$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json) Hash identifier: kHKrYvr7BZaomXipPHGMNwW+u/pRZ3PB+pR7UgBzzMI= Subject key identifier: 78:5A:01:9C:C0:E6:4C:8F:A9:BF:D0:DF:F9:56:93:5A:2C:A8:4E:AA Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft Manifest number: C8 Signing time: Sun 15 Nov 2026 07:12:32 +0000 Manifest this update: Sun 15 Nov 2026 07:12:31 +0000 Manifest next update: Sun 22 Nov 2026 07:12:31 +0000 Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: 1IbWYz9ySO8byQYuCctMoRf74vJnjvsX55bSQ4lo/ak=) 2: 44FE06BAA6F811F1B8F08DEC5511F970.roa (hash: 2Z87/Uy+52d2YFHQShGuEykOw9xNGTwytRulFs8sDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C Validity Not Before: Nov 15 07:12:31 2026 GMT Not After : Nov 22 07:12:31 2026 GMT Subject: CN=6af95b5f-df53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:48:2f:85:83:17:c6:be:c9:b0:4e:d1:f9: 90:ee:29:9a:c7:0b:1a:26:18:88:6b:21:28:86:56: 79:10:ee:5c:5f:3a:53:b7:cc:c7:d9:5b:ed:40:d9: 78:a9:4b:30:c8:ab:f7:62:12:25:1f:5a:f9:13:9e: 15:70:a0:c1:26:59:97:e8:9e:b3:ee:ad:cf:a8:8e: ef:12:06:00:ef:a8:91:e4:48:81:e6:e2:69:90:5e: 50:b4:8e:f8:6d:78:4b:e9:8d:c9:1f:75:f2:72:af: ed:4e:ad:15:07:cb:09:73:e5:aa:52:4f:a4:d3:06: 9d:28:b1:9b:73:f5:4a:7b:1b:5b:aa:a8:11:65:0e: 46:16:2c:32:a2:83:85:4d:e6:be:1f:a4:8b:47:17: bf:66:04:99:b5:b7:71:21:f9:72:e7:55:4b:29:5e: ba:c2:b2:06:89:2f:69:1b:cb:9d:77:cc:f7:f0:a4: d4:67:8a:b7:39:e2:70:4c:1e:db:f5:1c:02:93:d9: 82:a2:35:6e:9e:18:be:39:90:cc:de:fa:23:4d:51: 7c:93:35:79:ba:4c:7f:70:9e:c8:8a:32:66:44:9b: 1d:f3:92:99:ab:cf:5e:1d:55:50:0d:f0:f5:7c:86: 4a:3b:01:7c:ed:94:1f:b7:76:cc:20:e2:06:95:03: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5A:01:9C:C0:E6:4C:8F:A9:BF:D0:DF:F9:56:93:5A:2C:A8:4E:AA X509v3 Authority Key Identifier: keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:5a:d6:f3:c0:46:3a:e5:32:fb:4c:e2:6b:02:b7:73:f1:2f: 76:06:39:b9:45:07:b6:46:ba:b2:c8:4b:56:c2:15:a0:c1:e3: 2f:ae:3d:80:65:e4:ee:de:00:96:1c:32:5d:b7:1b:4b:91:0d: d5:62:37:78:3c:13:02:51:3b:85:18:0e:e6:1a:82:61:fe:29: e9:29:cd:bc:a2:fe:e3:ad:b6:25:5d:05:7f:95:27:c5:53:c4: 21:9c:6a:78:32:ac:dd:70:92:57:7a:f6:2d:03:bd:5e:6c:b9: 14:5c:aa:2c:81:b6:b8:9f:11:40:10:29:50:3c:d4:db:d8:13: 5c:0f:ca:c9:87:6b:cb:b0:50:36:be:31:73:b3:e5:72:7d:ad: 1e:f7:6c:b5:74:0e:26:8b:2a:6d:d7:54:5b:21:83:8e:d1:73: cd:9c:db:c8:f5:a3:62:e1:ce:51:2f:77:d5:fc:90:82:39:0c: d3:f8:70:5c:17:70:dd:ba:c4:f8:0f:f4:41:a9:01:4a:e2:fa: d4:f7:b1:08:50:2b:0c:8d:ea:1a:42:97:e3:da:5f:c0:37:70: 7d:e2:93:e5:72:39:ac:d9:bf:0a:c8:30:87:72:82:c6:11:63: b0:e6:01:9b:5d:23:47:41:74:5c:df:66:fa:12:db:8f:f8:45: 0c:06:f1:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NjYxMTAvBgNVBAUTKDg1QTRDRkU3QkQyQTMyNkEyQTA1NjIxMzYzOTdCN0ND QUU1RTVCN0MwHhcNMjYxMTE1MDcxMjMxWhcNMjYxMTIyMDcxMjMxWjAYMRYwFAYD VQQDEw02YWY5NWI1Zi1kZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOtIL4WDF8a+ybBO0fmQ7imaxwsaJhiIayEohlZ5EO5cXzpTt8zH2VvtQNl4 qUswyKv3YhIlH1r5E54VcKDBJlmX6J6z7q3PqI7vEgYA76iR5EiB5uJpkF5QtI74 bXhL6Y3JH3Xycq/tTq0VB8sJc+WqUk+k0wadKLGbc/VKextbqqgRZQ5GFiwyooOF Tea+H6SLRxe/ZgSZtbdxIfly51VLKV66wrIGiS9pG8udd8z38KTUZ4q3OeJwTB7b 9RwCk9mCojVunhi+OZDM3vojTVF8kzV5ukx/cJ7IijJmRJsd85KZq89eHVVQDfD1 fIZKOwF87ZQft3bMIOIGlQO+IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhaAZzA 5kyPqb/Q3/lWk1osqE6qMB8GA1UdIwQYMBaAFIWkz+e9KjJqKgViE2OXt8yuXlt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY2Ni85MDVCRkVGOEM5 MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1tb3FCV0lUWTVlM3pLNWVX M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hhVFA1NzBxTW1vcUJXSVRZNWUzeks1ZVczdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY2Ni85MDVCRkVGOEM5MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1t b3FCV0lUWTVlM3pLNWVXM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1rW88BGOuUy+0ziawK3c/EvdgY5uUUHtka6sshLVsIVoMHjL649gGXk7t4A lhwyXbcbS5EN1WI3eDwTAlE7hRgO5hqCYf4p6SnNvKL+4622JV0Ff5UnxVPEIZxq eDKs3XCSV3r2LQO9Xmy5FFyqLIG2uJ8RQBApUDzU29gTXA/KyYdry7BQNr4xc7Pl cn2tHvdstXQOJosqbddUWyGDjtFzzZzbyPWjYuHOUS931fyQgjkM0/hwXBdw3brE +A/0QakBSuL61PexCFArDI3qGkKX49pfwDdwfeKT5XI5rNm/Csgwh3KCxhFjsOYB m10jR0F0XN9m+hLbj/hFDAbxwA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:48:18 2026 by rpki-client