$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft File: TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft (raw, json) Hash identifier: IMU3rcn8EgfiO8tT/0Vy289A0JLMgYFgMTsh2rCgRtc= Subject key identifier: 79:F6:4F:AD:09:71:BF:BB:78:3F:3D:38:B3:C3:51:FA:4E:F6:F2:36 Authority key identifier: 4C:F9:C9:94:E2:5B:27:F1:54:4F:81:B9:5E:13:5D:E4:F7:79:DC:B9 Certificate issuer: /CN=A913F7C0/serialNumber=4CF9C994E25B27F1544F81B95E135DE4F779DCB9 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft Manifest number: 20 Signing time: Sun 15 Nov 2026 09:09:02 +0000 Manifest this update: Sun 15 Nov 2026 09:09:01 +0000 Manifest next update: Sun 22 Nov 2026 09:09:01 +0000 Files and hashes: 1: TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.crl (hash: QtsgLTgsEP/bQppC4LhoOjJQVQvBLWTf1CnfF1M7+fQ=) 2: 007F02F4B76111F1BAA6BE024311F970.roa (hash: 18PuoD1UA/CwItPoBIF9cJoI3awmb8QkSXuh4G3/qto=) 3: QC9Hq8DDI2zVpTEt3Ve4-LHyLi0.asa (hash: 2fPBXE7BQR8B2NjeDiLl9Xs5wP6AQHtdS4WoOBnfLt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.crl rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 09:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F7C0, serialNumber=4CF9C994E25B27F1544F81B95E135DE4F779DCB9 Validity Not Before: Nov 15 09:09:01 2026 GMT Not After : Nov 22 09:09:01 2026 GMT Subject: CN=6af976ae-817e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:46:74:09:3a:21:b2:c9:6f:7d:50:54:c3: 54:89:a1:5c:c9:2c:5a:5a:95:fb:32:0c:0f:1d:9e: 42:47:25:61:cd:b2:ab:f5:78:84:63:d2:5b:6a:8f: 38:fe:9b:6d:58:b0:0d:f0:05:7d:86:12:5e:8c:97: e3:55:34:0c:5c:e0:91:b2:51:20:b1:f1:ea:74:d4: d3:4a:b0:d8:d9:ed:6d:c2:83:81:82:54:b9:3f:45: c2:e6:d3:96:e9:ad:f5:dd:b9:23:db:10:85:08:d8: cf:46:0b:70:cf:d7:6f:da:56:1f:fb:f5:af:98:27: f4:d6:71:40:29:19:b0:3f:9e:5c:a1:ff:1f:2a:15: 92:7a:b7:20:56:c0:15:1d:45:b1:2c:aa:d6:81:e5: f1:fb:14:45:64:b0:a9:ac:7a:c9:20:9d:d2:d0:5d: 45:04:21:ae:50:c9:0b:00:6e:d1:44:bf:ea:c4:fb: 88:5b:bd:86:fd:ba:5b:13:7b:83:01:8b:00:6d:64: 02:a6:cf:43:aa:18:31:6e:64:99:0f:8a:4b:9c:e1: 52:14:03:a5:68:9a:ad:23:76:d0:4f:de:60:8d:36: 9f:6b:16:60:65:5c:7a:ee:3d:57:03:e6:8a:ba:f2: f1:85:38:d9:68:1f:38:37:95:c0:9c:94:e6:f6:e3: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F6:4F:AD:09:71:BF:BB:78:3F:3D:38:B3:C3:51:FA:4E:F6:F2:36 X509v3 Authority Key Identifier: keyid:4C:F9:C9:94:E2:5B:27:F1:54:4F:81:B9:5E:13:5D:E4:F7:79:DC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ad:36:34:2b:c0:d8:28:0b:46:23:b1:85:bc:ea:4e:46:cf: 23:c8:a9:fa:2b:89:5e:38:0f:cb:9e:ad:b8:ef:39:e8:a3:99: 99:88:31:69:4e:1b:c5:73:fc:90:42:fb:e1:65:e0:d6:b4:ab: 04:a4:32:d4:9e:9c:b7:5c:75:ce:6d:41:ee:69:f1:7f:76:ef: fa:f1:ea:ce:04:58:57:44:93:43:a7:fe:e4:e6:ae:13:76:32: 3a:8c:5a:c7:b8:16:9c:80:d2:fc:4c:1b:a9:0d:66:02:44:d6: 4c:c1:ee:26:01:a8:96:7b:c8:d5:e1:be:4a:ac:dd:9a:d0:72: cf:dc:24:6f:a5:18:da:fb:cb:75:2f:65:4e:ab:2b:4d:4e:de: e7:9b:30:04:92:52:ab:55:1f:de:46:5f:bf:14:b3:ad:fa:67: ec:5b:e7:10:ce:f2:4a:c4:42:6d:2a:05:3e:3a:e4:ae:9b:4c: 4b:ed:d1:06:80:8c:4e:52:99:cf:44:b7:76:fe:a9:08:24:71: d2:42:96:f2:e2:d7:8f:dd:c0:48:02:ec:6e:ab:58:2c:36:32: ea:b4:78:8f:22:df:c7:f2:4e:b6:ba:e1:a5:3e:fe:c6:6d:b0: d6:78:40:23:28:26:ac:da:ca:1e:cc:1c:98:d8:1b:cf:0b:e2: 65:62:88:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjdDMDExMC8GA1UEBRMoNENGOUM5OTRFMjVCMjdGMTU0NEY4MUI5NUUxMzVERTRG Nzc5RENCOTAeFw0yNjExMTUwOTA5MDFaFw0yNjExMjIwOTA5MDFaMBgxFjAUBgNV BAMTDTZhZjk3NmFlLTgxN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSM0Z0CTohsslvfVBUw1SJoVzJLFpalfsyDA8dnkJHJWHNsqv1eIRj0ltqjzj+ m21YsA3wBX2GEl6Ml+NVNAxc4JGyUSCx8ep01NNKsNjZ7W3Cg4GCVLk/RcLm05bp rfXduSPbEIUI2M9GC3DP12/aVh/79a+YJ/TWcUApGbA/nlyh/x8qFZJ6tyBWwBUd RbEsqtaB5fH7FEVksKmseskgndLQXUUEIa5QyQsAbtFEv+rE+4hbvYb9ulsTe4MB iwBtZAKmz0OqGDFuZJkPikuc4VIUA6Vomq0jdtBP3mCNNp9rFmBlXHruPVcD5oq6 8vGFONloHzg3lcCclOb2430dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUefZPrQlx v7t4Pz04s8NR+k728jYwHwYDVR0jBBgwFoAUTPnJlOJbJ/FUT4G5XhNd5Pd53Lkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGN0MwLzg2OTQ5NkZFQjc1 RTExRjFCODdENzM5QjQxMTFGOTcwL1RQbkpsT0piSl9GVVQ0RzVYaE5kNVBkNTNM ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFBuSmxPSmJKX0ZVVDRHNVhoTmQ1UGQ1M0xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG N0MwLzg2OTQ5NkZFQjc1RTExRjFCODdENzM5QjQxMTFGOTcwL1RQbkpsT0piSl9G VVQ0RzVYaE5kNVBkNTNMay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDrTY0K8DYKAtGI7GFvOpORs8jyKn6K4leOA/Lnq247znoo5mZiDFpThvFc/yQ QvvhZeDWtKsEpDLUnpy3XHXObUHuafF/du/68erOBFhXRJNDp/7k5q4TdjI6jFrH uBacgNL8TBupDWYCRNZMwe4mAaiWe8jV4b5KrN2a0HLP3CRvpRja+8t1L2VOqytN Tt7nmzAEklKrVR/eRl+/FLOt+mfsW+cQzvJKxEJtKgU+OuSum0xL7dEGgIxOUpnP RLd2/qkIJHHSQpby4teP3cBIAuxuq1gsNjLqtHiPIt/H8k62uuGlPv7GbbDWeEAj KCas2soezByY2BvPC+JlYohM -----END CERTIFICATE-----Generated at Sun Nov 15 18:07:39 2026 by rpki-client