$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: PtYfOlV7CDGTJEg8n9FqWEqzHheC5zMUmnTHs+VaAU4= Subject key identifier: 6F:71:2E:94:1A:02:75:60:A7:CD:8D:87:AB:C4:E9:51:57:B6:A0:01 Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 0921 Signing time: Sat 14 Nov 2026 20:08:06 +0000 Manifest this update: Sat 14 Nov 2026 20:08:06 +0000 Manifest next update: Sat 21 Nov 2026 20:08:06 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: SWk806L8c++7TE4t/JUm/JqKNqiBc5IgRgZ87ZVM0bQ=) 2: C664689AE0F511EABB96D531C4F9AE02.roa (hash: e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=) 3: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: cJfzdxVNCRGQQr7NwQRxvNVS78tppuu9mzDc8jjC650=) 4: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: DpnrDLtmUYXL+QS+EesHCO03r/B2g7JpvqZf7zraP80=) 5: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: 4WRaKk2cTpYFo/oZ1tSpXVomBfLw7g63zvt2u39jxhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Nov 14 20:08:06 2026 GMT Not After : Nov 21 20:08:06 2026 GMT Subject: CN=6af8bfa6-2a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:0d:85:d8:52:34:61:3c:d5:f4:d9:3b:5f: 85:eb:39:21:bd:47:38:a6:04:f6:c7:19:32:2b:82: f5:61:c3:f0:6c:54:ae:a0:68:5a:33:01:c5:e3:28: c6:ab:c5:3c:df:fe:d5:05:f1:f3:9c:af:43:f1:ef: 83:fb:8b:ee:cf:42:e9:70:9f:67:a2:73:c2:04:a0: 11:eb:92:9d:a5:33:c6:83:60:b5:40:1e:f8:a5:4a: 6a:92:d7:66:75:34:6e:6e:0b:4c:e7:fe:3e:57:70: 5b:17:6b:c5:99:b7:91:91:c0:f5:45:0f:12:b9:32: 30:62:c7:15:6c:cd:68:e6:64:9c:73:86:a9:3f:ea: 7e:fe:7e:c6:e5:1c:07:dc:7f:f7:36:1a:3f:6e:9d: 2e:29:61:91:77:63:da:45:51:3d:6b:05:0b:34:9f: 6b:e9:36:c7:c1:dc:95:53:4d:60:21:9a:cd:7b:84: 2a:3d:2c:76:15:b8:9a:6d:56:b1:19:a2:ed:9f:4b: 1c:58:9b:ea:b7:8f:3d:a0:80:92:71:fb:86:fd:dc: b6:ab:4b:5b:26:70:b7:c1:f4:ac:5a:e2:81:5c:e3: 31:e4:6f:06:d6:26:da:64:10:ef:60:a8:23:1d:26: 66:28:07:ef:79:ef:1d:70:e1:61:6d:7f:bb:10:42: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:71:2E:94:1A:02:75:60:A7:CD:8D:87:AB:C4:E9:51:57:B6:A0:01 X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d2:be:17:f1:0e:b0:a4:96:89:cf:cb:b9:19:71:14:99:e6: c4:b1:e3:90:d2:86:40:b5:23:a9:30:1a:d3:be:8c:bf:72:4c: de:d8:a2:fa:83:a7:3b:d8:36:b4:fa:ac:de:33:5b:91:af:32: 9a:d1:d9:40:8b:86:e7:3a:1b:09:5f:2b:0c:e2:14:48:26:51: b7:c8:da:34:8e:4b:a4:0c:d2:fc:ae:93:64:4f:c3:09:b8:01: 5f:73:82:da:8c:8b:80:4f:09:e8:95:30:ac:5d:5b:71:a2:dc: 0d:3b:70:a8:eb:7a:7c:3c:bc:8b:ea:ad:e1:9b:92:2f:f9:3d: 3b:2f:61:18:1b:6f:1a:a0:80:05:20:f1:98:13:eb:e9:ac:23: 6a:eb:85:9e:83:20:ca:a2:67:0d:ca:62:9d:39:fb:29:82:c1: 8f:41:28:f1:c2:f1:1e:c6:45:98:19:3c:66:2e:ad:b9:49:9e: 4f:a9:e1:52:99:bc:64:69:b3:56:71:5f:34:e0:3b:72:dc:7f: 40:ed:5e:89:7d:d9:d4:2b:a9:61:9d:6c:c9:50:5d:4f:c2:5e: bf:8a:a4:fa:45:c9:7c:a3:b6:19:04:1e:fc:de:48:25:37:a4: 8e:e8:37:c6:4c:fe:1f:77:46:74:56:a0:e6:b4:0a:60:fa:7d: 67:05:51:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjYxMTE0MjAwODA2WhcNMjYxMTIxMjAwODA2WjAYMRYwFAYD VQQDEw02YWY4YmZhNi0yYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmANhdhSNGE81fTZO1+F6zkhvUc4pgT2xxkyK4L1YcPwbFSuoGhaMwHF4yjG q8U83/7VBfHznK9D8e+D+4vuz0LpcJ9nonPCBKAR65KdpTPGg2C1QB74pUpqktdm dTRubgtM5/4+V3BbF2vFmbeRkcD1RQ8SuTIwYscVbM1o5mScc4apP+p+/n7G5RwH 3H/3Nho/bp0uKWGRd2PaRVE9awULNJ9r6TbHwdyVU01gIZrNe4QqPSx2FbiabVax GaLtn0scWJvqt489oICScfuG/dy2q0tbJnC3wfSsWuKBXOMx5G8G1ibaZBDvYKgj HSZmKAfvee8dcOFhbX+7EEKeBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9xLpQa AnVgp82Nh6vE6VFXtqABMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldK+F/EOsKSWic/LuRlxFJnmxLHjkNKGQLUjqTAa076Mv3JM3tii+oOnO9g2 tPqs3jNbka8ymtHZQIuG5zobCV8rDOIUSCZRt8jaNI5LpAzS/K6TZE/DCbgBX3OC 2oyLgE8J6JUwrF1bcaLcDTtwqOt6fDy8i+qt4ZuSL/k9Oy9hGBtvGqCABSDxmBPr 6awjauuFnoMgyqJnDcpinTn7KYLBj0Eo8cLxHsZFmBk8Zi6tuUmeT6nhUpm8ZGmz VnFfNOA7ctx/QO1eiX3Z1CupYZ1syVBdT8Jev4qk+kXJfKO2GQQe/N5IJTekjug3 xkz+H3dGdFag5rQKYPp9ZwVRPQ== -----END CERTIFICATE-----Generated at Sun Nov 15 22:09:20 2026 by rpki-client