$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: IEsSiVxyy66RcAHrXbp/75vkSxSaDgCUVP6v2cDWlzM= Subject key identifier: 37:82:D7:1E:7C:8E:5A:A4:EB:5B:C8:52:D2:6E:1D:8A:74:62:B9:98 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 08FA Signing time: Sat 14 Nov 2026 20:13:58 +0000 Manifest this update: Sat 14 Nov 2026 20:13:57 +0000 Manifest next update: Sat 21 Nov 2026 20:13:57 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: TlQGMO69hyTdd6tBAHdcugkTb6B1aaT70M0WYnJAk1A=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Nov 14 20:13:57 2026 GMT Not After : Nov 21 20:13:57 2026 GMT Subject: CN=6af8c106-8467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:e9:db:30:84:9b:bc:3a:00:3d:db:ef:a9: 6c:e7:8c:b1:3e:4c:06:7c:ea:52:42:3e:2d:67:bc: 3d:70:30:84:bb:83:67:90:d8:d3:15:d1:2c:a2:4e: ad:97:42:8a:a5:fe:41:16:de:08:8e:13:fd:67:3e: ac:9b:45:d3:9a:38:19:db:08:b0:b0:d6:38:da:af: b7:ac:5d:3e:48:49:7a:f1:6e:d7:b5:14:a0:4a:3a: 9c:a6:ef:47:d4:94:a7:ef:58:dd:d9:d2:a2:b9:ee: 2d:c2:d9:d6:86:af:5c:6a:0a:69:44:9a:01:da:b4: 95:0d:45:65:74:47:66:7e:97:ed:18:4a:ad:ab:21: 8f:03:f6:29:15:25:2b:1b:ff:5e:a6:e7:e6:43:a7: 98:82:95:10:29:59:28:35:61:70:38:63:f8:35:c7: 2b:bc:fa:33:10:91:bf:51:d4:9f:d4:ad:c0:40:6a: 30:f1:82:68:7e:c9:f7:25:e2:70:9e:5e:8e:54:8d: a8:39:e9:98:42:a8:17:43:4a:89:83:6e:0b:57:ac: 6f:25:30:b6:bc:24:83:fd:12:0c:4d:3f:aa:b6:d1: 6c:ac:86:fd:e0:d6:8c:c3:a5:7c:35:fd:a1:69:bd: a1:39:2f:72:d8:9e:2d:3f:a7:e1:63:a4:2e:b3:6f: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:D7:1E:7C:8E:5A:A4:EB:5B:C8:52:D2:6E:1D:8A:74:62:B9:98 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:28:26:3f:d1:80:f6:49:8e:82:cc:48:df:32:46:dd:79: 38:ff:cc:39:94:06:5e:13:ef:a1:2b:1c:a1:07:a9:d7:92:2e: 2f:34:f3:05:58:12:80:62:41:7a:80:f4:e8:c9:ca:f4:36:b4: 22:78:12:ca:ed:21:10:3a:16:2a:64:c5:ed:90:ab:67:97:42: 9d:59:ba:0e:30:3a:5e:96:85:5a:a5:da:5b:75:86:76:af:ac: a1:d3:45:1c:5e:81:6f:ab:8b:7b:18:ca:48:a7:27:9e:a9:5d: a1:82:c6:7e:7a:87:e4:53:5e:4a:28:8f:bf:63:6e:42:1e:87: 7e:b8:05:36:20:81:a6:2b:d7:7c:64:45:4e:12:05:d6:fb:96: 98:ec:b8:92:4a:56:d5:ba:e6:5c:04:53:23:3a:d2:05:ba:c9: 90:5d:16:89:a6:16:03:3b:ed:4b:06:c9:cd:f3:ff:20:28:c0: 3a:e5:37:61:4b:c1:c4:bc:26:4e:e4:0a:35:a1:a7:d3:50:2c: 76:51:59:d8:fa:5d:d2:1a:23:12:7f:78:d2:d4:dc:6d:6e:57: e5:89:12:b5:44:22:e0:0d:73:f9:47:65:62:de:4c:5b:86:20: ed:3a:0b:d3:65:a2:e1:e9:ec:7a:ec:68:1e:42:ec:b6:a8:b3: f3:90:9c:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYxMTE0MjAxMzU3WhcNMjYxMTIxMjAxMzU3WjAYMRYwFAYD VQQDEw02YWY4YzEwNi04NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkk7p2zCEm7w6AD3b76ls54yxPkwGfOpSQj4tZ7w9cDCEu4NnkNjTFdEsok6t l0KKpf5BFt4IjhP9Zz6sm0XTmjgZ2wiwsNY42q+3rF0+SEl68W7XtRSgSjqcpu9H 1JSn71jd2dKiue4twtnWhq9cagppRJoB2rSVDUVldEdmfpftGEqtqyGPA/YpFSUr G/9epufmQ6eYgpUQKVkoNWFwOGP4NccrvPozEJG/UdSf1K3AQGow8YJofsn3JeJw nl6OVI2oOemYQqgXQ0qJg24LV6xvJTC2vCSD/RIMTT+qttFsrIb94NaMw6V8Nf2h ab2hOS9y2J4tP6fhY6Qus28BhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeC1x58 jlqk61vIUtJuHYp0YrmYMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZggoJj/RgPZJjoLMSN8yRt15OP/MOZQGXhPvoSscoQep15IuLzTzBVgSgGJB eoD06MnK9Da0IngSyu0hEDoWKmTF7ZCrZ5dCnVm6DjA6XpaFWqXaW3WGdq+sodNF HF6Bb6uLexjKSKcnnqldoYLGfnqH5FNeSiiPv2NuQh6HfrgFNiCBpivXfGRFThIF 1vuWmOy4kkpW1brmXARTIzrSBbrJkF0WiaYWAzvtSwbJzfP/ICjAOuU3YUvBxLwm TuQKNaGn01AsdlFZ2Ppd0hojEn940tTcbW5X5YkStUQi4A1z+UdlYt5MW4Yg7ToL 02Wi4enseuxoHkLstqiz85CcZA== -----END CERTIFICATE-----Generated at Sun Nov 15 16:32:19 2026 by rpki-client