$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: L1OmpvUuxcbWAdKQykzM+mYSU7N4OeGoigVM++Owigg= Subject key identifier: 0E:F2:7A:6E:51:5D:17:BF:0D:34:E7:33:F7:1B:56:28:DD:1E:98:4C Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 35A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 35A4 Signing time: Sat 14 Nov 2026 14:16:46 +0000 Manifest this update: Sat 14 Nov 2026 14:16:46 +0000 Manifest next update: Sat 21 Nov 2026 14:16:46 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: GnCkXvMX7ggC2T19S6p3lGMmByxkhzDaayzbj9Ey3rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13732 (0x35a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Nov 14 14:16:46 2026 GMT Not After : Nov 21 14:16:46 2026 GMT Subject: CN=6af86d4e-0526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:98:5c:01:60:ac:9c:8f:7a:6a:99:29:b7: 8d:2b:b5:33:a1:53:16:23:29:4c:46:a4:4e:d1:c5: 31:7a:c7:e3:6b:33:6e:84:91:4a:e7:95:7b:06:28: e0:f3:5c:32:05:46:28:fa:f1:f8:5a:a3:2a:54:21: af:a6:65:bb:b5:f3:e2:f8:7d:9c:08:c5:ce:b2:ad: 0f:9d:bc:ba:5b:21:dc:08:e3:d1:ab:c6:2e:0b:0a: de:c6:79:f9:bc:e8:ef:a8:e1:73:88:62:0e:cd:20: 73:28:db:30:16:57:f3:be:c0:e3:81:fb:d4:61:de: e4:f7:d2:91:bc:f1:59:d3:50:e0:e3:5f:ed:39:cb: 3a:5c:8d:35:0b:39:6f:09:be:fd:1d:88:78:f9:f7: 9a:bc:25:80:80:88:a0:92:33:23:47:9e:0d:ff:2b: ec:63:a7:df:f7:23:d2:3d:67:93:60:a0:d1:c5:b4: 00:fc:25:f4:c5:61:25:c8:4c:3f:7a:a6:bd:d0:60: a5:d0:1f:b4:53:72:77:7b:6f:57:7c:a5:d6:a2:e6: 4d:2c:20:25:8c:35:48:5b:a7:8b:cd:ba:29:e6:e3: e3:6d:6c:d4:3a:31:36:5d:7c:56:0a:82:4a:e4:cd: ad:b8:31:d1:bc:e8:33:ed:53:68:e8:fb:4b:e8:36: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:7A:6E:51:5D:17:BF:0D:34:E7:33:F7:1B:56:28:DD:1E:98:4C X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cf:b8:39:9e:d0:92:1e:b0:20:45:68:95:ea:78:f3:d7:78: 2d:60:66:48:6b:1b:b8:b5:27:75:8b:b3:8b:de:e7:b7:e9:a9: 8a:37:49:29:54:af:89:46:0a:79:b0:b9:2b:ce:a5:bc:2b:b5: de:05:28:fe:a5:e1:0a:eb:a3:f8:ea:dd:c5:60:77:4b:32:43: 94:0f:05:e8:32:46:3f:81:a8:2c:89:a8:a9:69:53:0b:f0:27: b8:b9:6a:5c:6d:45:87:08:f6:59:f0:f8:81:b1:0e:ec:40:3f: f8:24:45:7d:bf:1a:98:40:23:31:c5:0b:5f:50:c0:d4:2c:d8: 91:18:e6:42:28:53:f4:f7:33:07:40:4f:fc:ab:e8:1e:7d:11: e9:a6:d5:8f:ef:98:88:fd:5f:e9:06:70:49:ae:64:07:b6:0e: 1c:a5:be:bc:d8:05:d9:44:47:00:b7:54:43:3c:03:98:1e:e9: f7:da:e1:59:2e:d4:0f:41:5b:0b:65:96:5d:d8:24:f7:7b:ba: 2e:e5:07:79:a7:0a:f6:87:bf:80:3b:f7:24:ad:2e:73:f9:94: 80:37:9b:e0:7f:33:65:e9:5c:b5:e1:fa:ed:80:76:61:a8:68: 58:e4:b9:14:fa:96:6e:5f:c1:c8:c6:57:a1:18:3f:16:e1:47: 1a:fb:68:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjYxMTE0MTQxNjQ2WhcNMjYxMTIxMTQxNjQ2WjAYMRYwFAYD VQQDEw02YWY4NmQ0ZS0wNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF6YXAFgrJyPemqZKbeNK7UzoVMWIylMRqRO0cUxesfjazNuhJFK55V7Bijg 81wyBUYo+vH4WqMqVCGvpmW7tfPi+H2cCMXOsq0Pnby6WyHcCOPRq8YuCwrexnn5 vOjvqOFziGIOzSBzKNswFlfzvsDjgfvUYd7k99KRvPFZ01Dg41/tOcs6XI01Czlv Cb79HYh4+feavCWAgIigkjMjR54N/yvsY6ff9yPSPWeTYKDRxbQA/CX0xWElyEw/ eqa90GCl0B+0U3J3e29XfKXWouZNLCAljDVIW6eLzbop5uPjbWzUOjE2XXxWCoJK 5M2tuDHRvOgz7VNo6PtL6DYuFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7yem5R XRe/DTTnM/cbVijdHphMMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP8+4OZ7Qkh6wIEVolep489d4LWBmSGsbuLUndYuzi97nt+mpijdJKVSviUYK ebC5K86lvCu13gUo/qXhCuuj+OrdxWB3SzJDlA8F6DJGP4GoLImoqWlTC/AnuLlq XG1Fhwj2WfD4gbEO7EA/+CRFfb8amEAjMcULX1DA1CzYkRjmQihT9PczB0BP/Kvo Hn0R6abVj++YiP1f6QZwSa5kB7YOHKW+vNgF2URHALdUQzwDmB7p99rhWS7UD0Fb C2WWXdgk93u6LuUHeacK9oe/gDv3JK0uc/mUgDeb4H8zZelcteH67YB2YahoWOS5 FPqWbl/ByMZXoRg/FuFHGvtoDA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:34:54 2026 by rpki-client