$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: V0C7AoXh1SIsAODpO8btA3EzJvS6fLzP+1FkrwMPZoA= Subject key identifier: 95:74:B6:14:DD:0E:D6:5C:B9:09:A2:F7:D1:F0:BA:CC:9F:6A:36:AF Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 90 Signing time: Tue 03 Nov 2026 08:34:40 +0000 Manifest this update: Tue 03 Nov 2026 08:34:39 +0000 Manifest next update: Tue 10 Nov 2026 08:34:39 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: AIfHDMFVS0+nhAZIumkXzqosVi8ayk4R3O5S2r2JFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: Nov 3 08:34:39 2026 GMT Not After : Nov 10 08:34:39 2026 GMT Subject: CN=6ae99ca0-e643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:fd:66:9f:61:78:3d:7a:1d:42:f2:dd:b2: 00:ba:18:a4:8e:b4:e4:aa:b8:f6:f0:19:81:58:68: d6:a9:61:1c:5d:f1:83:13:fd:05:68:46:a5:41:ea: 4d:bb:ca:3f:e2:42:94:e4:c1:eb:69:95:18:ee:c6: 6f:ad:49:94:d5:aa:c8:c8:48:10:ff:d1:91:b9:f7: 9f:9d:3a:bc:78:96:36:a2:3e:35:3a:bc:e7:ba:7a: 62:69:e5:63:b5:bf:28:95:93:27:41:fb:19:4a:a6: 65:59:3d:f3:2b:17:f3:31:c1:f1:e2:a5:75:d4:7a: 89:48:7a:9e:52:67:aa:96:73:e3:3e:34:d8:53:59: 25:09:ba:8b:3f:55:d8:1b:59:0f:4f:c6:6f:d2:ae: 40:bb:44:5d:f5:8e:f6:4d:1d:8d:67:b2:0c:e9:36: 9b:28:9a:9f:a3:67:ec:8c:c8:08:4e:ef:39:56:28: 76:c2:2b:f6:e9:11:76:0e:06:c6:9b:dd:f4:5e:a3: b8:a8:99:62:0d:9a:d1:d0:c8:8e:6d:54:ff:1d:28: 5f:ce:ab:e6:cd:e2:f1:9e:2e:21:63:58:cd:83:57: 2c:cb:84:e7:7c:d9:51:1e:c8:d5:28:95:c5:3a:77: 30:e3:f8:2a:42:9d:42:d9:e1:2a:8d:6d:78:39:31: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:74:B6:14:DD:0E:D6:5C:B9:09:A2:F7:D1:F0:BA:CC:9F:6A:36:AF X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4b:77:6e:23:16:b3:90:74:32:07:5e:82:ff:67:2e:95:ff: e6:6d:e1:7f:ba:22:f3:25:9f:6d:01:69:26:18:a6:dc:52:32: e6:40:33:3a:6b:72:25:bb:f1:9a:11:a3:64:fc:c4:30:a1:ec: 02:25:6e:f3:56:65:21:bf:cf:2f:09:6e:ae:75:d1:bf:bb:34: c5:58:7d:5e:63:5c:ac:93:66:1f:ee:90:71:7b:26:a0:08:4a: 69:fe:bb:68:f9:13:3e:3d:b1:e7:2c:35:10:b5:cd:7c:5a:74: ed:e8:b4:68:44:2d:aa:1e:47:c0:e5:1f:f1:02:10:5e:43:19: 09:6b:05:38:02:94:9e:dd:c7:9d:79:3d:e3:c5:93:67:03:2e: 44:58:93:7c:2d:29:83:db:17:91:8f:54:d2:40:86:f3:ca:24: a3:4c:20:d4:b2:09:87:07:cb:9a:17:fa:71:49:de:00:1e:be: de:69:3b:06:e4:b6:7f:19:df:e1:3f:5f:5c:d6:64:66:01:43: 89:31:b1:d3:27:f3:6d:33:fc:f0:82:aa:2f:c9:97:c8:7b:bb: dc:28:73:47:c1:47:65:9d:ac:bb:24:93:ab:b6:25:6d:03:7d: f4:fe:9d:b7:03:8b:0e:e5:78:a5:b7:95:9a:16:3f:1d:d2:4a: 05:28:d4:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNENUUxMTAvBgNVBAUTKDdGNjM4RTEwRDZCRjNGNEE4NTRCQzYwQTEzQzIzOUIy RjM1RDE0RTEwHhcNMjYxMTAzMDgzNDM5WhcNMjYxMTEwMDgzNDM5WjAYMRYwFAYD VQQDEw02YWU5OWNhMC1lNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgj9Zp9heD16HULy3bIAuhikjrTkqrj28BmBWGjWqWEcXfGDE/0FaEalQepN u8o/4kKU5MHraZUY7sZvrUmU1arIyEgQ/9GRufefnTq8eJY2oj41OrznunpiaeVj tb8olZMnQfsZSqZlWT3zKxfzMcHx4qV11HqJSHqeUmeqlnPjPjTYU1klCbqLP1XY G1kPT8Zv0q5Au0Rd9Y72TR2NZ7IM6TabKJqfo2fsjMgITu85Vih2wiv26RF2DgbG m930XqO4qJliDZrR0MiObVT/HShfzqvmzeLxni4hY1jNg1csy4TnfNlRHsjVKJXF Oncw4/gqQp1C2eEqjW14OTEsxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJV0thTd DtZcuQmi99HwusyfajavMB8GA1UdIwQYMBaAFH9jjhDWvz9KhUvGChPCObLzXRTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Q1RS8yQUE2RTI0NEZF NjcxMUYwQTc1Qzg4NTI1MzZGNTZCQy9mMk9PRU5hX1AwcUZTOFlLRThJNXN2TmRG T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Q1RS8yQUE2RTI0NEZFNjcxMUYwQTc1Qzg4NTI1MzZGNTZCQy9mMk9PRU5hX1Aw cUZTOFlLRThJNXN2TmRGT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsUt3biMWs5B0Mgdegv9nLpX/5m3hf7oi8yWfbQFpJhim3FIy5kAzOmtyJbvx mhGjZPzEMKHsAiVu81ZlIb/PLwlurnXRv7s0xVh9XmNcrJNmH+6QcXsmoAhKaf67 aPkTPj2x5yw1ELXNfFp07ei0aEQtqh5HwOUf8QIQXkMZCWsFOAKUnt3HnXk948WT ZwMuRFiTfC0pg9sXkY9U0kCG88oko0wg1LIJhwfLmhf6cUneAB6+3mk7BuS2fxnf 4T9fXNZkZgFDiTGx0yfzbTP88IKqL8mXyHu73ChzR8FHZZ2suySTq7YlbQN99P6d twOLDuV4pbeVmhY/HdJKBSjUbw== -----END CERTIFICATE-----Generated at Thu Nov 5 05:20:01 2026 by rpki-client