$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: i+elPMR3cAe39fBVFWq3nRB5ZiQ8QS2ZS7XPBtvBq4I= Subject key identifier: 69:6A:18:31:7C:E9:50:2D:DF:DB:F1:42:B8:29:1D:71:EF:C7:DA:CD Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 0652 Signing time: Sun 08 Nov 2026 22:28:56 +0000 Manifest this update: Sun 08 Nov 2026 22:28:55 +0000 Manifest next update: Sun 15 Nov 2026 22:28:55 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: h5IGmrYm99zbFbtA6Uv4PkwsrWo1es46IuHBODENjoY=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Nov 8 22:28:55 2026 GMT Not After : Nov 15 22:28:55 2026 GMT Subject: CN=6af0f7a8-a260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:41:7c:44:46:e9:c4:a4:5e:8e:98:61:5e: b2:dd:1f:ab:c6:a1:ed:67:bd:03:e3:07:e7:a0:46: 87:4f:50:d0:23:2f:83:fe:3b:7f:b6:d0:5d:17:b6: 65:a8:c7:cc:fb:d2:b4:70:e6:5c:84:a0:9c:41:c2: 35:8f:d1:85:6f:99:cc:99:56:cf:a2:b2:95:b7:b1: 20:ee:4e:ed:f2:1e:35:62:93:27:18:44:3c:97:c1: f5:c3:bf:14:91:08:5d:f7:9d:93:eb:a6:78:70:8a: d4:87:8d:b7:ac:3d:a2:d1:b8:a8:c9:d7:a5:01:da: 57:f6:ff:86:80:23:b9:cd:40:0e:ca:43:f8:b9:6f: d2:27:ea:e1:c4:50:e8:62:eb:21:02:d3:72:dd:6c: 59:fb:0f:d4:70:9e:ff:25:42:5d:18:8c:6a:34:2f: 45:54:5e:57:bc:e0:e7:b1:9c:6d:30:d0:7e:73:5f: 85:81:25:d8:21:a8:a9:3d:f2:7c:d6:cd:5f:b4:d9: 7d:8e:bf:6a:a4:2c:9b:6b:6b:c6:57:da:47:eb:a4: 06:a6:f9:18:9d:da:97:41:46:4a:fe:63:a9:f9:83: 9a:df:ef:08:70:bf:f1:77:fe:f4:3e:fb:c2:0d:fc: f3:7c:a7:64:cb:8c:25:2a:8c:fa:86:c3:4e:8c:c7: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6A:18:31:7C:E9:50:2D:DF:DB:F1:42:B8:29:1D:71:EF:C7:DA:CD X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9d:b3:3a:3c:49:88:e9:3c:b1:9e:b4:da:88:b8:1b:34:b8: a1:04:a9:8e:ef:a9:e4:7b:87:30:5f:2e:5d:7e:2d:92:71:5d: 43:7f:4d:fa:5d:1e:3a:94:8f:83:81:c1:69:fa:a5:35:3b:b6: c7:9f:4b:2c:b4:18:27:8c:63:6f:c7:f9:da:b2:32:44:63:3d: 49:20:79:68:f7:a2:6a:35:05:85:90:e1:0c:83:3b:49:4a:5b: 3c:df:db:86:01:74:f6:15:57:59:1d:46:3e:0c:fb:0e:c4:76: 21:21:90:1a:22:a7:7a:ed:b3:b8:8e:33:bb:62:3d:84:73:28: bf:d1:09:31:d7:22:ba:9f:9f:2e:60:32:61:b3:fb:ca:7c:a6: 85:62:6d:3c:e5:86:97:6a:18:35:20:d1:c8:9f:4f:8b:31:02: 8d:13:90:34:48:fc:26:d7:b4:33:2f:c6:14:d3:3d:4a:c7:63: 1b:ac:5e:15:09:9d:f8:02:c4:13:82:53:eb:89:89:f0:f2:43: 32:76:14:30:6f:b7:f8:1a:ad:a4:91:f5:86:84:e7:7c:8f:c0: 79:9a:05:c7:5b:0b:0b:31:e6:d0:0e:49:21:9d:ed:cf:05:e0: 4f:f6:c7:37:c2:cd:48:83:f2:01:0d:1a:94:d9:24:75:5a:fe: aa:d1:0e:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjYxMTA4MjIyODU1WhcNMjYxMTE1MjIyODU1WjAYMRYwFAYD VQQDEw02YWYwZjdhOC1hMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucZBfERG6cSkXo6YYV6y3R+rxqHtZ70D4wfnoEaHT1DQIy+D/jt/ttBdF7Zl qMfM+9K0cOZchKCcQcI1j9GFb5nMmVbPorKVt7Eg7k7t8h41YpMnGEQ8l8H1w78U kQhd952T66Z4cIrUh423rD2i0bioydelAdpX9v+GgCO5zUAOykP4uW/SJ+rhxFDo YushAtNy3WxZ+w/UcJ7/JUJdGIxqNC9FVF5XvODnsZxtMNB+c1+FgSXYIaipPfJ8 1s1ftNl9jr9qpCyba2vGV9pH66QGpvkYndqXQUZK/mOp+YOa3+8IcL/xd/70PvvC DfzzfKdky4wlKoz6hsNOjMchBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlqGDF8 6VAt39vxQrgpHXHvx9rNMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZ2zOjxJiOk8sZ602oi4GzS4oQSpju+p5HuHMF8uXX4tknFdQ39N+l0eOpSP g4HBafqlNTu2x59LLLQYJ4xjb8f52rIyRGM9SSB5aPeiajUFhZDhDIM7SUpbPN/b hgF09hVXWR1GPgz7DsR2ISGQGiKneu2zuI4zu2I9hHMov9EJMdciup+fLmAyYbP7 ynymhWJtPOWGl2oYNSDRyJ9PizECjROQNEj8Jte0My/GFNM9SsdjG6xeFQmd+ALE E4JT64mJ8PJDMnYUMG+3+BqtpJH1hoTnfI/AeZoFx1sLCzHm0A5JIZ3tzwXgT/bH N8LNSIPyAQ0alNkkdVr+qtEOVQ== -----END CERTIFICATE-----Generated at Mon Nov 9 06:23:25 2026 by rpki-client