$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: 8ErKCG9w78KnY5CBZwIQnT/Pl/cXnGOOvAImSIP/Z0M= Subject key identifier: F5:E3:05:65:8B:AB:7E:80:FB:F0:F9:54:39:82:D0:E8:63:B2:34:E0 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 020F Signing time: Thu 05 Nov 2026 04:00:22 +0000 Manifest this update: Thu 05 Nov 2026 04:00:21 +0000 Manifest next update: Thu 12 Nov 2026 04:00:21 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: OrP/2qzlNt5m1mY102ZU3U12huymqMCOYUfMU2LpGWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Nov 5 04:00:21 2026 GMT Not After : Nov 12 04:00:21 2026 GMT Subject: CN=6aebff56-fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:12:16:b2:45:03:df:49:d1:85:33:19:c0: 57:68:03:f8:55:38:4c:54:81:5b:40:05:fb:bc:5e: 68:89:25:c1:40:9d:7a:2b:83:28:77:8f:52:09:da: 1d:5e:e5:3a:86:6f:d2:ac:39:18:00:c2:55:5a:1e: 9c:d9:0d:1e:62:a9:70:6c:48:94:fc:fa:99:ab:2b: e3:ec:18:24:18:fb:54:97:29:e0:d3:c5:f5:22:14: d0:4e:5b:f9:5f:ef:db:22:aa:c1:28:62:14:1b:15: b1:05:cb:ad:10:bb:d9:2f:3b:1f:54:a6:3b:b4:c6: 36:d0:31:38:4f:56:8d:2c:d4:23:28:f5:d9:56:5b: 88:5d:11:62:e5:ba:c8:6b:52:c4:18:7e:b2:83:e3: ff:37:bb:68:6e:37:82:19:24:03:84:7e:d6:80:a4: 17:85:54:1f:e6:d1:02:98:16:cd:a1:a1:ab:86:05: 04:19:3a:9c:b4:3f:f8:db:14:91:bc:22:a7:fe:f9: 46:5a:7e:61:7c:54:0c:0e:48:4a:b6:a0:df:00:71: fb:e3:a2:b8:d6:83:44:b5:40:cb:56:d5:7f:71:85: 3c:58:c3:b0:53:95:57:ab:9b:d8:b5:6c:a6:e0:49: 0a:e0:3a:2b:15:fa:2b:40:11:9c:97:c3:7e:43:b7: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E3:05:65:8B:AB:7E:80:FB:F0:F9:54:39:82:D0:E8:63:B2:34:E0 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d5:73:84:95:a3:35:ce:4f:7c:2e:4a:62:04:a1:9a:ef:e5: be:db:3a:b6:2b:8c:3b:38:7e:b8:d6:5b:92:82:94:51:18:6b: 5a:b0:40:f9:bf:97:5e:80:d3:bf:46:c2:1b:88:a6:d6:46:0b: ed:07:2d:16:f6:92:61:35:05:39:3a:be:4f:a0:fe:77:22:9f: 7f:c2:27:a7:27:90:d6:f0:c0:02:07:1c:fc:7b:22:d6:bb:44: 10:98:2a:72:cb:15:7d:69:45:fd:2d:c6:bc:d7:42:c9:87:55: d6:16:7e:5f:25:38:bf:8f:09:b4:19:e9:97:7c:f2:97:ce:83: 3a:d6:aa:6f:90:17:eb:b9:a1:6e:e0:02:ef:b8:3d:ca:fd:3c: a4:54:91:14:4d:7b:d6:0c:29:91:36:c5:34:e5:64:51:07:e6: 73:cf:79:d0:56:96:8e:f8:c2:bc:c8:bf:14:d4:aa:6c:df:cc: b6:11:46:c9:3c:5d:e5:74:7a:94:83:66:bc:58:32:f5:5b:d1: da:5c:23:93:ee:51:b1:16:00:bf:75:03:da:ae:d6:4e:79:b1: d2:60:5d:a1:7a:b7:2f:e4:8e:bf:16:f6:d9:96:4a:8a:70:4e: 5e:57:64:6f:0f:e5:33:3a:8b:07:18:79:f2:85:2e:01:e7:4a: 1e:31:f3:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjYxMTA1MDQwMDIxWhcNMjYxMTEyMDQwMDIxWjAYMRYwFAYD VQQDEw02YWViZmY1Ni1mYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaQSFrJFA99J0YUzGcBXaAP4VThMVIFbQAX7vF5oiSXBQJ16K4Mod49SCdod XuU6hm/SrDkYAMJVWh6c2Q0eYqlwbEiU/PqZqyvj7BgkGPtUlyng08X1IhTQTlv5 X+/bIqrBKGIUGxWxBcutELvZLzsfVKY7tMY20DE4T1aNLNQjKPXZVluIXRFi5brI a1LEGH6yg+P/N7tobjeCGSQDhH7WgKQXhVQf5tECmBbNoaGrhgUEGTqctD/42xSR vCKn/vlGWn5hfFQMDkhKtqDfAHH746K41oNEtUDLVtV/cYU8WMOwU5VXq5vYtWym 4EkK4DorFforQBGcl8N+Q7dvNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXjBWWL q36A+/D5VDmC0OhjsjTgMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgdVzhJWjNc5PfC5KYgShmu/lvts6tiuMOzh+uNZbkoKUURhrWrBA+b+XXoDT v0bCG4im1kYL7QctFvaSYTUFOTq+T6D+dyKff8InpyeQ1vDAAgcc/Hsi1rtEEJgq cssVfWlF/S3GvNdCyYdV1hZ+XyU4v48JtBnpl3zyl86DOtaqb5AX67mhbuAC77g9 yv08pFSRFE171gwpkTbFNOVkUQfmc8950FaWjvjCvMi/FNSqbN/MthFGyTxd5XR6 lINmvFgy9VvR2lwjk+5RsRYAv3UD2q7WTnmx0mBdoXq3L+SOvxb22ZZKinBOXldk bw/lMzqLBxh58oUuAedKHjHzzg== -----END CERTIFICATE-----Generated at Thu Nov 5 18:44:31 2026 by rpki-client