$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft File: 30WmAWUG35sQS3TILTbV_9LVbK0.mft (raw, json) Hash identifier: 6wFHuVYJa14cVx/LkaY9bTwceyu1b0/fei3MVnLdHeo= Subject key identifier: EA:CA:75:E5:44:32:03:9F:25:66:1F:74:28:35:38:46:98:61:B1:C0 Authority key identifier: DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD Certificate issuer: /CN=A91597B7/serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft Manifest number: 33 Signing time: Sun 15 Nov 2026 09:03:32 +0000 Manifest this update: Sun 15 Nov 2026 09:03:32 +0000 Manifest next update: Sun 22 Nov 2026 09:03:32 +0000 Files and hashes: 1: 30WmAWUG35sQS3TILTbV_9LVbK0.crl (hash: wSiLP6AEmNXpomd4pOE5c3YIZZEORkw9iNLS+bd2Fb0=) 2: F7FDA3B8D7EC11F19628D8981A66CEF9.roa (hash: RFaJLpPBZPZEKDCj+XL3kivqb9ppG2IDlIxmRGStJ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 09:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597B7, serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Validity Not Before: Nov 15 09:03:32 2026 GMT Not After : Nov 22 09:03:32 2026 GMT Subject: CN=6af97564-4378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:47:30:a5:30:13:30:23:55:05:7e:bb:c4: 5e:df:fb:56:6b:48:94:0a:58:03:91:ef:d7:46:75: e1:47:db:44:f6:a1:1b:fc:43:43:61:d3:4f:a6:36: a4:80:32:1e:5d:4b:3a:df:e9:81:27:cc:04:58:ce: a1:60:ce:a5:52:c6:b0:fd:e0:1f:52:cf:8f:3a:c2: 37:bd:ec:0b:05:a7:3c:97:94:a5:02:36:67:ff:62: a2:c2:19:fb:b8:25:2b:21:88:c8:ec:6b:7d:1f:4c: e0:f6:07:cf:18:e6:72:fe:be:e1:77:26:06:5c:35: d8:27:44:90:d8:88:d4:78:4b:58:97:e0:5c:ea:75: ed:98:26:7e:d8:27:0d:4f:27:41:ff:f8:73:c5:98: 45:cc:54:f3:01:f4:00:95:5c:63:27:d8:98:b2:2a: 24:7c:a4:79:78:85:19:b8:08:ca:8b:f6:51:76:13: ff:5c:b1:a0:31:99:0d:58:18:5a:42:6a:3b:00:bc: 80:fe:f2:e8:a4:9b:72:5a:ab:40:be:57:fa:f2:a4: ec:81:a0:ac:c8:fb:de:d1:7d:d5:f4:97:22:62:1d: 99:3a:9f:8d:29:f4:5e:38:af:1a:27:94:e0:f2:02: 91:84:a9:b0:ba:88:c2:66:3b:3c:a2:2e:46:05:03: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CA:75:E5:44:32:03:9F:25:66:1F:74:28:35:38:46:98:61:B1:C0 X509v3 Authority Key Identifier: keyid:DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a7:4f:7f:2f:76:4d:b2:84:9f:02:04:fc:cc:d5:47:03:48: 3e:ff:88:40:d7:33:48:f8:95:ab:39:63:3f:4a:ac:ba:3b:36: 45:b3:10:48:a1:e7:12:52:75:8c:4c:a0:81:ca:41:75:5f:64: 7d:12:2f:5d:22:b1:1b:ed:43:5d:89:24:06:d8:97:9c:87:e5: 8e:17:13:2c:59:42:fd:a5:cd:f9:6b:42:8b:27:65:83:e2:c4: 95:78:eb:4d:ad:25:3f:0a:72:1a:99:32:d7:af:ae:b0:f0:5d: a3:ba:9f:00:0b:8f:f0:a2:1a:77:29:4b:0d:38:4c:eb:f3:7a: 72:b0:86:6c:b5:35:9c:ab:48:34:73:51:f8:db:60:0a:54:46: eb:7f:0f:cb:40:19:08:e1:72:f0:c8:8e:4c:46:39:62:a5:a5: 09:45:2b:63:bb:ea:6d:93:fa:0c:35:36:22:f1:a9:65:6f:5c: 45:1c:f2:cf:aa:f7:aa:af:33:cc:69:52:92:42:0d:1d:6f:a3: ad:ce:e2:d1:d7:96:12:53:a1:01:af:12:09:6a:7d:7a:80:62: a7:d8:07:11:a7:5c:a8:8e:23:95:4f:e1:31:ef:f3:fa:8c:d7: e1:83:c4:d2:b3:c0:02:db:ac:4e:b1:9d:b4:67:92:f9:52:2e: 1b:7f:a1:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdCNzExMC8GA1UEBRMoREY0NUE2MDE2NTA2REY5QjEwNEI3NEM4MkQzNkQ1RkZE MkQ1NkNBRDAeFw0yNjExMTUwOTAzMzJaFw0yNjExMjIwOTAzMzJaMBgxFjAUBgNV BAMTDTZhZjk3NTY0LTQzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6uEcwpTATMCNVBX67xF7f+1ZrSJQKWAOR79dGdeFH20T2oRv8Q0Nh00+mNqSA Mh5dSzrf6YEnzARYzqFgzqVSxrD94B9Sz486wje97AsFpzyXlKUCNmf/YqLCGfu4 JSshiMjsa30fTOD2B88Y5nL+vuF3JgZcNdgnRJDYiNR4S1iX4Fzqde2YJn7YJw1P J0H/+HPFmEXMVPMB9ACVXGMn2JiyKiR8pHl4hRm4CMqL9lF2E/9csaAxmQ1YGFpC ajsAvID+8uikm3Jaq0C+V/rypOyBoKzI+97RfdX0lyJiHZk6n40p9F44rxonlODy ApGEqbC6iMJmOzyiLkYFA4gxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6sp15UQy A58lZh90KDU4RphhscAwHwYDVR0jBBgwFoAU30WmAWUG35sQS3TILTbV/9LVbK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0I3LzEyQzIxNUFDQURF NjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVzUVMzVElMVGJWXzlMVmJL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzBXbUFXVUczNXNRUzNUSUxUYlZfOUxWYkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0I3LzEyQzIxNUFDQURFNjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVz UVMzVElMVGJWXzlMVmJLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTp09/L3ZNsoSfAgT8zNVHA0g+/4hA1zNI+JWrOWM/Sqy6OzZFsxBIoecSUnWM TKCBykF1X2R9Ei9dIrEb7UNdiSQG2Jech+WOFxMsWUL9pc35a0KLJ2WD4sSVeOtN rSU/CnIamTLXr66w8F2jup8AC4/wohp3KUsNOEzr83pysIZstTWcq0g0c1H422AK VEbrfw/LQBkI4XLwyI5MRjlipaUJRStju+ptk/oMNTYi8allb1xFHPLPqveqrzPM aVKSQg0db6OtzuLR15YSU6EBrxIJan16gGKn2AcRp1yojiOVT+Ex7/P6jNfhg8TS s8AC26xOsZ20Z5L5Ui4bf6Gq -----END CERTIFICATE-----Generated at Sun Nov 15 21:18:32 2026 by rpki-client