$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: 4459iMgGiQXWsjZWkKBu8DjMc33DNJcKxysaMmK71SU= Subject key identifier: 3B:CF:D4:D1:BC:08:D6:6B:F4:BD:BD:D0:9E:34:58:F8:FE:9A:0E:82 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 02A8 Signing time: Sun 15 Nov 2026 01:42:12 +0000 Manifest this update: Sun 15 Nov 2026 01:42:11 +0000 Manifest next update: Sun 22 Nov 2026 01:42:11 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: +N5seYchvMLla/L/iO3di/fhv2TuV3En0bLcaDmfJ+0=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: yN4FKiAdlnBt1JowgvEdn1MVCETWC1L2L5EoSc4hXIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Nov 15 01:42:11 2026 GMT Not After : Nov 22 01:42:11 2026 GMT Subject: CN=6af90df4-6f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:42:d4:70:d7:5c:b5:9c:88:b4:b0:fe:d5: 36:62:a5:2c:5e:87:a1:f0:49:ee:a3:d0:47:c7:c5: 37:95:4a:0b:53:af:41:28:09:2a:44:c3:14:cd:e1: 62:5a:48:65:5e:1b:1d:89:86:91:5f:9a:99:8d:ab: ae:43:92:79:a6:a5:6c:67:9f:1a:22:3f:06:20:d3: 43:dc:1c:31:4b:e9:d6:31:66:b1:41:98:52:af:3d: 0c:ad:3d:d7:f4:c8:f1:81:74:72:f4:41:0d:d0:45: a1:2c:e6:b0:a0:ea:a1:62:87:17:fb:e3:ce:ff:b8: ea:8b:9d:99:a4:96:7d:96:87:1c:cc:5e:db:c7:e2: 58:5a:c2:0b:e5:0f:bc:ef:de:18:c6:9b:ec:94:2f: 6a:cf:a3:09:9d:a7:0b:6a:d0:1c:a1:8f:fb:ad:f8: 18:e2:9d:74:49:e8:18:01:70:47:3a:9d:b9:24:26: 43:20:d6:13:08:77:ed:28:64:9d:38:b7:39:8c:ed: a5:f1:ff:2f:bf:5f:2f:4b:3a:18:26:a6:cb:d3:6d: be:a0:bc:94:3b:67:58:e1:73:f3:80:00:8a:a1:51: d7:30:1f:87:71:c3:15:e7:2f:61:74:d7:4f:0b:e1: dd:ea:36:82:1e:f7:79:53:01:cc:ca:51:24:5a:00: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:D4:D1:BC:08:D6:6B:F4:BD:BD:D0:9E:34:58:F8:FE:9A:0E:82 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f3:b1:c9:19:c7:d5:d8:55:18:87:dc:50:87:b1:8a:f8:aa: 68:91:bf:45:61:bc:c6:fe:79:f2:4e:e5:58:88:bd:67:34:37: 6c:af:f3:b1:e0:01:9a:2a:5d:3c:63:47:e3:5b:25:c1:cc:b4: 45:d7:47:6c:db:02:4c:ff:75:67:46:08:a8:df:fd:00:e7:7c: 43:39:ef:3e:9c:f8:4a:f8:a6:c7:5a:2f:16:b8:83:f8:11:b0: e9:b3:95:a9:59:d2:63:ef:f9:3c:5d:8c:d5:c5:c9:4d:8c:b8: 64:b9:3d:e2:25:6a:21:c3:1a:28:0d:43:dd:1e:77:7e:11:14: cb:24:3e:7e:3b:e1:30:6d:f4:cc:a3:f2:2f:d5:68:29:7c:18: 83:3e:b1:7c:7a:6d:49:26:63:1e:50:72:53:1a:78:7e:af:c5: da:f3:a1:76:16:a6:a8:6a:e3:18:63:77:05:3b:14:1a:4b:b0: 6a:44:6c:d2:b8:63:35:5c:ba:6f:3c:24:6a:e6:8c:c5:ef:bc: 35:78:33:cd:ea:c2:b7:43:8a:c1:af:dc:8f:0c:01:67:6b:78: 54:de:70:ee:fa:2f:20:c1:b4:c0:d0:0c:6e:e2:71:3b:14:bd: 48:88:9f:6d:6e:7c:a6:dd:fa:5a:00:33:83:03:7d:67:7d:1c: c8:68:b7:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjYxMTE1MDE0MjExWhcNMjYxMTIyMDE0MjExWjAYMRYwFAYD VQQDEw02YWY5MGRmNC02ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVJC1HDXXLWciLSw/tU2YqUsXoeh8Enuo9BHx8U3lUoLU69BKAkqRMMUzeFi WkhlXhsdiYaRX5qZjauuQ5J5pqVsZ58aIj8GINND3BwxS+nWMWaxQZhSrz0MrT3X 9MjxgXRy9EEN0EWhLOawoOqhYocX++PO/7jqi52ZpJZ9locczF7bx+JYWsIL5Q+8 794YxpvslC9qz6MJnacLatAcoY/7rfgY4p10SegYAXBHOp25JCZDINYTCHftKGSd OLc5jO2l8f8vv18vSzoYJqbL022+oLyUO2dY4XPzgACKoVHXMB+HccMV5y9hdNdP C+Hd6jaCHvd5UwHMylEkWgDfSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvP1NG8 CNZr9L290J40WPj+mg6CMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANPOxyRnH1dhVGIfcUIexiviqaJG/RWG8xv558k7lWIi9ZzQ3bK/zseABmipd PGNH41slwcy0RddHbNsCTP91Z0YIqN/9AOd8QznvPpz4Svimx1ovFriD+BGw6bOV qVnSY+/5PF2M1cXJTYy4ZLk94iVqIcMaKA1D3R53fhEUyyQ+fjvhMG30zKPyL9Vo KXwYgz6xfHptSSZjHlByUxp4fq/F2vOhdhamqGrjGGN3BTsUGkuwakRs0rhjNVy6 bzwkauaMxe+8NXgzzerCt0OKwa/cjwwBZ2t4VN5w7vovIMG0wNAMbuJxOxS9SIif bW58pt36WgAzgwN9Z30cyGi3kw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:59:14 2026 by rpki-client