$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: T7RoJjLmaosDkUb6cOBGoZ0uYYFz1U8zNy6Qhh6GJvs= Subject key identifier: 27:E3:F3:16:17:5B:2F:F8:36:05:B5:7A:83:4A:3C:81:5E:6B:28:22 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0B62 Signing time: Sat 14 Nov 2026 19:06:53 +0000 Manifest this update: Sat 14 Nov 2026 19:06:52 +0000 Manifest next update: Sat 21 Nov 2026 19:06:52 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: xXPqpIoQYuPc1wIJ3lXVgr/6e3ZYevjRvLaknhWFw6s=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Nov 14 19:06:52 2026 GMT Not After : Nov 21 19:06:52 2026 GMT Subject: CN=6af8b14c-133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:4e:8d:cd:f9:ef:20:0c:78:1b:f6:cc:e5: 6c:0b:a4:ae:a4:85:fe:e3:1a:c7:74:e3:8a:e3:f6: b1:8a:13:e5:c8:cd:eb:1b:ac:45:d8:e5:eb:f7:bf: 50:ef:72:63:ba:d2:74:d4:8d:e8:2b:6d:99:8b:e0: 1b:5e:bf:13:a2:86:bc:49:aa:0c:ce:50:86:27:6a: 2a:b5:ad:8e:03:93:c5:af:69:4f:3b:ab:b5:42:14: f9:c6:d0:28:f0:b6:ca:94:ed:a2:95:6b:f6:fd:11: a5:5b:a5:b3:d5:df:97:53:aa:3c:ed:61:9a:38:3b: cb:8d:0c:09:2c:f0:88:3b:3a:05:f3:99:41:cc:6b: 67:ec:9d:32:03:0b:f8:ba:33:97:7a:f4:fb:72:c1: b8:af:00:6b:73:dc:8f:10:d6:ee:69:dc:8b:c2:7c: bb:85:db:20:ee:f1:f9:4e:10:d3:50:a1:a3:a0:8d: 51:01:8c:58:f3:a8:c6:2b:c8:db:86:dc:0a:56:08: cf:43:44:ff:07:55:30:bc:5d:d2:3d:8c:8e:ce:45: f3:94:a5:ec:ac:84:8e:9b:5b:ba:cd:b5:c0:01:2b: f2:cc:0c:1c:59:65:90:25:6c:77:38:cd:c9:d4:0c: 4e:26:e0:2b:0c:6c:a2:d4:d7:06:40:ed:cd:ac:19: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E3:F3:16:17:5B:2F:F8:36:05:B5:7A:83:4A:3C:81:5E:6B:28:22 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:49:00:6e:55:c1:b4:62:6e:59:bd:1f:70:36:0f:4f:e5:ee: 7f:ec:0e:c1:e9:c4:b9:32:61:53:1b:37:92:a2:83:88:cf:f1: d8:76:01:9b:ea:14:bd:0b:60:21:eb:3c:1e:8d:41:bc:e3:54: b8:5b:f8:49:f3:18:21:2f:78:2a:d6:5d:8d:9d:3c:28:55:3d: 26:56:26:74:be:5a:bd:0f:29:d4:a2:1c:8b:b4:89:84:19:40: f5:71:95:c4:6e:26:9a:30:3c:6d:69:0b:e4:38:c6:77:af:b3: 2a:b7:8a:4d:74:54:58:d1:dc:5b:a1:ad:fd:c0:bb:9d:8c:1c: 8e:4a:a9:66:87:19:81:71:7d:8b:9f:05:66:af:56:27:85:56: d4:77:5c:47:5b:25:9d:b6:4f:54:67:3d:c0:fc:8b:f4:3d:8c: 7e:18:d7:8e:35:86:af:a5:fc:b0:b9:a4:2e:b1:1b:f2:1d:f1: f0:c2:b6:9b:aa:72:12:9a:50:bc:17:31:00:b3:3a:4e:c0:da: 96:ee:01:bd:a1:df:39:d5:fa:2f:5d:74:1a:dd:25:1b:fd:ab: 5f:76:9f:b5:9d:b4:63:f6:b1:6d:20:c4:d1:1f:66:15:74:c7: ac:ad:39:4c:02:ed:54:83:62:4d:69:e7:8f:40:0c:24:6d:b8: 34:33:09:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjYxMTE0MTkwNjUyWhcNMjYxMTIxMTkwNjUyWjAYMRYwFAYD VQQDEw02YWY4YjE0Yy0xMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxalOjc357yAMeBv2zOVsC6SupIX+4xrHdOOK4/axihPlyM3rG6xF2OXr979Q 73JjutJ01I3oK22Zi+AbXr8Tooa8SaoMzlCGJ2oqta2OA5PFr2lPO6u1QhT5xtAo 8LbKlO2ilWv2/RGlW6Wz1d+XU6o87WGaODvLjQwJLPCIOzoF85lBzGtn7J0yAwv4 ujOXevT7csG4rwBrc9yPENbuadyLwny7hdsg7vH5ThDTUKGjoI1RAYxY86jGK8jb htwKVgjPQ0T/B1UwvF3SPYyOzkXzlKXsrISOm1u6zbXAASvyzAwcWWWQJWx3OM3J 1AxOJuArDGyi1NcGQO3NrBnSYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfj8xYX Wy/4NgW1eoNKPIFeaygiMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMEkAblXBtGJuWb0fcDYPT+Xuf+wOwenEuTJhUxs3kqKDiM/x2HYBm+oUvQtg Ies8Ho1BvONUuFv4SfMYIS94KtZdjZ08KFU9JlYmdL5avQ8p1KIci7SJhBlA9XGV xG4mmjA8bWkL5DjGd6+zKreKTXRUWNHcW6Gt/cC7nYwcjkqpZocZgXF9i58FZq9W J4VW1HdcR1slnbZPVGc9wPyL9D2MfhjXjjWGr6X8sLmkLrEb8h3x8MK2m6pyEppQ vBcxALM6TsDalu4BvaHfOdX6L110Gt0lG/2rX3aftZ20Y/axbSDE0R9mFXTHrK05 TALtVINiTWnnj0AMJG24NDMJFQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:58:35 2026 by rpki-client