$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json) Hash identifier: aCRbU+dqv53ih0qqpCS9F6pi8o766QH7Rw27YybyaqQ= Subject key identifier: 5A:DD:10:16:9B:F5:50:E2:73:25:31:0A:FA:30:32:8D:59:29:C0:DD Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft Manifest number: 3C Signing time: Sun 15 Nov 2026 08:10:32 +0000 Manifest this update: Sun 15 Nov 2026 08:10:31 +0000 Manifest next update: Sun 22 Nov 2026 08:10:31 +0000 Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: Z9Ya9ZrU1L53gJBty7g0APkjnMqDTuYRG0bPHWrg+1M=) 2: C4573D8E8BDF11F19F45C2023611F970.roa (hash: SBR2qy/aOQNOlTNj4Guu+00B4uzU8KT7C033YFlfsww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Validity Not Before: Nov 15 08:10:31 2026 GMT Not After : Nov 22 08:10:31 2026 GMT Subject: CN=6af968f7-5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:90:e4:77:0e:9d:6d:87:2e:9e:4d:e7:b5: f2:dc:e3:a2:28:7d:ed:cd:fb:71:09:c2:bc:58:00: 71:0e:63:97:a2:40:ca:9f:63:22:1b:a4:f0:86:a3: 13:16:d1:78:45:bb:99:96:af:02:b0:e8:f5:e8:06: ce:f4:b7:6c:b8:dc:33:9f:94:f9:41:89:86:b1:08: 62:7b:4c:41:51:d1:72:79:2c:6e:b6:c0:bf:6e:3b: 31:fa:b5:85:00:a8:00:e1:47:5d:e3:9b:49:d9:80: ae:ca:5d:ed:f4:d7:d1:39:54:ef:50:0e:b3:09:13: 84:38:6c:a8:99:69:29:a5:ff:28:92:d5:82:33:12: 29:46:11:04:f1:fb:de:89:68:bd:47:88:ba:a3:c3: 4f:8a:a7:af:bb:8e:d2:ab:44:44:f4:12:e7:ed:89: e3:fe:f1:8e:89:73:b9:91:fe:28:9d:3a:9d:d9:32: 96:af:29:98:9f:44:8c:4f:bd:67:11:1c:32:a1:4e: 80:bd:f9:80:c4:bf:58:67:01:cf:9b:ba:8c:de:3d: d6:91:7d:a0:0f:11:2e:44:51:a3:ba:9c:c1:ea:7b: e2:41:ac:ce:65:34:5e:de:a1:49:8d:27:74:52:42: bd:30:75:3c:f7:96:cd:ee:07:36:71:8d:4a:97:26: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DD:10:16:9B:F5:50:E2:73:25:31:0A:FA:30:32:8D:59:29:C0:DD X509v3 Authority Key Identifier: keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ff:23:93:a7:f2:6e:92:a3:31:4e:83:3a:0d:45:20:17:28: 22:a4:7d:8a:6d:3c:b3:e7:a9:76:81:ff:f5:02:7d:11:b8:b8: b1:29:7a:32:1c:44:a7:ab:af:73:4b:fd:7d:24:61:da:1e:71: 92:ed:10:e9:72:30:7f:3e:4e:7b:f6:8f:92:49:86:90:a5:55: 50:40:b8:c0:51:48:36:e3:c5:5d:dc:3b:d0:7f:e7:d1:2e:96: 2c:67:5d:3d:2e:56:89:cf:e0:2a:2f:98:90:3c:9e:24:1d:3d: f9:35:ca:ce:2f:4f:46:f9:a8:f8:70:25:59:15:d0:12:c0:48: 5e:31:21:b6:7b:63:6f:dc:92:39:6e:ea:9d:84:ff:fa:4a:34: 30:5b:f2:df:85:e7:06:0b:7f:04:e5:c1:e6:6c:4f:49:c9:29: 96:95:a1:87:eb:0d:c7:f2:5d:74:48:9b:9f:57:c4:80:71:32: be:3b:8b:07:a4:70:2d:fa:07:39:70:58:f8:b9:ea:41:b6:b7: 9c:bf:0d:9b:81:4d:76:2e:c5:ee:2c:72:8c:91:35:c8:18:65: 06:74:38:4e:11:27:25:47:fc:b2:0f:3d:8e:1e:f7:69:f9:81: 59:f1:60:de:69:fa:1c:33:04:f7:d7:0a:f2:a6:5d:f1:ad:0f: ac:61:bb:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzIyNzExMC8GA1UEBRMoNTg1RTRFQjU5NDBDRDgwN0ExRjc5NDUzMUIwNUExMERD N0U0MzNCMjAeFw0yNjExMTUwODEwMzFaFw0yNjExMjIwODEwMzFaMBgxFjAUBgNV BAMTDTZhZjk2OGY3LTVkYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa25Dkdw6dbYcunk3ntfLc46Iofe3N+3EJwrxYAHEOY5eiQMqfYyIbpPCGoxMW 0XhFu5mWrwKw6PXoBs70t2y43DOflPlBiYaxCGJ7TEFR0XJ5LG62wL9uOzH6tYUA qADhR13jm0nZgK7KXe3019E5VO9QDrMJE4Q4bKiZaSml/yiS1YIzEilGEQTx+96J aL1HiLqjw0+Kp6+7jtKrRET0EuftieP+8Y6Jc7mR/iidOp3ZMpavKZifRIxPvWcR HDKhToC9+YDEv1hnAc+buozePdaRfaAPES5EUaO6nMHqe+JBrM5lNF7eoUmNJ3RS Qr0wdTz3ls3uBzZxjUqXJgR/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWt0QFpv1 UOJzJTEK+jAyjVkpwN0wHwYDVR0jBBgwFoAUWF5OtZQM2Aeh95RTGwWhDcfkM7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMjI3L0Q4RERBQzlFOEEz RjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFlaDk1UlRHd1doRGNma003 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0Y1T3RaUU0yQWVoOTVSVEd3V2hEY2ZrTTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MjI3L0Q4RERBQzlFOEEzRjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFl aDk1UlRHd1doRGNma003SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAN/yOTp/JukqMxToM6DUUgFygipH2KbTyz56l2gf/1An0RuLixKXoyHESnq69z S/19JGHaHnGS7RDpcjB/Pk579o+SSYaQpVVQQLjAUUg248Vd3DvQf+fRLpYsZ109 LlaJz+AqL5iQPJ4kHT35NcrOL09G+aj4cCVZFdASwEheMSG2e2Nv3JI5buqdhP/6 SjQwW/LfhecGC38E5cHmbE9JySmWlaGH6w3H8l10SJufV8SAcTK+O4sHpHAt+gc5 cFj4uepBtrecvw2bgU12LsXuLHKMkTXIGGUGdDhOESclR/yyDz2OHvdp+YFZ8WDe afocMwT31wrypl3xrQ+sYbuP -----END CERTIFICATE-----Generated at Sun Nov 15 11:27:43 2026 by rpki-client