$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: JRO+P/xUmmDMItEfGiflzyW3F27sPxDXcQzfO2p+8Go= Subject key identifier: D3:24:D9:FE:49:0D:C7:84:AD:2E:F4:AF:2A:63:55:A5:75:EA:5C:EF Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 08E0 Signing time: Sat 14 Nov 2026 20:22:01 +0000 Manifest this update: Sat 14 Nov 2026 20:22:01 +0000 Manifest next update: Sat 21 Nov 2026 20:22:01 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: ruEFXQDWZYfc4e4BfIWF8Gp9DKAmrHmqnfx7cfHXVW4=) 2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: 9ZIP36TGPuA+WRwnAa8gUr2BrvoKbE5BS3ngLSX6yCk=) 3: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: v5V577VCnrqD7Nr38ijVh15qoCu6a/0P2DzKbfz479A=) 4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: HY48QgDC7aLjvIjhb7DfizhqM9/pndtnGXqI0rPAH8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Nov 14 20:22:01 2026 GMT Not After : Nov 21 20:22:01 2026 GMT Subject: CN=6af8c2e9-c89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:cf:d3:af:98:91:6b:26:15:02:05:59:97: 38:30:e8:17:33:26:39:40:d6:ff:5a:ee:3c:52:22: ba:6e:bc:50:5f:4b:c8:ff:38:07:f2:90:4e:57:8f: 89:d8:37:cd:93:7a:3c:a9:1c:56:cd:3c:99:82:20: 2a:4c:75:8e:8f:f3:01:82:5e:dd:3f:cd:f4:21:56: 26:23:fe:2e:d7:5b:84:5f:b4:4a:fd:0a:a9:42:7c: c1:d6:24:6e:5f:09:1d:44:a1:f4:48:3a:66:fb:4c: b3:27:5a:26:a6:ab:ef:3c:98:5f:32:fd:28:d6:14: 5f:fa:06:67:bc:53:c2:a9:17:6e:1f:1d:d8:f3:bb: e6:51:a8:d6:ac:7b:94:d0:1c:b6:08:9d:53:53:f3: a0:ec:b8:15:8f:12:13:ed:54:aa:4d:ff:ef:83:8c: e1:64:94:a7:b1:8c:ca:3e:7d:5a:4c:ea:b1:2f:4e: 15:e7:45:d7:82:f2:d9:2c:e4:30:3f:9f:ea:ad:09: a5:32:59:9e:64:0d:3e:82:b9:c3:41:3f:bf:4f:63: e8:56:fd:8b:d5:84:53:f4:9b:e0:df:8f:a6:03:0f: e5:59:72:9b:07:4f:b3:81:92:fe:ff:58:b2:77:19: 7f:04:41:f5:73:67:71:1d:49:89:f5:ae:3f:07:63: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:D9:FE:49:0D:C7:84:AD:2E:F4:AF:2A:63:55:A5:75:EA:5C:EF X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:44:af:89:00:79:ad:fe:d4:80:95:32:c2:91:7d:8a:b4:b0: c6:d7:e1:5a:1c:59:ee:e8:1a:fe:70:41:63:dc:78:9e:41:9e: a7:8d:4d:d1:cb:43:f4:3e:dc:f9:5f:5c:43:cb:7b:30:8c:2d: 99:0f:89:68:f7:49:bb:15:d5:10:75:2c:fb:77:61:6e:92:8b: 96:c6:77:26:80:bd:be:6a:ee:f2:34:57:d5:09:a9:6a:4f:be: 32:10:ad:7a:05:fb:e5:71:03:37:2a:5f:5e:cb:21:b4:df:0d: d1:65:4d:05:7c:16:22:9e:a3:7a:b9:15:cd:66:ad:19:17:a4: 31:0a:0c:2e:a0:89:73:1a:ff:a0:79:a0:0b:d1:6e:57:8e:9d: ee:d5:cd:64:4a:e7:43:43:96:d2:09:84:71:d4:3a:a4:0f:86: 45:d8:10:98:09:90:17:eb:c3:d3:02:1f:56:47:24:7e:73:a1: bd:6d:f3:ed:06:98:41:51:63:32:a4:5f:41:83:c7:1f:da:67: 1d:32:95:41:c7:9d:ec:dd:04:e5:bd:3e:ae:b2:8e:e4:a2:3c: b4:3e:3c:06:30:23:b8:88:b9:57:62:58:f6:02:62:00:b8:16: c1:11:bd:56:f3:e8:c5:83:37:e4:34:4e:ba:43:3b:a9:fe:c5: 38:36:c7:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYxMTE0MjAyMjAxWhcNMjYxMTIxMjAyMjAxWjAYMRYwFAYD VQQDEw02YWY4YzJlOS1jODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon7P06+YkWsmFQIFWZc4MOgXMyY5QNb/Wu48UiK6brxQX0vI/zgH8pBOV4+J 2DfNk3o8qRxWzTyZgiAqTHWOj/MBgl7dP830IVYmI/4u11uEX7RK/QqpQnzB1iRu XwkdRKH0SDpm+0yzJ1ompqvvPJhfMv0o1hRf+gZnvFPCqRduHx3Y87vmUajWrHuU 0By2CJ1TU/Og7LgVjxIT7VSqTf/vg4zhZJSnsYzKPn1aTOqxL04V50XXgvLZLOQw P5/qrQmlMlmeZA0+grnDQT+/T2PoVv2L1YRT9Jvg34+mAw/lWXKbB0+zgZL+/1iy dxl/BEH1c2dxHUmJ9a4/B2Mh+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMk2f5J DceErS70rypjVaV16lzvMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfESviQB5rf7UgJUywpF9irSwxtfhWhxZ7uga/nBBY9x4nkGep41N0ctD9D7c +V9cQ8t7MIwtmQ+JaPdJuxXVEHUs+3dhbpKLlsZ3JoC9vmru8jRX1Qmpak++MhCt egX75XEDNypfXsshtN8N0WVNBXwWIp6jerkVzWatGRekMQoMLqCJcxr/oHmgC9Fu V46d7tXNZErnQ0OW0gmEcdQ6pA+GRdgQmAmQF+vD0wIfVkckfnOhvW3z7QaYQVFj MqRfQYPHH9pnHTKVQced7N0E5b0+rrKO5KI8tD48BjAjuIi5V2JY9gJiALgWwRG9 VvPoxYM35DROukM7qf7FODbHqg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:59:17 2026 by rpki-client