$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: J3nwXP5Ft6XEIh0IJ6YHXq1mlcchELeC+QngT0X5Kao= Subject key identifier: 4B:47:59:A3:FB:D6:FE:77:6A:8C:AB:30:B4:DF:D8:5D:63:68:65:F1 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 35CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 35A9 Signing time: Sat 14 Nov 2026 15:13:57 +0000 Manifest this update: Sat 14 Nov 2026 15:13:56 +0000 Manifest next update: Sat 21 Nov 2026 15:13:56 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: CAMtMGCc1pd/+VqHbSuNrPe+SO+Jj9pWjGoZaLvPpx4=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=) 4: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13775 (0x35cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Nov 14 15:13:56 2026 GMT Not After : Nov 21 15:13:56 2026 GMT Subject: CN=6af87ab4-a10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:8f:bb:0c:1c:ce:75:3f:d8:d9:44:0f:c9: 05:4a:58:33:23:53:a6:7d:f3:fe:67:3b:96:e4:7d: cc:f8:9f:2d:e4:35:dc:76:fc:26:7e:b0:20:d7:ca: 0a:f2:6a:5b:32:d4:a3:6d:b0:5e:35:c7:7a:a0:dc: 54:99:84:43:bf:58:e1:a5:61:83:08:38:7e:f8:b3: a4:43:fb:1d:15:d8:cb:c0:d7:b8:89:bc:8a:e2:8f: cd:4e:67:a4:eb:bb:c3:db:a6:0f:fa:7c:f7:34:f8: 9b:67:1b:80:f6:1d:65:ba:b0:d6:dc:09:72:c4:4e: 60:8a:2e:b1:57:24:2a:29:a3:ee:9d:af:d8:9d:90: 22:79:6d:d3:44:cd:2d:fb:b5:2b:fb:48:17:0c:88: b5:38:53:77:4b:f4:50:3c:80:b4:ad:7e:c6:a1:e2: 65:55:44:6a:04:fb:f2:10:06:3b:dc:67:15:4e:84: 67:a1:f5:18:9a:8e:a2:2f:8a:8f:df:fa:6f:fb:a7: 4f:3d:c4:e9:c6:35:a2:73:ed:7f:f7:fe:e0:4f:99: 83:46:68:77:29:2f:c8:fa:76:04:03:ca:b1:97:e6: 07:4a:50:ab:7d:4d:c5:35:00:b0:e2:29:6a:45:b6: be:c8:67:d2:33:48:2c:70:72:ed:5d:1c:07:53:e9: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:59:A3:FB:D6:FE:77:6A:8C:AB:30:B4:DF:D8:5D:63:68:65:F1 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8b:2f:1a:7d:6b:d8:42:ba:0f:d2:be:14:6e:9f:c5:ae:36: b2:32:0e:ff:2a:32:cd:3b:1f:13:94:d3:b5:7e:68:47:e7:b8: 9a:19:cc:6c:10:cb:9a:0f:a7:cd:b9:80:d0:c7:74:c2:a1:a6: 60:2f:08:0b:dc:9a:5a:77:30:d7:69:57:b5:a4:17:30:c2:5b: 56:90:e3:84:8d:96:22:21:60:a4:f3:53:ee:42:66:7e:59:44: 05:5b:0a:a7:3c:6d:48:9b:01:e8:5f:6f:4b:be:2b:bb:ad:72: 8f:e9:d1:ce:a4:6c:e5:e2:d3:27:22:b6:3a:b5:f6:09:01:cb: 3d:89:0d:e7:0b:eb:46:4b:7c:7d:12:3b:07:cc:77:38:07:a5: 7b:93:a7:24:b3:53:d0:38:0b:2f:6f:4a:70:d1:bf:00:d3:1c: 9c:d6:d1:29:b2:2a:a8:33:ad:89:b8:fc:19:48:eb:78:b6:f2: e8:f4:2a:ca:5a:76:c6:41:af:71:90:89:bd:3e:2b:43:ad:b8: af:c7:a3:ef:c0:ae:5b:1c:4c:b1:7d:46:97:0b:bc:fe:60:93: 24:24:23:3d:dc:81:95:e1:82:6a:b9:73:aa:42:22:c4:a4:51: 88:38:ee:cc:69:b4:62:45:4d:f5:f1:ae:59:23:12:05:51:fc: d4:32:f0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjYxMTE0MTUxMzU2WhcNMjYxMTIxMTUxMzU2WjAYMRYwFAYD VQQDEw02YWY4N2FiNC1hMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEOPuwwcznU/2NlED8kFSlgzI1OmffP+ZzuW5H3M+J8t5DXcdvwmfrAg18oK 8mpbMtSjbbBeNcd6oNxUmYRDv1jhpWGDCDh++LOkQ/sdFdjLwNe4ibyK4o/NTmek 67vD26YP+nz3NPibZxuA9h1lurDW3AlyxE5gii6xVyQqKaPuna/YnZAieW3TRM0t +7Ur+0gXDIi1OFN3S/RQPIC0rX7GoeJlVURqBPvyEAY73GcVToRnofUYmo6iL4qP 3/pv+6dPPcTpxjWic+1/9/7gT5mDRmh3KS/I+nYEA8qxl+YHSlCrfU3FNQCw4ilq Rba+yGfSM0gscHLtXRwHU+nL/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtHWaP7 1v53aoyrMLTf2F1jaGXxMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiYsvGn1r2EK6D9K+FG6fxa42sjIO/yoyzTsfE5TTtX5oR+e4mhnMbBDLmg+n zbmA0Md0wqGmYC8IC9yaWncw12lXtaQXMMJbVpDjhI2WIiFgpPNT7kJmfllEBVsK pzxtSJsB6F9vS74ru61yj+nRzqRs5eLTJyK2OrX2CQHLPYkN5wvrRkt8fRI7B8x3 OAele5OnJLNT0DgLL29KcNG/ANMcnNbRKbIqqDOtibj8GUjreLby6PQqylp2xkGv cZCJvT4rQ624r8ej78CuWxxMsX1Glwu8/mCTJCQjPdyBleGCarlzqkIixKRRiDju zGm0YkVN9fGuWSMSBVH81DLwjw== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:52 2026 by rpki-client