$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: rZoeXa+Zn1ob88WjGMd6DxRR9ltXYs4zw6KzkuSUxR0= Subject key identifier: DA:26:ED:7E:B7:F1:11:88:2D:4A:2C:9B:AC:92:D8:A0:88:DF:08:4D Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 0665 Signing time: Sat 14 Nov 2026 22:29:13 +0000 Manifest this update: Sat 14 Nov 2026 22:29:13 +0000 Manifest next update: Sat 21 Nov 2026 22:29:13 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: nVn8et04rdPLXvkxKlqw1OupCb7bz9tdfItqJGCFCUE=) 2: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=) 3: 928880FE8B0F11F182DCACFD3211F970.roa (hash: 97DMfE8QWEUEG5Cfx4YrvAURPmPn7eR9nJeGo/mBqD0=) 4: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Nov 14 22:29:13 2026 GMT Not After : Nov 21 22:29:13 2026 GMT Subject: CN=6af8e0b9-4803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:38:06:5b:91:e0:28:e9:fd:4a:1e:22:c3: c5:96:77:91:d5:0a:bf:8c:df:93:9b:25:2a:a9:a1: 97:68:46:be:5e:1c:8a:6e:f1:27:c5:b8:16:32:f6: b0:d0:1a:e6:38:3c:8b:ee:c7:80:48:61:96:7c:a4: 05:0c:49:44:5c:fb:83:63:88:58:94:19:53:4d:d9: da:00:c3:20:33:9c:eb:dc:4f:97:20:cf:17:ea:07: cb:15:41:56:95:2e:1a:2a:83:24:75:51:fc:8d:5f: 9c:e6:c2:f9:b4:95:b5:ae:5c:43:9c:86:f2:6f:02: b2:c8:c1:86:24:44:5d:e5:62:2e:aa:51:d3:f8:27: 9a:0e:d8:28:85:10:a9:a4:0f:94:8d:f9:98:e2:cb: d7:ec:2e:a1:39:9b:2d:12:28:6e:85:48:cc:80:6a: ac:21:24:80:8d:77:73:a9:28:43:40:fc:1c:f1:de: b6:a8:11:6b:dd:27:d0:d0:22:63:83:42:20:cf:a8: 95:72:1b:ea:f0:7a:47:3b:ef:6d:10:d2:f2:b3:ac: 9b:41:d1:22:27:14:01:b1:38:6e:a9:df:0c:31:96: 4b:9d:dd:5d:55:8f:6d:a9:6c:a5:0a:72:c2:55:28: 72:1d:ed:41:80:5d:e1:10:e0:df:69:7a:50:ca:6b: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:26:ED:7E:B7:F1:11:88:2D:4A:2C:9B:AC:92:D8:A0:88:DF:08:4D X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:71:62:e5:db:5b:ea:40:35:7d:12:97:00:3d:1c:81:48:84: f4:06:23:a4:a3:9a:f3:9b:6f:58:e5:31:d0:9a:2f:fb:52:c3: 7f:4c:4e:0b:7c:ad:7a:2b:68:92:bd:a4:4b:73:44:72:64:14: 4e:30:ba:4d:b7:3e:21:d3:d4:32:cc:b5:f3:94:23:d8:15:3e: d6:45:18:b8:b4:4d:c4:8f:b3:9e:69:d8:7b:89:46:06:c0:54: f3:8f:d7:02:be:b3:5a:63:bf:a9:0b:57:e7:75:8f:58:d0:86: fc:c2:05:0d:7d:0c:e8:7f:ad:f6:21:84:8a:84:cc:f9:aa:eb: aa:ff:c8:90:07:18:b9:25:56:a9:31:b0:30:71:3b:b0:55:1d: 2b:1e:bf:33:96:3d:2a:c3:8e:d6:9a:08:d7:4d:18:4d:16:22: 10:d0:c4:b4:97:ab:e6:cb:4a:7c:d6:32:e4:31:69:0d:24:39: 2a:2c:ac:09:2f:d0:41:a7:d0:fb:27:30:69:dd:05:3b:5a:10: ec:45:84:dc:36:63:3f:e2:85:72:8c:e6:a3:6a:59:eb:1f:a9: d7:b8:dc:47:68:8d:09:af:ef:1b:c6:e0:1a:1e:53:bc:85:aa: 38:fd:92:19:2f:63:9c:e2:5d:bf:43:70:2a:a5:94:8a:3b:69: b7:67:aa:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjYxMTE0MjIyOTEzWhcNMjYxMTIxMjIyOTEzWjAYMRYwFAYD VQQDEw02YWY4ZTBiOS00ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW84BluR4Cjp/UoeIsPFlneR1Qq/jN+TmyUqqaGXaEa+XhyKbvEnxbgWMvaw 0BrmODyL7seASGGWfKQFDElEXPuDY4hYlBlTTdnaAMMgM5zr3E+XIM8X6gfLFUFW lS4aKoMkdVH8jV+c5sL5tJW1rlxDnIbybwKyyMGGJERd5WIuqlHT+CeaDtgohRCp pA+UjfmY4svX7C6hOZstEihuhUjMgGqsISSAjXdzqShDQPwc8d62qBFr3SfQ0CJj g0Igz6iVchvq8HpHO+9tENLys6ybQdEiJxQBsThuqd8MMZZLnd1dVY9tqWylCnLC VShyHe1BgF3hEODfaXpQyms/eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNom7X63 8RGILUosm6yS2KCI3whNMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdHFi5dtb6kA1fRKXAD0cgUiE9AYjpKOa85tvWOUx0Jov+1LDf0xOC3yteito kr2kS3NEcmQUTjC6Tbc+IdPUMsy185Qj2BU+1kUYuLRNxI+znmnYe4lGBsBU84/X Ar6zWmO/qQtX53WPWNCG/MIFDX0M6H+t9iGEioTM+arrqv/IkAcYuSVWqTGwMHE7 sFUdKx6/M5Y9KsOO1poI100YTRYiENDEtJer5stKfNYy5DFpDSQ5KiysCS/QQafQ +ycwad0FO1oQ7EWE3DZjP+KFcozmo2pZ6x+p17jcR2iNCa/vG8bgGh5TvIWqOP2S GS9jnOJdv0NwKqWUijtpt2eqmg== -----END CERTIFICATE-----Generated at Sun Nov 15 01:42:25 2026 by rpki-client