$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: /5+BfYmcY2Lzxx6nXb6KbpSoan1ZnXWZ0xgo2uV91yA= Subject key identifier: DD:42:83:44:5F:C1:55:04:C0:19:8B:21:DB:02:00:1C:14:01:13:3B Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 050C Signing time: Sat 14 Nov 2026 23:25:07 +0000 Manifest this update: Sat 14 Nov 2026 23:25:07 +0000 Manifest next update: Sat 21 Nov 2026 23:25:07 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: nJTBQVTq1uPuXv73Nd2J3lPeEnTHMU2oqCBuvNTKTrs=) 2: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Z0QtZMlmBIXI6vlQlvMDycSEHCvU1S1Ni8aOs0GFcPI=) 3: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: JBKJEbQZvFufbZiqIUnREyFPgHk3VFg2KxCxeGu9bJk=) 4: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: PsNJCJU0uyXObp1+mZX8wbceohbhRoBCXf4GOaOdhzk=) 5: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: KoqKm1zXa7+E49cuBhLyDwtkJsGJoT5PgNYa3eMaBM0=) 6: 25C6FD9CAE0511F187A47F574B11F970.roa (hash: wjJhmmUUiWYFdBshacAhxjyibepzAQTbTNK9qOb1a0I=) 7: 2DDD88A0A75911F1AF5343123411F970.roa (hash: WSQsvZXfuBX3j5M4e7CasUZOIhXg7AV01LOzceFct5g=) 8: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: STToVDSycMQR8e0kpqKni2O/W2Vy+5J2p+xXTnuKGqE=) 9: 4B167396E74111EC80E35542C4F9AE02.roa (hash: o3rH8lbT1yVcZ5ZClwYn7G44pShugDeVMaQqTOoN1mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Nov 14 23:25:07 2026 GMT Not After : Nov 21 23:25:07 2026 GMT Subject: CN=6af8edd3-c3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ab:d8:23:2e:92:59:8a:e8:35:68:7c:72:b7: 74:ea:81:3f:ba:69:52:45:19:57:76:f1:4c:73:77: ea:f0:62:e4:67:d0:28:76:58:08:37:5d:97:9d:c6: 3d:1f:bf:b5:10:28:3c:08:a7:b0:7c:94:2c:50:89: 58:82:5b:89:90:70:5c:d0:07:ae:da:08:44:ca:6b: 2c:a4:1a:90:2a:f2:80:d9:fd:33:38:cb:30:45:22: 8f:e4:42:1a:c9:f3:b2:32:53:4e:6b:d3:12:8a:66: a7:2d:9f:0a:2e:a1:5c:d7:4d:f2:d8:a4:26:c7:19: 21:64:b0:1c:00:30:3b:03:52:64:ae:fa:1e:06:56: 4a:75:95:e1:99:57:e1:30:ce:b3:13:23:35:93:32: b2:ed:57:f1:09:34:b0:9b:95:4b:f4:0f:68:7d:94: d1:b7:aa:71:5a:ef:35:62:6d:4b:cf:65:a4:41:f0: 0e:7c:c3:d7:9c:a2:dc:77:37:f4:5a:69:ea:48:e3: 8d:ea:a1:d8:3d:9e:cb:d0:cb:ab:17:38:30:df:d7: f0:d7:1f:1e:f6:f5:58:f6:c2:c3:fd:1f:95:b9:fe: 51:0a:8e:8d:d5:19:54:57:dc:5e:77:07:bf:1b:dd: 69:6d:97:92:e6:f8:15:a5:c1:ab:17:ba:b8:6b:d0: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:42:83:44:5F:C1:55:04:C0:19:8B:21:DB:02:00:1C:14:01:13:3B X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:65:ce:78:26:f2:6b:a7:05:3f:d1:d5:42:ad:71:53:43:a5: ed:dd:6b:5e:30:f0:68:71:96:9b:9b:a8:4c:3d:60:f6:84:5b: 68:8a:31:dd:38:fa:98:ef:a4:03:5b:b4:99:95:33:9e:34:d1: 07:9c:4e:33:27:ff:24:60:c7:32:41:c1:eb:20:d7:51:5f:b6: dc:b9:8d:bf:f6:06:54:7b:8b:5f:a9:0c:c5:8c:49:9e:5c:c1: df:f7:13:13:45:60:c1:69:fb:90:71:98:09:d2:13:cf:71:9a: 54:a9:5a:24:78:48:d8:b8:3a:cf:64:f3:ab:29:c0:38:45:c1: c8:2b:c8:d7:9f:5e:ba:81:7d:58:85:d7:a9:0b:92:33:00:fa: 80:09:ea:83:91:c4:16:d2:17:10:3e:44:e1:7a:cc:18:4f:e2: a3:04:92:01:48:81:09:cf:d0:ba:44:ba:f8:ee:72:4e:d9:79: 1c:a9:2b:91:be:26:85:e9:f3:03:27:e9:fb:03:fd:e6:ea:a4: 11:84:19:e7:8c:81:7d:38:73:96:de:c7:bb:f5:b8:f8:2c:1e: dc:b1:38:81:fa:ba:a8:06:81:7d:2c:36:17:7f:13:9c:b7:75: 0f:20:59:65:75:6c:6c:89:97:e7:bc:df:31:1d:a5:6a:89:e2: b3:2f:0d:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYxMTE0MjMyNTA3WhcNMjYxMTIxMjMyNTA3WjAYMRYwFAYD VQQDEw02YWY4ZWRkMy1jM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKvYIy6SWYroNWh8crd06oE/umlSRRlXdvFMc3fq8GLkZ9AodlgIN12XncY9 H7+1ECg8CKewfJQsUIlYgluJkHBc0Aeu2ghEymsspBqQKvKA2f0zOMswRSKP5EIa yfOyMlNOa9MSimanLZ8KLqFc103y2KQmxxkhZLAcADA7A1JkrvoeBlZKdZXhmVfh MM6zEyM1kzKy7VfxCTSwm5VL9A9ofZTRt6pxWu81Ym1Lz2WkQfAOfMPXnKLcdzf0 WmnqSOON6qHYPZ7L0MurFzgw39fw1x8e9vVY9sLD/R+Vuf5RCo6N1RlUV9xedwe/ G91pbZeS5vgVpcGrF7q4a9AIiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1Cg0Rf wVUEwBmLIdsCABwUARM7MB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnmXOeCbya6cFP9HVQq1xU0Ol7d1rXjDwaHGWm5uoTD1g9oRbaIox3Tj6mO+k A1u0mZUznjTRB5xOMyf/JGDHMkHB6yDXUV+23LmNv/YGVHuLX6kMxYxJnlzB3/cT E0VgwWn7kHGYCdITz3GaVKlaJHhI2Lg6z2TzqynAOEXByCvI159euoF9WIXXqQuS MwD6gAnqg5HEFtIXED5E4XrMGE/iowSSAUiBCc/QukS6+O5yTtl5HKkrkb4mhenz Ayfp+wP95uqkEYQZ54yBfThzlt7Hu/W4+Cwe3LE4gfq6qAaBfSw2F38TnLd1DyBZ ZXVsbImX57zfMR2laonisy8NhQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:37:41 2026 by rpki-client