$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: 92Mkn5gqxFPA8qEOVf3HDsSl3inK62xjnVf0XDV1PbA= Subject key identifier: 50:39:C7:8F:A1:02:00:E1:72:18:EB:B8:92:88:7C:0F:4F:56:A5:EB Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 088A Signing time: Sat 14 Nov 2026 20:40:42 +0000 Manifest this update: Sat 14 Nov 2026 20:40:41 +0000 Manifest next update: Sat 21 Nov 2026 20:40:41 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: EGOrYNF4vXjLTHYm5affS0DbEo5AEHntcYGeagftTSE=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=) 4: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Nov 14 20:40:41 2026 GMT Not After : Nov 21 20:40:41 2026 GMT Subject: CN=6af8c74a-cfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:06:f6:68:39:7a:f5:e2:fd:fc:f0:c1:c6: 0d:3f:6f:08:d1:49:50:e0:e4:c6:30:99:36:71:be: fd:8e:3f:ec:4a:03:47:93:cc:f4:c2:35:09:d6:a6: 88:09:b7:43:f9:e0:23:83:28:74:9e:59:32:9a:65: 88:29:29:63:8d:e7:0d:b1:26:6f:2c:d0:47:63:4e: 27:38:7c:1e:75:7d:65:5b:08:9f:0c:af:d7:ed:a8: 12:df:4d:96:4c:21:f4:9d:af:32:13:a6:ab:a1:5e: df:ae:43:cb:76:95:dd:ba:f7:2d:ac:5f:68:52:9b: 2a:93:ff:79:b7:4c:12:5f:09:bd:36:8f:51:e8:be: dd:cf:0c:31:1f:e6:bd:4b:4b:91:03:6b:64:57:77: 68:9a:5c:23:a5:ab:27:23:03:4c:37:44:35:57:a1: fb:d6:7e:30:e5:d7:7f:24:38:05:b7:08:7e:ad:9b: 6a:16:74:fd:0d:ce:42:dc:88:2b:ae:14:fd:2c:9a: ee:03:69:b5:c9:d4:31:a5:4b:58:9a:e0:84:aa:5a: 0c:dc:c1:c3:1e:da:b0:7a:ad:64:b9:3e:44:40:c6: cd:73:f6:bc:38:09:32:b5:4b:cb:bb:2c:d3:29:9d: f9:3a:17:ea:7a:3b:39:51:25:8f:89:1d:fc:4e:47: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:39:C7:8F:A1:02:00:E1:72:18:EB:B8:92:88:7C:0F:4F:56:A5:EB X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2e:b2:20:82:12:0b:cf:4d:db:0a:15:d0:1c:e8:a7:d8:15: 11:6c:b6:9e:25:de:51:ad:5e:bc:3f:ef:1f:8b:e5:89:7b:1c: b0:76:91:a5:d6:b4:78:0f:4f:ab:f8:03:a3:71:03:25:19:72: c3:88:40:ce:e4:32:25:06:62:dc:23:e5:f3:2c:61:5d:d9:3d: 50:57:2d:c3:49:da:e6:8a:0e:de:84:dc:09:f3:b9:72:df:8e: e0:1e:5f:1f:e9:a3:a3:97:0d:9c:60:89:83:dc:8e:71:ef:3b: bb:7f:12:59:3a:85:66:60:c8:8b:88:c1:93:fd:6d:a8:0f:9e: c9:19:8e:1c:5b:8d:47:55:4f:6e:41:04:8d:5f:81:c2:cd:b8: ce:33:1e:02:6c:0f:20:50:33:39:8e:67:fe:ce:11:ef:5d:25: f9:86:02:5b:f1:e6:48:79:5b:55:d8:df:d0:4f:1c:bb:72:3e: 02:09:cc:6d:f0:cb:06:07:9e:01:f2:a8:13:9d:0d:c8:03:7c: 72:9c:13:48:9e:5e:08:26:c5:42:e8:d3:d3:d8:92:58:02:5b: 1e:95:f7:08:9f:74:0d:dd:6b:ab:5a:1c:8d:fe:26:24:2e:fd: 9b:ce:9f:9a:3c:8c:77:b0:a9:64:23:d6:06:57:90:f6:76:dd: 37:bd:45:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjYxMTE0MjA0MDQxWhcNMjYxMTIxMjA0MDQxWjAYMRYwFAYD VQQDEw02YWY4Yzc0YS1jZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nQG9mg5evXi/fzwwcYNP28I0UlQ4OTGMJk2cb79jj/sSgNHk8z0wjUJ1qaI CbdD+eAjgyh0nlkymmWIKSljjecNsSZvLNBHY04nOHwedX1lWwifDK/X7agS302W TCH0na8yE6aroV7frkPLdpXduvctrF9oUpsqk/95t0wSXwm9No9R6L7dzwwxH+a9 S0uRA2tkV3domlwjpasnIwNMN0Q1V6H71n4w5dd/JDgFtwh+rZtqFnT9Dc5C3Igr rhT9LJruA2m1ydQxpUtYmuCEqloM3MHDHtqweq1kuT5EQMbNc/a8OAkytUvLuyzT KZ35Ohfqejs5USWPiR38TkcvRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFA5x4+h AgDhchjruJKIfA9PVqXrMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOi6yIIISC89N2woV0Bzop9gVEWy2niXeUa1evD/vH4vliXscsHaRpda0eA9P q/gDo3EDJRlyw4hAzuQyJQZi3CPl8yxhXdk9UFctw0na5ooO3oTcCfO5ct+O4B5f H+mjo5cNnGCJg9yOce87u38SWTqFZmDIi4jBk/1tqA+eyRmOHFuNR1VPbkEEjV+B ws24zjMeAmwPIFAzOY5n/s4R710l+YYCW/HmSHlbVdjf0E8cu3I+AgnMbfDLBgee AfKoE50NyAN8cpwTSJ5eCCbFQujT09iSWAJbHpX3CJ90Dd1rq1ocjf4mJC79m86f mjyMd7CpZCPWBleQ9nbdN71FfQ== -----END CERTIFICATE-----Generated at Sun Nov 15 06:33:18 2026 by rpki-client