$ rpki-client -vvvf rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.mft File: 3xpCQmv2KDUTibR8VK31IrhKfpU.mft (raw, json) Hash identifier: LaqPuJU+TgxzcJKutouLIBK1E6lRznXttVu3D6Xt7uY= Subject key identifier: E3:6F:AF:0D:69:0F:F5:2A:DB:DC:2B:CB:83:6B:94:3F:55:0B:B6:47 Authority key identifier: DF:1A:42:42:6B:F6:28:35:13:89:B4:7C:54:AD:F5:22:B8:4A:7E:95 Certificate issuer: /CN=A91615DA/serialNumber=DF1A42426BF628351389B47C54ADF522B84A7E95 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xpCQmv2KDUTibR8VK31IrhKfpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.mft Manifest number: 15 Signing time: Sun 15 Nov 2026 09:14:14 +0000 Manifest this update: Sun 15 Nov 2026 09:14:14 +0000 Manifest next update: Sun 22 Nov 2026 09:14:14 +0000 Files and hashes: 1: 3xpCQmv2KDUTibR8VK31IrhKfpU.crl (hash: Slxxl7Gs848kIaNuaR+L/Ht6lO/FAGLjovLagdbf6UU=) 2: 0CF233F4C39A11F196E149C54911F970.roa (hash: h7b42nZA5K2gcWFt8qvtrBI/dEtjWCI5/fHbn+TORAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.crl rsync://rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xpCQmv2KDUTibR8VK31IrhKfpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 09:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91615DA, serialNumber=DF1A42426BF628351389B47C54ADF522B84A7E95 Validity Not Before: Nov 15 09:14:14 2026 GMT Not After : Nov 22 09:14:14 2026 GMT Subject: CN=6af977e6-d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:fd:91:77:df:5d:6a:44:fc:79:89:1a:5c: 10:5b:41:3d:49:56:b8:99:86:49:d0:43:f0:11:6d: b4:24:d5:f5:a6:d1:6f:4d:b2:c2:79:72:f1:fc:25: 4a:6a:79:6a:8e:4a:37:70:95:30:fc:5d:e7:1b:84: f1:1b:0e:d3:2f:90:93:0f:47:db:64:13:7c:fc:83: 11:97:ce:02:5a:bd:9c:fb:da:b9:e0:92:7e:1c:cd: cf:e4:90:b8:9f:c5:bc:5a:9d:de:76:2d:bc:22:d2: 31:f8:98:ec:50:c8:43:f0:87:4c:fa:21:e9:16:3b: 7e:08:0f:78:8c:8f:b1:0a:ac:a3:38:48:7a:89:bf: 26:10:57:8f:89:51:8c:9e:4b:68:d0:06:1a:c9:82: 38:f1:02:31:17:de:80:30:91:d6:6f:d4:d6:96:3e: c3:3e:c0:77:5b:f7:41:60:ec:36:50:8d:33:52:0f: 64:65:86:75:62:2f:69:09:4b:2c:5b:22:a2:9b:0a: 46:a2:1d:52:dd:88:58:c8:6a:ea:19:4b:ef:2e:a4: b5:21:0e:d2:48:28:2f:9f:f8:dc:48:b8:a8:1d:06: e4:fa:ef:16:89:22:1e:7d:51:a7:0c:7b:bf:d7:89: 6b:75:80:67:d5:4a:be:f0:c0:6c:9b:91:bb:76:66: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6F:AF:0D:69:0F:F5:2A:DB:DC:2B:CB:83:6B:94:3F:55:0B:B6:47 X509v3 Authority Key Identifier: keyid:DF:1A:42:42:6B:F6:28:35:13:89:B4:7C:54:AD:F5:22:B8:4A:7E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xpCQmv2KDUTibR8VK31IrhKfpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91615DA/4635CF06C39811F1A7994C1B4811F970/3xpCQmv2KDUTibR8VK31IrhKfpU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:04:8d:b8:bd:56:3b:6e:8f:1d:1a:55:96:4f:f5:b8:8e:08: 08:3a:e2:c2:07:91:d5:88:4b:01:0c:94:94:41:07:e2:34:d5: d0:3e:d4:35:21:f4:33:63:00:fd:1a:c1:d4:47:a4:e1:71:bd: 0d:73:b2:e2:4c:7c:76:55:e7:1e:cd:6e:b9:e1:d3:31:cb:4d: 9f:33:50:37:fb:dc:2f:c1:72:e4:55:e2:86:5a:f8:5f:0b:a7: f0:7a:95:32:df:c1:35:8a:b1:68:c8:2f:3e:4f:c5:85:a0:0d: 95:47:b8:54:e6:94:48:96:90:80:3b:87:3b:e7:59:56:8b:42: 70:7c:90:29:28:7e:2c:23:43:d0:b2:d6:dc:eb:1f:61:2a:f0: 6d:ac:a6:da:5a:5a:10:a4:1b:2f:02:b6:17:19:10:7a:7b:0c: 4c:14:02:b1:74:16:08:0b:85:5f:a4:a4:88:30:80:92:b3:55: 0f:9b:d7:b2:d0:f4:01:cd:83:1d:f1:7c:d7:3e:0d:f5:2f:87: 5c:a0:8b:f3:8e:ba:b1:9d:22:eb:38:fd:06:b5:20:22:da:b9: c4:f7:83:50:41:94:b5:98:e3:a2:38:c5:90:6e:5f:54:57:cc: 60:7b:58:b2:2f:27:19:85:82:8d:31:30:8c:68:50:5a:13:9d: d5:ad:09:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTVEQTExMC8GA1UEBRMoREYxQTQyNDI2QkY2MjgzNTEzODlCNDdDNTRBREY1MjJC ODRBN0U5NTAeFw0yNjExMTUwOTE0MTRaFw0yNjExMjIwOTE0MTRaMBgxFjAUBgNV BAMTDTZhZjk3N2U2LWQ2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0P2Rd99dakT8eYkaXBBbQT1JVriZhknQQ/ARbbQk1fWm0W9NssJ5cvH8JUpq eWqOSjdwlTD8XecbhPEbDtMvkJMPR9tkE3z8gxGXzgJavZz72rngkn4czc/kkLif xbxand52Lbwi0jH4mOxQyEPwh0z6IekWO34ID3iMj7EKrKM4SHqJvyYQV4+JUYye S2jQBhrJgjjxAjEX3oAwkdZv1NaWPsM+wHdb90Fg7DZQjTNSD2RlhnViL2kJSyxb IqKbCkaiHVLdiFjIauoZS+8upLUhDtJIKC+f+NxIuKgdBuT67xaJIh59UacMe7/X iWt1gGfVSr7wwGybkbt2ZmYFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU42+vDWkP 9Srb3CvLg2uUP1ULtkcwHwYDVR0jBBgwFoAU3xpCQmv2KDUTibR8VK31IrhKfpUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNURBLzQ2MzVDRjA2QzM5 ODExRjFBNzk5NEMxQjQ4MTFGOTcwLzN4cENRbXYyS0RVVGliUjhWSzMxSXJoS2Zw VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3hwQ1FtdjJLRFVUaWJSOFZLMzFJcmhLZnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NURBLzQ2MzVDRjA2QzM5ODExRjFBNzk5NEMxQjQ4MTFGOTcwLzN4cENRbXYyS0RV VGliUjhWSzMxSXJoS2ZwVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBgBI24vVY7bo8dGlWWT/W4jggIOuLCB5HViEsBDJSUQQfiNNXQPtQ1IfQzYwD9 GsHUR6Thcb0Nc7LiTHx2VecezW654dMxy02fM1A3+9wvwXLkVeKGWvhfC6fwepUy 38E1irFoyC8+T8WFoA2VR7hU5pRIlpCAO4c751lWi0JwfJApKH4sI0PQstbc6x9h KvBtrKbaWloQpBsvArYXGRB6ewxMFAKxdBYIC4VfpKSIMICSs1UPm9ey0PQBzYMd 8XzXPg31L4dcoIvzjrqxnSLrOP0GtSAi2rnE94NQQZS1mOOiOMWQbl9UV8xge1iy LycZhYKNMTCMaFBaE53VrQl0 -----END CERTIFICATE-----Generated at Sun Nov 15 17:57:03 2026 by rpki-client