$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: A2dVHQGk6APQl0RHP8je+5Ff9yn1F6x/HeKLxMdZ++g= Subject key identifier: CA:9F:29:2E:51:E4:C1:0A:D1:18:D6:3C:D4:57:6D:A9:79:7C:A6:02 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 02C7 Signing time: Fri 13 Nov 2026 01:29:32 +0000 Manifest this update: Fri 13 Nov 2026 01:29:31 +0000 Manifest next update: Fri 20 Nov 2026 01:29:31 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: mCp2N6uP6RNv+B/OIPqvqmouXybM4ttyZ62jE4r0GXk=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: knFwvMjPgbAwZWQ4tl74NJH9Eoq0c8p4Rxp+Mu8Ms4k=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: rF7SOFEvy817x7nCvoQTwE931VplbOd/lPkpG4O4yR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 01:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: Nov 13 01:29:31 2026 GMT Not After : Nov 20 01:29:31 2026 GMT Subject: CN=6af667fb-2bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:b9:6f:35:fa:17:23:31:ff:c4:2d:11:8c: d4:b2:fc:5e:65:49:c5:3e:8d:5b:61:36:5a:10:1d: 4c:2c:21:a0:5c:b6:0d:ed:4d:f7:64:a0:f1:85:33: e7:4d:2d:cd:b6:02:ce:1c:7e:70:0d:28:19:e8:aa: be:91:2d:ea:34:54:f2:e8:d6:d7:1f:9f:74:c6:49: 90:f7:0a:fb:04:9b:30:e0:6f:5e:4f:78:81:b9:aa: f6:b3:05:84:d0:ab:3d:42:57:da:7e:18:3e:d1:f5: ee:72:d5:b2:08:9d:c2:db:89:8a:5c:90:e2:34:02: 8d:1c:ab:50:a7:14:11:df:2a:f1:69:77:28:b5:b8: 8b:52:ea:bf:31:06:02:05:c2:71:d6:9f:b5:68:42: ab:43:a0:22:d8:fc:70:94:0d:5a:c7:16:2d:16:ed: 36:dd:0e:af:24:85:54:fd:2e:21:14:06:ce:0a:2b: d1:3c:0f:3b:f4:08:d4:71:8e:2c:2a:48:c2:b3:77: 36:ed:36:92:ff:21:a9:ea:cb:f6:6b:06:6c:27:a8: 0b:d7:95:49:e4:d8:35:4b:d5:38:84:67:d7:80:e5: d7:d4:e8:68:e0:d7:83:de:25:90:7e:55:eb:e9:bb: 8a:bf:fe:ad:1d:e4:70:72:92:78:ee:7f:ac:94:93: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9F:29:2E:51:E4:C1:0A:D1:18:D6:3C:D4:57:6D:A9:79:7C:A6:02 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d6:b4:74:41:43:3d:b0:75:d4:96:5a:e5:2b:ea:a2:fc:3f: 93:58:76:a7:b8:78:bd:e0:ca:08:0c:cb:b4:e9:81:f0:d3:4b: 92:a6:c5:b4:74:ba:7b:6c:ca:ca:ef:d2:65:0d:47:f9:f8:b2: af:e4:08:44:6c:db:f5:a3:26:b0:8c:8c:f2:0e:6c:ba:7e:36: 4c:8c:02:ff:95:e9:f7:21:61:11:f6:b4:39:cc:e0:ca:d5:a9: ca:2e:f9:fc:80:64:ab:3b:ca:55:60:d7:a5:63:fb:f5:c7:fe: 9b:52:06:41:09:45:4e:48:97:58:46:42:a8:10:b6:59:7d:9f: 23:cb:a0:8c:46:0b:26:ff:e6:a5:88:98:7d:cd:73:5b:da:e6: 12:a4:e3:7e:9a:0b:a7:01:3d:0c:d9:22:20:8b:94:a3:79:a1: 18:50:bf:71:fb:3d:17:c6:b8:c3:b6:01:bb:1c:e5:31:5a:11: 28:8a:c5:84:6a:21:3c:6f:29:f9:5a:a9:2a:f8:9f:e8:01:70: cb:54:34:1d:ba:bf:6e:11:8c:cb:cc:53:64:8c:b1:d0:b3:a3: 56:5d:7c:4b:bc:2c:55:8e:45:9c:e9:d7:d9:39:72:ee:a8:f2: 68:2b:33:c8:88:1a:35:1e:23:11:7e:70:80:c6:a4:e2:d1:81: 41:e1:0b:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjYxMTEzMDEyOTMxWhcNMjYxMTIwMDEyOTMxWjAYMRYwFAYD VQQDEw02YWY2NjdmYi0yYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7K5bzX6FyMx/8QtEYzUsvxeZUnFPo1bYTZaEB1MLCGgXLYN7U33ZKDxhTPn TS3NtgLOHH5wDSgZ6Kq+kS3qNFTy6NbXH590xkmQ9wr7BJsw4G9eT3iBuar2swWE 0Ks9Qlfafhg+0fXuctWyCJ3C24mKXJDiNAKNHKtQpxQR3yrxaXcotbiLUuq/MQYC BcJx1p+1aEKrQ6Ai2PxwlA1axxYtFu023Q6vJIVU/S4hFAbOCivRPA879AjUcY4s KkjCs3c27TaS/yGp6sv2awZsJ6gL15VJ5Ng1S9U4hGfXgOXX1Oho4NeD3iWQflXr 6buKv/6tHeRwcpJ47n+slJPCfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqfKS5R 5MEK0RjWPNRXbal5fKYCMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPta0dEFDPbB11JZa5Svqovw/k1h2p7h4veDKCAzLtOmB8NNLkqbFtHS6e2zK yu/SZQ1H+fiyr+QIRGzb9aMmsIyM8g5sun42TIwC/5Xp9yFhEfa0OczgytWpyi75 /IBkqzvKVWDXpWP79cf+m1IGQQlFTkiXWEZCqBC2WX2fI8ugjEYLJv/mpYiYfc1z W9rmEqTjfpoLpwE9DNkiIIuUo3mhGFC/cfs9F8a4w7YBuxzlMVoRKIrFhGohPG8p +VqpKvif6AFwy1Q0Hbq/bhGMy8xTZIyx0LOjVl18S7wsVY5FnOnX2Tly7qjyaCsz yIgaNR4jEX5wgMak4tGBQeEL+Q== -----END CERTIFICATE-----Generated at Sun Nov 15 01:09:09 2026 by rpki-client