$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json) Hash identifier: is9+IDFQstZh16zVfgFMYvGkCHaBgFKvkzn+79s7/yw= Subject key identifier: 10:A5:D3:C7:B9:38:73:7F:C5:90:B3:20:08:74:32:E4:62:1D:4A:13 Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft Manifest number: 0698 Signing time: Sat 14 Nov 2026 22:20:51 +0000 Manifest this update: Sat 14 Nov 2026 22:20:50 +0000 Manifest next update: Sat 21 Nov 2026 22:20:50 +0000 Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: 9jPoFV6bRukSw0iNKuA3J4k93E8JDZT7ccDTeljwyts=) 2: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: q1CDVIUDzbHZ2EEoYDXk7ZVUl9f4fiBWEYZ1wyR1YGM=) 3: 368F5308A27311EFA8731822C4F9AE02.roa (hash: nHjk6ycOjw5Wpke07bx/YMXOlW9tR7e2S+Z0rd77qg0=) 4: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: isBZNB2qni+n28qvlewtSZ2yvgYjLDrr3WrGtGkQ8nE=) 5: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: 4GfE/iu3zUpbZgXj55GFVV4bLAMptic0csSAGEfinAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Nov 14 22:20:50 2026 GMT Not After : Nov 21 22:20:50 2026 GMT Subject: CN=6af8dec3-9122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:98:34:b5:b1:44:17:1e:9c:51:c8:50:f5: 95:21:72:ba:1f:20:66:aa:62:b4:5d:67:ef:d7:22: 97:f1:17:8f:8c:eb:aa:cc:de:87:12:0a:fc:f7:c9: b3:00:63:c1:29:c5:69:b2:1e:99:ce:26:73:02:99: 51:bb:de:23:4d:2e:68:64:38:a5:fe:6e:bb:1f:69: 73:cf:0f:2b:c3:46:aa:75:7a:e5:a8:44:4e:63:b3: d1:c9:89:4d:2f:05:7f:9c:1e:0f:5e:de:5c:52:0d: 58:d8:02:a9:23:9b:eb:34:ed:7a:cb:48:2b:8b:94: 62:0c:7a:3b:fd:82:b3:08:8a:0b:c8:1d:e6:c8:24: 63:39:8a:be:d6:cd:93:dc:97:44:0b:04:72:e5:ce: 9d:e6:d7:06:d1:ad:76:06:46:03:42:2d:d6:4d:08: 3a:a5:69:e2:a9:03:41:c8:c3:a3:42:48:d5:61:89: a9:c5:db:9e:99:d8:4e:31:61:cf:2e:bd:f9:13:6f: 17:4c:e2:8e:d6:0d:96:d7:a7:be:56:ef:ca:6f:d5: 7e:03:34:2f:78:b6:a1:0d:07:f0:49:6c:3d:02:0c: f0:ab:f6:96:9f:aa:f2:37:c3:e0:d6:df:71:dc:0e: c4:84:88:bc:5d:5e:95:a0:2e:3c:e3:6a:65:53:76: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:D3:C7:B9:38:73:7F:C5:90:B3:20:08:74:32:E4:62:1D:4A:13 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1f:ba:75:0e:e0:e4:32:0f:b4:19:77:0b:5a:8b:ac:62:ac: 4a:9b:b2:7c:1a:45:01:70:5f:5b:04:b7:cd:60:01:91:ba:a1: a1:5e:dc:76:89:83:b5:bc:59:e8:0f:cc:68:7e:b2:c8:3d:ee: e2:44:cd:75:7a:44:b6:ed:96:5a:4d:3e:4e:9d:ed:06:cc:7e: af:01:1d:92:e8:9b:67:40:20:b2:81:a3:48:f6:b7:de:2c:72: 6e:05:91:d0:d4:80:e4:ae:24:e1:26:8c:86:62:96:49:f3:96: 58:87:5b:c9:44:de:b1:c8:c0:2d:fe:a6:e8:a8:e4:f3:73:3a: 6f:39:19:a3:4f:17:43:47:49:db:7e:72:23:43:14:53:19:f6: 64:1a:0f:7f:b6:ff:58:9b:a1:54:a3:07:92:c9:4e:e2:b3:35: 55:c9:fd:0c:0c:27:79:24:50:9b:ed:70:7b:bc:30:b7:b7:05: 02:9b:ee:01:b3:d5:6f:aa:96:b1:e6:22:4c:4d:42:ca:49:03: 92:33:df:83:84:fe:7e:1b:c8:ff:a8:a0:e0:6b:e0:f1:7f:82: c7:65:54:e3:0c:d7:74:3c:e1:b8:8e:f7:aa:25:dc:f4:02:4b: 78:41:eb:78:64:ff:63:3c:89:6f:22:f0:ec:b8:eb:59:9d:56: 26:8e:1c:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYxMTE0MjIyMDUwWhcNMjYxMTIxMjIyMDUwWjAYMRYwFAYD VQQDEw02YWY4ZGVjMy05MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4qYNLWxRBcenFHIUPWVIXK6HyBmqmK0XWfv1yKX8RePjOuqzN6HEgr898mz AGPBKcVpsh6ZziZzAplRu94jTS5oZDil/m67H2lzzw8rw0aqdXrlqEROY7PRyYlN LwV/nB4PXt5cUg1Y2AKpI5vrNO16y0gri5RiDHo7/YKzCIoLyB3myCRjOYq+1s2T 3JdECwRy5c6d5tcG0a12BkYDQi3WTQg6pWniqQNByMOjQkjVYYmpxduemdhOMWHP Lr35E28XTOKO1g2W16e+Vu/Kb9V+AzQveLahDQfwSWw9Agzwq/aWn6ryN8Pg1t9x 3A7EhIi8XV6VoC4842plU3akuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCl08e5 OHN/xZCzIAh0MuRiHUoTMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmB+6dQ7g5DIPtBl3C1qLrGKsSpuyfBpFAXBfWwS3zWABkbqhoV7cdomDtbxZ 6A/MaH6yyD3u4kTNdXpEtu2WWk0+Tp3tBsx+rwEdkuibZ0AgsoGjSPa33ixybgWR 0NSA5K4k4SaMhmKWSfOWWIdbyUTescjALf6m6Kjk83M6bzkZo08XQ0dJ235yI0MU Uxn2ZBoPf7b/WJuhVKMHkslO4rM1Vcn9DAwneSRQm+1we7wwt7cFApvuAbPVb6qW seYiTE1CykkDkjPfg4T+fhvI/6ig4Gvg8X+Cx2VU4wzXdDzhuI73qiXc9AJLeEHr eGT/YzyJbyLw7LjrWZ1WJo4caA== -----END CERTIFICATE-----Generated at Sun Nov 15 18:18:51 2026 by rpki-client