$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: UPV/rbfLJ0ij7+AlNXmK9klAHfVtgIHTjIui4hnIQng= Subject key identifier: C0:42:51:29:49:09:69:8C:EF:82:D4:E5:2E:01:98:69:24:FC:B9:99 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1774 Signing time: Sat 14 Nov 2026 16:31:55 +0000 Manifest this update: Sat 14 Nov 2026 16:31:54 +0000 Manifest next update: Sat 21 Nov 2026 16:31:54 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: b+0SJyJFxfNo1iGRAuoUnc55Q5FYlgpb3fq4pX0Of74=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: dU1yskZMlQoOBOEUim7mpkF90uQM5P4GdS9XBXL5d6Y=) 3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: lM2+lNkRgg0+N9l8V1gAYVqmFODjgvHitRJVHesM3xo=) 4: E259315C57CA11EA8D931284C4F9AE02.roa (hash: 2IJMCnmvY6PYsFvIoiKqGJsi5W32855ijAqfD1IGSkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6036 (0x1794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Nov 14 16:31:54 2026 GMT Not After : Nov 21 16:31:54 2026 GMT Subject: CN=6af88cfb-70d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:ce:5d:7f:fd:0b:8c:c1:ed:3b:c7:1d:01: 9b:88:5e:0a:ea:a8:4d:65:21:6a:1b:64:01:42:52: df:16:6e:3d:2e:da:90:0c:20:20:6d:e8:d9:1f:1c: 4b:32:80:40:af:56:bc:51:2a:c8:43:44:40:e4:e4: 69:40:87:12:95:90:52:31:c8:91:37:09:63:24:c3: 26:64:07:b0:01:be:bc:34:e3:f5:56:07:65:96:b6: c6:65:f6:6d:01:31:d4:73:da:3c:ec:21:b4:a1:cd: c4:2a:8d:d6:a9:d7:f2:2c:ff:1f:d6:53:0a:0b:b4: b5:8f:87:ed:f4:ef:47:44:81:83:d1:15:13:b4:01: 7d:16:b3:65:1e:6b:c8:ad:35:a6:95:27:08:85:22: 3a:d8:69:5c:dd:d6:dd:70:f9:47:a5:4c:6e:03:6c: 52:e2:32:b0:b9:1a:f9:66:61:c5:44:36:d4:54:bb: 56:dd:f9:2d:d5:28:7c:47:ec:62:08:85:b7:5a:43: 72:fe:38:22:29:4d:af:8b:6f:38:3d:24:7a:22:7c: 06:5c:9b:44:ae:33:8c:89:ad:07:91:98:f7:de:ba: eb:77:9a:dc:50:50:cd:2d:d7:0f:dc:4d:31:9c:da: 03:1f:6f:64:c9:6d:67:9f:8f:19:2b:37:63:44:68: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:51:29:49:09:69:8C:EF:82:D4:E5:2E:01:98:69:24:FC:B9:99 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:77:0b:cd:1c:6b:3f:38:43:e8:a6:f7:ef:6c:dd:a3:16: 56:ed:71:c7:d5:4b:ce:f6:20:21:d2:be:41:6d:0d:86:61:22: 38:59:60:ce:d7:fe:2b:2f:0e:a6:59:b2:ae:95:6c:47:11:19: 39:6b:0e:89:2a:89:7b:70:e1:fb:df:43:bd:da:fb:aa:79:c8: 29:54:ea:a6:2a:6a:bb:6b:0f:7e:7a:de:ed:cc:f3:2f:ae:7b: f6:bf:7a:fd:22:a8:4c:c9:b4:fa:fb:ed:66:29:72:91:16:36: 91:15:7c:7a:df:79:c8:d0:c1:c7:15:e9:d2:6e:63:e2:37:6b: 80:31:b6:eb:79:20:f0:7d:2b:a4:24:21:f0:39:82:95:d0:94: 34:8b:10:46:ee:06:6b:70:e9:1d:fa:bc:a3:00:9c:99:e0:14: a1:b0:41:ca:1c:82:f0:df:9d:cd:fe:ab:de:c0:71:17:de:29: ee:b0:71:59:5c:e7:ac:98:93:93:08:59:8f:16:59:4d:44:85: 3b:8b:9f:f6:01:9a:d5:e9:6e:3e:61:98:27:a8:5d:da:71:d1: 88:83:9c:0d:64:5d:6b:c0:56:27:41:68:99:62:2c:b7:52:c1: 8f:55:c0:72:0b:71:12:0b:03:a0:6f:f8:c2:77:48:61:74:ef: f0:46:6b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYxMTE0MTYzMTU0WhcNMjYxMTIxMTYzMTU0WjAYMRYwFAYD VQQDEw02YWY4OGNmYi03MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX3OXX/9C4zB7TvHHQGbiF4K6qhNZSFqG2QBQlLfFm49LtqQDCAgbejZHxxL MoBAr1a8USrIQ0RA5ORpQIcSlZBSMciRNwljJMMmZAewAb68NOP1VgdllrbGZfZt ATHUc9o87CG0oc3EKo3WqdfyLP8f1lMKC7S1j4ft9O9HRIGD0RUTtAF9FrNlHmvI rTWmlScIhSI62Glc3dbdcPlHpUxuA2xS4jKwuRr5ZmHFRDbUVLtW3fkt1Sh8R+xi CIW3WkNy/jgiKU2vi284PSR6InwGXJtErjOMia0HkZj33rrrd5rcUFDNLdcP3E0x nNoDH29kyW1nn48ZKzdjRGhonQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBCUSlJ CWmM74LU5S4BmGkk/LmZMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApkJ3C80caz84Q+im9+9s3aMWVu1xx9VLzvYgIdK+QW0NhmEiOFlgztf+Ky8O plmyrpVsRxEZOWsOiSqJe3Dh+99Dvdr7qnnIKVTqpipqu2sPfnre7czzL6579r96 /SKoTMm0+vvtZilykRY2kRV8et95yNDBxxXp0m5j4jdrgDG263kg8H0rpCQh8DmC ldCUNIsQRu4Ga3DpHfq8owCcmeAUobBByhyC8N+dzf6r3sBxF94p7rBxWVznrJiT kwhZjxZZTUSFO4uf9gGa1eluPmGYJ6hd2nHRiIOcDWRda8BWJ0FomWIst1LBj1XA cgtxEgsDoG/4wndIYXTv8EZrvA== -----END CERTIFICATE-----Generated at Sun Nov 15 16:20:50 2026 by rpki-client