$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft File: _xOUBaa6BoyBp0rTX-yUkYJp2OE.mft (raw, json) Hash identifier: AafhV+2fkt8G6ghltk5dooFMbUPUnd0ZhQ0DJZHuKCg= Subject key identifier: 6E:7B:E2:EA:65:8C:2E:65:A8:F6:E2:8C:42:93:7F:9F:BA:ED:71:05 Authority key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1 Certificate issuer: /CN=A9139D67/serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft Manifest number: 39 Signing time: Fri 13 Nov 2026 08:45:32 +0000 Manifest this update: Fri 13 Nov 2026 08:45:32 +0000 Manifest next update: Fri 20 Nov 2026 08:45:32 +0000 Files and hashes: 1: _xOUBaa6BoyBp0rTX-yUkYJp2OE.crl (hash: 2H+QGLsC0R4sph34cUSKPUSOSEkMG9C58V37Y2LtKDs=) 2: FC3ECAC88BC111F190F2EAA86C11F970.roa (hash: 4889GaDsygj/hBcnFh0j5KUrF53rJ0JxKKaFI2ZWHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 08:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1 Validity Not Before: Nov 13 08:45:32 2026 GMT Not After : Nov 20 08:45:32 2026 GMT Subject: CN=6af6ce2c-12c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:28:bc:a3:04:66:24:7e:c7:68:37:9f:2d: 82:73:be:a9:6c:70:a2:78:ec:b7:fe:67:8c:d0:6e: d9:99:05:fe:c9:63:d1:34:5e:84:55:c7:e9:5a:31: 8d:7d:10:8c:e7:de:1b:2d:0a:7d:32:b9:d6:7f:99: 59:09:dd:8c:68:94:aa:49:3f:cd:0e:38:3f:42:56: b8:c9:97:f1:ec:6c:3e:ec:b3:26:2c:b6:06:d0:86: 52:b4:61:ac:ba:22:ee:83:62:c2:d6:1f:67:f7:e5: 20:e6:a4:cd:dc:00:40:b2:43:8a:3e:b7:7a:fd:7b: 43:f6:e5:67:79:04:f5:8f:84:18:23:78:31:67:f0: 2a:09:34:69:25:8c:08:03:91:1a:ae:38:f5:20:9f: 4c:1f:31:c4:cb:3e:4c:fb:8d:3f:72:ea:f4:f2:7b: b1:74:76:1e:71:37:c6:fd:94:98:4d:07:fc:e4:53: bf:d0:1c:2e:13:6e:ec:bb:87:0d:a9:85:71:06:a4: cc:05:c3:4f:0f:19:29:bd:a6:7b:2f:0f:25:63:85: 2c:57:5e:d6:e0:fc:71:a1:cd:93:10:e1:b2:32:22: 85:68:e4:d4:22:1b:24:95:c4:11:9e:5a:d6:be:0f: e3:9f:da:85:ae:8c:0e:e7:1b:dc:8c:21:f8:83:3f: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:E2:EA:65:8C:2E:65:A8:F6:E2:8C:42:93:7F:9F:BA:ED:71:05 X509v3 Authority Key Identifier: keyid:FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:55:6d:20:82:06:f7:a3:61:2e:c5:df:01:e4:02:45:94: e2:e5:15:65:27:f7:7e:60:ed:d6:09:2b:15:91:af:c4:86:33: 30:fb:1e:ac:65:dc:f1:c5:e5:66:50:f7:a2:1e:a5:fb:e2:1d: 30:44:a5:3a:8c:f4:7d:40:17:d6:38:f4:4b:9b:54:7f:77:a1: 2d:3a:00:6f:0f:83:29:7d:24:06:70:54:a6:b7:3f:4b:dc:fb: 2f:7a:52:0c:51:6f:c4:aa:c3:80:2b:aa:1b:88:9a:46:bb:73: aa:a2:9e:ef:d2:4b:9a:e3:5a:c9:ae:96:46:ea:52:b2:a0:22: 65:d6:c1:90:b9:40:30:42:b2:13:af:34:ee:aa:d4:1e:9e:44: 11:33:6e:98:24:7e:cc:5f:6e:f6:9d:6f:30:31:46:ad:ce:54: eb:2a:6e:41:00:af:ef:4a:3b:c6:79:ad:1e:cb:f8:63:47:88: 4a:1e:4d:68:7a:89:10:f0:16:72:90:68:b0:48:51:48:da:78: b5:92:32:43:e5:3a:55:b3:61:f5:0e:48:5e:25:a5:31:9d:e1: f1:64:73:4c:42:d8:6e:6a:31:f1:39:fd:ac:76:c8:8c:ca:46: ae:e4:6e:f9:7f:21:00:c0:12:74:b5:67:e9:35:ad:0b:c6:5b: 4e:ad:88:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUQ2NzExMC8GA1UEBRMoRkYxMzk0MDVBNkJBMDY4QzgxQTc0QUQzNUZFQzk0OTE4 MjY5RDhFMTAeFw0yNjExMTMwODQ1MzJaFw0yNjExMjAwODQ1MzJaMBgxFjAUBgNV BAMTDTZhZjZjZTJjLTEyYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQcyi8owRmJH7HaDefLYJzvqlscKJ47Lf+Z4zQbtmZBf7JY9E0XoRVx+laMY19 EIzn3hstCn0yudZ/mVkJ3YxolKpJP80OOD9CVrjJl/HsbD7ssyYstgbQhlK0Yay6 Iu6DYsLWH2f35SDmpM3cAECyQ4o+t3r9e0P25Wd5BPWPhBgjeDFn8CoJNGkljAgD kRquOPUgn0wfMcTLPkz7jT9y6vTye7F0dh5xN8b9lJhNB/zkU7/QHC4Tbuy7hw2p hXEGpMwFw08PGSm9pnsvDyVjhSxXXtbg/HGhzZMQ4bIyIoVo5NQiGySVxBGeWta+ D+Of2oWujA7nG9yMIfiDP1oNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbnvi6mWM LmWo9uKMQpN/n7rtcQUwHwYDVR0jBBgwFoAU/xOUBaa6BoyBp0rTX+yUkYJp2OEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RDY3LzkyNDUwOTY2OEJD MTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95QnAwclRYLXlVa1lKcDJP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX3hPVUJhYTZCb3lCcDByVFgteVVrWUpwMk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RDY3LzkyNDUwOTY2OEJDMTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95 QnAwclRYLXlVa1lKcDJPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCK51VtIIIG96NhLsXfAeQCRZTi5RVlJ/d+YO3WCSsVka/EhjMw+x6sZdzxxeVm UPeiHqX74h0wRKU6jPR9QBfWOPRLm1R/d6EtOgBvD4MpfSQGcFSmtz9L3PsvelIM UW/EqsOAK6obiJpGu3Oqop7v0kua41rJrpZG6lKyoCJl1sGQuUAwQrITrzTuqtQe nkQRM26YJH7MX272nW8wMUatzlTrKm5BAK/vSjvGea0ey/hjR4hKHk1oeokQ8BZy kGiwSFFI2ni1kjJD5TpVs2H1DkheJaUxneHxZHNMQthuajHxOf2sdsiMykau5G75 fyEAwBJ0tWfpNa0LxltOrYj8 -----END CERTIFICATE-----Generated at Sat Nov 14 20:49:57 2026 by rpki-client