$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: gV8Ph91mhU33Z78AuEipG6bGeMeEty1SAhuspAA1Tew= Subject key identifier: 28:88:97:28:E1:E5:66:D2:73:83:C8:1C:4A:B2:B9:5C:8E:B0:57:BE Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 08F8 Signing time: Sat 14 Nov 2026 20:14:17 +0000 Manifest this update: Sat 14 Nov 2026 20:14:17 +0000 Manifest next update: Sat 21 Nov 2026 20:14:17 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: ZqD85RI5NcVKTWI8P8mfH5lSvwhLAFZZ7dOHMAA02b4=) 2: 178784EC859F11F1AD78299558A30FBC.roa (hash: pSLeoZ7t5PETcNXLPsF3R6tgE6Cd+D9jlWqlvxqJfWA=) 3: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: RUPU3UZyuNqsnZUGAWSji1S8J4XrHxG6gKkU4Fsvigc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Nov 14 20:14:17 2026 GMT Not After : Nov 21 20:14:17 2026 GMT Subject: CN=6af8c119-a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:ba:43:80:c1:7e:02:72:20:c7:23:e0:d5: b8:84:78:08:eb:1f:63:4b:18:df:b6:9e:bb:19:09: 1a:84:ea:ec:76:64:05:15:41:07:6a:cc:ea:58:6c: 8c:d7:df:5e:73:8a:95:0e:ce:9c:ac:05:e7:99:1f: a6:78:f9:8b:56:3d:f0:d4:37:fd:a6:16:a3:c0:f4: a2:cf:40:9e:fe:ab:e1:20:56:77:c5:c4:bc:cf:2b: f8:c1:f0:34:c5:9a:f8:8f:e5:34:61:67:4d:68:e5: 38:ba:b7:10:04:19:a0:e0:d0:be:18:e7:34:c6:97: bd:53:0c:d2:b9:99:c0:f9:94:a6:bf:d3:8c:59:b5: 1a:02:c0:f5:39:b5:61:86:31:91:88:51:46:41:f8: f2:0e:c0:7d:db:9c:df:cb:8e:4d:27:ff:02:f8:cf: 43:b8:8c:8c:f1:a3:80:06:94:b1:39:f0:79:25:95: d4:86:6c:6c:02:e3:c4:99:30:7a:1d:a7:4f:2c:cf: 26:77:36:f4:ab:27:9d:e8:f5:cd:d1:0a:96:65:a8: 4b:fe:df:7c:96:34:03:0b:82:58:ef:c7:be:f3:09: 98:1b:f3:8b:68:dd:96:65:a9:7c:08:7c:31:86:5d: fc:78:c3:bc:29:e0:62:70:45:f2:cc:47:0e:ca:04: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:88:97:28:E1:E5:66:D2:73:83:C8:1C:4A:B2:B9:5C:8E:B0:57:BE X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:29:de:d2:70:50:bf:20:e5:a0:c7:d5:06:7d:60:a4:f4:8b: 38:57:c6:73:97:46:6a:d4:67:eb:b9:32:db:8d:06:26:3d:71: ea:dd:9a:3e:df:c0:e4:0d:7b:0a:9b:25:4c:ba:8a:ed:a2:0b: a8:19:9c:42:24:f4:3e:72:d4:3f:df:72:6e:18:af:f0:8a:9a: 14:8d:4e:fb:b4:9b:87:97:54:d7:78:58:cd:ea:fb:c0:8e:87: ae:6f:ca:44:10:ae:75:dd:27:5b:06:f9:2f:e9:1e:6c:ee:f6: 73:0f:ed:7f:b4:90:ea:c7:f9:ff:56:dc:95:5a:7b:14:32:02: af:a9:31:97:d3:92:5d:96:ec:3c:f8:07:f8:34:cd:f9:1f:32: f6:00:45:53:7f:c5:35:b2:a9:e1:ea:a2:0c:a4:5b:0c:ac:4d: d7:10:80:9a:2e:8b:67:c2:3d:86:06:4c:90:19:a6:79:5f:5d: 67:f8:76:23:55:1f:b1:23:db:12:8b:f7:c5:c1:8a:0e:d5:9b: 55:5d:6e:bc:18:81:36:f0:c8:6d:fc:5d:9d:6a:b0:e9:6e:09: 4f:de:b0:16:cf:1d:86:6c:4e:89:be:a5:5b:b1:ce:19:8b:9e: 97:7b:9c:05:58:c4:b4:a1:c4:59:62:3f:9e:75:d5:35:07:c9: d3:c6:8f:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjYxMTE0MjAxNDE3WhcNMjYxMTIxMjAxNDE3WjAYMRYwFAYD VQQDEw02YWY4YzExOS1hNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSy6Q4DBfgJyIMcj4NW4hHgI6x9jSxjftp67GQkahOrsdmQFFUEHaszqWGyM 199ec4qVDs6crAXnmR+mePmLVj3w1Df9phajwPSiz0Ce/qvhIFZ3xcS8zyv4wfA0 xZr4j+U0YWdNaOU4urcQBBmg4NC+GOc0xpe9UwzSuZnA+ZSmv9OMWbUaAsD1ObVh hjGRiFFGQfjyDsB925zfy45NJ/8C+M9DuIyM8aOABpSxOfB5JZXUhmxsAuPEmTB6 HadPLM8mdzb0qyed6PXN0QqWZahL/t98ljQDC4JY78e+8wmYG/OLaN2WZal8CHwx hl38eMO8KeBicEXyzEcOygSVOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiIlyjh 5WbSc4PIHEqyuVyOsFe+MB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcine0nBQvyDloMfVBn1gpPSLOFfGc5dGatRn67ky240GJj1x6t2aPt/A5A17 CpslTLqK7aILqBmcQiT0PnLUP99ybhiv8IqaFI1O+7Sbh5dU13hYzer7wI6Hrm/K RBCudd0nWwb5L+kebO72cw/tf7SQ6sf5/1bclVp7FDICr6kxl9OSXZbsPPgH+DTN +R8y9gBFU3/FNbKp4eqiDKRbDKxN1xCAmi6LZ8I9hgZMkBmmeV9dZ/h2I1UfsSPb Eov3xcGKDtWbVV1uvBiBNvDIbfxdnWqw6W4JT96wFs8dhmxOib6lW7HOGYuel3uc BVjEtKHEWWI/nnXVNQfJ08aPSg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:41:05 2026 by rpki-client