$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: zozM+68x8Fp8hUBqLCLOWokAJztr/FXAZN1PZvlM8J8= Subject key identifier: 63:96:57:A3:9B:F6:B3:47:54:40:EF:65:26:BE:DF:1A:68:A3:C9:17 Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 021F Signing time: Sun 15 Nov 2026 03:08:12 +0000 Manifest this update: Sun 15 Nov 2026 03:08:12 +0000 Manifest next update: Sun 22 Nov 2026 03:08:12 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: o3YRxrc71kOPz5ZIyrGNZwGz06YPPQrOPUjgIU9iw8Y=) 2: 79E25D40601211F1AD9319218A47A888.roa (hash: q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=) 3: 4000EEAADDF011F1A6F8444E2B66CEF9.roa (hash: 8TI8l0L/MmUA4njsQoszEzCTFLE4kTgOMn4hXl/BsVU=) 4: ACC45B54619411F19AF0775A8347A888.roa (hash: JuZvLZgp7cBMbz5SArZAcdTlGbnZq2/Za1QddcsY5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Nov 15 03:08:12 2026 GMT Not After : Nov 22 03:08:12 2026 GMT Subject: CN=6af9221c-d3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:de:e3:74:f9:fa:71:ba:cc:43:65:66:fc: cd:4e:57:b4:62:42:dc:67:88:c7:9e:98:e9:6f:65: 11:5f:74:f0:09:70:73:d9:ec:36:62:ff:61:b9:3f: 1a:7e:6d:bc:d3:f3:7f:cb:6d:59:5b:c3:6f:c6:6f: 34:7b:71:42:5b:fc:09:62:a5:f3:64:38:8f:64:38: d4:16:be:5d:38:5e:5a:a8:56:0b:39:0e:24:cb:bf: 99:03:5c:bc:1b:5a:56:55:7f:3e:ad:61:41:bd:3f: 3b:6f:e4:d8:12:bd:7a:6f:8a:9d:d7:13:0e:1f:36: 2c:6b:8f:e8:30:1b:f5:7f:db:1c:27:be:d9:35:9d: a5:b4:68:e9:a6:1f:7b:6a:cd:87:91:0d:80:53:30: 1a:a3:8f:f0:25:47:ab:07:5d:f7:29:67:3d:37:f8: 2d:0a:41:12:73:89:dd:ff:d4:84:53:cb:81:89:fc: 73:f5:8c:39:ac:f3:54:7b:6e:33:1c:b7:e1:15:26: f0:82:c9:ce:be:ea:70:12:6b:ce:e0:01:8b:c3:a0: 1d:53:ed:c8:ea:40:32:1c:ac:3e:65:9d:6d:b9:a5: dc:f0:67:50:fc:3e:e2:7f:97:31:da:fe:8d:fa:17: ca:fd:da:0e:e7:1a:db:58:b2:e8:bc:9e:eb:bf:ad: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:57:A3:9B:F6:B3:47:54:40:EF:65:26:BE:DF:1A:68:A3:C9:17 X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:a0:68:83:c5:29:19:bf:66:6a:ef:20:8d:43:9d:37:9c: 54:da:03:0a:93:4c:68:f9:ad:09:99:e8:61:a5:78:cd:8e:bb: f1:7b:b8:15:df:2f:69:14:60:61:9e:0d:59:c4:57:44:d6:d3: c2:07:21:9f:a2:43:d7:09:f1:57:a6:f5:14:70:e9:33:42:52: ab:b4:e5:0b:a4:9b:e4:f0:35:37:04:4c:b3:18:85:02:98:7b: a5:c9:be:67:32:86:02:4a:32:aa:a6:ea:15:37:8e:ff:b3:a7: 05:7f:68:ba:f3:81:07:be:05:7d:4a:fe:db:d4:5e:c4:fc:84: 9a:00:dd:89:55:3d:6c:eb:0f:ad:07:a9:38:10:47:d6:7c:64: 38:48:ff:6f:91:8b:06:1f:28:79:74:96:ff:97:83:3a:e3:9b: 34:02:76:de:d2:62:13:e7:01:47:d1:d5:dc:6f:be:9d:d9:e6: da:51:fb:41:42:ad:f1:31:b1:a2:72:81:8a:c8:2a:ac:16:55: a4:50:0b:72:ba:ce:38:cb:e6:fc:3f:ca:c8:e7:26:f8:e0:dc: bf:f0:b8:27:ce:51:bb:94:53:dc:c2:38:e1:29:b6:74:a5:4f: d2:80:2d:db:e3:f0:91:cc:29:3c:6f:fc:57:52:1f:79:f7:3e: 0a:b9:67:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYxMTE1MDMwODEyWhcNMjYxMTIyMDMwODEyWjAYMRYwFAYD VQQDEw02YWY5MjIxYy1kM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUje43T5+nG6zENlZvzNTle0YkLcZ4jHnpjpb2URX3TwCXBz2ew2Yv9huT8a fm280/N/y21ZW8Nvxm80e3FCW/wJYqXzZDiPZDjUFr5dOF5aqFYLOQ4ky7+ZA1y8 G1pWVX8+rWFBvT87b+TYEr16b4qd1xMOHzYsa4/oMBv1f9scJ77ZNZ2ltGjpph97 as2HkQ2AUzAao4/wJUerB133KWc9N/gtCkESc4nd/9SEU8uBifxz9Yw5rPNUe24z HLfhFSbwgsnOvupwEmvO4AGLw6AdU+3I6kAyHKw+ZZ1tuaXc8GdQ/D7if5cx2v6N +hfK/doO5xrbWLLovJ7rv61kSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOWV6Ob 9rNHVEDvZSa+3xpoo8kXMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEoKgaIPFKRm/ZmrvII1DnTecVNoDCpNMaPmtCZnoYaV4zY678Xu4Fd8vaRRg YZ4NWcRXRNbTwgchn6JD1wnxV6b1FHDpM0JSq7TlC6Sb5PA1NwRMsxiFAph7pcm+ ZzKGAkoyqqbqFTeO/7OnBX9ouvOBB74FfUr+29RexPyEmgDdiVU9bOsPrQepOBBH 1nxkOEj/b5GLBh8oeXSW/5eDOuObNAJ23tJiE+cBR9HV3G++ndnm2lH7QUKt8TGx onKBisgqrBZVpFALcrrOOMvm/D/KyOcm+ODcv/C4J85Ru5RT3MI44Sm2dKVP0oAt 2+PwkcwpPG/8V1Ifefc+CrlnHg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:34:14 2026 by rpki-client