$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: ym/rVsb5Qz7c2zVdtTYInA4PZD5lgzemH38F7ajRjBI= Subject key identifier: 30:0F:EC:8F:56:60:16:65:EC:70:87:13:BE:79:2B:AF:D8:97:22:46 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 05C6 Signing time: Sun 08 Nov 2026 22:55:01 +0000 Manifest this update: Sun 08 Nov 2026 22:55:01 +0000 Manifest next update: Sun 15 Nov 2026 22:55:01 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: TTrU+CfXMSZlSwzBuwzSzBUBna2ou4YXAoMTZZRaB/Y=) 2: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) 3: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 4: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Nov 8 22:55:01 2026 GMT Not After : Nov 15 22:55:01 2026 GMT Subject: CN=6af0fdc5-a325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:a8:c1:ed:8f:a4:b8:f5:6a:2a:70:c9:77: 12:61:af:1f:ab:3e:ce:f8:4b:84:ad:1a:74:3e:dd: a5:a5:e8:af:02:ca:85:4e:75:82:a3:7c:7c:22:b8: 5e:98:09:bd:10:91:74:14:1d:12:c3:fa:68:b9:81: 80:96:c2:9d:dd:09:61:bf:df:09:50:5f:75:df:bf: d9:b3:6b:ea:0d:54:be:e9:24:6c:7f:66:16:6b:ab: cb:7d:9a:fe:a2:96:e0:63:4d:4a:73:d2:14:54:ce: 58:35:d5:9a:6a:21:39:1c:23:3c:4b:41:61:f0:8d: d6:87:3d:21:35:58:95:4f:a9:85:79:a9:10:53:0b: 20:9e:f0:6a:05:55:72:71:f7:11:44:a1:8e:d9:3b: 40:45:2b:05:d8:42:31:60:02:3f:4a:57:8f:1d:aa: 8d:6c:6d:b4:1f:31:ee:0a:a1:5b:a6:4d:fe:32:9d: 6b:78:54:2e:93:f9:a4:2c:64:68:37:75:14:23:46: a6:bc:7b:12:33:32:df:b0:a6:e6:db:89:a4:b9:9e: ed:42:1b:e0:8c:8e:e6:6c:0a:7a:b9:6e:23:7b:a2: 43:42:f3:6e:7d:00:67:5d:7d:5b:89:10:f0:32:f0: 42:6c:9c:95:82:84:0b:11:2d:60:aa:64:51:bd:50: ec:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:EC:8F:56:60:16:65:EC:70:87:13:BE:79:2B:AF:D8:97:22:46 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3b:ee:b0:c2:dc:f6:6f:95:1c:02:89:3f:4f:a2:06:ee:ff: 14:b4:6b:d4:0b:49:e8:7c:96:50:a7:1d:12:da:2f:e3:28:b4: 3f:f6:48:cf:ff:76:06:29:eb:f3:b8:74:87:aa:f8:6c:bd:7a: b4:e0:e8:08:16:ed:50:2a:f7:19:ee:60:a2:e0:00:81:55:c7: 0e:10:87:ee:d4:4d:f5:ff:3d:f1:7c:06:19:a0:59:e7:45:b4: 21:74:d6:14:d5:c3:35:13:53:d3:01:d5:9f:75:40:79:27:f3: fa:ca:e8:38:af:f1:b1:40:2e:c0:e4:a9:f7:35:b8:b4:c4:67: ad:4f:1c:87:59:92:5f:41:3c:f8:aa:0e:c6:44:15:e9:cb:fa: 57:d9:81:17:4d:28:e3:69:99:b6:ad:ff:b7:9a:45:3e:18:34: 5b:5e:90:fc:bd:6a:43:93:56:a7:c1:89:fc:b3:19:37:88:b5: f1:89:85:e5:c0:34:77:53:1d:99:35:ed:1d:fd:6a:e5:72:aa: 73:0a:27:10:68:58:9e:0e:19:d0:68:59:e8:5e:e8:da:37:4b: 49:f7:e9:8b:30:b5:16:03:e2:78:56:d3:28:c5:05:71:4a:41: 09:a8:b8:89:b6:af:65:13:71:86:bf:24:7a:69:e1:ad:34:6c: 17:04:15:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYxMTA4MjI1NTAxWhcNMjYxMTE1MjI1NTAxWjAYMRYwFAYD VQQDEw02YWYwZmRjNS1hMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvyowe2PpLj1aipwyXcSYa8fqz7O+EuErRp0Pt2lpeivAsqFTnWCo3x8Irhe mAm9EJF0FB0Sw/pouYGAlsKd3Qlhv98JUF9137/Zs2vqDVS+6SRsf2YWa6vLfZr+ opbgY01Kc9IUVM5YNdWaaiE5HCM8S0Fh8I3Whz0hNViVT6mFeakQUwsgnvBqBVVy cfcRRKGO2TtARSsF2EIxYAI/SlePHaqNbG20HzHuCqFbpk3+Mp1reFQuk/mkLGRo N3UUI0amvHsSMzLfsKbm24mkuZ7tQhvgjI7mbAp6uW4je6JDQvNufQBnXX1biRDw MvBCbJyVgoQLES1gqmRRvVDsWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAP7I9W YBZl7HCHE755K6/YlyJGMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDvusMLc9m+VHAKJP0+iBu7/FLRr1AtJ6HyWUKcdEtov4yi0P/ZIz/92Binr 87h0h6r4bL16tODoCBbtUCr3Ge5gouAAgVXHDhCH7tRN9f898XwGGaBZ50W0IXTW FNXDNRNT0wHVn3VAeSfz+sroOK/xsUAuwOSp9zW4tMRnrU8ch1mSX0E8+KoOxkQV 6cv6V9mBF00o42mZtq3/t5pFPhg0W16Q/L1qQ5NWp8GJ/LMZN4i18YmF5cA0d1Md mTXtHf1q5XKqcwonEGhYng4Z0GhZ6F7o2jdLSffpizC1FgPieFbTKMUFcUpBCai4 ibavZRNxhr8kemnhrTRsFwQVvQ== -----END CERTIFICATE-----Generated at Wed Nov 11 00:54:31 2026 by rpki-client