$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: 0ffGPtT3qzqVdlCRKAbp9XRlhaU3aOJAsShSnbLQa+Q= Subject key identifier: 21:D6:5D:67:20:1B:1D:6C:E1:38:FB:FC:C7:BC:07:4C:28:13:CE:22 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 07FA Signing time: Sat 14 Nov 2026 21:12:48 +0000 Manifest this update: Sat 14 Nov 2026 21:12:48 +0000 Manifest next update: Sat 21 Nov 2026 21:12:48 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: uX9J3De+LcqT4wrXDlkhPQf3/SGgRA8GEHjicxZ9htc=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: W8q2ly/PPCr3lwwKvrJUMlu8idGuOCMWK2eAe3nph+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Nov 14 21:12:48 2026 GMT Not After : Nov 21 21:12:48 2026 GMT Subject: CN=6af8ced0-9c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:39:a1:dc:da:89:de:00:28:7d:b7:e4:a4: a0:f0:45:e8:b5:4c:5c:c2:f2:bf:0f:85:f5:4f:3e: e9:26:11:f6:db:d5:79:7e:a8:d7:d1:95:d0:01:ef: 7c:c1:34:3c:58:c6:da:03:1b:56:ef:9f:76:35:de: 3c:33:ce:8c:81:5a:13:67:c9:44:4c:e3:6d:0c:22: 19:48:67:14:9c:f9:41:bc:68:cc:cd:11:96:d7:a6: cb:fe:24:5b:75:d8:ec:21:6b:04:5d:38:8e:83:6a: 6f:fc:62:0d:c6:d0:06:98:8e:50:3e:2d:29:bc:a4: e8:dd:d7:8e:08:b4:82:c8:ff:b2:42:1d:96:a0:f1: 78:d6:54:c4:c9:22:bf:ac:e2:bb:a7:4c:55:0c:bc: 78:67:c2:f1:cd:0c:9b:1d:65:bb:34:fe:8b:17:e4: cc:d9:d1:26:f7:6b:1d:aa:d8:4c:2d:91:1c:94:dc: 89:85:cc:4e:5c:3d:d7:60:cb:4b:93:ba:64:43:d1: d1:95:f5:5e:53:f7:54:df:1f:0e:cc:3c:de:84:8f: 5a:31:3c:a1:ae:64:30:26:d1:80:fc:e9:e2:fa:17: d3:2c:9d:a3:ae:ce:ff:1b:6d:5f:dc:ca:ab:6d:db: e7:3d:a4:c7:de:94:d9:bd:a5:fb:f0:29:d6:0f:35: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D6:5D:67:20:1B:1D:6C:E1:38:FB:FC:C7:BC:07:4C:28:13:CE:22 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:90:a8:de:98:4e:ed:a0:42:72:ad:3e:74:76:b4:8d:7d:45: 0e:5a:78:30:c6:9d:a4:59:bc:2f:1a:5d:fc:78:48:f5:f9:e1: 46:25:98:43:82:75:a2:c3:31:98:e0:f1:59:4e:c6:d2:96:75: 53:34:1c:22:5f:9c:54:06:55:a5:24:33:d6:7f:2a:23:78:e6: 34:88:06:f3:08:ca:c5:e9:c0:50:a6:6d:44:1f:0c:9f:5b:e5: fa:83:73:ae:c4:98:8e:13:f7:c9:b1:2a:b0:8e:97:72:0f:2c: 94:81:7b:64:a1:c5:ae:5c:86:9d:a2:dd:be:9a:26:6e:30:a8: 39:64:28:aa:f1:4e:94:8c:60:e7:63:fc:d0:2e:13:86:45:74: 2a:f8:03:bb:2a:69:3d:44:f6:8f:23:c1:a3:25:a4:94:45:a6: 6b:d3:5f:de:dc:81:34:1f:d4:d3:9c:f7:19:e9:71:52:52:a9: f0:b8:c5:c6:bf:a7:59:e6:0b:3a:de:94:1d:d3:d6:53:c1:b3: 87:d2:83:94:29:1e:d8:26:25:fa:5d:fe:4b:7d:78:66:35:e2: 85:96:84:69:af:06:96:4f:a7:b7:37:3b:02:4e:0a:5c:86:04: 55:c6:b7:9d:aa:e7:6d:d5:49:d5:c0:d1:81:fd:fe:0c:6f:e4: ce:bc:1d:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjYxMTE0MjExMjQ4WhcNMjYxMTIxMjExMjQ4WjAYMRYwFAYD VQQDEw02YWY4Y2VkMC05YzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnek5odzaid4AKH235KSg8EXotUxcwvK/D4X1Tz7pJhH229V5fqjX0ZXQAe98 wTQ8WMbaAxtW7592Nd48M86MgVoTZ8lETONtDCIZSGcUnPlBvGjMzRGW16bL/iRb ddjsIWsEXTiOg2pv/GINxtAGmI5QPi0pvKTo3deOCLSCyP+yQh2WoPF41lTEySK/ rOK7p0xVDLx4Z8LxzQybHWW7NP6LF+TM2dEm92sdqthMLZEclNyJhcxOXD3XYMtL k7pkQ9HRlfVeU/dU3x8OzDzehI9aMTyhrmQwJtGA/Oni+hfTLJ2jrs7/G21f3Mqr bdvnPaTH3pTZvaX78CnWDzX8bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHWXWcg Gx1s4Tj7/Me8B0woE84iMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbZCo3phO7aBCcq0+dHa0jX1FDlp4MMadpFm8Lxpd/HhI9fnhRiWYQ4J1osMx mODxWU7G0pZ1UzQcIl+cVAZVpSQz1n8qI3jmNIgG8wjKxenAUKZtRB8Mn1vl+oNz rsSYjhP3ybEqsI6Xcg8slIF7ZKHFrlyGnaLdvpombjCoOWQoqvFOlIxg52P80C4T hkV0KvgDuyppPUT2jyPBoyWklEWma9Nf3tyBNB/U05z3GelxUlKp8LjFxr+nWeYL Ot6UHdPWU8Gzh9KDlCke2CYl+l3+S314ZjXihZaEaa8Glk+ntzc7Ak4KXIYEVca3 narnbdVJ1cDRgf3+DG/kzrwdtQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:31:47 2026 by rpki-client