$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: vCuABa/dXfxlrwUci7qX+6ohD97nIoeMUrHlX8xyYw0= Subject key identifier: C4:7D:6E:99:30:05:FC:5B:CF:A3:9F:9A:33:E0:33:CE:47:18:F8:5A Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 3637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35F2 Signing time: Sat 14 Nov 2026 14:26:48 +0000 Manifest this update: Sat 14 Nov 2026 14:26:48 +0000 Manifest next update: Sat 21 Nov 2026 14:26:48 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: ry31OU6AYWMCP3O+5SuVFtUyZWrCQzRs5JmKybpLO90=) 2: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 3: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 4: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) 5: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13879 (0x3637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Nov 14 14:26:48 2026 GMT Not After : Nov 21 14:26:48 2026 GMT Subject: CN=6af86fa8-79a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:ac:41:ec:d6:1e:31:01:1e:ab:da:6a:f6: f4:d2:97:05:cc:53:88:7a:98:e9:d5:e8:99:30:de: ac:24:8f:92:15:c7:be:c1:80:1d:80:57:ce:17:65: d2:1d:dc:91:31:66:b2:7c:4f:04:43:95:d0:fc:fe: 79:25:fa:3e:39:f9:b4:71:a3:f8:bf:b4:ea:23:14: 90:af:a5:64:da:d9:df:41:e8:df:d0:85:0f:57:73: 02:7d:a1:f1:48:45:f2:ac:0e:e7:ae:47:0b:8c:28: d9:2a:b3:bd:29:19:fc:73:a9:0c:fd:8a:a5:0e:08: 37:10:af:eb:8a:f0:b1:82:3d:fb:e1:87:75:38:80: 6c:c0:06:df:1e:92:96:2c:d0:fa:d6:ea:16:cd:c8: e6:4c:1c:74:60:ac:a9:0e:c3:60:44:72:a4:b2:e1: d8:c0:80:91:ba:ce:5a:5b:61:54:c8:1a:cb:31:0c: 30:27:85:31:0e:b0:d7:4d:8d:a5:91:85:99:c0:10: ab:2e:0b:9d:cd:8a:d2:75:6a:e8:63:91:81:18:1f: d5:97:73:17:26:f0:30:5a:e4:ce:90:32:f1:11:f5: be:c7:2b:d4:35:b5:62:18:d5:77:86:71:54:5f:6c: 73:23:a7:6e:59:ff:fe:ec:cb:49:e3:aa:cc:f7:1f: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:6E:99:30:05:FC:5B:CF:A3:9F:9A:33:E0:33:CE:47:18:F8:5A X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:70:52:2c:41:3f:31:cf:fb:35:13:6e:0c:98:00:60:48:d4: a5:0e:83:51:5f:15:6c:89:ad:b6:39:b3:e9:82:0a:f7:4a:5e: 61:1c:b1:e4:15:18:f5:ec:05:d1:98:b9:57:3d:9a:b2:28:33: ad:5b:df:8e:a9:9b:55:da:76:b5:93:6b:8e:ca:6c:b1:5f:da: 7b:aa:28:61:b8:14:b4:d8:76:7e:3a:b0:02:d7:ff:c4:50:b5: d5:3c:ea:6e:dc:69:7e:2e:c8:09:bf:92:9d:f9:6e:54:93:e9: 92:e0:4e:d8:1d:ec:9e:fb:68:6b:45:fa:61:30:f9:bd:d3:81: 66:f0:b7:d7:17:24:3d:c2:16:eb:91:af:61:09:bb:8e:26:b2: b7:47:fd:01:e8:5d:fc:68:13:30:9c:e4:5f:e2:a5:3b:5d:fb: 04:da:1f:91:56:26:d7:bf:d7:00:15:67:1f:e6:b1:f9:3b:60: 35:1c:d4:7b:84:df:0f:a1:86:c3:8d:31:c8:a4:fb:3d:b0:2a: fd:81:05:bb:4d:6b:e7:88:a3:25:62:37:8e:ce:b1:61:5e:0f: 6a:57:e0:bf:f7:eb:08:be:cb:c8:11:6b:35:36:b9:5f:e9:5e: b9:87:38:f6:95:73:1a:65:3a:b0:ef:4c:14:3b:f3:7a:78:9c: 93:6a:75:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYxMTE0MTQyNjQ4WhcNMjYxMTIxMTQyNjQ4WjAYMRYwFAYD VQQDEw02YWY4NmZhOC03OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LesQezWHjEBHqvaavb00pcFzFOIepjp1eiZMN6sJI+SFce+wYAdgFfOF2XS HdyRMWayfE8EQ5XQ/P55Jfo+Ofm0caP4v7TqIxSQr6Vk2tnfQejf0IUPV3MCfaHx SEXyrA7nrkcLjCjZKrO9KRn8c6kM/YqlDgg3EK/rivCxgj374Yd1OIBswAbfHpKW LND61uoWzcjmTBx0YKypDsNgRHKksuHYwICRus5aW2FUyBrLMQwwJ4UxDrDXTY2l kYWZwBCrLgudzYrSdWroY5GBGB/Vl3MXJvAwWuTOkDLxEfW+xyvUNbViGNV3hnFU X2xzI6duWf/+7MtJ46rM9x93MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMR9bpkw Bfxbz6OfmjPgM85HGPhaMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwXBSLEE/Mc/7NRNuDJgAYEjUpQ6DUV8VbImttjmz6YIK90peYRyx5BUY9ewF 0Zi5Vz2asigzrVvfjqmbVdp2tZNrjspssV/ae6ooYbgUtNh2fjqwAtf/xFC11Tzq btxpfi7ICb+SnfluVJPpkuBO2B3snvtoa0X6YTD5vdOBZvC31xckPcIW65GvYQm7 jiayt0f9Aehd/GgTMJzkX+KlO137BNofkVYm17/XABVnH+ax+TtgNRzUe4TfD6GG w40xyKT7PbAq/YEFu01r54ijJWI3js6xYV4Palfgv/frCL7LyBFrNTa5X+leuYc4 9pVzGmU6sO9MFDvzenick2p16g== -----END CERTIFICATE-----Generated at Sun Nov 15 11:32:17 2026 by rpki-client