$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: vYCb3Cnk9hBICcGy+2K6Kzymc1ThXkN2KfWWAI/5124= Subject key identifier: 6B:A3:47:0C:77:47:9B:55:69:02:96:92:48:D4:83:E9:B4:3A:02:E8 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0650 Signing time: Sun 08 Nov 2026 22:36:04 +0000 Manifest this update: Sun 08 Nov 2026 22:36:04 +0000 Manifest next update: Sun 15 Nov 2026 22:36:04 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: R/k1aFGXi75Ft40Ni4CVYdGHT+8/Bt+Wy+IL6Yw5c1w=) 2: 2D427E0ABB0911F18830CCDB6011F970.roa (hash: ZbLhL0N+f89Rp2Z+4YZU9jSLIykZdH9coJ8l/xCesJM=) 3: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Nov 8 22:36:04 2026 GMT Not After : Nov 15 22:36:04 2026 GMT Subject: CN=6af0f954-e055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:c4:e0:e5:7e:94:0c:00:3d:a1:31:b9:02: cf:3d:32:98:c3:ef:30:2f:12:a2:ce:e3:29:a4:55: e0:e3:dd:9e:36:c8:d0:3c:99:68:8a:50:f3:eb:89: 58:e0:78:3c:77:52:87:fc:21:ce:d2:9e:19:6f:77: a8:48:19:c2:12:d4:f5:f3:13:56:ef:6a:60:69:42: 16:9b:44:60:8a:56:75:5a:7b:e6:ef:e8:f0:6a:34: 03:b5:e1:cf:6f:5e:7e:6e:07:c6:6c:af:87:19:4d: 41:08:b5:dd:f4:d6:61:e4:75:cf:2d:12:bb:0b:5a: d7:56:ca:82:47:1f:63:11:ff:f4:2c:56:54:97:31: b5:4d:df:ab:b4:44:20:e3:1f:50:9b:8b:6f:7a:36: ca:57:3b:0c:63:1b:d2:10:e1:50:d6:2a:db:3b:32: 7b:61:19:76:20:54:95:51:c9:ff:20:53:41:60:a7: 7a:34:6a:58:3f:a6:82:a4:cd:5a:93:ce:3f:67:22: 4a:56:08:e8:e9:ad:bf:68:b5:d3:e4:79:06:e4:75: 14:36:83:c7:ff:f5:f7:ab:c3:72:59:c9:03:4c:04: 4a:9c:e3:96:02:cf:f2:9d:89:46:20:de:99:e5:ff: b1:34:72:f7:9b:10:1a:54:56:5c:1c:62:a2:d8:c0: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:47:0C:77:47:9B:55:69:02:96:92:48:D4:83:E9:B4:3A:02:E8 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:04:34:64:17:c6:72:20:c4:0e:9c:79:1e:24:6c:21:89:42: 3b:4c:18:dd:b2:92:e5:60:17:74:25:e1:3f:af:12:fe:49:8d: fe:1a:e8:10:a5:0f:92:49:f0:ba:2e:bd:91:76:14:75:21:2d: 35:d7:80:a1:8e:95:4a:9c:bb:6d:af:ff:fa:fa:40:1c:18:2b: 41:9a:bf:3b:22:ea:e2:5e:aa:52:be:fe:72:91:5e:aa:52:b7: 21:91:20:cd:79:a0:4b:b6:fb:fe:27:7d:98:b9:27:47:d8:03: dd:a6:c3:f2:ae:5a:63:89:5c:23:2b:d4:e7:67:12:90:01:81: ae:e5:9d:05:4c:39:58:a1:28:3e:78:27:82:e1:20:a1:1b:52: 9c:d8:13:0a:2f:ae:3e:6c:e1:b1:bd:77:57:e9:0b:c1:f9:21: f6:f3:48:e2:74:7e:6f:c5:92:f2:c7:e4:c2:d1:fc:f5:4c:76: 81:f8:2f:83:78:bb:44:f7:e6:46:7f:37:c9:99:97:f3:78:44: c1:ef:d0:99:26:99:c1:85:27:b9:c3:f5:ba:1d:5a:62:52:5b: fa:b4:4b:ed:91:d6:ff:70:ad:0b:1d:84:8b:4a:8a:3e:4e:2f: 4c:51:e6:0f:63:34:4f:93:99:53:97:fe:5c:6b:92:26:58:c3: 3b:60:08:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYxMTA4MjIzNjA0WhcNMjYxMTE1MjIzNjA0WjAYMRYwFAYD VQQDEw02YWYwZjk1NC1lMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SrE4OV+lAwAPaExuQLPPTKYw+8wLxKizuMppFXg492eNsjQPJloilDz64lY 4Hg8d1KH/CHO0p4Zb3eoSBnCEtT18xNW72pgaUIWm0RgilZ1Wnvm7+jwajQDteHP b15+bgfGbK+HGU1BCLXd9NZh5HXPLRK7C1rXVsqCRx9jEf/0LFZUlzG1Td+rtEQg 4x9Qm4tvejbKVzsMYxvSEOFQ1irbOzJ7YRl2IFSVUcn/IFNBYKd6NGpYP6aCpM1a k84/ZyJKVgjo6a2/aLXT5HkG5HUUNoPH//X3q8NyWckDTARKnOOWAs/ynYlGIN6Z 5f+xNHL3mxAaVFZcHGKi2MCqwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGujRwx3 R5tVaQKWkkjUg+m0OgLoMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaAQ0ZBfGciDEDpx5HiRsIYlCO0wY3bKS5WAXdCXhP68S/kmN/hroEKUPkknw ui69kXYUdSEtNdeAoY6VSpy7ba//+vpAHBgrQZq/OyLq4l6qUr7+cpFeqlK3IZEg zXmgS7b7/id9mLknR9gD3abD8q5aY4lcIyvU52cSkAGBruWdBUw5WKEoPngnguEg oRtSnNgTCi+uPmzhsb13V+kLwfkh9vNI4nR+b8WS8sfkwtH89Ux2gfgvg3i7RPfm Rn83yZmX83hEwe/QmSaZwYUnucP1uh1aYlJb+rRL7ZHW/3CtCx2Ei0qKPk4vTFHm D2M0T5OZU5f+XGuSJljDO2AIXg== -----END CERTIFICATE-----Generated at Tue Nov 10 20:26:26 2026 by rpki-client