$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft File: ie3CdDRVzlmv66wxSG3f6_fNB1E.mft (raw, json) Hash identifier: hlS90/lTEIwCIojaFDuypxTGior+4cm8FigdIo5MbZw= Subject key identifier: 88:48:AE:80:06:06:C4:F6:FF:6B:68:5A:A4:46:19:84:05:D9:61:1A Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft Manifest number: 36 Signing time: Fri 13 Nov 2026 08:48:49 +0000 Manifest this update: Fri 13 Nov 2026 08:48:48 +0000 Manifest next update: Fri 20 Nov 2026 08:48:48 +0000 Files and hashes: 1: ie3CdDRVzlmv66wxSG3f6_fNB1E.crl (hash: /8x+m7ARW5JVfCuvRiUn8yaA27nisd8xbZV9KYUJL+c=) 2: HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa (hash: TqF7VDLUvGn6swrLSWdyVb07AQkMUSMT51u5VOQs9aE=) 3: 1C162B1892FF11F1ADF87C276D11F970.roa (hash: QNsu5mDAlK5ceLi1SvnsBhnHeCKn6PMBuIedIEG5/+o=) 4: EB598C04BAE011F1AFD56E445411F970.roa (hash: uL1Tj6lZVjqqdCbl5vW1Rvcu97SuukVRAxRhywHxhj0=) 5: EA901374BAE011F1AFD56E445411F970.roa (hash: qPNjmfmGgAJan2G/OSlfz3G+py/zWs5Do0SdaJNh7Fs=) 6: EBFDD9B2BAE011F1AFD56E445411F970.roa (hash: XPeH9DmGsgN2fCY2OFVHFmiytDLOlkawC3b0h0/GI70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 08:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Validity Not Before: Nov 13 08:48:48 2026 GMT Not After : Nov 20 08:48:48 2026 GMT Subject: CN=6af6cef0-b5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:42:4d:34:24:76:a9:f5:e2:4d:bc:f8:2b: 71:a1:4b:3e:ab:68:d4:7a:08:f9:1f:4d:60:ae:bd: 95:c6:6b:68:a6:37:18:9f:51:2f:c7:a8:4d:c0:66: 4b:bd:88:81:74:7a:7d:42:a3:69:fe:a3:73:ba:31: f3:d9:23:9d:8d:b0:c1:55:7d:a0:03:ec:80:0f:71: 37:c9:1a:e8:1b:a8:95:93:27:df:19:de:59:fb:16: 83:7e:de:43:1a:9c:86:50:80:ae:9c:f7:56:ea:ec: 31:ee:97:2a:2a:1f:a0:b9:92:05:33:35:9c:e6:b3: b7:a5:94:ce:62:73:c6:b5:c5:ac:a1:bc:48:06:ff: f3:a1:67:cd:5c:3a:21:95:cf:2d:36:95:1d:ac:ff: 21:15:d9:c8:83:a3:38:f8:62:8a:a0:89:f3:bc:dc: 55:8a:fc:c4:4d:17:f7:36:2b:b9:ce:6f:5c:6f:c8: 90:23:7f:e7:97:09:9b:f7:6a:68:d0:5d:ee:2c:33: a9:83:44:c7:f8:3a:b2:50:87:3e:3d:93:8d:43:1e: 2b:d0:0e:9a:cc:c9:7c:61:0b:be:cc:52:d3:e4:ea: a1:61:24:6f:a3:37:ee:0e:a2:70:db:bd:55:45:8a: f5:83:58:2e:72:7c:13:9d:fc:b6:3d:91:d3:85:5b: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:AE:80:06:06:C4:F6:FF:6B:68:5A:A4:46:19:84:05:D9:61:1A X509v3 Authority Key Identifier: keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:92:3e:81:5c:a5:44:d9:2a:d1:bc:b4:bc:0e:3f:d9:37: 03:cd:25:c4:26:94:e6:f3:1e:72:c2:18:77:4c:d9:de:db:c1: 51:34:5c:51:77:28:c4:12:bd:7e:d5:7c:dd:28:f0:ab:e3:71: c5:bd:95:89:81:ef:11:21:cf:d3:f4:4f:b0:47:35:24:4c:1a: 6c:c7:9b:be:81:cb:6d:8b:61:02:d8:6e:b7:d2:44:a3:ba:b6: 1d:2f:5b:1a:d9:f7:66:20:42:6f:2f:96:f8:dd:55:ef:21:5c: 77:9d:a7:83:47:6b:a4:71:26:85:2b:ac:b1:4c:aa:1b:40:10: 80:f0:73:55:da:44:74:c0:5b:b0:6e:d6:2e:a7:33:4f:f0:d2: ef:e3:ff:99:5e:bf:87:90:0d:c9:d9:8f:99:0f:11:51:38:e0: bf:cb:e3:15:16:8d:93:96:18:fb:f1:ac:0d:02:a2:b4:8f:58: 2d:f7:a5:7f:ba:e8:3c:b3:39:26:8f:67:4d:10:95:b2:2a:2d: f3:74:43:1e:9e:5d:97:46:f4:8c:08:75:24:b1:c8:05:ee:68: 72:d9:53:ef:bb:f1:5f:da:2a:06:cf:3f:86:67:51:32:a0:e9: 19:05:9e:1e:19:cb:c0:fa:b7:09:91:fa:3c:4e:9f:9b:7c:94: 02:17:21:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEEzRTExMC8GA1UEBRMoODlFREMyNzQzNDU1Q0U1OUFGRUJBQzMxNDg2RERGRUJG N0NEMDc1MTAeFw0yNjExMTMwODQ4NDhaFw0yNjExMjAwODQ4NDhaMBgxFjAUBgNV BAMTDTZhZjZjZWYwLWI1YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVqUJNNCR2qfXiTbz4K3GhSz6raNR6CPkfTWCuvZXGa2imNxifUS/HqE3AZku9 iIF0en1Co2n+o3O6MfPZI52NsMFVfaAD7IAPcTfJGugbqJWTJ98Z3ln7FoN+3kMa nIZQgK6c91bq7DHulyoqH6C5kgUzNZzms7ellM5ic8a1xayhvEgG//OhZ81cOiGV zy02lR2s/yEV2ciDozj4YoqgifO83FWK/MRNF/c2K7nOb1xvyJAjf+eXCZv3amjQ Xe4sM6mDRMf4OrJQhz49k41DHivQDprMyXxhC77MUtPk6qFhJG+jN+4OonDbvVVF ivWDWC5yfBOd/LY9kdOFW8bDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiEiugAYG xPb/a2hapEYZhAXZYRowHwYDVR0jBBgwFoAUie3CdDRVzlmv66wxSG3f6/fNB1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4QTNFL0VENDg2ODkyOTJG RDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxtdjY2d3hTRzNmNl9mTkIx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWUzQ2REUlZ6bG12NjZ3eFNHM2Y2X2ZOQjFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 QTNFL0VENDg2ODkyOTJGRDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxt djY2d3hTRzNmNl9mTkIxRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAenpI+gVylRNkq0by0vA4/2TcDzSXEJpTm8x5ywhh3TNne28FRNFxRdyjEEr1+ 1XzdKPCr43HFvZWJge8RIc/T9E+wRzUkTBpsx5u+gctti2EC2G630kSjurYdL1sa 2fdmIEJvL5b43VXvIVx3naeDR2ukcSaFK6yxTKobQBCA8HNV2kR0wFuwbtYupzNP 8NLv4/+ZXr+HkA3J2Y+ZDxFROOC/y+MVFo2Tlhj78awNAqK0j1gt96V/uug8szkm j2dNEJWyKi3zdEMenl2XRvSMCHUkscgF7mhy2VPvu/Ff2ioGzz+GZ1EyoOkZBZ4e GcvA+rcJkfo8Tp+bfJQCFyEG -----END CERTIFICATE-----Generated at Sat Nov 14 20:55:08 2026 by rpki-client