$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: PRTC1L6XTQFes7fGOMpE1a36l5W5DNS+r/VDQPjR8TE= Subject key identifier: 47:6D:FA:9B:53:96:91:8F:4D:7A:04:F1:44:BB:E0:35:76:47:65:85 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7EB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4948 Signing time: Sat 14 Nov 2026 16:49:43 +0000 Manifest this update: Sat 14 Nov 2026 16:49:43 +0000 Manifest next update: Sat 21 Nov 2026 16:49:43 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: uApGs9hg2892CbpbD9hB0zFWDHc5KdYExk5pVYinsmw=) 2: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: BQdV6ndcECrItHdc1IEW8WyLJSqfh/iCl7ffuQz9nnQ=) 3: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: /V12Eqf620PvsHyjHjC7SsTrYWKzvxlGrdEZ3jISFaE=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: 1NJm7ZOzu65GXUg/3DBxh7cNb5VPBWgXao2O9h+yjbY=) 5: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: GCPP3Zkeb88CMAM4ecp19R2oGr0s67YLKK0lItldtcI=) 6: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: VBI4G1ovmwOYXsiKsWVJkf1feKjFHnDDeRgP+rbu+5k=) 7: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: 9nTKPawfGHtPhjNOmWn8l90W8nDxOehnoaoOT9irCWw=) 8: 2DE2AC2669E311F18E29D967A047A888.roa (hash: y0np8i3XvwHRXGyvtfQ1quYALwf4BO+BBv/DSGvYscU=) 9: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: qG1F9oSfTBN5NOm4LXLgIPHtejfdqzXmcuKvzt+5uSQ=) 10: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: cSJqj5g48JTcjBcGFsAbqitb62jbctH5OWGGZ2nY5TY=) 11: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: EARXDyWWNkzvluDdghdjO0DJ2CbqIZ55pIns0B024Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32438 (0x7eb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Nov 14 16:49:43 2026 GMT Not After : Nov 21 16:49:43 2026 GMT Subject: CN=6af89127-381d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:a4:bb:a9:4b:21:88:25:36:c1:56:c7:5c: 6a:90:1d:5b:65:1d:f3:ed:ce:32:b2:6e:86:a8:1b: 86:38:4e:29:8f:72:4d:cd:eb:76:06:4e:07:7e:1d: 49:2f:99:c2:2b:05:18:19:32:b5:7d:89:7d:20:23: cc:56:ec:82:0c:89:26:45:aa:71:8c:7e:d4:29:83: e7:42:8f:3b:8d:79:f1:57:55:f5:85:2d:0e:db:35: 60:ed:bd:1d:6c:40:a2:2a:70:f5:81:cf:83:bb:27: bb:86:97:d5:74:c3:a3:4b:1f:5b:94:e8:12:4c:6d: 3f:f0:7d:72:4a:ac:4e:47:9f:5e:92:2d:b2:da:5d: 8b:10:35:81:22:c7:e6:2f:e1:13:2b:cc:76:41:5b: c4:5c:f4:66:de:b3:ec:b1:3d:33:b6:c8:67:2b:86: 28:31:1e:1b:38:41:08:98:1f:31:87:48:e7:87:25: 51:6d:17:33:e5:41:eb:d5:36:76:0b:0e:dc:02:77: d5:8d:5c:46:04:0e:8e:23:8e:f9:d6:37:2c:49:df: e3:84:a6:98:6f:a1:1a:99:23:e4:d6:9c:80:86:e3: 16:1e:0e:4b:0b:f4:97:9e:46:b7:03:2b:71:5f:b2: 8f:d0:10:bc:c8:c2:46:53:4e:b8:07:6c:5c:c3:a8: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6D:FA:9B:53:96:91:8F:4D:7A:04:F1:44:BB:E0:35:76:47:65:85 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:60:19:25:1b:98:d3:4b:d7:58:d1:0d:c1:ff:d7:39:b4:b2: bf:4b:f8:e1:2b:43:6b:05:95:52:4e:1f:3b:82:1f:30:f2:37: 70:57:0e:a7:a7:7e:b2:16:e8:67:5c:e7:2b:b2:00:7a:0d:ad: 91:14:04:7b:0d:7c:89:7b:0c:03:1d:b0:91:3e:b4:b3:eb:9d: 18:c3:66:09:70:1f:57:d5:0c:d6:29:5a:c7:e1:81:61:9b:17: b7:32:26:ff:c6:bf:15:40:6c:0f:1c:80:c3:aa:ae:77:95:fd: 43:f1:7f:ef:c1:77:5b:ca:13:8c:13:3f:5f:f1:74:65:44:e1: 20:86:83:e0:a3:cd:b0:f5:28:43:32:88:b7:90:48:55:c3:18: 54:a2:3f:22:f4:52:b6:e7:ca:c3:63:cb:f6:d6:4c:0b:87:7c: b2:13:c9:4b:1f:1a:40:d0:a7:76:5c:e1:90:e6:7d:ac:f3:be: 8c:1f:7c:73:25:82:4b:8a:96:d0:03:b1:f4:fd:43:0f:f2:7d: 47:b9:47:c5:e5:30:86:e5:55:9f:61:aa:8f:0d:35:af:df:1f: ad:f5:82:15:3f:17:3d:64:1d:ee:bf:12:40:c0:45:95:3b:c6: 8d:20:ea:ea:ca:4f:cd:44:8c:32:66:34:5e:63:e1:bd:48:fc: ae:05:7d:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYxMTE0MTY0OTQzWhcNMjYxMTIxMTY0OTQzWjAYMRYwFAYD VQQDEw02YWY4OTEyNy0zODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhUiku6lLIYglNsFWx1xqkB1bZR3z7c4ysm6GqBuGOE4pj3JNzet2Bk4Hfh1J L5nCKwUYGTK1fYl9ICPMVuyCDIkmRapxjH7UKYPnQo87jXnxV1X1hS0O2zVg7b0d bECiKnD1gc+Duye7hpfVdMOjSx9blOgSTG0/8H1ySqxOR59eki2y2l2LEDWBIsfm L+ETK8x2QVvEXPRm3rPssT0ztshnK4YoMR4bOEEImB8xh0jnhyVRbRcz5UHr1TZ2 Cw7cAnfVjVxGBA6OI4751jcsSd/jhKaYb6EamSPk1pyAhuMWHg5LC/SXnka3Aytx X7KP0BC8yMJGU064B2xcw6irZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdt+ptT lpGPTXoE8US74DV2R2WFMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzWAZJRuY00vXWNENwf/XObSyv0v44StDawWVUk4fO4IfMPI3cFcOp6d+shbo Z1znK7IAeg2tkRQEew18iXsMAx2wkT60s+udGMNmCXAfV9UM1ilax+GBYZsXtzIm /8a/FUBsDxyAw6qud5X9Q/F/78F3W8oTjBM/X/F0ZUThIIaD4KPNsPUoQzKIt5BI VcMYVKI/IvRStufKw2PL9tZMC4d8shPJSx8aQNCndlzhkOZ9rPO+jB98cyWCS4qW 0AOx9P1DD/J9R7lHxeUwhuVVn2Gqjw01r98frfWCFT8XPWQd7r8SQMBFlTvGjSDq 6spPzUSMMmY0XmPhvUj8rgV9OA== -----END CERTIFICATE-----Generated at Sat Nov 14 22:24:11 2026 by rpki-client