$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: a4NfAoY3L9wqKfg3xWy5/fHp2/bqCEPsICrSZEX48i8= Subject key identifier: 31:98:34:83:E2:F7:F0:60:9E:0A:A4:14:98:86:42:70:04:8F:8B:91 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 04A5 Signing time: Thu 12 Nov 2026 23:44:25 +0000 Manifest this update: Thu 12 Nov 2026 23:44:24 +0000 Manifest next update: Thu 19 Nov 2026 23:44:24 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: pIbJte26x/E0GQ1ieB21b6QPtSgaL9EreJZvcRqTd5E=) 2: 7C17299AF7E111F09133AC30656F56BC.roa (hash: t296rVU/xx7eKuOhP3U3tbmVD7byq5VC6ECxFEqQnZo=) 3: 5963078E311611F1A5EF62D2C0833773.roa (hash: hAgQWjP5KafrY4xqJuxoHjvWfdsN4t0UT3NmZ7Q2C9g=) 4: 6AE58C0255F611F18224D99FB5833773.roa (hash: 9GiNrJp2XZO3hFbevYsBXsivgyqxyo3JH5mN+jJpZnE=) 5: 7D1E4382F7E111F09133AC30656F56BC.roa (hash: zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=) 6: A7D021E89B7B11F1A02F16144211F970.roa (hash: bA+wSapkobV7zocyaHsBjvsej1GO6nWplqf8u6RD91E=) 7: 7CA73BD4F7E111F09133AC30656F56BC.roa (hash: lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 23:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Nov 12 23:44:24 2026 GMT Not After : Nov 19 23:44:24 2026 GMT Subject: CN=6af64f59-81aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:fe:50:84:26:37:00:5e:9a:a1:94:a2:f8: eb:ed:9a:c3:be:d5:43:e0:9c:a6:17:82:7c:77:06: c0:82:26:14:5b:07:93:e8:84:53:10:62:1e:c8:95: c1:25:99:1d:76:68:31:b8:d3:54:33:41:eb:9c:68: 42:eb:82:c5:a5:6c:ca:1c:a6:c5:2d:02:b1:7a:25: 1f:aa:97:2a:f3:cc:25:27:67:60:8a:1e:58:1f:3e: f6:ff:94:4b:ed:6d:b0:e7:af:0e:60:1e:be:1b:f1: c0:c1:fc:ee:62:52:f4:d4:18:75:8b:41:e7:b6:ef: 06:68:ae:43:cd:2b:58:53:96:a3:21:05:b0:86:ef: 96:ca:75:f5:44:3c:2f:1f:35:70:fe:4e:a6:ee:f3: 12:e5:46:5d:52:08:56:57:c0:35:6b:aa:7e:e3:3c: b5:e9:86:1c:73:66:30:0b:07:77:7b:8a:1c:d8:a1: 97:f0:51:e2:52:3e:b8:74:1e:a2:3e:2c:8b:5a:d4: c8:47:03:6a:60:83:1b:53:20:d3:98:5d:d3:b3:23: 8c:db:a3:f8:e5:30:39:c1:36:33:01:e2:03:5c:0f: f4:86:d0:99:c3:f8:48:6a:22:83:43:ff:e4:4d:3c: 96:1c:5d:af:5a:54:a4:0b:f8:13:69:a3:e3:7b:e7: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:34:83:E2:F7:F0:60:9E:0A:A4:14:98:86:42:70:04:8F:8B:91 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1c:32:22:4f:e3:04:a7:ea:cf:36:4b:74:2b:b8:f4:9b:2e: 19:16:e1:2e:44:ba:36:7d:ac:05:60:9c:fc:63:a4:82:38:d4: ee:74:a6:45:e5:95:9e:d7:2b:ce:61:c2:26:f9:f2:5a:f3:50: 27:22:7b:25:60:9c:f0:55:68:4c:cd:31:8c:76:c6:56:40:63: 3a:09:05:df:d5:1a:d7:1b:f2:67:e3:b6:4b:89:ea:1a:95:af: 91:bd:dc:95:9b:52:e4:45:ee:c8:cb:47:7a:d5:77:24:5b:b6: 67:64:7b:6e:23:2e:95:a8:74:b0:40:a0:d8:91:84:3a:38:d0: 51:cd:6e:fb:e3:54:c3:5b:c4:fc:d4:bc:8e:3f:8a:e2:91:8e: af:de:41:28:77:8c:0e:44:c9:da:d9:bf:43:35:0c:33:11:af: 7e:9f:99:de:33:06:ee:96:4b:c2:3f:13:9b:a8:8d:b5:04:60: 7f:3d:10:19:b8:63:81:a6:71:7e:9f:60:16:63:2f:0d:95:78: a7:7b:a2:da:48:95:a2:b8:bf:64:a5:53:f3:49:8b:fd:cb:a9: 69:55:77:ac:79:cc:c4:93:f2:f2:63:9b:b3:3a:2b:13:be:8d: 40:b6:8b:2a:bf:7a:43:77:7b:9a:3b:01:0a:e3:34:b7:db:e1: 52:a6:f9:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjYxMTEyMjM0NDI0WhcNMjYxMTE5MjM0NDI0WjAYMRYwFAYD VQQDEw02YWY2NGY1OS04MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ub+UIQmNwBemqGUovjr7ZrDvtVD4JymF4J8dwbAgiYUWweT6IRTEGIeyJXB JZkddmgxuNNUM0HrnGhC64LFpWzKHKbFLQKxeiUfqpcq88wlJ2dgih5YHz72/5RL 7W2w568OYB6+G/HAwfzuYlL01Bh1i0Hntu8GaK5DzStYU5ajIQWwhu+WynX1RDwv HzVw/k6m7vMS5UZdUghWV8A1a6p+4zy16YYcc2YwCwd3e4oc2KGX8FHiUj64dB6i PiyLWtTIRwNqYIMbUyDTmF3TsyOM26P45TA5wTYzAeIDXA/0htCZw/hIaiKDQ//k TTyWHF2vWlSkC/gTaaPje+egfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGYNIPi 9/BgngqkFJiGQnAEj4uRMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMhwyIk/jBKfqzzZLdCu49JsuGRbhLkS6Nn2sBWCc/GOkgjjU7nSmReWVntcr zmHCJvnyWvNQJyJ7JWCc8FVoTM0xjHbGVkBjOgkF39Ua1xvyZ+O2S4nqGpWvkb3c lZtS5EXuyMtHetV3JFu2Z2R7biMulah0sECg2JGEOjjQUc1u++NUw1vE/NS8jj+K 4pGOr95BKHeMDkTJ2tm/QzUMMxGvfp+Z3jMG7pZLwj8Tm6iNtQRgfz0QGbhjgaZx fp9gFmMvDZV4p3ui2kiVori/ZKVT80mL/cupaVV3rHnMxJPy8mObszorE76NQLaL Kr96Q3d7mjsBCuM0t9vhUqb5cw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:53:51 2026 by rpki-client