$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft File: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft (raw, json) Hash identifier: g0zDhJSdAQOAPQh3IXcBqo8NQKu9kjceeTZ9SvDXz54= Subject key identifier: B6:FC:FE:F1:C9:1F:3E:48:D6:DF:3E:13:63:C9:39:27:C6:60:29:A3 Authority key identifier: E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F Certificate issuer: /CN=A917BAC9/serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft Manifest number: 36 Signing time: Sun 15 Nov 2026 08:47:54 +0000 Manifest this update: Sun 15 Nov 2026 08:47:54 +0000 Manifest next update: Sun 22 Nov 2026 08:47:54 +0000 Files and hashes: 1: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl (hash: +ztvjRmzWP9wfnEhD/MmpXiVmJA2IzQrcCnFAEpqzvs=) 2: A3F5B386915C11F1B31E34186B11F970.roa (hash: ZUF0HTnqvtt1SvtzMivVLP03khbxNjJ+Nf1N85kohao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Validity Not Before: Nov 15 08:47:54 2026 GMT Not After : Nov 22 08:47:54 2026 GMT Subject: CN=6af971ba-42d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:55:80:16:bf:12:46:2e:d0:fd:ca:1f:d2: 8a:6b:cf:71:51:34:47:36:cd:1c:0b:f5:7c:ac:78: e4:12:29:a2:25:23:1a:2c:13:2e:c0:f9:b3:59:70: 6d:98:c3:17:08:ab:aa:97:70:7d:d0:a7:81:0a:0d: c1:5a:88:3d:a1:ff:27:79:d5:80:d6:2d:2d:c8:d7: f0:55:0c:89:09:3c:08:a2:42:d9:29:13:b9:a9:95: cc:b7:c3:67:a0:bc:f0:c3:73:32:06:40:ce:c2:59: d4:d4:8a:01:49:c4:79:95:40:c3:48:be:08:fe:2e: c9:e0:00:da:18:d9:9c:90:59:13:a7:42:89:97:23: 4f:f1:a6:cb:13:29:83:29:ce:1b:a6:b3:d9:de:c4: ad:99:7c:c6:f7:49:54:b9:34:4d:bf:23:4e:77:c5: f8:08:1d:b6:62:02:fa:4e:7d:ad:08:ac:ad:ab:2c: 7e:ba:52:b4:b7:53:67:62:21:aa:8f:f1:67:5a:47: 94:f9:bb:c3:9e:e0:9a:4c:26:2a:30:a5:7d:d7:f9: 1c:a8:4c:ac:65:d0:0c:59:01:81:c4:65:24:52:8c: 0a:86:86:7e:40:16:49:63:86:98:57:22:38:7f:4f: 66:aa:1d:96:44:80:10:12:05:1c:13:89:88:85:18: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:FE:F1:C9:1F:3E:48:D6:DF:3E:13:63:C9:39:27:C6:60:29:A3 X509v3 Authority Key Identifier: keyid:E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:09:38:61:7a:8e:8d:ac:86:32:22:44:d1:5a:f4:b0:6b:b5: ee:d7:12:d4:27:67:81:76:c4:7c:dc:ef:f9:ce:d6:2e:e0:8b: d0:97:3e:23:c3:53:c9:61:b8:b3:0a:bd:f3:3d:c0:2b:98:56: c4:7a:29:df:1b:c6:f9:fd:3b:b4:71:97:bc:86:45:04:04:bf: 67:7c:51:6f:9a:88:86:17:29:6a:9e:6a:89:df:84:72:08:0c: fa:b5:b0:2f:72:84:38:28:d3:87:ff:40:da:a6:f8:65:46:d1: 77:b4:4a:ca:16:c1:a5:ed:9d:d9:bb:71:5d:89:65:f6:89:fe: d9:e9:01:87:64:d1:45:b6:3f:c5:91:6d:4c:0b:d7:99:37:0c: c7:b3:6b:d1:6e:85:d7:2e:ea:b7:10:26:c2:96:01:12:cc:e3: 86:d8:6b:ae:84:87:6a:24:3d:01:d8:9b:60:06:f2:f1:7d:32: d0:65:79:69:5e:c6:d1:fa:27:ae:e7:87:d7:a4:0f:c2:4f:2c: ad:40:f5:69:5f:ee:1b:f9:41:83:6d:1c:30:6d:98:89:fb:d2: d2:d8:05:f4:48:e0:62:58:61:89:1f:c9:21:eb:1e:30:62:0f: b7:a0:73:0c:a2:50:7f:2f:f8:9e:07:a7:24:db:66:ef:a6:73: f0:6f:1c:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoRTE3MkVEMjA5ODZDQTI4RUQ0OTI0N0IyNTRDNENGOTU2 RTZEMDA1RjAeFw0yNjExMTUwODQ3NTRaFw0yNjExMjIwODQ3NTRaMBgxFjAUBgNV BAMTDTZhZjk3MWJhLTQyZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCHc1WAFr8SRi7Q/cof0oprz3FRNEc2zRwL9XyseOQSKaIlIxosEy7A+bNZcG2Y wxcIq6qXcH3Qp4EKDcFaiD2h/yd51YDWLS3I1/BVDIkJPAiiQtkpE7mplcy3w2eg vPDDczIGQM7CWdTUigFJxHmVQMNIvgj+LsngANoY2ZyQWROnQomXI0/xpssTKYMp zhums9nexK2ZfMb3SVS5NE2/I053xfgIHbZiAvpOfa0IrK2rLH66UrS3U2diIaqP 8WdaR5T5u8Oe4JpMJiowpX3X+RyoTKxl0AxZAYHEZSRSjAqGhn5AFkljhphXIjh/ T2aqHZZEgBASBRwTiYiFGFETAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtvz+8ckf PkjW3z4TY8k5J8ZgKaMwHwYDVR0jBBgwFoAU4XLtIJhsoo7UkkeyVMTPlW5tAF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5Lzg0Q0Y2OTU2OTE1 ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283VWtrZXlWTVRQbFc1dEFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNFhMdElKaHNvbzdVa2tleVZNVFBsVzV0QUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5Lzg0Q0Y2OTU2OTE1ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283 VWtrZXlWTVRQbFc1dEFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcCThheo6NrIYyIkTRWvSwa7Xu1xLUJ2eBdsR83O/5ztYu4IvQlz4jw1PJYbiz Cr3zPcArmFbEeinfG8b5/Tu0cZe8hkUEBL9nfFFvmoiGFylqnmqJ34RyCAz6tbAv coQ4KNOH/0DapvhlRtF3tErKFsGl7Z3Zu3FdiWX2if7Z6QGHZNFFtj/FkW1MC9eZ NwzHs2vRboXXLuq3ECbClgESzOOG2GuuhIdqJD0B2JtgBvLxfTLQZXlpXsbR+ieu 54fXpA/CTyytQPVpX+4b+UGDbRwwbZiJ+9LS2AX0SOBiWGGJH8kh6x4wYg+3oHMM olB/L/ieB6ck22bvpnPwbxyj -----END CERTIFICATE-----Generated at Sun Nov 15 17:57:58 2026 by rpki-client