$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft File: 1ppgVl8zchSc5uL8nnI9SQZ2doo.mft (raw, json) Hash identifier: ooRHaLNlCioY8XQ1cvJE4e3VuzPY/e1eZvD6QZTdKTA= Subject key identifier: 00:ED:15:66:2D:5D:E1:2F:0E:D0:98:18:22:F4:A7:E6:C0:24:75:DC Authority key identifier: D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A Certificate issuer: /CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A Certificate serial: 359C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft Manifest number: 359C Signing time: Sat 14 Nov 2026 14:55:40 +0000 Manifest this update: Sat 14 Nov 2026 14:55:39 +0000 Manifest next update: Sat 21 Nov 2026 14:55:39 +0000 Files and hashes: 1: 1ppgVl8zchSc5uL8nnI9SQZ2doo.crl (hash: JMAvrV6h4v8x3cDrgfvOsR0IwJwwDc/7dnoWGLehxxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13724 (0x359c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F7D, serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A Validity Not Before: Nov 14 14:55:39 2026 GMT Not After : Nov 21 14:55:39 2026 GMT Subject: CN=6af8766c-1933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:f1:7d:28:48:10:b1:24:db:97:68:d9:a3: 22:a1:da:df:dc:25:20:c4:c5:d9:9a:bc:78:c8:01: ac:a4:3d:28:f2:34:1b:eb:99:b9:5d:94:6d:86:13: 86:86:a6:5f:6e:b1:44:de:da:de:b4:2d:e5:8b:ae: bc:0e:dd:4b:17:bc:5c:81:c3:5e:d7:05:4f:2e:3b: 18:3d:fd:5c:51:b1:52:77:99:41:52:4f:a8:e7:8e: 17:19:7e:04:85:59:b6:9d:d1:ce:b7:5d:e4:f8:24: c1:ab:74:bf:a4:26:be:0f:cf:08:77:ff:f9:f1:77: 9b:c0:25:56:1d:dd:bd:b3:69:99:5b:e9:8c:71:fb: 9f:e8:d0:2a:f0:bc:b7:ec:18:ad:d4:93:a2:89:af: d8:dd:05:16:ff:50:19:0f:01:82:f7:2e:42:e9:8f: cf:6f:e4:97:12:7e:2b:25:89:91:f5:f3:ef:1f:f8: 43:0f:e0:7a:22:44:37:44:01:46:e7:33:42:c4:14: 91:1d:51:98:26:37:92:23:b0:23:f1:a2:2e:d1:8b: a4:e5:d8:2b:06:86:b1:83:7a:5c:12:48:2e:8f:57: 02:49:eb:ba:93:a0:24:c7:9e:f7:62:dc:5a:a7:67: eb:6a:8c:fa:cf:68:6d:39:23:46:93:22:50:3b:a3: e4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:ED:15:66:2D:5D:E1:2F:0E:D0:98:18:22:F4:A7:E6:C0:24:75:DC X509v3 Authority Key Identifier: keyid:D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a9:73:fd:13:a3:cf:99:89:4a:ba:c9:eb:cb:86:a6:e6:7e: c5:7d:20:96:a9:03:af:a4:a3:8b:1c:3e:bb:d0:09:9b:cb:04: c3:4f:f6:3d:0b:af:84:7a:87:91:5a:ce:53:cd:b8:16:5a:c0: 16:63:50:33:8c:62:b9:3d:77:9a:a3:e2:56:b4:6c:52:19:63: 75:b2:90:47:66:8a:2b:9a:e5:30:c5:a2:70:5c:58:6f:dd:ec: 4e:a6:9c:a7:c1:27:7a:e7:ba:78:e0:c0:71:50:d8:2f:f0:83: 9e:fa:c9:05:95:20:6d:38:51:3c:a4:3e:ce:7f:c7:25:fa:fa: 1b:5b:d9:c1:56:09:f1:1c:75:19:92:2e:07:49:d2:a0:31:d7: 43:3d:20:1b:d5:0e:7f:84:03:02:e6:25:9c:40:55:e3:b8:ae: 4f:47:c1:06:aa:49:eb:f3:ab:d1:51:21:7d:f1:f5:81:dd:65: 9e:67:c0:bf:59:d3:a7:68:3c:d0:eb:b7:27:91:7c:1f:06:5d: f1:ee:ce:48:15:e3:89:c1:df:5b:94:88:69:7b:ec:90:46:23: aa:9f:e8:0d:3c:2d:da:40:c8:d3:e8:8a:83:e0:71:77:9e:e6: d9:b1:81:ca:15:38:ca:66:cd:ba:c8:e7:fb:03:09:8b:8d:e0: 5b:6e:2d:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGN0QxMTAvBgNVBAUTKEQ2OUE2MDU2NUYzMzcyMTQ5Q0U2RTJGQzlFNzIzRDQ5 MDY3Njc2OEEwHhcNMjYxMTE0MTQ1NTM5WhcNMjYxMTIxMTQ1NTM5WjAYMRYwFAYD VQQDEw02YWY4NzY2Yy0xOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ/xfShIELEk25do2aMiodrf3CUgxMXZmrx4yAGspD0o8jQb65m5XZRthhOG hqZfbrFE3tretC3li668Dt1LF7xcgcNe1wVPLjsYPf1cUbFSd5lBUk+o544XGX4E hVm2ndHOt13k+CTBq3S/pCa+D88Id//58XebwCVWHd29s2mZW+mMcfuf6NAq8Ly3 7Bit1JOiia/Y3QUW/1AZDwGC9y5C6Y/Pb+SXEn4rJYmR9fPvH/hDD+B6IkQ3RAFG 5zNCxBSRHVGYJjeSI7Aj8aIu0Yuk5dgrBoaxg3pcEkguj1cCSeu6k6Akx573Ytxa p2fraoz6z2htOSNGkyJQO6PkNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADtFWYt XeEvDtCYGCL0p+bAJHXcMB8GA1UdIwQYMBaAFNaaYFZfM3IUnObi/J5yPUkGdnaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY3RC82OTc1M0Y1ODFE OUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNoU2M1dUw4bm5JOVNRWjJk b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwcGdWbDh6Y2hTYzV1TDhubkk5U1FaMmRvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY3RC82OTc1M0Y1ODFEOUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNo U2M1dUw4bm5JOVNRWjJkb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq6lz/ROjz5mJSrrJ68uGpuZ+xX0glqkDr6Sjixw+u9AJm8sEw0/2PQuvhHqH kVrOU824FlrAFmNQM4xiuT13mqPiVrRsUhljdbKQR2aKK5rlMMWicFxYb93sTqac p8Eneue6eODAcVDYL/CDnvrJBZUgbThRPKQ+zn/HJfr6G1vZwVYJ8Rx1GZIuB0nS oDHXQz0gG9UOf4QDAuYlnEBV47iuT0fBBqpJ6/Or0VEhffH1gd1lnmfAv1nTp2g8 0Ou3J5F8HwZd8e7OSBXjicHfW5SIaXvskEYjqp/oDTwt2kDI0+iKg+Bxd57m2bGB yhU4ymbNusjn+wMJi43gW24txA== -----END CERTIFICATE-----Generated at Sun Nov 15 21:46:05 2026 by rpki-client