$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: oUDe1IZIUwCnKfF/FBymeZfzVJZ+mFJxDT9pW9/V7YY= Subject key identifier: D4:FF:E3:D9:1B:F2:94:39:47:64:A0:3C:8F:83:1A:10:37:27:5E:68 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: 0208 Signing time: Sun 15 Nov 2026 03:22:55 +0000 Manifest this update: Sun 15 Nov 2026 03:22:54 +0000 Manifest next update: Sun 22 Nov 2026 03:22:54 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: 5BUm3pQF5eDqnYcQ/UMy7KjXfGUmZkcjlGvMdjnl4Jo=) 2: 3DC76C6280F411F18C41EDA965A30FBC.roa (hash: 0oeZmq/i87Ga6txSFdxJgRIePyIHiVNn2wV3/lW+EFA=) 3: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=) 4: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: Nov 15 03:22:54 2026 GMT Not After : Nov 22 03:22:54 2026 GMT Subject: CN=6af9258f-ec59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:04:99:00:63:94:68:6c:04:96:e6:10:e3: 62:73:de:f5:e1:ec:f8:42:9e:75:3b:10:9e:62:0f: 1a:3c:70:b2:82:b3:13:c7:cb:d4:b7:54:4a:50:8a: 90:60:a3:6f:a3:54:31:42:79:7e:ad:99:32:e8:5f: 4f:b3:40:a5:63:be:c3:1b:eb:4a:52:58:ee:b5:d3: 77:25:96:ff:c5:4c:5e:79:ed:23:f6:53:ea:cf:da: 60:8c:43:8b:2f:8a:57:b2:a5:d0:fa:cd:f2:e1:71: ee:08:55:38:6f:13:ef:ef:82:b1:cd:b1:3e:c0:6a: ab:b1:83:02:b2:5d:ce:ed:78:36:67:34:a0:e2:21: 74:6a:ea:74:8e:de:21:ff:6b:37:a4:f0:d2:6b:76: b3:d8:70:f4:ac:d6:28:b0:55:55:a0:03:31:c7:ff: 10:2f:14:d8:37:ca:4a:59:bb:e4:b7:a9:c9:f4:62: a6:ff:36:e0:12:f8:5b:a9:9e:e0:d6:bc:cf:0b:3a: 67:f2:2b:d3:27:46:01:86:80:0d:ea:c9:49:20:e8: 00:f7:b3:4c:f3:59:74:3c:86:ba:a8:ae:8b:0d:7f: 9c:64:64:65:1f:f4:70:aa:74:77:45:0c:36:b3:c0: 38:9b:69:ee:12:f2:ce:3f:b3:f3:4f:f5:7c:f0:b4: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:E3:D9:1B:F2:94:39:47:64:A0:3C:8F:83:1A:10:37:27:5E:68 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:01:e5:c4:00:9b:2c:5f:3f:fb:f3:08:23:91:61:f7:85:9e: 69:d9:91:79:34:c0:de:ff:59:06:6a:1d:82:28:02:45:a2:2a: 16:67:5c:92:01:55:97:9a:eb:aa:fe:c8:48:d4:d9:b2:0f:83: ed:8c:fc:84:49:ea:ea:76:15:3f:6f:a4:8a:b2:f3:a7:4f:1a: 55:9d:49:f5:8c:e3:55:74:6d:9c:1f:20:35:82:78:c2:87:2a: 27:ac:25:7d:95:f7:38:0f:c8:58:67:fa:f1:ad:89:a7:4f:9a: 28:77:3b:86:ee:a0:6c:be:17:10:a9:c2:89:4b:38:70:a6:ee: a9:42:0d:ff:19:59:f9:4f:f9:f3:b7:9f:da:61:ad:6a:2e:f6: 77:1e:60:23:f1:0d:00:bb:73:79:c4:da:45:0d:e8:88:0a:cf: 39:53:af:2d:38:77:14:eb:1e:a3:bb:8b:7f:93:e2:84:59:40: 75:27:17:4a:3a:54:7b:e7:84:8c:fb:29:cb:ca:d5:b7:95:80: 1c:38:70:cd:05:d5:dd:46:ce:1d:86:03:58:14:cb:40:8c:25: 8b:3e:5c:01:8a:79:13:3b:7f:15:c9:fa:1e:d8:e6:89:10:de: 45:6e:8f:b5:de:de:9c:21:01:4e:51:be:7c:23:18:69:0e:73: 73:db:92:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjYxMTE1MDMyMjU0WhcNMjYxMTIyMDMyMjU0WjAYMRYwFAYD VQQDEw02YWY5MjU4Zi1lYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWwEmQBjlGhsBJbmEONic9714ez4Qp51OxCeYg8aPHCygrMTx8vUt1RKUIqQ YKNvo1QxQnl+rZky6F9Ps0ClY77DG+tKUljutdN3JZb/xUxeee0j9lPqz9pgjEOL L4pXsqXQ+s3y4XHuCFU4bxPv74KxzbE+wGqrsYMCsl3O7Xg2ZzSg4iF0aup0jt4h /2s3pPDSa3az2HD0rNYosFVVoAMxx/8QLxTYN8pKWbvkt6nJ9GKm/zbgEvhbqZ7g 1rzPCzpn8ivTJ0YBhoAN6slJIOgA97NM81l0PIa6qK6LDX+cZGRlH/RwqnR3RQw2 s8A4m2nuEvLOP7PzT/V88LQCKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNT/49kb 8pQ5R2SgPI+DGhA3J15oMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgHlxACbLF8/+/MII5Fh94WeadmReTTA3v9ZBmodgigCRaIqFmdckgFVl5rr qv7ISNTZsg+D7Yz8hEnq6nYVP2+kirLzp08aVZ1J9YzjVXRtnB8gNYJ4wocqJ6wl fZX3OA/IWGf68a2Jp0+aKHc7hu6gbL4XEKnCiUs4cKbuqUIN/xlZ+U/587ef2mGt ai72dx5gI/ENALtzecTaRQ3oiArPOVOvLTh3FOseo7uLf5PihFlAdScXSjpUe+eE jPspy8rVt5WAHDhwzQXV3UbOHYYDWBTLQIwliz5cAYp5Ezt/Fcn6HtjmiRDeRW6P td7enCEBTlG+fCMYaQ5zc9uS0w== -----END CERTIFICATE-----Generated at Sun Nov 15 09:32:43 2026 by rpki-client