$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: spkuS258AgYLkjm8BHK8kYxnZ3152LTZPB7/dZRqyjA= Subject key identifier: D4:6F:FA:5E:DD:67:AF:74:48:36:94:13:F5:BB:6A:18:FB:13:84:B8 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 3825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 36F5 Signing time: Wed 04 Nov 2026 14:25:00 +0000 Manifest this update: Wed 04 Nov 2026 14:25:00 +0000 Manifest next update: Wed 11 Nov 2026 14:25:00 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: eNn24ct+ajV2fjumQc3U+Ro132v+9OYgWc7jxkETpNs=) 2: 980E9108D2AE11F19D04B25AFD65CEF9.roa (hash: NTUOjjrGGySljkdyPx10i/YxawXwSPKb1zBFWYG/wzk=) 3: rQSAPyGUXtGkb8Ui1URzc0kbX3M.asa (hash: e5gGUoXTbgO3Bqx/dg2NaRASCiNn+/PB5Y+WJNAkgGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 14:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14373 (0x3825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Nov 4 14:25:00 2026 GMT Not After : Nov 11 14:25:00 2026 GMT Subject: CN=6aeb403c-8bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:be:20:ca:03:38:8b:a9:8f:e8:6b:a4:16: c3:cb:b4:2c:76:d4:4b:72:3b:3e:20:8f:36:3c:d8: 01:0d:4b:e7:e8:02:a2:c7:5c:22:b2:99:58:57:ae: 06:21:88:c3:b5:c7:1c:8e:35:66:ea:b3:8f:79:f7: df:ed:64:40:de:07:e6:d0:33:24:0b:3f:95:20:dc: b8:5a:e6:76:92:b6:f5:8e:38:4d:34:5a:8f:7a:87: 46:e7:ba:24:03:dd:ee:83:9d:c2:f2:55:04:75:f2: cf:b4:d4:55:a8:2c:7b:29:40:d4:4d:7c:4b:61:af: 98:d5:2a:e9:df:d1:f9:4e:ee:58:7a:67:d7:28:1d: e0:bc:89:fe:2c:0f:d1:1a:e6:9d:c9:8f:2c:72:0a: 80:ec:01:f1:dd:b0:ce:7f:09:58:72:6d:f9:49:36: f5:ad:e3:07:12:ef:7f:c1:21:7b:a7:3f:8c:3f:35: 34:1e:e4:bb:d1:d8:e1:4a:d9:1e:39:97:94:65:03: dd:c3:af:cb:ec:fe:63:f8:ec:61:e0:05:79:1f:05: bb:36:b1:73:ed:1d:be:42:a6:be:95:e5:3d:4c:d7: 27:49:9f:44:65:51:1a:14:64:49:62:c5:ce:45:a8: c3:8e:ad:df:23:53:95:c2:ce:4f:fa:ff:ee:59:9d: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6F:FA:5E:DD:67:AF:74:48:36:94:13:F5:BB:6A:18:FB:13:84:B8 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:f5:f0:cb:7e:ea:6a:66:19:8f:d7:d5:a2:d9:03:6f:6f: 17:e1:be:92:f3:b6:93:d8:6b:f0:52:98:3c:33:f6:03:3c:63: f6:43:54:8f:34:e0:2c:41:ae:4b:7d:a2:30:77:27:a9:09:b6: 39:84:5a:aa:4d:a2:c7:b6:7c:33:99:c2:a4:26:3b:52:02:c9: e5:0e:8e:d6:43:c3:79:ca:29:8b:e3:80:0a:1e:8e:b5:10:fe: 74:96:8c:d2:27:e2:b7:50:03:52:55:72:04:25:56:58:f2:b9: d7:b7:b3:6b:35:10:63:b0:4f:a7:06:3b:c6:c2:a5:45:98:0e: 26:f3:04:04:76:a1:07:d2:01:db:6d:91:a1:b2:26:c9:d5:2c: f1:dc:a0:92:93:30:bd:1d:3e:76:65:cf:41:d0:e6:b7:50:e8: 6b:be:a2:41:76:5f:43:3d:7b:a6:bd:71:aa:4b:b2:23:9a:7c: ca:a6:d7:83:d0:89:df:87:9d:0c:e2:b0:9f:d0:a1:df:6b:f9: 3f:84:f9:a1:17:d9:77:05:26:27:34:bd:99:65:a3:87:71:ef: 3e:e4:d9:87:79:9a:5d:92:a8:6c:ef:c2:8b:97:e7:35:bf:d3: 4d:a5:53:30:8b:7c:eb:62:d3:92:5d:6b:b0:1c:f9:c9:fe:68: a0:1a:40:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjYxMTA0MTQyNTAwWhcNMjYxMTExMTQyNTAwWjAYMRYwFAYD VQQDEw02YWViNDAzYy04YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNS+IMoDOIupj+hrpBbDy7QsdtRLcjs+II82PNgBDUvn6AKix1wisplYV64G IYjDtcccjjVm6rOPefff7WRA3gfm0DMkCz+VINy4WuZ2krb1jjhNNFqPeodG57ok A93ug53C8lUEdfLPtNRVqCx7KUDUTXxLYa+Y1Srp39H5Tu5YemfXKB3gvIn+LA/R GuadyY8scgqA7AHx3bDOfwlYcm35STb1reMHEu9/wSF7pz+MPzU0HuS70djhStke OZeUZQPdw6/L7P5j+Oxh4AV5HwW7NrFz7R2+Qqa+leU9TNcnSZ9EZVEaFGRJYsXO RajDjq3fI1OVws5P+v/uWZ0eLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRv+l7d Z690SDaUE/W7ahj7E4S4MB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIP318Mt+6mpmGY/X1aLZA29vF+G+kvO2k9hr8FKYPDP2Azxj9kNUjzTgLEGu S32iMHcnqQm2OYRaqk2ix7Z8M5nCpCY7UgLJ5Q6O1kPDecopi+OACh6OtRD+dJaM 0ifit1ADUlVyBCVWWPK517ezazUQY7BPpwY7xsKlRZgOJvMEBHahB9IB222RobIm ydUs8dygkpMwvR0+dmXPQdDmt1Doa76iQXZfQz17pr1xqkuyI5p8yqbXg9CJ34ed DOKwn9Ch32v5P4T5oRfZdwUmJzS9mWWjh3HvPuTZh3maXZKobO/Ci5fnNb/TTaVT MIt862LTkl1rsBz5yf5ooBpAsQ== -----END CERTIFICATE-----Generated at Thu Nov 5 15:35:13 2026 by rpki-client