$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: +0/LadzWXZWwdYWJoMx2pBuSYG8i7/0HnMRjaT86Ycs= Subject key identifier: 28:26:C7:F0:66:74:3E:31:9E:A8:61:BB:DF:73:1E:F1:7D:C2:79:27 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 04A0 Signing time: Sat 14 Nov 2026 23:45:45 +0000 Manifest this update: Sat 14 Nov 2026 23:45:44 +0000 Manifest next update: Sat 21 Nov 2026 23:45:44 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: LYODKa7g6t+K26JYmBxc4hmqbvOm65p9Vtlz6Dkig7c=) 2: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) 3: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Nov 14 23:45:44 2026 GMT Not After : Nov 21 23:45:44 2026 GMT Subject: CN=6af8f2a9-d4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:78:59:97:d3:27:43:85:bb:1c:7b:3a:03: 44:ef:18:e3:5d:0e:c6:e2:29:87:8a:e0:2e:3c:b6: ad:a8:50:38:e9:da:ad:ab:74:33:5f:ea:4e:47:cc: 60:28:90:f5:88:1e:84:d2:2d:80:a5:5c:76:cc:e2: 3b:70:7c:ad:b2:1c:cb:fe:67:2d:9d:9c:c8:8a:3a: fd:0c:94:ad:14:1f:19:ae:10:c5:61:90:dc:5b:4d: 21:e4:cb:c4:61:df:88:37:21:1b:2b:a7:b2:e8:64: 17:1b:a2:03:05:58:d7:49:5a:d5:04:c3:0a:11:79: 7f:db:68:3a:9d:6e:70:86:7f:6b:37:75:03:6f:e7: eb:37:9a:bf:98:d9:71:2c:dd:a3:1f:d9:a5:41:76: 1f:4b:b8:9f:6a:84:cf:34:c2:04:c4:aa:e6:20:1b: e2:80:0d:76:5c:be:0e:8d:d5:89:06:dd:fa:41:1c: 47:f1:ce:b6:1f:c6:55:9e:82:13:5c:31:bc:14:37: a2:68:90:9a:59:f4:af:17:c1:2c:75:52:f7:6e:6b: d2:3e:08:b2:63:3a:56:51:d6:e1:95:ce:9e:1f:99: d3:88:e7:2f:70:14:9d:4a:cc:a7:59:8c:81:8f:4f: 77:56:e0:a5:38:ee:9e:37:38:d4:81:96:99:09:f3: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:C7:F0:66:74:3E:31:9E:A8:61:BB:DF:73:1E:F1:7D:C2:79:27 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7d:c3:6a:cd:93:b8:06:9a:9d:b9:6e:40:9d:72:30:fa:d7: 44:91:63:87:31:c2:33:61:a6:72:34:7a:0e:ff:7a:d6:77:df: a3:be:03:02:b4:9e:ef:21:76:a5:72:68:23:dc:fe:75:1d:5a: 87:ce:84:9c:5a:21:20:5c:5a:d2:66:6d:8e:63:dc:0e:81:16: 9f:2d:49:72:b1:00:6b:8c:eb:48:c0:eb:29:c7:2e:32:f0:36: 4a:9d:aa:55:84:08:ca:c3:78:79:8e:38:56:43:42:01:ff:a4: 93:e7:50:84:19:6f:e6:5d:56:fb:df:db:dd:e4:16:45:c0:e9: 52:61:a6:43:a9:66:6b:8c:3d:fc:e7:ad:e0:6d:72:8e:04:a0: c5:74:8c:8b:83:ae:d1:3e:79:fc:fa:9c:ee:34:e5:1f:38:04: 90:75:a4:c6:f0:69:7b:c6:53:4b:6d:a0:ca:4c:47:6b:07:d2: b5:5f:fc:84:08:4a:8d:7f:97:42:66:c0:8d:f2:ff:67:7a:c3: 62:e6:3f:3b:a9:36:26:12:f6:d9:48:9f:94:4b:5d:cf:2e:23: 8c:ba:06:a1:f7:20:59:0c:14:c8:2f:81:72:17:5f:dc:cd:48: 0a:e3:fa:e6:bd:80:f3:7c:9c:5e:05:fa:30:52:40:6d:cb:87: 44:77:a5:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYxMTE0MjM0NTQ0WhcNMjYxMTIxMjM0NTQ0WjAYMRYwFAYD VQQDEw02YWY4ZjJhOS1kNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r94WZfTJ0OFuxx7OgNE7xjjXQ7G4imHiuAuPLatqFA46dqtq3QzX+pOR8xg KJD1iB6E0i2ApVx2zOI7cHytshzL/mctnZzIijr9DJStFB8ZrhDFYZDcW00h5MvE Yd+INyEbK6ey6GQXG6IDBVjXSVrVBMMKEXl/22g6nW5whn9rN3UDb+frN5q/mNlx LN2jH9mlQXYfS7ifaoTPNMIExKrmIBvigA12XL4OjdWJBt36QRxH8c62H8ZVnoIT XDG8FDeiaJCaWfSvF8EsdVL3bmvSPgiyYzpWUdbhlc6eH5nTiOcvcBSdSsynWYyB j093VuClOO6eNzjUgZaZCfOEPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgmx/Bm dD4xnqhhu99zHvF9wnknMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR33Das2TuAaanbluQJ1yMPrXRJFjhzHCM2GmcjR6Dv961nffo74DArSe7yF2 pXJoI9z+dR1ah86EnFohIFxa0mZtjmPcDoEWny1JcrEAa4zrSMDrKccuMvA2Sp2q VYQIysN4eY44VkNCAf+kk+dQhBlv5l1W+9/b3eQWRcDpUmGmQ6lma4w9/Oet4G1y jgSgxXSMi4Ou0T55/Pqc7jTlHzgEkHWkxvBpe8ZTS22gykxHawfStV/8hAhKjX+X QmbAjfL/Z3rDYuY/O6k2JhL22UiflEtdzy4jjLoGofcgWQwUyC+Bchdf3M1ICuP6 5r2A83ycXgX6MFJAbcuHRHel4Q== -----END CERTIFICATE-----Generated at Sun Nov 15 19:19:26 2026 by rpki-client