$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: RLAj9tRCuG7v3/PaC3YzhO4PwK7L6/1Kb/UWqqguZY0= Subject key identifier: BD:22:2A:80:27:16:EF:69:C7:B1:A1:C3:23:47:17:31:D1:FD:16:09 Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 04AF Signing time: Sun 08 Nov 2026 23:42:45 +0000 Manifest this update: Sun 08 Nov 2026 23:42:44 +0000 Manifest next update: Sun 15 Nov 2026 23:42:44 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: ChXjPhGQ1AhKLW9L6OPywBMvAfkaoeZa/bR9p0KSbF4=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: sp813/WIVkKMLi23+c+vNvVoXo55WVRhdR19lMeqi2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Nov 8 23:42:44 2026 GMT Not After : Nov 15 23:42:44 2026 GMT Subject: CN=6af108f5-9451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:8d:5e:62:a3:fd:fe:f4:4c:15:d2:e4:bc: 5a:96:3d:40:a3:85:39:06:4a:cd:3c:ca:e3:6b:55: 06:1c:2e:7e:ca:93:a2:dd:86:13:41:6b:f9:c2:a0: cc:d8:1b:a3:fa:7e:f1:cf:7f:50:51:c4:65:2e:c4: 2c:9a:43:17:7b:77:4f:74:68:be:e6:34:fc:c0:79: d9:6c:ac:35:79:15:ec:61:8b:4f:fc:33:10:6b:bf: 0c:89:9e:84:28:d6:0b:c1:07:21:ab:7d:1a:b0:2f: b2:66:1f:32:7c:24:06:34:83:f6:ce:f0:a2:9a:53: 94:9c:ce:46:7a:2b:6c:5e:37:66:9b:f2:ba:55:1c: 70:61:30:24:09:9e:3a:1f:e8:05:dc:be:ff:af:f5: 85:8c:3c:51:54:42:18:9d:de:19:d1:27:a7:b9:66: 7b:ba:15:54:db:cf:fc:c3:6d:8a:c3:3b:6b:5f:90: f6:d6:61:3d:d5:15:73:e8:78:7e:f6:e4:60:b8:80: 15:b4:67:90:e3:73:93:1d:27:5f:0f:b5:58:e8:87: 07:58:9b:a6:44:31:f3:8e:85:f6:fe:1e:7d:c9:4d: 80:ee:cc:f1:99:40:da:2a:ba:72:32:07:e5:f4:d2: 48:78:dd:68:77:f7:45:4b:2b:5d:82:78:b2:18:dd: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:2A:80:27:16:EF:69:C7:B1:A1:C3:23:47:17:31:D1:FD:16:09 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:04:e9:e6:b5:71:22:17:7e:36:36:28:1c:9d:c1:78:0c:40: fd:56:68:75:27:e8:41:0f:b2:2e:e1:75:88:63:67:da:fc:c8: bc:b9:8f:ed:40:de:1d:ef:fd:ff:a6:3c:db:c6:22:b2:8f:fd: 16:22:12:f3:15:f5:f7:a8:ed:1a:bf:cc:8a:13:fa:d3:b1:7b: d3:20:04:d7:a5:89:d1:2d:37:b9:95:f4:b6:5a:c1:a3:71:31: 07:04:a3:b2:8b:ae:b4:85:7b:8a:cb:06:1e:43:63:61:e3:a0: 25:e9:3d:6f:8e:38:c6:01:d5:d4:0b:ee:95:ed:73:ba:69:fb: f4:5a:c3:cf:35:3a:2f:64:f5:eb:e1:67:43:27:03:b2:a9:87: 4c:ca:13:1d:a5:d5:7c:a1:23:06:11:6d:d5:0f:0e:95:1b:74: 23:22:49:b1:92:ba:96:e6:31:7d:22:3e:52:a6:4b:fd:4b:43: 14:52:a0:a3:b5:b0:6d:ee:ef:d5:b4:94:34:39:a7:4c:42:c5: 54:78:9a:5b:0a:ef:1e:71:fd:35:ae:04:d9:38:6a:21:1c:13: 69:1c:3f:de:49:29:2e:6d:94:a3:5d:70:a1:27:ce:c2:e3:e1: e5:61:11:25:51:91:43:cd:8c:b0:5c:aa:e9:ec:fa:52:a7:6f: 07:24:af:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjYxMTA4MjM0MjQ0WhcNMjYxMTE1MjM0MjQ0WjAYMRYwFAYD VQQDEw02YWYxMDhmNS05NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOWNXmKj/f70TBXS5Lxalj1Ao4U5BkrNPMrja1UGHC5+ypOi3YYTQWv5wqDM 2Buj+n7xz39QUcRlLsQsmkMXe3dPdGi+5jT8wHnZbKw1eRXsYYtP/DMQa78MiZ6E KNYLwQchq30asC+yZh8yfCQGNIP2zvCimlOUnM5GeitsXjdmm/K6VRxwYTAkCZ46 H+gF3L7/r/WFjDxRVEIYnd4Z0SenuWZ7uhVU28/8w22KwztrX5D21mE91RVz6Hh+ 9uRguIAVtGeQ43OTHSdfD7VY6IcHWJumRDHzjoX2/h59yU2A7szxmUDaKrpyMgfl 9NJIeN1od/dFSytdgniyGN0PhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0iKoAn Fu9px7GhwyNHFzHR/RYJMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAagTp5rVxIhd+NjYoHJ3BeAxA/VZodSfoQQ+yLuF1iGNn2vzIvLmP7UDeHe/9 /6Y828Yiso/9FiIS8xX196jtGr/MihP607F70yAE16WJ0S03uZX0tlrBo3ExBwSj souutIV7issGHkNjYeOgJek9b444xgHV1Avule1zumn79FrDzzU6L2T16+FnQycD sqmHTMoTHaXVfKEjBhFt1Q8OlRt0IyJJsZK6luYxfSI+UqZL/UtDFFKgo7Wwbe7v 1bSUNDmnTELFVHiaWwrvHnH9Na4E2ThqIRwTaRw/3kkpLm2Uo11woSfOwuPh5WER JVGRQ82MsFyq6ez6UqdvBySv5w== -----END CERTIFICATE-----Generated at Tue Nov 10 17:02:02 2026 by rpki-client