$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: R7+MZehu/ovUZ+klibEGnxTlr9kDojcn/HKzUIDEv+8= Subject key identifier: 4B:4F:F2:A0:FC:46:61:C9:DA:F0:21:04:23:9F:0F:4F:CD:7F:71:1F Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0C38 Signing time: Sat 14 Nov 2026 18:43:55 +0000 Manifest this update: Sat 14 Nov 2026 18:43:54 +0000 Manifest next update: Sat 21 Nov 2026 18:43:54 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: j0QCudrL+q1clw3HBza2iivRjt5czJQtB2ONLnfafD8=) 2: 1221D894B74B11F1A50305EC3B11F970.roa (hash: 5techFKvTgAmGGC9EMyJ0WlFDr9hYrwJgXc0g4j95j8=) 3: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=) 4: 132F6030B74B11F1A50305EC3B11F970.roa (hash: btyGfYX3kghG+AITheqkFtouzfiDWA0txhXyYF7/yYY=) 5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=) 6: 1CDAEE58C2D411F1B862FDBA4A11F970.roa (hash: zWvb3FUzqcQ5zz4kfUO+NP0dP9ottUhQQkyM3DYrH/M=) 7: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=) 8: 117CE5BEB74B11F1A50305EC3B11F970.roa (hash: 0XRpO6VG2MAWMFVWVVi5GazCmwhYCNgHAOrN/chrCZo=) 9: 12B1AAB4B74B11F1A50305EC3B11F970.roa (hash: k6aFYFAtQNsKvCDcClyzu+oisFvLNle68NVG18R+0Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Nov 14 18:43:54 2026 GMT Not After : Nov 21 18:43:54 2026 GMT Subject: CN=6af8abea-40f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:ab:1a:7a:2c:a8:27:02:a1:9c:67:0f:76: 9f:d0:13:a8:00:1d:c2:f4:38:c7:1c:21:81:9e:bc: ab:e1:dc:4c:80:17:e5:0a:6f:1d:4d:49:1d:cb:ed: ee:3b:3f:ac:eb:f3:a9:c8:5a:7b:34:55:c7:1d:bb: 9b:69:cb:d0:a7:2f:ae:b7:bc:65:6d:fa:9a:36:82: 0c:01:32:1c:93:11:40:8a:d9:a6:cc:96:d6:6c:2d: d6:fb:f8:b7:e1:ab:75:f8:f6:b3:5b:e5:b9:da:d6: f7:fd:34:b6:23:07:da:b6:63:c5:90:c4:d5:9f:86: a4:2a:28:e0:29:67:93:de:eb:cd:e3:dd:ec:c0:78: 60:58:58:ea:f2:8c:7f:fc:60:d4:fa:46:dd:6a:79: 29:48:b1:bf:0c:50:f7:d0:9c:ca:bf:09:88:54:32: 20:4f:1b:af:fa:e2:48:a0:ba:27:1a:0a:22:5a:78: dd:dd:42:79:b9:e3:c2:7a:34:85:c7:72:97:78:16: 3b:54:c1:10:0f:bf:9c:90:48:d6:f8:8b:87:70:79: d1:09:01:05:b4:42:9e:eb:94:4a:66:8a:51:65:c5: a9:7e:22:96:35:55:91:2b:08:7f:ac:fb:71:a5:42: db:c6:65:e7:8b:0c:dd:ab:29:64:4b:70:31:d3:d5: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4F:F2:A0:FC:46:61:C9:DA:F0:21:04:23:9F:0F:4F:CD:7F:71:1F X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e7:e9:5b:ad:9a:b0:f2:16:39:27:98:62:d2:77:69:4e:d3: 29:c9:2e:6e:26:14:c8:fa:17:8c:33:a3:66:01:4e:1b:b5:25: 7c:01:8c:99:7b:f2:e2:7e:eb:13:e1:68:87:39:25:37:d4:e8: bb:d6:c4:18:42:e5:c2:1b:be:22:4d:14:02:62:0b:ef:d9:7f: 8c:32:22:88:08:76:8d:2f:5e:fb:a2:3b:fb:93:db:0a:ef:eb: d3:b0:b1:24:7c:a6:4a:36:8c:e2:8c:6b:18:9e:7f:ef:3d:31: ee:34:a1:a0:85:6e:f3:14:b4:af:42:7e:e4:dd:42:22:df:2a: 8a:8f:28:63:18:85:bd:40:54:29:9d:94:eb:93:a3:b3:0c:db: 1b:43:42:ea:cf:c0:ac:b6:8e:67:4e:94:f7:a0:f2:1c:66:18: f1:57:6d:03:ff:dd:39:2c:fb:69:fc:87:29:ed:06:8f:fa:5c: 7e:55:c9:e3:bf:63:85:27:e9:9a:4c:98:50:b6:44:63:99:63: 9f:78:a3:a1:fa:c9:14:2c:2f:f1:d2:18:e5:21:85:28:bc:32: a7:a0:51:51:a3:25:2b:21:67:e8:79:ee:71:d5:43:a2:5b:27: da:3a:a4:66:bc:bb:43:a8:08:fe:d1:84:95:cc:f8:0d:ba:58: e9:f7:9d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjYxMTE0MTg0MzU0WhcNMjYxMTIxMTg0MzU0WjAYMRYwFAYD VQQDEw02YWY4YWJlYS00MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxqrGnosqCcCoZxnD3af0BOoAB3C9DjHHCGBnryr4dxMgBflCm8dTUkdy+3u Oz+s6/OpyFp7NFXHHbubacvQpy+ut7xlbfqaNoIMATIckxFAitmmzJbWbC3W+/i3 4at1+PazW+W52tb3/TS2IwfatmPFkMTVn4akKijgKWeT3uvN493swHhgWFjq8ox/ /GDU+kbdankpSLG/DFD30JzKvwmIVDIgTxuv+uJIoLonGgoiWnjd3UJ5uePCejSF x3KXeBY7VMEQD7+ckEjW+IuHcHnRCQEFtEKe65RKZopRZcWpfiKWNVWRKwh/rPtx pULbxmXniwzdqylkS3Ax09XcjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtP8qD8 RmHJ2vAhBCOfD0/Nf3EfMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuufpW62asPIWOSeYYtJ3aU7TKckubiYUyPoXjDOjZgFOG7UlfAGMmXvy4n7r E+FohzklN9Tou9bEGELlwhu+Ik0UAmIL79l/jDIiiAh2jS9e+6I7+5PbCu/r07Cx JHymSjaM4oxrGJ5/7z0x7jShoIVu8xS0r0J+5N1CIt8qio8oYxiFvUBUKZ2U65Oj swzbG0NC6s/ArLaOZ06U96DyHGYY8VdtA//dOSz7afyHKe0Gj/pcflXJ479jhSfp mkyYULZEY5ljn3ijofrJFCwv8dIY5SGFKLwyp6BRUaMlKyFn6HnucdVDolsn2jqk Zry7Q6gI/tGElcz4DbpY6fedrA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:08:36 2026 by rpki-client