$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: JYV4SiEra6U+gbwkH6XbSyItftjulDOhfFju770hx8c= Subject key identifier: 9B:B7:99:44:88:3D:22:DE:1C:1B:89:58:AB:F2:E6:CB:25:A3:53:FD Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 024B Signing time: Fri 13 Nov 2026 02:59:06 +0000 Manifest this update: Fri 13 Nov 2026 02:59:05 +0000 Manifest next update: Fri 20 Nov 2026 02:59:05 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: ePmcpC8NspUuXnGDcPtlXFbuXRrGy5kMnoMxjkOLCF0=) 2: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=) 3: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=) 4: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=) 5: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=) 6: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=) 8: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=) 9: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 02:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Nov 13 02:59:05 2026 GMT Not After : Nov 20 02:59:05 2026 GMT Subject: CN=6af67cfa-9b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:24:21:29:ab:03:3d:80:2c:83:85:5a:c7: c7:6b:52:15:50:59:2f:c1:e0:aa:ed:38:49:fe:85: 6d:bd:4b:98:ef:82:f4:84:54:6b:43:22:ce:4f:cd: 14:de:fb:a9:ac:fa:98:46:ff:4f:e6:b4:65:79:4c: 72:86:41:d1:c3:55:c4:f2:d5:d4:36:b6:06:e9:4a: 6f:92:76:6c:90:75:1c:e7:cb:6c:23:f0:bf:ff:d1: 50:9f:8a:3e:b6:82:7c:29:50:f4:64:34:e1:ac:34: 80:8d:d1:89:a2:7d:91:ad:0c:07:ed:5f:fd:00:74: fe:33:b8:d3:25:c4:4d:42:2d:9f:5f:c4:fd:80:7d: 22:74:61:47:0e:79:c2:68:33:52:7c:c6:64:5b:6d: 3c:04:24:54:89:12:7b:d2:55:fb:12:22:0e:6d:c6: df:49:25:21:7c:38:bf:b5:6e:d0:e6:4d:51:79:49: 99:3d:51:95:27:19:51:82:3f:8e:42:b9:d2:71:39: 34:e5:60:d7:42:70:8b:b6:85:a1:c6:7b:1b:20:fc: b4:6f:81:6d:54:8f:a2:44:c7:39:82:33:d5:97:0e: 24:8c:81:70:fe:69:cb:d0:d6:be:ca:db:49:32:d4: dd:79:6d:9d:94:db:e4:70:57:57:7e:ae:d3:5b:a4: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:99:44:88:3D:22:DE:1C:1B:89:58:AB:F2:E6:CB:25:A3:53:FD X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a5:39:bc:2b:d3:08:4f:de:b3:3b:01:f5:2f:c5:fd:37:c0: ff:53:54:67:b8:f9:b1:b0:7c:9f:a6:e0:41:d3:9f:6d:8b:a9: 93:4b:9a:cb:41:f2:5c:b7:68:74:35:2d:f5:ee:12:c7:27:20: ee:9d:58:b0:05:45:bb:e4:f1:37:0e:cf:63:80:d0:05:87:28: 06:dd:6e:b9:49:dd:40:3a:d2:e7:c5:89:af:20:2f:c2:47:3c: 9d:45:26:18:4a:77:e6:1f:f7:dd:bf:2f:73:6e:53:8d:18:a2: 7c:42:44:c5:fd:57:a9:a9:b4:b0:b6:a5:fa:df:5e:95:51:a9: 09:55:de:cd:67:8b:d9:56:d6:91:e1:b3:ca:da:c5:d7:f8:9c: 48:72:a1:10:ac:ba:fc:bd:3e:fb:f8:d4:b0:01:d0:cf:b5:04: 6e:ae:86:d1:f9:43:21:97:5b:58:cd:12:c8:48:64:9c:48:3b: e7:c7:c4:8f:20:1e:99:52:4d:fc:95:6f:3d:69:e1:bd:f2:1e: a2:ab:88:d7:49:7a:e2:92:52:6f:72:69:fe:12:97:05:ed:76: c8:f7:d7:90:ec:47:52:d3:bd:4c:8d:8d:40:c8:71:cf:38:a3: 97:81:7c:00:2a:7b:c9:20:c1:11:8a:14:4e:c9:c2:8e:50:2c: f7:e3:c1:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYxMTEzMDI1OTA1WhcNMjYxMTIwMDI1OTA1WjAYMRYwFAYD VQQDEw02YWY2N2NmYS05YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JIkISmrAz2ALIOFWsfHa1IVUFkvweCq7ThJ/oVtvUuY74L0hFRrQyLOT80U 3vuprPqYRv9P5rRleUxyhkHRw1XE8tXUNrYG6UpvknZskHUc58tsI/C//9FQn4o+ toJ8KVD0ZDThrDSAjdGJon2RrQwH7V/9AHT+M7jTJcRNQi2fX8T9gH0idGFHDnnC aDNSfMZkW208BCRUiRJ70lX7EiIObcbfSSUhfDi/tW7Q5k1ReUmZPVGVJxlRgj+O QrnScTk05WDXQnCLtoWhxnsbIPy0b4FtVI+iRMc5gjPVlw4kjIFw/mnL0Na+yttJ MtTdeW2dlNvkcFdXfq7TW6QS3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJu3mUSI PSLeHBuJWKvy5sslo1P9MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUKU5vCvTCE/eszsB9S/F/TfA/1NUZ7j5sbB8n6bgQdOfbYupk0uay0HyXLdo dDUt9e4Sxycg7p1YsAVFu+TxNw7PY4DQBYcoBt1uuUndQDrS58WJryAvwkc8nUUm GEp35h/33b8vc25TjRiifEJExf1Xqam0sLal+t9elVGpCVXezWeL2VbWkeGzytrF 1/icSHKhEKy6/L0++/jUsAHQz7UEbq6G0flDIZdbWM0SyEhknEg758fEjyAemVJN /JVvPWnhvfIeoquI10l64pJSb3Jp/hKXBe12yPfXkOxHUtO9TI2NQMhxzzijl4F8 ACp7ySDBEYoUTsnCjlAs9+PBxQ== -----END CERTIFICATE-----Generated at Sun Nov 15 00:05:29 2026 by rpki-client