$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: spKXgVekkeq1Ybsyl38hc71Ca3+x+dClU6oh3G7z1C8= Subject key identifier: 34:66:32:C3:25:E2:EE:98:F6:D1:3B:B8:96:BB:0C:B9:8D:4E:83:E4 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0444 Signing time: Sat 14 Nov 2026 23:58:06 +0000 Manifest this update: Sat 14 Nov 2026 23:58:06 +0000 Manifest next update: Sat 21 Nov 2026 23:58:06 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: Dcm7Alq0kpGtls9rypWKTUPkblkNsCCR3PLUP96SAhM=) 2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: mCGWaWRzUHJRaXwLJ7OS8pH/qmjVpRMUC92IecXdehw=) 3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: j2fuKs74NMVEONNKqBYvAGbhe8lbk1AIulWzuYUkGy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Nov 14 23:58:06 2026 GMT Not After : Nov 21 23:58:06 2026 GMT Subject: CN=6af8f58e-dd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:63:ba:f5:c0:39:14:80:f7:d6:9f:4b:91: dc:df:74:f1:c9:a5:93:22:a1:dd:62:28:f7:aa:8a: 57:78:62:36:e1:33:e7:42:d9:d3:c5:e9:94:8f:9a: af:e3:58:be:0a:8b:c3:7b:3a:de:7a:24:ea:e1:b5: 2a:d6:19:6e:66:68:70:47:ea:f0:fd:d9:c5:77:35: 11:0e:39:48:25:7a:bb:6b:7f:83:0e:24:04:43:9d: 20:3d:d8:49:f8:d8:ee:c6:59:9c:1a:20:d8:fd:50: 36:9a:2b:80:85:71:f7:01:5e:d1:56:c6:21:65:4f: 80:bb:4c:ae:70:6b:2c:41:85:40:6e:58:f8:e9:c0: 03:72:06:b9:e0:24:5c:9f:40:05:a2:6b:46:5c:39: 5f:7e:7a:5a:bf:f9:b1:40:9d:02:66:e5:5e:34:b2: c0:ed:9e:64:da:2d:76:39:12:33:a7:19:3e:be:bb: 73:73:8c:de:12:8b:6b:e0:c0:34:99:d9:9f:db:b7: 34:20:b8:6e:0d:00:e7:3c:b9:77:a0:ae:b4:ed:d9: 26:a0:68:3f:96:8c:7b:a2:42:75:d0:97:76:9e:2a: 1e:b1:3f:26:1e:f6:a5:75:61:3a:3e:45:2a:ea:cf: 84:de:fd:bc:0b:9a:df:88:c5:ed:83:65:98:b1:8a: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:32:C3:25:E2:EE:98:F6:D1:3B:B8:96:BB:0C:B9:8D:4E:83:E4 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2b:8a:25:08:3c:de:d2:f5:f9:9a:65:9f:e8:35:f9:b9:df: 15:f3:4f:c0:68:37:c8:e2:e1:43:b4:5e:de:43:b9:30:0c:0c: 3a:11:a9:3c:89:02:41:0e:d5:f4:ea:cb:08:09:a5:cc:b1:b6: 32:86:94:9c:ad:b5:26:e5:e2:01:27:eb:18:df:ba:1d:e3:86: 2f:3f:1a:29:ff:dd:84:37:e4:8f:be:ba:b6:f7:f0:11:f2:27: cf:78:6a:69:3c:b9:01:97:29:97:82:cf:38:ec:c9:c8:d0:4a: af:0a:f1:ec:66:0c:20:3a:5f:fb:f8:8e:7e:9b:1a:f4:8a:19: eb:3c:99:4c:65:d5:45:34:b3:b5:a4:7d:95:1e:85:68:49:a9: e2:ca:2c:bf:14:ef:07:cd:40:0c:07:27:c8:51:41:22:a1:05: 0b:81:57:32:cf:57:d1:40:b9:c4:65:08:a6:f9:df:8a:d1:93: fa:1e:24:bd:34:b6:f3:7b:2b:5f:b2:2e:ad:8b:4f:1b:9e:64: 79:31:69:3c:2f:b1:53:86:7e:71:70:a7:9b:44:bf:f5:d9:e7: e0:75:7e:4f:61:06:a5:e2:fc:95:45:79:5a:b9:27:20:5f:3a: f2:1b:c1:f9:ac:83:cd:b6:81:ed:a3:d8:f2:d2:ef:98:2c:58: 4c:59:90:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjYxMTE0MjM1ODA2WhcNMjYxMTIxMjM1ODA2WjAYMRYwFAYD VQQDEw02YWY4ZjU4ZS1kZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA331juvXAORSA99afS5Hc33TxyaWTIqHdYij3qopXeGI24TPnQtnTxemUj5qv 41i+CovDezreeiTq4bUq1hluZmhwR+rw/dnFdzURDjlIJXq7a3+DDiQEQ50gPdhJ +NjuxlmcGiDY/VA2miuAhXH3AV7RVsYhZU+Au0yucGssQYVAblj46cADcga54CRc n0AFomtGXDlffnpav/mxQJ0CZuVeNLLA7Z5k2i12ORIzpxk+vrtzc4zeEotr4MA0 mdmf27c0ILhuDQDnPLl3oK607dkmoGg/lox7okJ10Jd2nioesT8mHvaldWE6PkUq 6s+E3v28C5rfiMXtg2WYsYq5IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRmMsMl 4u6Y9tE7uJa7DLmNToPkMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKyuKJQg83tL1+Zpln+g1+bnfFfNPwGg3yOLhQ7Re3kO5MAwMOhGpPIkCQQ7V 9OrLCAmlzLG2MoaUnK21JuXiASfrGN+6HeOGLz8aKf/dhDfkj766tvfwEfInz3hq aTy5AZcpl4LPOOzJyNBKrwrx7GYMIDpf+/iOfpsa9IoZ6zyZTGXVRTSztaR9lR6F aEmp4sosvxTvB81ADAcnyFFBIqEFC4FXMs9X0UC5xGUIpvnfitGT+h4kvTS283sr X7IurYtPG55keTFpPC+xU4Z+cXCnm0S/9dnn4HV+T2EGpeL8lUV5WrknIF868hvB +ayDzbaB7aPY8tLvmCxYTFmQ4Q== -----END CERTIFICATE-----Generated at Sun Nov 15 22:40:47 2026 by rpki-client