$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft File: O3lhBfUQkckLRwQth4bfaJmS6jk.mft (raw, json) Hash identifier: zhbM4HMWgTf4VD1BAFo97e8cdByJqtJ58JC11nytg1w= Subject key identifier: 50:24:10:D8:06:27:7C:42:1C:BE:F2:32:86:47:24:1F:BB:99:40:7E Authority key identifier: 3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39 Certificate issuer: /CN=A91E1C3D/serialNumber=3B796105F51091C90B47042D8786DF689992EA39 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft Manifest number: 15 Signing time: Tue 03 Nov 2026 10:10:42 +0000 Manifest this update: Tue 03 Nov 2026 10:10:42 +0000 Manifest next update: Tue 10 Nov 2026 10:10:42 +0000 Files and hashes: 1: O3lhBfUQkckLRwQth4bfaJmS6jk.crl (hash: siJI9GD3sQFdsUa1dQCRMkeM9aVXd4Cy31XG73bRxIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C3D, serialNumber=3B796105F51091C90B47042D8786DF689992EA39 Validity Not Before: Nov 3 10:10:42 2026 GMT Not After : Nov 10 10:10:42 2026 GMT Subject: CN=6ae9b322-b26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:a5:90:1d:f3:9c:74:a9:49:ac:b6:0e:e6: 8a:1f:12:00:68:b1:5f:31:7b:42:87:aa:81:b5:b3: 99:c0:02:eb:c2:0c:c3:43:47:21:5f:78:09:c5:ce: 54:1c:4a:76:be:5e:66:92:3b:4b:8b:f1:ec:46:5a: 05:e6:2e:74:1c:4f:42:fb:46:db:05:50:a9:bd:75: 00:7a:80:fb:e6:ae:3d:74:1c:42:92:b3:d9:6a:a0: c7:e6:1e:ce:84:83:f5:73:de:07:85:a8:3e:b0:d5: 3c:23:83:ea:66:9f:f5:97:f7:a8:76:46:e5:c5:c0: 30:b0:85:df:18:04:88:3b:49:89:7d:02:c1:5a:af: 67:b8:5d:a7:fe:c3:8c:41:60:49:cb:34:81:72:d4: 4d:e3:80:71:2d:3f:eb:9a:2a:6d:e4:9b:cc:c0:35: 89:07:fc:e7:bc:af:99:24:1f:43:d0:81:b5:d8:df: db:8c:b3:c1:bf:98:a7:fa:3c:42:e4:7c:bf:f8:f8: 4e:12:e3:0c:84:23:b3:c7:2e:4a:2b:97:30:5c:31: cb:38:e9:78:eb:1c:ba:0e:dd:ab:f4:e4:d4:3c:6f: 7b:c8:10:80:76:ea:b3:65:a1:88:cd:38:2e:1e:d5: da:d4:33:c0:a3:fe:89:38:9e:23:c8:8d:6f:8a:2b: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:10:D8:06:27:7C:42:1C:BE:F2:32:86:47:24:1F:BB:99:40:7E X509v3 Authority Key Identifier: keyid:3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5b:f0:af:2c:93:55:e3:bf:1d:e4:59:e9:a1:2f:cd:cc:98: 10:38:2a:eb:02:ea:76:b9:05:f9:ed:7a:8e:00:c8:8a:cb:c4: 69:6b:ef:0f:50:d6:dd:f4:cd:56:a9:42:2f:a6:60:8b:7e:07: 43:4b:78:23:7c:6a:d6:99:5f:fa:d5:04:d5:a3:0a:fa:5c:3b: 45:14:19:9c:74:c9:61:2a:b3:95:82:c1:58:ca:3d:dc:22:15: 50:cb:1b:96:40:50:b8:08:23:80:e7:f6:61:b7:11:64:ab:d2: e3:9e:56:ed:e6:d2:44:84:b7:8e:f8:1e:6f:7e:b5:f4:74:fa: c0:62:39:e7:5f:56:4f:d4:d8:9c:62:e8:16:9c:37:c1:16:36: 12:a0:29:4b:d1:dd:c1:95:28:64:fa:32:bd:6a:59:1a:c1:30: 29:55:a9:ee:05:8f:e6:d0:6e:a5:71:1e:68:0f:1e:7f:b9:96: 11:04:a4:69:ce:c7:3a:cc:76:62:c2:1e:a2:8f:c5:b9:17:07: be:fd:8e:34:c1:f7:fb:cc:3a:41:1f:8c:26:85:29:bf:26:e0: 07:08:b1:ee:e4:d4:ce:75:ae:e8:9f:63:ce:86:f1:72:af:fe: 63:7f:d8:db:58:b3:e6:06:e5:c0:23:0e:75:97:1b:c5:4d:1c: 12:4d:12:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUMzRDExMC8GA1UEBRMoM0I3OTYxMDVGNTEwOTFDOTBCNDcwNDJEODc4NkRGNjg5 OTkyRUEzOTAeFw0yNjExMDMxMDEwNDJaFw0yNjExMTAxMDEwNDJaMBgxFjAUBgNV BAMTDTZhZTliMzIyLWIyNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKvKWQHfOcdKlJrLYO5oofEgBosV8xe0KHqoG1s5nAAuvCDMNDRyFfeAnFzlQc Sna+XmaSO0uL8exGWgXmLnQcT0L7RtsFUKm9dQB6gPvmrj10HEKSs9lqoMfmHs6E g/Vz3geFqD6w1Twjg+pmn/WX96h2RuXFwDCwhd8YBIg7SYl9AsFar2e4Xaf+w4xB YEnLNIFy1E3jgHEtP+uaKm3km8zANYkH/Oe8r5kkH0PQgbXY39uMs8G/mKf6PELk fL/4+E4S4wyEI7PHLkorlzBcMcs46XjrHLoO3av05NQ8b3vIEIB26rNloYjNOC4e 1drUM8Cj/ok4niPIjW+KK54dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUCQQ2AYn fEIcvvIyhkckH7uZQH4wHwYDVR0jBBgwFoAUO3lhBfUQkckLRwQth4bfaJmS6jkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQzNELzk0NzlDODU0QkFG RTExRjFBRDI5RUM5NzVEMTFGOTcwL08zbGhCZlVRa2NrTFJ3UXRoNGJmYUptUzZq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzNsaEJmVVFrY2tMUndRdGg0YmZhSm1TNmprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QzNELzk0NzlDODU0QkFGRTExRjFBRDI5RUM5NzVEMTFGOTcwL08zbGhCZlVRa2Nr TFJ3UXRoNGJmYUptUzZqay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTW/CvLJNV478d5FnpoS/NzJgQOCrrAup2uQX57XqOAMiKy8Rpa+8PUNbd9M1W qUIvpmCLfgdDS3gjfGrWmV/61QTVowr6XDtFFBmcdMlhKrOVgsFYyj3cIhVQyxuW QFC4CCOA5/ZhtxFkq9Ljnlbt5tJEhLeO+B5vfrX0dPrAYjnnX1ZP1NicYugWnDfB FjYSoClL0d3BlShk+jK9alkawTApVanuBY/m0G6lcR5oDx5/uZYRBKRpzsc6zHZi wh6ij8W5Fwe+/Y40wff7zDpBH4wmhSm/JuAHCLHu5NTOda7on2POhvFyr/5jf9jb WLPmBuXAIw51lxvFTRwSTRJ9 -----END CERTIFICATE-----Generated at Thu Nov 5 14:02:55 2026 by rpki-client