$ rpki-client -vvvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: N5W1BKtD1BNJ26c84VFDA31hHVpjR5GED+DG2Om6uDs= Subject key identifier: B6:3E:63:19:AE:7A:F0:79:CA:0D:A4:A7:E2:6E:23:DE:D9:D6:24:58 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 0236 Signing time: Sun 15 Nov 2026 02:49:41 +0000 Manifest this update: Sun 15 Nov 2026 02:49:40 +0000 Manifest next update: Sun 22 Nov 2026 02:49:40 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: xZiYafOK7lLkgI6D5bpVBNccXLqSdOUXSEQbYrEyW/0=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Nov 15 02:49:40 2026 GMT Not After : Nov 22 02:49:40 2026 GMT Subject: CN=6af91dc5-7948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:1c:af:a8:1e:db:1f:a7:49:48:37:67:06: 32:5c:ab:ac:3f:f7:9f:68:a1:67:dd:cd:0d:7e:f9: 04:57:a1:39:b0:aa:fa:d6:c5:3b:d4:09:87:c4:a5: df:9d:97:ad:5a:80:36:89:15:53:66:31:4b:a6:50: a8:cb:7d:00:55:be:c9:9f:f1:0a:aa:51:b5:e5:7e: 80:16:d8:f7:f4:c4:d5:03:72:11:81:be:3d:e0:83: 0e:42:30:ee:5f:23:5c:3f:42:5e:61:a6:c1:ce:a6: 63:f1:6b:72:86:f1:a7:2a:6e:b3:3a:f4:56:72:3c: fe:8d:96:d4:fe:e5:95:fd:63:7a:a8:db:0e:ee:4c: 9f:13:83:4a:11:d2:ee:81:ac:84:df:49:42:24:2c: 23:d6:9f:64:17:2d:90:32:bf:00:f1:b0:02:e8:e6: 66:3f:1a:ef:fd:e1:31:d2:7d:b3:42:6c:e4:4f:82: e9:3b:59:69:4c:df:fe:d7:35:b4:ae:81:b8:ca:02: 74:1b:7e:ba:f6:cf:09:07:36:2e:a1:94:47:56:62: f5:e4:b3:91:58:10:16:66:3f:c5:8b:88:94:a5:80: e4:6d:b7:05:cf:f1:df:d5:53:62:ee:7c:9c:4d:d6: 14:49:84:29:45:fd:91:0c:75:98:fa:c8:85:16:f4: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:63:19:AE:7A:F0:79:CA:0D:A4:A7:E2:6E:23:DE:D9:D6:24:58 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:ef:e4:de:3d:e4:5c:38:19:0c:28:c4:f7:11:b1:d0:65: 69:09:c4:68:b0:be:76:26:6e:0d:6c:97:40:ba:25:0a:a5:3d: 72:00:f9:d6:44:d5:f2:ae:15:15:8b:a4:5c:71:74:ab:46:bc: b4:35:2a:76:e7:d9:1d:fb:8e:79:a0:bb:30:af:f9:c2:38:c0: b5:ce:91:2f:6a:16:3c:75:69:78:d9:36:af:49:0d:53:2c:1a: fc:19:7c:31:58:5e:49:df:86:2e:4b:32:7f:7f:60:56:81:16: 26:74:a5:e2:12:f7:2e:de:3b:51:50:69:06:db:aa:fa:bf:76: 60:d7:de:65:c0:d6:c0:f9:86:72:32:f1:f8:f9:67:82:10:0f: e0:8b:1f:0f:fa:be:d0:b2:b1:aa:70:9e:86:01:3c:d5:92:53: 3f:58:93:e1:23:75:99:09:8c:ef:b9:70:ea:68:d1:61:cd:ef: 78:75:3a:2a:60:7a:66:59:82:a0:05:4e:de:e8:18:08:8b:c3: 5f:e9:3e:70:58:ab:11:99:50:44:41:9e:63:a8:99:bf:74:3d: 47:be:b6:4a:56:72:ce:df:4f:a3:13:5e:c0:3a:30:48:09:f3: 1e:50:89:05:08:fe:ba:16:62:89:4f:74:a2:7b:65:2c:7f:0b: b2:0f:b5:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYxMTE1MDI0OTQwWhcNMjYxMTIyMDI0OTQwWjAYMRYwFAYD VQQDEw02YWY5MWRjNS03OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTgcr6ge2x+nSUg3ZwYyXKusP/efaKFn3c0NfvkEV6E5sKr61sU71AmHxKXf nZetWoA2iRVTZjFLplCoy30AVb7Jn/EKqlG15X6AFtj39MTVA3IRgb494IMOQjDu XyNcP0JeYabBzqZj8WtyhvGnKm6zOvRWcjz+jZbU/uWV/WN6qNsO7kyfE4NKEdLu gayE30lCJCwj1p9kFy2QMr8A8bAC6OZmPxrv/eEx0n2zQmzkT4LpO1lpTN/+1zW0 roG4ygJ0G3669s8JBzYuoZRHVmL15LORWBAWZj/Fi4iUpYDkbbcFz/Hf1VNi7nyc TdYUSYQpRf2RDHWY+siFFvS/6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLY+Yxmu evB5yg2kp+JuI97Z1iRYMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALubv5N495Fw4GQwoxPcRsdBlaQnEaLC+diZuDWyXQLolCqU9cgD51kTV8q4V FYukXHF0q0a8tDUqdufZHfuOeaC7MK/5wjjAtc6RL2oWPHVpeNk2r0kNUywa/Bl8 MVheSd+GLksyf39gVoEWJnSl4hL3Lt47UVBpBtuq+r92YNfeZcDWwPmGcjLx+Pln ghAP4IsfD/q+0LKxqnCehgE81ZJTP1iT4SN1mQmM77lw6mjRYc3veHU6KmB6ZlmC oAVO3ugYCIvDX+k+cFirEZlQREGeY6iZv3Q9R762SlZyzt9PoxNewDowSAnzHlCJ BQj+uhZiiU90ontlLH8Lsg+16Q== -----END CERTIFICATE-----Generated at Sun Nov 15 10:38:33 2026 by rpki-client