$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft File: 3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json) Hash identifier: 7zfMC2b8hW0Tgqh+ENGy/pNVjaJUEBRnWNUsm7AW5os= Subject key identifier: 73:74:86:6E:9A:9C:8B:B8:1D:EE:9A:FB:86:29:9B:3C:FF:5E:F6:5F Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F Certificate issuer: /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft Manifest number: 0132 Signing time: Mon 09 Nov 2026 05:57:23 +0000 Manifest this update: Mon 09 Nov 2026 05:57:23 +0000 Manifest next update: Mon 16 Nov 2026 05:57:23 +0000 Files and hashes: 1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: r3edqOx3ojkCM9349DSoZ8+gZcKyGym0NxWbxs+N2hI=) 2: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=) 3: B28E01329B0711F199CD6D115E11F970.roa (hash: u/s9p3ptKydcBVwdA+lqK9E1OMc1aWdkwOrHDlz9hYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F Validity Not Before: Nov 9 05:57:23 2026 GMT Not After : Nov 16 05:57:23 2026 GMT Subject: CN=6af160c3-1f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:54:a6:06:a1:a5:6d:1b:f0:1c:77:e0:df: 37:35:6b:d0:be:8b:e6:73:26:ce:ef:74:13:a3:eb: 8b:0f:d6:88:48:2a:79:54:92:62:39:fa:7b:fe:0b: fb:a8:a5:8e:ca:71:56:b5:77:f8:fb:87:84:5c:b1: eb:54:3b:12:83:e6:79:00:87:f0:b2:ee:e0:a4:6c: de:7e:8e:a0:a2:02:5e:3c:29:29:41:82:1f:a7:4b: aa:db:53:a1:45:1f:a7:f2:06:d2:0f:da:f1:a2:90: 4e:23:11:58:bc:f2:c9:19:76:6d:f2:44:09:78:0f: 8e:c2:49:ea:67:cb:ad:cc:6f:07:2b:da:09:6c:36: 31:a4:2a:b4:0f:6b:df:2d:41:a2:11:de:15:98:33: ce:28:9e:1c:df:89:93:0f:f8:0d:6b:17:89:dd:0e: 29:ce:a1:13:92:49:8e:85:86:eb:72:95:99:1a:c2: a1:89:5e:1b:bd:84:6e:3f:de:c0:94:06:fb:9a:63: cc:31:7a:5d:c5:cc:22:fc:08:b6:6a:19:13:99:d4: 26:15:46:8c:0f:d6:76:4d:97:a5:ab:b7:60:0b:d7: 48:c3:0f:a4:88:2d:9a:1d:27:94:45:23:fe:3a:ec: cc:47:dc:31:ea:06:a7:c3:6c:b7:f2:79:55:b6:14: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:74:86:6E:9A:9C:8B:B8:1D:EE:9A:FB:86:29:9B:3C:FF:5E:F6:5F X509v3 Authority Key Identifier: keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:58:1e:99:43:98:86:02:48:32:40:4e:c9:01:ea:59:9f:1f: 7c:df:ec:d3:29:7d:fc:a8:92:94:02:07:6d:d7:33:06:e8:d7: 1d:c9:94:57:04:ce:1e:3d:2a:91:6a:e6:94:9c:0a:66:10:45: 65:cc:25:a7:90:80:03:5c:5c:25:57:16:28:ec:52:66:5e:01: 23:36:12:0a:91:68:61:67:da:69:92:ae:6b:b5:3e:f0:b9:f9: fe:20:09:c0:7e:da:56:63:28:72:d4:58:29:1f:23:34:6c:f5: 51:fc:03:4a:54:34:65:10:3a:10:03:58:ed:b1:73:ec:41:20: d3:0b:e3:8f:92:7c:b5:86:d5:41:0d:ec:6d:22:94:4d:9c:79: 68:b0:f5:a9:6d:9c:e1:ea:08:b5:f0:87:fb:ec:39:04:f0:30: 4f:e9:20:24:e7:b0:29:41:75:8e:e7:38:e9:0b:11:b5:01:b7: 0c:a1:c9:be:1d:f2:f1:02:3b:e7:26:ef:ec:c9:b8:cc:6a:74: 88:4b:a8:1f:61:ca:b6:bb:ee:d4:2e:18:e8:b8:86:60:d6:f1: 6f:6f:44:04:a5:30:b8:3b:6b:d8:c1:bb:e3:b1:54:41:be:d0: f6:55:30:08:25:62:1b:58:de:a4:69:75:30:e6:4e:ab:7d:28: ab:ce:c4:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVFQ0YxMTAvBgNVBAUTKERGMzFDRjE4NTA5MEUxNTQ5NjVFRkZGQkM2NjRCREQ3 MjFEODA3NUYwHhcNMjYxMTA5MDU1NzIzWhcNMjYxMTE2MDU1NzIzWjAYMRYwFAYD VQQDEw02YWYxNjBjMy0xZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI9UpgahpW0b8Bx34N83NWvQvovmcybO73QTo+uLD9aISCp5VJJiOfp7/gv7 qKWOynFWtXf4+4eEXLHrVDsSg+Z5AIfwsu7gpGzefo6gogJePCkpQYIfp0uq21Oh RR+n8gbSD9rxopBOIxFYvPLJGXZt8kQJeA+OwknqZ8utzG8HK9oJbDYxpCq0D2vf LUGiEd4VmDPOKJ4c34mTD/gNaxeJ3Q4pzqETkkmOhYbrcpWZGsKhiV4bvYRuP97A lAb7mmPMMXpdxcwi/Ai2ahkTmdQmFUaMD9Z2TZelq7dgC9dIww+kiC2aHSeURSP+ OuzMR9wx6ganw2y38nlVthSrHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHN0hm6a nIu4He6a+4Ypmzz/XvZfMB8GA1UdIwQYMBaAFN8xzxhQkOFUll7/+8Zkvdch2Adf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUVDRi9FRjZCOTA1QzI1 RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRWU1dYdl83eG1TOTF5SFlC MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN6SFBHRkNRNFZTV1h2Xzd4bVM5MXlIWUIxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUVDRi9FRjZCOTA1QzI1RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi8zekhQR0ZDUTRW U1dYdl83eG1TOTF5SFlCMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATlgemUOYhgJIMkBOyQHqWZ8ffN/s0yl9/KiSlAIHbdczBujXHcmUVwTOHj0q kWrmlJwKZhBFZcwlp5CAA1xcJVcWKOxSZl4BIzYSCpFoYWfaaZKua7U+8Ln5/iAJ wH7aVmMoctRYKR8jNGz1UfwDSlQ0ZRA6EANY7bFz7EEg0wvjj5J8tYbVQQ3sbSKU TZx5aLD1qW2c4eoItfCH++w5BPAwT+kgJOewKUF1juc46QsRtQG3DKHJvh3y8QI7 5ybv7Mm4zGp0iEuoH2HKtrvu1C4Y6LiGYNbxb29EBKUwuDtr2MG747FUQb7Q9lUw CCViG1jepGl1MOZOq30oq87EeQ== -----END CERTIFICATE-----Generated at Tue Nov 10 08:22:11 2026 by rpki-client