$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: bDO8D4e7MDXW2NeGIrQ+oa5mz3DjScQEmtCERjQqsZI= Subject key identifier: EF:E2:EF:25:A7:2B:55:07:0C:86:97:E4:B2:AF:C6:DE:B4:A5:60:E5 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 155F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 152A Signing time: Sat 14 Nov 2026 16:44:47 +0000 Manifest this update: Sat 14 Nov 2026 16:44:46 +0000 Manifest next update: Sat 21 Nov 2026 16:44:46 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: ikAsxUtfqaDzGXSHTtVn8yldo706nbk+ukc2TgIPwLI=) 2: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: vb+PgKr3CsY3jfH+MFyFgbnwnwtfBrgXKUjCdpIDvJ8=) 4: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=) 5: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: NqFw3mgMpkOvoVPWGjo2SvS7iIeakeWssWWni91l9EM=) 6: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=) 7: 983A5536450611F093EC3A65C4F9AE02.roa (hash: rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=) 8: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: jZuSh+WR7sCoYoKT4uhJCvNVaW6YZAz1ccOdtL1PD1o=) 9: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5471 (0x155f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Nov 14 16:44:46 2026 GMT Not After : Nov 21 16:44:46 2026 GMT Subject: CN=6af88fff-a749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:6f:84:18:82:6f:ee:22:28:aa:52:35:33: 81:65:11:12:09:27:04:cb:32:ab:d8:1b:f5:44:4b: 39:33:df:5a:72:bc:6f:a8:1d:4a:9a:bb:cf:2b:02: 6b:c1:46:88:15:46:77:8d:7b:13:d9:a9:14:43:4d: 24:76:c2:60:65:5b:07:0d:dc:43:dd:3b:c8:77:85: 6c:d7:e5:50:e3:ca:5d:3e:60:4b:1a:b6:64:9a:2a: b1:b1:1f:b8:af:8e:88:74:1d:be:2a:6d:cc:68:95: 9a:90:10:6f:72:04:08:d4:b0:8b:b4:ef:84:90:78: 65:8c:76:7f:87:94:b7:4d:47:9f:ab:9f:eb:d2:ef: 7a:5f:ac:3e:55:51:d2:be:54:7c:f1:e4:c9:a7:df: 4a:fb:5e:9a:e4:71:7e:ba:cd:6e:ae:3a:34:6d:fe: 1b:93:33:4a:fa:d9:c1:88:cb:d4:01:57:0a:28:3c: cb:f4:d2:78:2d:61:50:0d:c1:db:0c:71:c6:db:79: bc:ce:65:5a:d2:66:8f:1a:16:18:1c:b8:0a:21:ef: e9:36:96:8b:44:7d:aa:37:fe:72:96:79:a5:06:6e: 06:62:11:66:d1:5f:e2:73:ed:4a:15:7b:de:7a:b2: d2:87:8d:20:c1:0b:9d:3f:5d:d4:69:8b:0e:45:98: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E2:EF:25:A7:2B:55:07:0C:86:97:E4:B2:AF:C6:DE:B4:A5:60:E5 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d3:46:d0:46:03:77:23:f7:57:ed:de:78:57:ca:3b:6d:15: d0:7f:6b:50:4c:6e:86:45:34:03:1c:d7:85:ae:db:72:2a:a2: a8:c2:47:d9:84:f8:b2:89:17:87:8d:78:b8:61:b6:53:80:16: db:15:59:b3:6e:e2:97:6a:7d:67:a8:23:54:12:c6:2e:bf:d7: d1:d1:c8:47:06:5c:51:df:53:2b:79:6a:d2:d4:73:40:c8:3e: 44:e1:f3:cd:97:0f:4d:c0:8d:74:02:9a:63:c4:9c:1a:ec:1e: c3:93:be:60:01:24:ee:62:17:b1:57:8e:49:33:7d:ab:19:ba: 04:20:61:39:6d:b4:d6:dc:4b:ee:5a:f7:a7:2d:4c:d4:f4:a3: c9:b1:95:21:1e:4b:e0:c5:b5:d5:53:b5:08:a7:53:f6:55:e2: 01:4d:64:f2:01:4a:61:e6:e6:38:cb:7b:9b:47:d3:ec:c2:2d: d2:ee:96:da:84:2a:7c:d7:93:30:13:26:ab:8a:db:55:50:14: e6:95:3d:c7:4f:37:ac:c8:f5:8d:9f:88:e6:5e:09:db:d3:d1: 45:57:96:d3:01:43:55:b4:d3:cc:fd:53:b5:9b:25:5e:ee:4d: 10:e0:aa:1b:07:2d:ef:9f:67:8c:9d:a3:92:74:b9:e9:b8:79: 13:f0:04:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYxMTE0MTY0NDQ2WhcNMjYxMTIxMTY0NDQ2WjAYMRYwFAYD VQQDEw02YWY4OGZmZi1hNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSFvhBiCb+4iKKpSNTOBZRESCScEyzKr2Bv1REs5M99acrxvqB1KmrvPKwJr wUaIFUZ3jXsT2akUQ00kdsJgZVsHDdxD3TvId4Vs1+VQ48pdPmBLGrZkmiqxsR+4 r46IdB2+Km3MaJWakBBvcgQI1LCLtO+EkHhljHZ/h5S3TUefq5/r0u96X6w+VVHS vlR88eTJp99K+16a5HF+us1urjo0bf4bkzNK+tnBiMvUAVcKKDzL9NJ4LWFQDcHb DHHG23m8zmVa0maPGhYYHLgKIe/pNpaLRH2qN/5ylnmlBm4GYhFm0V/ic+1KFXve erLSh40gwQudP13UaYsORZhkGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/i7yWn K1UHDIaX5LKvxt60pWDlMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK9NG0EYDdyP3V+3eeFfKO20V0H9rUExuhkU0AxzXha7bciqiqMJH2YT4sokX h414uGG2U4AW2xVZs27il2p9Z6gjVBLGLr/X0dHIRwZcUd9TK3lq0tRzQMg+ROHz zZcPTcCNdAKaY8ScGuwew5O+YAEk7mIXsVeOSTN9qxm6BCBhOW201txL7lr3py1M 1PSjybGVIR5L4MW11VO1CKdT9lXiAU1k8gFKYebmOMt7m0fT7MIt0u6W2oQqfNeT MBMmq4rbVVAU5pU9x083rMj1jZ+I5l4J29PRRVeW0wFDVbTTzP1TtZslXu5NEOCq Gwct759njJ2jknS56bh5E/AEBQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:54:21 2026 by rpki-client