$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: S/WR4riw5jwvLPC29rwELhqYZb9Xhhkn6CnqrvYopMg= Subject key identifier: E2:E1:E6:6B:05:98:3F:E6:04:69:A3:81:7F:E5:08:17:57:CC:BF:3F Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 0390 Signing time: Thu 05 Nov 2026 01:01:47 +0000 Manifest this update: Thu 05 Nov 2026 01:01:46 +0000 Manifest next update: Thu 12 Nov 2026 01:01:46 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: Vzzb/OSl30XdMQ/UOlSDxbYdNaLJE7S538xBfWCYYM4=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: jlRQM3RPD/O7dTtmVB7NO8xOIJB/CcGkN+pMF7FoOHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Nov 5 01:01:46 2026 GMT Not After : Nov 12 01:01:46 2026 GMT Subject: CN=6aebd57b-e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:41:e8:42:51:03:3f:60:5b:8b:4d:02:9c: ed:46:e7:ec:3f:20:fc:0b:0f:3d:1d:bf:1f:b9:0a: 44:73:92:95:a8:56:dd:02:5c:80:40:18:4a:b5:44: 6b:4f:a8:ea:a3:e5:8d:8c:92:9e:46:6c:88:3b:75: 6f:7f:ab:c7:1c:d7:21:09:d7:93:cd:2a:cc:1d:a3: 33:33:8c:b7:90:46:92:c1:d8:b2:6f:fc:e5:8f:af: 0f:47:80:e2:e3:81:23:68:d6:2c:64:78:eb:da:7b: f9:bb:16:7c:89:a6:36:20:d8:ba:b3:6d:08:f3:61: 56:8a:0f:90:ce:d1:17:2f:49:fc:ca:88:79:90:54: 01:68:a0:40:89:0f:27:94:9b:11:b0:f9:9c:3c:5a: 18:b3:7f:2e:a6:ae:5d:33:62:2e:cd:3c:a3:37:b4: 3a:3b:13:82:e9:38:53:0a:41:1c:b6:57:30:00:ef: 1d:2d:94:b7:39:c1:e7:8f:58:e9:db:86:dd:eb:76: 34:fa:0b:47:a3:28:f1:e4:2e:82:05:e5:bb:cc:05: 6d:ec:6a:1c:1b:92:b5:ca:10:a0:bf:b9:81:c9:68: ff:4c:f9:a1:6b:96:fe:be:37:fd:08:f4:f1:7a:ac: 8f:3a:14:87:16:ac:82:18:a6:27:b1:c5:23:c0:02: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E1:E6:6B:05:98:3F:E6:04:69:A3:81:7F:E5:08:17:57:CC:BF:3F X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b4:89:e5:40:81:95:38:cb:1c:88:5b:6f:ea:52:91:3b:7c: f2:b9:7f:54:a6:de:39:28:45:a1:1f:e9:e2:88:b8:60:00:18: 53:9b:66:5e:0d:cf:70:ab:98:fb:64:e5:01:5b:06:1a:6c:b1: 0b:d5:ea:67:30:89:47:41:d4:bc:9f:e5:98:9e:ee:13:22:6e: d0:08:f1:d3:ca:bf:a9:35:9e:93:c5:5a:68:df:f1:97:0e:28: be:7f:0a:26:36:e7:84:16:45:66:e7:24:27:98:16:7b:53:2b: 52:cc:16:b3:96:2e:c4:80:3f:b9:1e:25:03:4d:45:61:52:9e: 85:66:36:0a:ca:31:b9:52:c5:64:1c:32:f9:4f:c3:47:02:27: 94:5c:c1:1f:5a:59:95:d3:2c:ea:6b:4d:f7:9a:a1:e7:dd:d9: 5e:bc:d9:52:73:f2:9a:e1:b7:19:d3:7c:69:f6:72:b7:08:05: ca:2d:bf:74:80:0d:cb:79:65:17:25:a6:56:2b:af:aa:e2:4e: fe:58:ca:d3:d0:f2:33:90:34:20:a0:5c:11:00:7a:0a:26:88: 4d:8e:b9:87:db:7a:21:29:c3:eb:86:4a:a9:ca:28:b8:d2:2c: 80:ba:9e:25:7f:88:65:3c:9b:15:cb:83:90:b9:2f:ca:80:c6: 1c:61:3d:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjYxMTA1MDEwMTQ2WhcNMjYxMTEyMDEwMTQ2WjAYMRYwFAYD VQQDEw02YWViZDU3Yi1lMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/ZB6EJRAz9gW4tNApztRufsPyD8Cw89Hb8fuQpEc5KVqFbdAlyAQBhKtURr T6jqo+WNjJKeRmyIO3Vvf6vHHNchCdeTzSrMHaMzM4y3kEaSwdiyb/zlj68PR4Di 44EjaNYsZHjr2nv5uxZ8iaY2INi6s20I82FWig+QztEXL0n8yoh5kFQBaKBAiQ8n lJsRsPmcPFoYs38upq5dM2IuzTyjN7Q6OxOC6ThTCkEctlcwAO8dLZS3OcHnj1jp 24bd63Y0+gtHoyjx5C6CBeW7zAVt7GocG5K1yhCgv7mByWj/TPmha5b+vjf9CPTx eqyPOhSHFqyCGKYnscUjwALiswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLh5msF mD/mBGmjgX/lCBdXzL8/MB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7SJ5UCBlTjLHIhbb+pSkTt88rl/VKbeOShFoR/p4oi4YAAYU5tmXg3PcKuY +2TlAVsGGmyxC9XqZzCJR0HUvJ/lmJ7uEyJu0Ajx08q/qTWek8VaaN/xlw4ovn8K JjbnhBZFZuckJ5gWe1MrUswWs5YuxIA/uR4lA01FYVKehWY2CsoxuVLFZBwy+U/D RwInlFzBH1pZldMs6mtN95qh593ZXrzZUnPymuG3GdN8afZytwgFyi2/dIANy3ll FyWmViuvquJO/ljK09DyM5A0IKBcEQB6CiaITY65h9t6ISnD64ZKqcoouNIsgLqe JX+IZTybFcuDkLkvyoDGHGE9kg== -----END CERTIFICATE-----Generated at Thu Nov 5 10:55:05 2026 by rpki-client