$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: UivbN+Q5pDjfYDWlPDT6Z/9csEtMhaJkeCbLX+Ilt7k= Subject key identifier: 25:22:64:1F:CF:5D:D1:EF:D6:68:BF:07:0F:86:A4:DF:84:ED:B6:6E Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 029E Signing time: Fri 13 Nov 2026 01:45:22 +0000 Manifest this update: Fri 13 Nov 2026 01:45:21 +0000 Manifest next update: Fri 20 Nov 2026 01:45:21 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: hLEbYkCKNZTvvmvXqilMOOh922jeTCeVyybhttGKebc=) 2: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: d0Rr7joI7OYQem1FAKmNxRKDgMm1vcE/6DalBHVBhpU=) 3: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: KB9SpG8pT6AW9Fyy1aPNJtzXn0AoEDbc9MkTLK1ezqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 01:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Nov 13 01:45:21 2026 GMT Not After : Nov 20 01:45:21 2026 GMT Subject: CN=6af66bb2-fa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:2f:1e:6d:1c:5f:e4:04:fa:7d:9c:9c:0c: 1c:6b:83:a0:44:45:5e:19:9e:fc:3c:bf:97:22:8d: 57:5a:5d:27:e8:f2:41:f5:cc:4b:cb:f6:70:60:9e: 38:0c:6d:f9:88:60:28:51:69:72:ed:68:39:d0:d6: 83:47:a8:c4:86:fa:34:6f:cd:5d:c8:a4:fc:9f:31: af:72:66:86:16:81:cd:88:98:c7:cd:d8:14:f9:b9: 85:44:79:d0:9c:f0:32:d8:43:33:55:43:7c:67:e6: f4:77:4b:b1:4e:99:48:62:7c:13:b4:ce:d4:63:fd: 5d:f8:b6:cb:9d:59:e8:5c:ff:00:dc:3f:b8:f4:c1: 86:de:a2:f0:18:da:ce:3f:e6:fa:bf:12:d9:cc:1d: 8c:a7:8d:92:df:46:71:ef:a3:23:a0:4e:f2:88:ac: 99:24:42:05:06:a5:bc:8f:57:ee:98:48:60:4e:80: c8:cf:0d:00:c0:9a:44:fd:8b:9f:35:c0:b6:cb:79: ab:8b:5a:cf:57:fd:06:f4:ca:52:01:c3:df:7e:38: ec:92:87:c0:7c:73:f8:f9:35:11:d6:b2:85:0d:a1: 83:01:75:91:70:16:42:40:7a:34:89:85:cc:37:2c: 7b:84:c7:1c:88:ed:60:fd:f8:1a:30:98:b7:93:3a: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:64:1F:CF:5D:D1:EF:D6:68:BF:07:0F:86:A4:DF:84:ED:B6:6E X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:62:f1:dc:82:63:84:db:77:8b:16:2d:f3:ec:a2:2c:96:a5: a7:7f:ea:34:05:64:f3:49:57:f8:ad:2f:a4:de:13:45:e2:05: 8c:87:4f:93:72:cf:cb:01:53:87:ed:3b:a3:db:e4:99:f8:81: 9d:ec:98:16:29:53:6e:6c:43:70:25:1b:92:4a:d3:40:00:4d: 33:b2:39:d5:01:cf:1a:51:35:e3:20:53:a8:0a:a9:98:bf:4c: c5:50:25:d8:4b:3d:17:14:4b:a2:96:f1:d0:63:ea:9a:4a:2d: 5b:80:89:b2:64:01:17:c0:d5:ed:06:2f:dc:a1:57:47:78:26: 61:70:51:74:c8:00:4f:55:30:69:b4:63:eb:2c:d1:5f:93:0f: 5d:0f:0b:78:d5:25:86:ef:9e:72:54:d7:af:6c:8b:09:c4:a4: 8f:97:c7:2c:06:cb:53:a3:61:fd:01:b9:8d:05:d7:0d:b6:a3: 43:48:00:91:f4:d2:cf:72:07:54:d0:8b:9e:e8:a7:15:8a:e0: e3:9c:b3:50:74:dd:bc:d2:49:e6:2b:09:3d:cc:1f:ef:bb:f3: a3:24:36:28:5a:94:34:d9:df:fe:b9:fc:74:81:09:c1:cd:9d: 73:be:34:29:62:ea:ab:25:89:7c:62:d8:04:dc:10:f9:8c:e6: 18:59:4c:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjYxMTEzMDE0NTIxWhcNMjYxMTIwMDE0NTIxWjAYMRYwFAYD VQQDEw02YWY2NmJiMi1mYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZYvHm0cX+QE+n2cnAwca4OgREVeGZ78PL+XIo1XWl0n6PJB9cxLy/ZwYJ44 DG35iGAoUWly7Wg50NaDR6jEhvo0b81dyKT8nzGvcmaGFoHNiJjHzdgU+bmFRHnQ nPAy2EMzVUN8Z+b0d0uxTplIYnwTtM7UY/1d+LbLnVnoXP8A3D+49MGG3qLwGNrO P+b6vxLZzB2Mp42S30Zx76MjoE7yiKyZJEIFBqW8j1fumEhgToDIzw0AwJpE/Yuf NcC2y3mri1rPV/0G9MpSAcPffjjskofAfHP4+TUR1rKFDaGDAXWRcBZCQHo0iYXM Nyx7hMcciO1g/fgaMJi3kzqZRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUiZB/P XdHv1mi/Bw+GpN+E7bZuMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAimLx3IJjhNt3ixYt8+yiLJalp3/qNAVk80lX+K0vpN4TReIFjIdPk3LPywFT h+07o9vkmfiBneyYFilTbmxDcCUbkkrTQABNM7I51QHPGlE14yBTqAqpmL9MxVAl 2Es9FxRLopbx0GPqmkotW4CJsmQBF8DV7QYv3KFXR3gmYXBRdMgAT1UwabRj6yzR X5MPXQ8LeNUlhu+eclTXr2yLCcSkj5fHLAbLU6Nh/QG5jQXXDbajQ0gAkfTSz3IH VNCLnuinFYrg45yzUHTdvNJJ5isJPcwf77vzoyQ2KFqUNNnf/rn8dIEJwc2dc740 KWLqqyWJfGLYBNwQ+YzmGFlMFw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:53:17 2026 by rpki-client