$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: hoAiPCNDw6p20P3HH442wXpVEJQjE9ZWPIjUJZUsvFY= Subject key identifier: 08:82:C3:C5:F1:CE:88:AB:D6:17:BF:6C:F5:FF:36:45:12:74:FF:01 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 01F3 Signing time: Sun 15 Nov 2026 03:30:28 +0000 Manifest this update: Sun 15 Nov 2026 03:30:28 +0000 Manifest next update: Sun 22 Nov 2026 03:30:28 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: VO0UQqqHN4kYQ48DAnE/B8ALxm8mwAM2N1cwBok6454=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Nov 15 03:30:28 2026 GMT Not After : Nov 22 03:30:28 2026 GMT Subject: CN=6af92754-3ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:5a:87:9f:67:71:f5:2a:84:f4:49:40:32: 1c:d6:05:c3:59:17:9f:6f:63:30:0c:ff:fa:4a:06: 8b:a5:46:5a:84:c2:da:89:0b:bd:df:cb:93:ce:a4: de:14:ae:ac:01:ff:f1:ae:a2:55:bb:d9:82:02:2a: 91:09:16:83:3f:07:c2:37:b0:2e:df:bb:02:5f:79: 04:49:1d:9a:ed:5b:30:28:20:df:a3:11:49:73:67: 20:6c:4a:70:42:a6:9b:62:89:ab:03:c7:c1:26:02: 85:77:22:1a:de:45:e0:91:9b:11:2b:cc:d4:ec:81: 28:97:d8:45:19:c0:ec:8e:55:9f:b9:f6:a1:4e:e6: 2f:27:58:7c:90:24:a5:b0:cc:5b:0d:e1:70:e7:c1: 03:c3:36:d2:3a:ce:b8:ff:d7:9c:75:fc:2e:6d:3a: fd:91:8f:60:81:f2:e0:2e:7d:88:77:40:ea:fa:64: 23:b3:47:6d:77:fa:0f:d1:73:03:e9:c7:bc:1a:d8: 0f:26:02:64:84:57:6d:a7:1d:50:c0:0e:2a:98:bc: 2a:5b:3f:d9:9f:0d:f1:bd:cd:77:ac:a4:bd:fa:06: 8e:d2:dc:e2:b2:bd:bb:bc:ea:86:00:16:23:c7:db: f0:f5:f7:dd:33:cf:3e:c8:9d:d8:fb:32:6e:cc:11: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:C3:C5:F1:CE:88:AB:D6:17:BF:6C:F5:FF:36:45:12:74:FF:01 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5c:e7:97:ed:15:10:4f:2a:f5:03:5f:a0:96:c8:27:47:99: e2:24:90:8d:fa:f0:ae:e8:50:80:c4:ca:a2:dc:b5:22:fc:90: 4d:23:60:ee:02:a0:55:33:ea:cc:d3:8a:b1:8e:ba:54:26:2a: fd:56:e3:de:b1:0a:4b:43:31:ef:92:6b:d9:6f:86:92:81:99: f9:4b:86:2e:91:7c:60:23:b3:08:ae:78:89:e4:cf:88:3f:2c: e1:4f:db:48:1a:78:c0:fb:6c:e2:54:c8:08:b2:9b:0d:08:10: 23:77:cd:52:dc:e0:51:8b:00:d0:e5:58:05:61:9a:1a:2b:7b: 51:37:58:19:9d:4b:47:b7:f3:3c:f0:34:ee:6b:f8:7c:d8:a1: 1c:4d:b8:f8:1a:90:de:d4:21:e3:d0:14:04:7f:49:bd:1f:5d: 5d:aa:5e:41:73:43:9c:54:7a:58:0b:64:e1:1e:c9:cc:58:8e: 7e:ce:5f:1e:f9:b9:82:15:3d:fa:cf:79:bc:30:50:4e:07:39: 27:c6:ef:f5:55:87:ec:2f:27:37:85:e2:e2:68:31:7d:10:d7: 48:5a:c4:15:76:ae:7a:2f:5f:2e:80:1a:38:24:46:7d:ab:36: 6b:c8:92:3f:7f:26:c4:e2:31:ed:89:78:de:da:48:b2:73:ca: 9a:52:d6:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYxMTE1MDMzMDI4WhcNMjYxMTIyMDMzMDI4WjAYMRYwFAYD VQQDEw02YWY5Mjc1NC0zZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr49ah59ncfUqhPRJQDIc1gXDWRefb2MwDP/6SgaLpUZahMLaiQu938uTzqTe FK6sAf/xrqJVu9mCAiqRCRaDPwfCN7Au37sCX3kESR2a7VswKCDfoxFJc2cgbEpw QqabYomrA8fBJgKFdyIa3kXgkZsRK8zU7IEol9hFGcDsjlWfufahTuYvJ1h8kCSl sMxbDeFw58EDwzbSOs64/9ecdfwubTr9kY9ggfLgLn2Id0Dq+mQjs0dtd/oP0XMD 6ce8GtgPJgJkhFdtpx1QwA4qmLwqWz/Znw3xvc13rKS9+gaO0tzisr27vOqGABYj x9vw9ffdM88+yJ3Y+zJuzBG53wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiCw8Xx zoir1he/bPX/NkUSdP8BMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJFznl+0VEE8q9QNfoJbIJ0eZ4iSQjfrwruhQgMTKoty1IvyQTSNg7gKgVTPq zNOKsY66VCYq/Vbj3rEKS0Mx75Jr2W+GkoGZ+UuGLpF8YCOzCK54ieTPiD8s4U/b SBp4wPts4lTICLKbDQgQI3fNUtzgUYsA0OVYBWGaGit7UTdYGZ1LR7fzPPA07mv4 fNihHE24+BqQ3tQh49AUBH9JvR9dXapeQXNDnFR6WAtk4R7JzFiOfs5fHvm5ghU9 +s95vDBQTgc5J8bv9VWH7C8nN4Xi4mgxfRDXSFrEFXauei9fLoAaOCRGfas2a8iS P38mxOIx7Yl43tpIsnPKmlLWwg== -----END CERTIFICATE-----Generated at Sun Nov 15 08:29:01 2026 by rpki-client