$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: MKmY3yYiHElMFwVI2f5FOoaM18LcRCFxbmw9OmWlQCA= Subject key identifier: 9C:95:35:AC:B0:40:45:6C:05:F1:6B:5B:8B:A5:DB:FC:DE:23:2D:DC Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0421 Signing time: Sun 15 Nov 2026 00:07:08 +0000 Manifest this update: Sun 15 Nov 2026 00:07:07 +0000 Manifest next update: Sun 22 Nov 2026 00:07:07 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: eFJkX00dOw20wbeTM6yonGb9PqNh+n3xbjVssOwdR9s=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: LpWdecCaZjYDqnwlofOF98ADZ9wJd8dslMfZKWc8i2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Nov 15 00:07:07 2026 GMT Not After : Nov 22 00:07:07 2026 GMT Subject: CN=6af8f7ac-6c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:b7:d7:da:a9:83:a5:3e:26:7c:de:5e:13: f1:1f:02:69:46:be:fc:7b:b8:94:24:ed:c4:9f:df: 5c:a9:ba:bd:17:c1:a3:f7:81:70:25:c5:e3:ac:78: 28:d2:cb:8d:6c:1e:84:b1:0f:40:ba:4f:21:ab:d5: 2d:93:94:f0:46:58:f3:03:f3:50:f9:74:2a:7b:0f: 7c:1c:b5:5d:e8:6f:15:fc:3b:2f:bc:a0:b3:22:cb: 65:a8:64:45:ac:9b:a8:c0:1c:1f:a3:c5:74:b8:c7: 23:a1:a3:8d:85:19:9e:05:f1:e6:b5:35:31:f2:8e: 07:5f:69:25:1c:00:0b:48:e3:50:48:e6:9a:e6:3b: 87:0e:a9:85:4f:86:18:97:cb:a9:f1:01:cd:a3:6b: d1:7b:9e:68:5c:bf:28:de:a0:29:cf:a3:aa:6b:90: 27:eb:78:6f:f8:0c:fc:dc:e8:0e:84:36:8d:8f:8e: 08:70:42:cf:78:5e:83:66:67:23:86:74:d4:75:0c: 2c:a5:10:d6:9d:15:d1:ed:a0:f1:7f:d0:8c:41:76: 5d:9c:37:24:04:da:99:75:54:9b:11:c4:61:f7:6c: bf:77:74:f7:a1:cd:db:06:da:db:77:ad:f4:7d:54: 10:9c:f3:bb:65:61:44:1f:2c:ca:aa:23:f4:f2:16: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:95:35:AC:B0:40:45:6C:05:F1:6B:5B:8B:A5:DB:FC:DE:23:2D:DC X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a9:6b:1c:7b:7f:bf:87:3d:87:d0:3c:e5:42:44:00:d3:c5: 40:24:45:d1:ca:89:17:62:59:05:ef:b1:72:56:6f:ab:1d:ee: ba:42:44:06:18:ce:39:96:e5:8e:9e:68:ff:17:2c:81:2d:cf: 9a:0a:c4:97:8d:09:99:29:f3:8c:bb:f3:40:d8:89:7a:52:a1: 31:8e:09:19:7c:e1:e6:13:c7:9c:76:cb:10:a7:ed:31:90:7a: 6e:89:65:2c:c8:10:c8:3e:2b:a2:5e:12:cb:b0:a8:6e:27:4a: f8:99:95:2f:25:56:a7:54:f4:93:1b:61:e7:e9:03:59:25:75: 0b:cb:84:56:43:b0:60:51:ad:44:5d:55:a5:2a:d4:ce:bb:bd: b9:4d:8c:01:ea:65:ab:21:a6:84:7e:bc:c6:35:a6:7d:3e:e7: 2f:99:0d:27:4c:f2:06:cf:12:0e:ea:dc:23:88:a6:6e:2e:a8: 09:29:5f:75:eb:71:61:d9:df:40:29:fe:d2:bb:69:95:27:5a: f4:d9:5c:3e:e5:c7:a9:dc:65:c7:0e:b2:be:21:28:2c:4c:28: ff:90:f7:ec:cc:26:eb:54:03:03:9a:e5:67:85:ab:5d:d1:ac: 8d:39:eb:58:f1:4d:1d:37:4f:f6:06:a3:30:29:d9:25:6a:2a: f8:c8:be:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYxMTE1MDAwNzA3WhcNMjYxMTIyMDAwNzA3WjAYMRYwFAYD VQQDEw02YWY4ZjdhYy02YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqm319qpg6U+JnzeXhPxHwJpRr78e7iUJO3En99cqbq9F8Gj94FwJcXjrHgo 0suNbB6EsQ9Auk8hq9Utk5TwRljzA/NQ+XQqew98HLVd6G8V/DsvvKCzIstlqGRF rJuowBwfo8V0uMcjoaONhRmeBfHmtTUx8o4HX2klHAALSONQSOaa5juHDqmFT4YY l8up8QHNo2vRe55oXL8o3qApz6Oqa5An63hv+Az83OgOhDaNj44IcELPeF6DZmcj hnTUdQwspRDWnRXR7aDxf9CMQXZdnDckBNqZdVSbEcRh92y/d3T3oc3bBtrbd630 fVQQnPO7ZWFEHyzKqiP08habzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyVNayw QEVsBfFrW4ul2/zeIy3cMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqlrHHt/v4c9h9A85UJEANPFQCRF0cqJF2JZBe+xclZvqx3uukJEBhjOOZbl jp5o/xcsgS3PmgrEl40JmSnzjLvzQNiJelKhMY4JGXzh5hPHnHbLEKftMZB6boll LMgQyD4rol4Sy7CobidK+JmVLyVWp1T0kxth5+kDWSV1C8uEVkOwYFGtRF1VpSrU zru9uU2MAeplqyGmhH68xjWmfT7nL5kNJ0zyBs8SDurcI4imbi6oCSlfdetxYdnf QCn+0rtplSda9NlcPuXHqdxlxw6yviEoLEwo/5D37Mwm61QDA5rlZ4WrXdGsjTnr WPFNHTdP9gajMCnZJWoq+Mi+Dg== -----END CERTIFICATE-----Generated at Sun Nov 15 12:23:31 2026 by rpki-client