fmmukPjG+o8rrWkCqCYyd 0px4TB9QLPt6+tQwJh/dfpVVdg4Zo2t4j+TCaOZNU7d2zqrf8jCekRA4/tOal4VB 7amTU/UwckMwreryFm8KYI8XeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUkyTck 1DSxKvVYnfkEHnTcbVHwMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV1U5s6QXipUN+/nGCLNBYWLVwYsCutZmLPIZAPyNIkP2lYglayrrjfymFpjE GunhElY4hNV4uJ5D48T6HX8nNAR8vfYP3Z8ulWkof8t7FpkVou4i60YLz519CRcR kUaoyOPnsk95al0aYkp76TM5kJpWQ2IHa2Vjh+oDm62K6eq/DB1FUIRBUemS4wWF uda8erzv7aihDU8tEs+3rUUA4mHHcRqdJiVGCUtBzvyIjkljIfxzMGgZ2lckEihW fEWfQItyjIWrrctFdryhPC4LDJPXMb4xj5jTeityFGe+v6kvRetAyq5kLCRXRgIR IgmStmha8Su4FYViU+n1sh/+hQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:34:58 2026 by rpki-client