$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft File: cGjaz2pbXiZfvAzluaSV8Im24FA.mft (raw, json) Hash identifier: fKmdyP2Frh3i9xQXcwIf15kdCXbmppjL//pwAR9sGl4= Subject key identifier: BC:0C:BC:1E:65:7D:BA:0A:B8:8C:F2:AF:9C:2F:E8:33:BF:A0:7E:7B Authority key identifier: 70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50 Certificate issuer: /CN=A914DB80/serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft Manifest number: 19 Signing time: Fri 13 Nov 2026 09:12:38 +0000 Manifest this update: Fri 13 Nov 2026 09:12:37 +0000 Manifest next update: Fri 20 Nov 2026 09:12:37 +0000 Files and hashes: 1: cGjaz2pbXiZfvAzluaSV8Im24FA.crl (hash: hU+eiaAXSxEhmf9Ym03RMYAB6LGo3lVT4RkVGY6bjKE=) 2: LxI9tON6NNjn3bVg0Httl1Wx1SU.asa (hash: qpAq5HHyNv1pYsQKGuoyPlcsxFsA95bB3IWQEzst+8Y=) 3: D2996894BD3111F1A57D50EB5111F970.roa (hash: GRfKnOOMPFxAQIyw+SLp7bii3WJZvJN70Pmrrt/VNpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 09:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB80, serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050 Validity Not Before: Nov 13 09:12:37 2026 GMT Not After : Nov 20 09:12:37 2026 GMT Subject: CN=6af6d486-7dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:24:a3:97:3e:66:55:96:79:f7:b4:c4:ea: fc:a3:c2:76:b1:6e:bc:03:42:ce:3e:7c:0f:00:9a: bb:51:d0:20:9c:58:47:46:71:65:c2:5b:0b:1b:6e: 37:07:9a:01:82:df:38:48:c0:43:c1:f6:52:e8:c0: 55:ff:f9:b1:83:3c:db:17:64:78:d8:7c:8b:ed:3b: 80:91:1c:c5:42:1e:ab:5a:41:b0:e1:dd:fd:ad:cf: 7f:2c:e8:36:94:77:cc:e7:a2:70:1f:c6:15:33:f4: db:81:6f:ba:f1:a7:e1:ce:5c:aa:74:b6:a4:b0:74: 36:ef:21:f7:f3:7c:9a:a1:66:f3:d3:68:9c:9c:e0: c0:87:4c:39:7f:95:e5:28:f1:22:10:63:ba:67:f5: bc:ad:d4:22:3f:18:f8:cf:80:03:ce:bc:bb:23:d7: fd:2e:5b:73:3a:62:72:3a:b8:4e:be:61:3f:b7:84: 9c:fd:d4:d6:97:5d:49:3c:67:d1:1e:88:7f:84:46: 8b:b6:9f:17:27:e0:86:37:8c:72:5b:b3:80:45:84: ef:73:a7:10:94:0f:57:9e:b6:75:c4:62:5d:f6:3c: 9a:bc:38:f9:61:44:64:fb:fe:3e:ed:e7:78:90:75: 6b:eb:ce:ee:bf:8d:75:55:5b:77:16:bb:38:d7:70: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0C:BC:1E:65:7D:BA:0A:B8:8C:F2:AF:9C:2F:E8:33:BF:A0:7E:7B X509v3 Authority Key Identifier: keyid:70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:29:e6:d5:9c:a6:80:f0:98:ec:37:4e:95:a1:77:e6:c1:fd: 0f:dd:db:4d:bd:ef:3f:ae:5c:5b:cb:36:0a:f7:19:6c:89:67: 6f:b9:f1:f0:ad:22:1c:90:3b:a0:f0:4a:16:1b:7e:ab:dd:65: 2a:cc:ee:32:04:2d:23:c8:89:28:8f:d7:32:55:30:cf:85:bb: b3:49:9f:9d:c5:be:86:a8:09:1f:70:e9:75:3b:41:1a:fe:47: 7b:a8:19:cd:86:5e:8c:40:96:94:f0:64:cc:35:06:c5:47:e6: 6c:f0:de:1c:39:17:17:0c:e2:9a:d5:ef:54:18:c1:48:9b:dd: 2d:1d:ce:ab:7b:be:73:66:68:cb:dc:72:a8:38:88:53:ce:41: 75:1d:1c:d1:74:68:53:be:a2:b1:f5:9e:86:64:b6:7e:88:74: 42:19:af:79:b9:19:b7:88:fb:7b:d6:20:54:f9:8d:61:42:88: 54:bc:ca:7f:69:a8:39:4d:c7:4d:fb:b9:c1:3c:ca:61:4e:43: 54:dd:94:cb:ed:b8:c4:71:c7:28:2d:c4:2c:09:58:ba:68:f7: c4:a9:38:95:ee:32:5a:c4:5c:34:7c:67:51:f8:08:cd:04:8e: 1c:1b:59:df:e0:e7:08:2b:1e:d3:bd:2f:b1:59:0f:cf:8d:34: e1:2d:59:89 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REI4MDExMC8GA1UEBRMoNzA2OERBQ0Y2QTVCNUUyNjVGQkMwQ0U1QjlBNDk1RjA4 OUI2RTA1MDAeFw0yNjExMTMwOTEyMzdaFw0yNjExMjAwOTEyMzdaMBgxFjAUBgNV BAMTDTZhZjZkNDg2LTdkZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTdCSjlz5mVZZ597TE6vyjwnaxbrwDQs4+fA8AmrtR0CCcWEdGcWXCWwsbbjcH mgGC3zhIwEPB9lLowFX/+bGDPNsXZHjYfIvtO4CRHMVCHqtaQbDh3f2tz38s6DaU d8znonAfxhUz9NuBb7rxp+HOXKp0tqSwdDbvIffzfJqhZvPTaJyc4MCHTDl/leUo 8SIQY7pn9byt1CI/GPjPgAPOvLsj1/0uW3M6YnI6uE6+YT+3hJz91NaXXUk8Z9Ee iH+ERou2nxcn4IY3jHJbs4BFhO9zpxCUD1eetnXEYl32PJq8OPlhRGT7/j7t53iQ dWvrzu6/jXVVW3cWuzjXcCATAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvAy8HmV9 ugq4jPKvnC/oM7+gfnswHwYDVR0jBBgwFoAUcGjaz2pbXiZfvAzluaSV8Im24FAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQjgwLzFGODkyRDQ0QkQz MDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGlaZnZBemx1YVNWOEltMjRG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0dqYXoycGJYaVpmdkF6bHVhU1Y4SW0yNEZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QjgwLzFGODkyRDQ0QkQzMDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGla ZnZBemx1YVNWOEltMjRGQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0KebVnKaA8JjsN06VoXfmwf0P3dtNve8/rlxbyzYK9xlsiWdvufHwrSIckDug 8EoWG36r3WUqzO4yBC0jyIkoj9cyVTDPhbuzSZ+dxb6GqAkfcOl1O0Ea/kd7qBnN hl6MQJaU8GTMNQbFR+Zs8N4cORcXDOKa1e9UGMFIm90tHc6re75zZmjL3HKoOIhT zkF1HRzRdGhTvqKx9Z6GZLZ+iHRCGa95uRm3iPt71iBU+Y1hQohUvMp/aag5TcdN +7nBPMphTkNU3ZTL7bjEcccoLcQsCVi6aPfEqTiV7jJaxFw0fGdR+AjNBI4cG1nf 4OcIKx7TvS+xWQ/PjTThLVmJ -----END CERTIFICATE-----Generated at Sat Nov 14 20:57:10 2026 by rpki-client