$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: Qgd+O9B8f11oT9XqRmjwIbmSqVIZHjH/KAPP7JLi8Gs= Subject key identifier: 69:02:D9:73:B1:6C:04:2C:93:A3:0A:75:61:F4:94:84:32:B5:D6:BB Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: FF Signing time: Sun 15 Nov 2026 06:35:46 +0000 Manifest this update: Sun 15 Nov 2026 06:35:45 +0000 Manifest next update: Sun 22 Nov 2026 06:35:45 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: XZSNxQXNBUkMKlk/QqmFkJiUNSvFrsuhCD7MQMeNaac=) 2: 61491434F5DE11F0B5B96D914B6F56BC.roa (hash: o6u9pTVb/fsVzQCAUHgZ2//rjBLJG8uFcB0CxSdPaBw=) 3: 5D97D2A6F28911F0A11FA9356B6F56BC.roa (hash: +bZ+kOkipeVBVVblcr5mi6teHSs9rLHb8qeTT909fkg=) 4: 5E7453DEF28911F0A11FA9356B6F56BC.roa (hash: ESaLbn4GrsbC84+sF2l6KUmnEVQ4FDEGRNBB+s4Butw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Nov 15 06:35:45 2026 GMT Not After : Nov 22 06:35:45 2026 GMT Subject: CN=6af952c2-680c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:ad:b0:ed:af:7b:a5:1e:a1:8d:d1:03:3c: 50:50:43:1a:e1:2e:da:4d:a4:51:0b:d7:bb:db:99: b0:3f:c5:93:60:80:96:9d:bd:13:0c:43:a9:35:74: ff:bf:a4:0d:4e:48:ce:7c:12:1b:5b:a6:59:fa:84: 0e:e9:2d:0d:26:c9:da:bc:6a:8c:95:c4:c2:20:34: 3b:12:a9:0e:36:5c:5c:56:a5:e4:d2:06:0a:cb:2b: ba:80:a8:f0:1d:0b:24:15:86:ab:8d:46:d2:76:e8: c2:69:3f:62:0d:74:32:cf:f4:02:c7:ef:7e:3a:7b: f5:ab:92:a7:d9:ad:5c:7c:06:ee:95:2a:78:e3:46: b7:5c:55:f9:01:8b:07:ea:e8:3c:1f:4a:da:5c:33: 8d:bc:19:68:46:ae:7e:45:e7:a2:67:d6:c8:68:9f: 54:2a:e1:cc:ce:c5:65:f6:c1:7a:0b:c9:e3:05:6b: d1:e6:a6:ed:94:c1:1e:08:e2:d4:ee:01:40:33:3c: 2b:b9:b5:48:fe:0e:fe:38:b8:13:54:93:29:fe:63: 8b:9f:98:6a:af:95:be:f3:8e:54:23:34:cd:e1:95: e5:b8:e2:12:1a:35:12:61:4b:6f:78:ba:88:88:53: 09:58:3d:96:96:29:54:83:0e:3d:05:26:23:92:a3: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:D9:73:B1:6C:04:2C:93:A3:0A:75:61:F4:94:84:32:B5:D6:BB X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ee:40:a2:fc:be:c5:4f:51:f7:77:a6:bb:ce:b7:20:bd:f1: ae:1c:4c:e5:5f:32:cc:39:7d:c2:1c:63:6a:f5:d8:54:39:57: 5c:8b:a0:76:3c:c8:9b:ad:7c:9c:28:7a:bf:d0:9d:6b:b0:59: 8f:15:7c:7f:6c:ac:e7:d4:f2:77:f8:ef:19:3d:ee:c6:0f:34: b5:19:c8:c9:e4:79:98:5c:84:97:28:79:43:99:20:ac:52:60: 61:bb:6f:0d:4a:71:6c:16:60:79:52:cf:c9:bb:11:41:59:18: 27:79:53:24:e5:7d:7e:fc:49:18:29:c1:47:99:46:d9:29:5c: ab:1c:b7:98:f1:3f:9b:d5:82:9a:6b:76:93:11:bc:89:00:ac: d9:b0:32:fd:e1:a5:bc:09:eb:ec:4a:0a:68:a5:bc:d2:32:e9: f9:3d:68:1c:56:96:81:d4:a0:10:1c:fe:f9:49:67:26:12:e3: b1:f2:a5:9e:80:cb:ac:d2:8e:48:ed:d8:e5:58:b5:3f:0d:0d: 78:72:b8:73:18:04:9c:71:1f:4f:9a:87:4e:19:80:44:78:04: b1:6f:9a:a9:44:77:aa:7c:70:68:15:37:e4:ee:e0:d8:f3:72: 88:9b:03:13:24:42:59:ec:c0:b9:47:57:2e:36:56:6b:b4:61: 4f:37:df:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdDM0YxMTAvBgNVBAUTKEU1MjEwN0Y0QzFERTA2NDUzRUJENkU2OUI0QkY4MjQ0 NzMxNkFBMUQwHhcNMjYxMTE1MDYzNTQ1WhcNMjYxMTIyMDYzNTQ1WjAYMRYwFAYD VQQDEw02YWY5NTJjMi02ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAOtsO2ve6UeoY3RAzxQUEMa4S7aTaRRC9e725mwP8WTYICWnb0TDEOpNXT/ v6QNTkjOfBIbW6ZZ+oQO6S0NJsnavGqMlcTCIDQ7EqkONlxcVqXk0gYKyyu6gKjw HQskFYarjUbSdujCaT9iDXQyz/QCx+9+Onv1q5Kn2a1cfAbulSp440a3XFX5AYsH 6ug8H0raXDONvBloRq5+ReeiZ9bIaJ9UKuHMzsVl9sF6C8njBWvR5qbtlMEeCOLU 7gFAMzwrubVI/g7+OLgTVJMp/mOLn5hqr5W+845UIzTN4ZXluOISGjUSYUtveLqI iFMJWD2WlilUgw49BSYjkqP56wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkC2XOx bAQsk6MKdWH0lIQytda7MB8GA1UdIwQYMBaAFOUhB/TB3gZFPr1uabS/gkRzFqod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0MzRi9DREIzNkEzQTcz MzMxMUYwODM5Q0RDODNDNEY5QUUwMi81U0VIOU1IZUJrVS12VzVwdEwtQ1JITVdx aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3FoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0MzRi9DREIzNkEzQTczMzMxMUYwODM5Q0RDODNDNEY5QUUwMi81U0VIOU1IZUJr VS12VzVwdEwtQ1JITVdxaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0O5Aovy+xU9R93emu863IL3xrhxM5V8yzDl9whxjavXYVDlXXIugdjzIm618 nCh6v9Cda7BZjxV8f2ys59Tyd/jvGT3uxg80tRnIyeR5mFyElyh5Q5kgrFJgYbtv DUpxbBZgeVLPybsRQVkYJ3lTJOV9fvxJGCnBR5lG2Slcqxy3mPE/m9WCmmt2kxG8 iQCs2bAy/eGlvAnr7EoKaKW80jLp+T1oHFaWgdSgEBz++UlnJhLjsfKlnoDLrNKO SO3Y5Vi1Pw0NeHK4cxgEnHEfT5qHThmARHgEsW+aqUR3qnxwaBU35O7g2PNyiJsD EyRCWezAuUdXLjZWa7RhTzffrQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:28:54 2026 by rpki-client