$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft File: 4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json) Hash identifier: 5UIr8Pn6I5GyHRLG5vbDg/mD001PyhzsK1y2FZhUngg= Subject key identifier: 10:17:F3:06:84:C8:24:BC:A1:48:D9:C7:15:D2:9B:D3:B6:D1:B0:C4 Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft Manifest number: 02A6 Signing time: Sun 15 Nov 2026 01:45:21 +0000 Manifest this update: Sun 15 Nov 2026 01:45:20 +0000 Manifest next update: Sun 22 Nov 2026 01:45:20 +0000 Files and hashes: 1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: WadiFjCK0Jx/hb3LmdGDVLGkrZNau1LKLSLgOqoSUn8=) 2: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=) 3: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=) 4: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=) 5: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Nov 15 01:45:20 2026 GMT Not After : Nov 22 01:45:20 2026 GMT Subject: CN=6af90eb0-0a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:a8:ea:51:71:cc:b1:82:bc:a8:61:d7:28: e9:1b:2c:b9:be:69:f8:bd:27:b2:b7:11:6e:c3:9f: 94:f3:4d:26:c5:8e:7c:29:9d:3c:27:1d:4e:4f:9f: 7c:04:a5:5e:5d:fb:20:78:68:ed:58:7b:73:27:8b: 45:f6:9a:3a:0b:d6:f1:65:4b:59:01:a4:f8:61:b3: 2c:2d:e3:f2:19:1c:88:b5:bb:92:0f:5f:5e:17:21: fe:80:87:65:fd:67:ff:8c:33:11:d4:dc:b5:bb:58: d4:a4:4d:66:45:4a:93:39:ac:d0:c1:75:23:5d:8c: 35:b7:dc:92:d6:ca:c9:67:ef:2b:84:09:96:42:8d: 92:b7:41:f4:d3:a3:6d:4b:18:72:7a:22:10:df:6a: c1:6d:0d:69:9c:85:18:bc:ca:c5:62:e7:1c:ef:f3: e1:d7:dd:ad:b3:0c:08:07:60:1a:db:93:f5:9d:61: f2:bb:bf:da:6d:44:75:84:4c:44:82:dd:8c:50:4c: c1:81:01:1c:1a:ad:52:83:56:70:33:60:97:f7:09: e8:6e:7a:48:64:4e:48:18:95:52:29:96:b7:a8:0b: 9c:70:fc:ec:7c:e5:c4:ec:98:a3:a8:2c:f3:d8:d0: 30:df:45:6e:7a:58:a5:0b:02:07:73:ef:ea:d7:1a: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:17:F3:06:84:C8:24:BC:A1:48:D9:C7:15:D2:9B:D3:B6:D1:B0:C4 X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:75:fe:33:2e:dd:4f:97:85:31:7e:aa:b1:96:05:e0:f1:d2: d7:d5:95:8f:2b:02:bf:b3:35:5f:73:26:74:b8:28:69:31:9f: 85:dc:0e:35:f9:3c:7e:e3:f1:5f:e8:d0:9d:36:48:5d:07:35: 71:52:fe:d4:a7:6a:56:bd:ca:f9:ae:28:41:11:5c:a2:d4:13: 92:11:f1:75:16:81:be:ba:41:61:01:49:3a:fc:27:c1:c9:0e: 93:cc:91:04:40:6d:48:e4:30:93:b1:e1:fc:4b:4d:39:06:60: f3:43:15:eb:b0:9b:59:0b:6b:88:e3:9b:05:7d:ae:17:a0:c4: 7c:57:aa:30:df:dd:09:ff:a6:0e:98:29:da:5c:78:06:17:57: ba:08:f9:6c:d4:73:39:3d:bd:8d:c0:44:cc:ad:86:f2:b3:43: fc:45:58:1b:a1:38:92:af:ef:62:95:a4:d8:ae:12:a7:0c:8f: f7:d4:51:02:16:26:1d:70:09:7a:ba:a9:78:1e:6d:ce:9b:e3: a8:b5:41:ab:7e:96:20:d6:8d:dc:e9:7c:e8:e1:24:e5:41:32: a6:1c:45:a0:ff:4b:52:38:a5:2c:78:40:84:b5:e7:23:26:87: 6c:50:13:99:4a:5b:35:c2:c6:78:34:41:8d:33:2e:77:e7:40: b8:93:4e:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjYxMTE1MDE0NTIwWhcNMjYxMTIyMDE0NTIwWjAYMRYwFAYD VQQDEw02YWY5MGViMC0wYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Lmo6lFxzLGCvKhh1yjpGyy5vmn4vSeytxFuw5+U800mxY58KZ08Jx1OT598 BKVeXfsgeGjtWHtzJ4tF9po6C9bxZUtZAaT4YbMsLePyGRyItbuSD19eFyH+gIdl /Wf/jDMR1Ny1u1jUpE1mRUqTOazQwXUjXYw1t9yS1srJZ+8rhAmWQo2St0H006Nt SxhyeiIQ32rBbQ1pnIUYvMrFYucc7/Ph192tswwIB2Aa25P1nWHyu7/abUR1hExE gt2MUEzBgQEcGq1Sg1ZwM2CX9wnobnpIZE5IGJVSKZa3qAuccPzsfOXE7JijqCzz 2NAw30VuelilCwIHc+/q1xr1QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAX8waE yCS8oUjZxxXSm9O20bDEMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEM1My9DRTQ0NUJEMERBNUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFp Sk1ITERKRmV5NFR1S0xXcW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnX+My7dT5eFMX6qsZYF4PHS19WVjysCv7M1X3MmdLgoaTGfhdwONfk8fuPx X+jQnTZIXQc1cVL+1KdqVr3K+a4oQRFcotQTkhHxdRaBvrpBYQFJOvwnwckOk8yR BEBtSOQwk7Hh/EtNOQZg80MV67CbWQtriOObBX2uF6DEfFeqMN/dCf+mDpgp2lx4 BhdXugj5bNRzOT29jcBEzK2G8rND/EVYG6E4kq/vYpWk2K4SpwyP99RRAhYmHXAJ erqpeB5tzpvjqLVBq36WINaN3Ol86OEk5UEyphxFoP9LUjilLHhAhLXnIyaHbFAT mUpbNcLGeDRBjTMud+dAuJNO+g== -----END CERTIFICATE-----Generated at Sun Nov 15 12:02:33 2026 by rpki-client