$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: 4qmqgueTjfLjiY7YmXHyxUnr7XsN7xmsnrAXXDcesQw= Subject key identifier: 11:66:6B:53:2B:00:42:AC:F8:90:56:F4:4D:03:B9:DD:49:DB:5F:BC Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 366D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 360D Signing time: Sat 14 Nov 2026 14:21:43 +0000 Manifest this update: Sat 14 Nov 2026 14:21:42 +0000 Manifest next update: Sat 21 Nov 2026 14:21:42 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 6/ZSvzOuhLc3rqOJYTVF60Njs1A6EWbtSMGvCPWdK10=) 2: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: tb4d2WGXbPvyRotaqWLKmyeyfbjygOlLQLA75/yIS44=) 3: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: v1F73588I5TIbxHibltwszQp+2stCp9gQQEXZntRoSg=) 4: 8064BD9A531811F19CFFFF86C0833773.roa (hash: zSJ6qgvJW4YfFqxprlmttvge2oBgvp5fBh5eAOZUFpw=) 5: 34013D1A69E911F18D43391FA247A888.roa (hash: B5hqzXpedqgnZtGOdEIoJ/WqxIH1YMp8ISvKWijhIAE=) 6: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: Pb/eLHkERr63KOIiKN491GilAbuAMZ4Dkw6lIR/9gwg=) 7: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: 44+Ej6Drcby9zo63RA/x3RlFQ8dLgOq2yjB6zWmXKWk=) 8: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: kU7keJ3x9xRJ8liHmf1Z7GOvHcN9zrhffJ5NaB0tInI=) 9: 783697D2107A11F1854A0E192E3D8C67.roa (hash: +OAeGwPI3EPeO4SeSL4WG+KcFLm2kg/q6A7zTPgsK3U=) 10: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zOvHuNJfy1g+VIIU05MR/IwrnELnixR7jdUcwFZKVV0=) 11: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: bnNYNW5woRijMAziiX+GdjxArSN9zPt7BYM1OrTOpgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13933 (0x366d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Nov 14 14:21:42 2026 GMT Not After : Nov 21 14:21:42 2026 GMT Subject: CN=6af86e77-f322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:98:89:82:02:ea:fd:52:f8:ae:59:f1:59: ef:d4:96:8b:d3:36:0c:98:1f:7c:34:eb:6c:79:e6: 9d:33:3a:b6:27:13:b3:9d:08:0e:e2:0e:09:60:dc: bc:d7:a8:ab:ea:86:f2:d1:36:7f:ae:15:69:8c:c3: 39:cf:8b:3e:07:36:d0:2f:54:9e:2e:e1:df:8b:94: e6:51:70:82:c2:c6:0f:48:39:6d:8b:63:49:f5:7b: 51:64:43:8c:8e:ae:c1:5c:e2:d8:32:d4:c4:95:7d: e0:48:97:eb:26:f9:0c:40:71:bb:05:2b:c3:7d:f9: df:92:aa:0f:0b:bd:09:b4:56:93:f6:78:b0:b9:11: fe:79:f4:28:04:18:4c:00:98:97:c6:7e:67:d8:9f: 0d:d4:ed:5b:89:9f:e4:2d:d3:74:dd:c9:d7:55:09: 00:c7:a3:5e:38:3e:c6:bf:d7:ed:ae:dd:e2:9a:8e: ba:e3:f4:90:aa:de:7a:8f:c0:61:3f:4d:cd:75:cb: 4b:b2:09:35:74:e2:69:6f:10:b2:ab:a1:8c:6f:a4: a2:3f:15:e8:c6:52:d5:0d:a9:87:dc:30:08:31:4f: 7a:f6:c5:ff:94:58:4f:e5:28:69:83:6c:57:ac:69: a9:09:68:fb:2f:8f:a3:b9:a7:31:e0:0c:86:04:45: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:6B:53:2B:00:42:AC:F8:90:56:F4:4D:03:B9:DD:49:DB:5F:BC X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:4c:0a:62:f8:2b:60:09:86:1b:7c:72:0b:47:cd:cf:bf:04: 21:f7:84:1b:ef:16:39:00:d9:34:9e:fd:11:ac:11:ce:5c:b2: e1:25:97:27:49:94:c6:8e:fb:ca:33:38:65:68:c8:3b:86:02: 96:b6:7d:42:58:d8:30:e1:41:01:dd:80:5f:15:dd:5c:f5:12: a9:03:4b:c5:7e:ce:0a:ad:ef:a2:69:6d:81:ae:2c:00:0e:4f: d2:24:55:79:73:c1:0d:b2:f9:91:0e:30:dd:b1:77:87:1c:59: b6:2b:05:b5:4b:12:6e:4a:24:10:85:cd:25:9b:50:89:0d:ae: f1:52:07:7b:40:38:cb:b8:6e:f7:5e:72:6a:f0:8b:d2:d5:25: e7:99:27:06:c0:57:36:7e:e1:b7:de:cb:b7:c1:74:5b:ad:b9: 91:13:81:e4:96:91:23:4d:84:77:c5:b4:5a:f9:d2:ea:55:19: 33:91:48:e3:63:65:f2:53:22:be:4e:25:99:fc:cb:40:00:8e: fd:82:b6:3e:45:04:bd:33:87:d2:0e:a8:cd:60:39:8c:42:1b: 0e:56:97:f2:84:f9:3f:a7:ed:d6:d4:da:c2:7c:55:9a:be:3a: 62:5d:5c:42:3e:09:27:88:8a:b8:f8:98:2e:d8:21:46:9b:40: b5:55:f4:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYxMTE0MTQyMTQyWhcNMjYxMTIxMTQyMTQyWjAYMRYwFAYD VQQDEw02YWY4NmU3Ny1mMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00iYiYIC6v1S+K5Z8Vnv1JaL0zYMmB98NOtseeadMzq2JxOznQgO4g4JYNy8 16ir6oby0TZ/rhVpjMM5z4s+BzbQL1SeLuHfi5TmUXCCwsYPSDlti2NJ9XtRZEOM jq7BXOLYMtTElX3gSJfrJvkMQHG7BSvDffnfkqoPC70JtFaT9niwuRH+efQoBBhM AJiXxn5n2J8N1O1biZ/kLdN03cnXVQkAx6NeOD7Gv9ftrt3imo664/SQqt56j8Bh P03NdctLsgk1dOJpbxCyq6GMb6SiPxXoxlLVDamH3DAIMU969sX/lFhP5Shpg2xX rGmpCWj7L4+juacx4AyGBEWJuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFma1Mr AEKs+JBW9E0Dud1J21+8MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuUwKYvgrYAmGG3xyC0fNz78EIfeEG+8WOQDZNJ79EawRzlyy4SWXJ0mUxo77 yjM4ZWjIO4YClrZ9QljYMOFBAd2AXxXdXPUSqQNLxX7OCq3vomltga4sAA5P0iRV eXPBDbL5kQ4w3bF3hxxZtisFtUsSbkokEIXNJZtQiQ2u8VIHe0A4y7hu915yavCL 0tUl55knBsBXNn7ht97Lt8F0W625kROB5JaRI02Ed8W0WvnS6lUZM5FI42Nl8lMi vk4lmfzLQACO/YK2PkUEvTOH0g6ozWA5jEIbDlaX8oT5P6ft1tTawnxVmr46Yl1c Qj4JJ4iKuPiYLtghRptAtVX0Mw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:02:27 2026 by rpki-client