$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: OqYeKNdYuja0LC+LD9VBFJiOog7155f1pRxZQAiHudM= Subject key identifier: 92:9A:7E:D8:78:D8:3E:52:AA:19:35:09:19:99:2E:5F:E8:FA:91:9B Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C79 Signing time: Sat 14 Nov 2026 18:36:01 +0000 Manifest this update: Sat 14 Nov 2026 18:36:01 +0000 Manifest next update: Sat 21 Nov 2026 18:36:01 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: X/mmoEUib5HH3BtCQ+G/8GeRQkE8x8e03f/3j+TPKbY=) 2: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) 3: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 18:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Nov 14 18:36:01 2026 GMT Not After : Nov 21 18:36:01 2026 GMT Subject: CN=6af8aa11-79e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:43:50:ab:17:39:f3:ba:4a:5c:9a:79:0a: 9d:44:89:9b:a3:08:42:e9:64:59:80:94:39:7c:44: bf:01:bd:02:7a:42:66:f2:fc:aa:59:95:9d:48:12: d6:66:9f:c7:ed:0e:45:b6:13:91:7c:c4:30:bc:57: 8e:c8:ac:40:2c:a8:b5:75:fc:a6:ca:15:85:2c:2a: 04:99:30:bd:db:c0:33:7b:10:99:ea:09:21:e5:ec: 6d:42:db:70:36:26:4e:83:d5:63:7a:58:ba:3b:e1: 46:63:26:e6:e7:53:ee:50:6f:63:7a:7d:11:c1:34: 73:09:db:46:c0:7e:57:b8:c4:8a:19:ea:0f:12:29: 97:ac:a3:77:42:3e:0a:cf:8c:9d:17:62:66:6b:a9: ae:b7:42:ce:69:50:2c:fd:60:d3:be:de:bb:cb:38: 40:e6:bc:e6:a4:bf:09:ec:e1:d1:a0:a1:34:ce:79: ef:e9:1b:56:21:83:74:15:7b:ac:f4:18:0f:69:d4: 94:58:88:4d:6f:e4:89:bd:dc:bb:2b:f6:c7:ba:c9: 03:d1:87:d1:f1:b8:6f:65:98:68:8d:bb:a8:1b:44: 3a:81:04:2e:c4:34:75:99:8f:ec:06:60:34:5a:e5: e3:41:1d:64:10:6c:b2:e4:ef:ad:36:2d:6f:41:13: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:7E:D8:78:D8:3E:52:AA:19:35:09:19:99:2E:5F:E8:FA:91:9B X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5f:24:29:11:7b:c1:e5:f6:c8:f8:52:a5:26:4b:a3:dc:86: e1:e7:25:d6:9d:b9:26:5d:23:63:ed:47:2a:f1:8a:7c:69:55: 5a:d2:00:33:c7:4f:33:bf:0d:2e:f9:cc:10:e8:10:e3:60:d2: 3c:11:1a:23:80:3e:67:f6:c9:a1:c7:f3:cb:7d:2a:e8:f6:ec: cb:5a:93:df:04:ef:23:22:f3:9a:18:08:8d:e1:f0:b4:99:69: c1:8d:1b:a4:a5:8d:8e:39:85:2c:06:43:97:ce:69:02:a6:c2: 2a:c1:1e:b4:6a:e5:71:6f:36:6b:c4:56:67:fd:ed:18:09:27: 1f:39:de:72:a5:67:bc:a7:21:c3:16:45:ae:5d:93:ad:6a:3f: f8:b0:ac:22:99:8b:d6:55:8b:94:2a:6d:06:61:90:e7:fa:5a: 89:3c:ab:5e:19:2b:3e:e3:af:29:0d:99:e8:02:40:2b:4f:d3: e1:21:99:1a:20:ab:c9:13:a9:e4:ca:f6:e7:be:93:69:fe:27: 1a:01:12:a3:88:a3:cd:64:0a:01:60:ea:a9:7f:ce:ff:ee:58: 45:06:b7:90:09:18:42:ef:b4:5a:30:03:1f:62:20:83:00:61: 75:9c:f3:3d:eb:2e:07:19:1e:b2:ef:8e:ca:31:76:cb:81:07: 59:ec:2b:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYxMTE0MTgzNjAxWhcNMjYxMTIxMTgzNjAxWjAYMRYwFAYD VQQDEw02YWY4YWExMS03OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt9DUKsXOfO6SlyaeQqdRImbowhC6WRZgJQ5fES/Ab0CekJm8vyqWZWdSBLW Zp/H7Q5FthORfMQwvFeOyKxALKi1dfymyhWFLCoEmTC928AzexCZ6gkh5extQttw NiZOg9Vjeli6O+FGYybm51PuUG9jen0RwTRzCdtGwH5XuMSKGeoPEimXrKN3Qj4K z4ydF2Jma6mut0LOaVAs/WDTvt67yzhA5rzmpL8J7OHRoKE0znnv6RtWIYN0FXus 9BgPadSUWIhNb+SJvdy7K/bHuskD0YfR8bhvZZhojbuoG0Q6gQQuxDR1mY/sBmA0 WuXjQR1kEGyy5O+tNi1vQRO9FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKafth4 2D5Sqhk1CRmZLl/o+pGbMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL18kKRF7weX2yPhSpSZLo9yG4ecl1p25Jl0jY+1HKvGKfGlVWtIAM8dPM78N LvnMEOgQ42DSPBEaI4A+Z/bJocfzy30q6Pbsy1qT3wTvIyLzmhgIjeHwtJlpwY0b pKWNjjmFLAZDl85pAqbCKsEetGrlcW82a8RWZ/3tGAknHznecqVnvKchwxZFrl2T rWo/+LCsIpmL1lWLlCptBmGQ5/paiTyrXhkrPuOvKQ2Z6AJAK0/T4SGZGiCryROp 5Mr2576Taf4nGgESo4ijzWQKAWDqqX/O/+5YRQa3kAkYQu+0WjADH2IggwBhdZzz PesuBxkesu+OyjF2y4EHWewrjg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:41:58 2026 by rpki-client