$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: C7mx7zNXT+l4vVatqqm5mJyeyIc9wa6YEfB1EYXQJtc= Subject key identifier: CA:81:B6:7F:71:22:F5:62:06:F4:6C:42:4E:EF:13:41:13:65:41:89 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 35B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 35A4 Signing time: Sat 14 Nov 2026 15:03:36 +0000 Manifest this update: Sat 14 Nov 2026 15:03:36 +0000 Manifest next update: Sat 21 Nov 2026 15:03:36 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: Pn2PiXuRyStOIYM4mJDFfsxtHl3AZYSXumZRmfejf+g=) 2: ALhC9fBJ4lqt5QSCxaCmGiFJ5no.asa (hash: ZPxubMqA/Fwc+y31fjKis0DKJ74Mwi3bj5ZXFUxS0O4=) 3: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: 3k5rPuf+iivzRtYxRyE0uBZwmWjh8FkzWuVh8OVxnKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13744 (0x35b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Nov 14 15:03:36 2026 GMT Not After : Nov 21 15:03:36 2026 GMT Subject: CN=6af87848-1c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:f7:bd:eb:fd:ab:b5:10:c9:5e:ac:96:e3: 14:e1:37:f9:7b:58:fb:50:93:9a:96:7c:54:05:3f: 46:f5:dd:3b:38:d8:93:fe:36:5c:37:5d:34:c1:fa: ff:ba:60:86:2f:c4:3b:5a:25:c7:fa:da:76:fe:da: 0f:91:32:8b:6a:98:39:67:e3:66:87:f2:d1:35:52: 68:a4:8d:c2:1a:27:7c:47:49:2a:a4:2e:e0:3d:62: 6f:39:49:13:36:15:bf:30:62:3f:58:8a:a8:56:41: 19:4a:98:2c:31:e6:45:3e:df:68:18:f1:f3:9b:8a: 1a:a5:74:b3:a3:94:de:ac:e7:bc:af:fc:82:5f:36: 2a:25:6c:99:86:bc:64:c2:1c:b7:21:61:8e:0c:87: 5a:ec:9c:85:aa:c8:25:e0:12:ad:24:16:b7:d7:95: ec:4e:0d:52:b5:1f:11:74:21:cd:0e:ac:a6:75:ce: db:7b:eb:23:84:3f:3e:99:c1:a8:8f:67:28:d6:65: 19:ef:42:27:ff:ca:0b:ee:67:c5:ba:91:af:f7:0b: 51:d0:ee:87:64:71:0d:7a:af:e9:b1:08:c9:a2:28: f9:cd:8d:a8:43:18:dc:15:96:72:a4:a2:e0:98:b7: 6c:eb:28:22:bb:f4:30:e2:d7:7f:4e:9a:62:33:bf: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:B6:7F:71:22:F5:62:06:F4:6C:42:4E:EF:13:41:13:65:41:89 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:64:36:75:65:cd:f1:72:98:8d:0d:8b:63:70:3f:4f:b6:c5: c2:6c:c5:b4:6b:40:21:2c:3a:b0:84:fd:08:b1:eb:4e:2f:5e: 2e:d7:1e:c9:49:a2:77:d7:17:4b:01:a9:45:4f:a3:95:d3:79: e4:8b:93:3f:7e:38:29:c1:9c:e2:24:1f:0a:2c:88:c4:78:e8: c2:7f:ae:77:e7:88:6b:7f:af:50:10:88:fc:7d:25:99:a4:a4: bd:01:48:7a:21:d6:88:99:8d:13:03:74:74:b6:38:ef:64:cd: 31:14:70:1c:59:94:5a:98:7a:71:ce:7c:e3:28:ac:4c:b2:2d: 1f:02:ae:62:3d:9b:3d:bb:16:b4:9f:13:a5:ea:d9:d3:21:1a: 0e:bb:a4:ce:43:9b:09:df:01:3d:c2:55:54:cb:22:10:47:38: b2:19:1d:f3:15:a1:13:66:8f:c1:9b:98:59:9b:85:9e:9e:96: 6a:40:cb:87:2c:18:5c:37:e7:3c:db:64:13:95:41:8e:e2:89: bd:fc:8b:b4:b5:af:db:13:d8:d0:ed:b0:05:cc:d0:da:99:e6: d0:36:83:96:86:c6:88:f8:08:25:02:5c:c6:fd:f5:a2:de:bf: b2:62:fd:2d:70:dc:86:0d:db:cd:4f:d8:c1:f3:89:53:fb:40: 53:0c:e7:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjYxMTE0MTUwMzM2WhcNMjYxMTIxMTUwMzM2WjAYMRYwFAYD VQQDEw02YWY4Nzg0OC0xYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/33vev9q7UQyV6sluMU4Tf5e1j7UJOalnxUBT9G9d07ONiT/jZcN100wfr/ umCGL8Q7WiXH+tp2/toPkTKLapg5Z+Nmh/LRNVJopI3CGid8R0kqpC7gPWJvOUkT NhW/MGI/WIqoVkEZSpgsMeZFPt9oGPHzm4oapXSzo5TerOe8r/yCXzYqJWyZhrxk why3IWGODIda7JyFqsgl4BKtJBa315XsTg1StR8RdCHNDqymdc7be+sjhD8+mcGo j2co1mUZ70In/8oL7mfFupGv9wtR0O6HZHENeq/psQjJoij5zY2oQxjcFZZypKLg mLds6ygiu/Qw4td/TppiM7/3bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqBtn9x IvViBvRsQk7vE0ETZUGJMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjWQ2dWXN8XKYjQ2LY3A/T7bFwmzFtGtAISw6sIT9CLHrTi9eLtceyUmid9cX SwGpRU+jldN55IuTP344KcGc4iQfCiyIxHjown+ud+eIa3+vUBCI/H0lmaSkvQFI eiHWiJmNEwN0dLY472TNMRRwHFmUWph6cc584yisTLItHwKuYj2bPbsWtJ8TperZ 0yEaDrukzkObCd8BPcJVVMsiEEc4shkd8xWhE2aPwZuYWZuFnp6WakDLhywYXDfn PNtkE5VBjuKJvfyLtLWv2xPY0O2wBczQ2pnm0DaDlobGiPgIJQJcxv31ot6/smL9 LXDchg3bzU/YwfOJU/tAUwznSg== -----END CERTIFICATE-----Generated at Sat Nov 14 20:55:25 2026 by rpki-client