$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: 1mlnH/aJCkY0FMIBa9mC/r4KGXREIZ4rYgbxw1RNZQg= Subject key identifier: 44:F6:73:6B:13:1D:1C:B6:D2:85:DB:94:46:57:67:B7:82:82:E2:60 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 07E8 Signing time: Sat 14 Nov 2026 21:12:01 +0000 Manifest this update: Sat 14 Nov 2026 21:12:01 +0000 Manifest next update: Sat 21 Nov 2026 21:12:01 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: 27Vkzgo60t0u+uLJoIFe04yHYe/cjKQUmqaAWj+Dbls=) 2: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: zXVV6Fq9+Ev8ZgtdPsPKQEYkkJ0zf+qFsMmrOUVqUuU=) 3: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: RiHTyH8/u4E6R/xXsKR9Dt/X35Ipr5A7B/T2xRmCXs4=) 4: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: 2sdJJ6iJjkZc6Wd4X6PmhZwhxLJKNYxKwduCcx3eWls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Nov 14 21:12:01 2026 GMT Not After : Nov 21 21:12:01 2026 GMT Subject: CN=6af8cea1-222c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8a:6e:62:b6:27:38:2f:1d:64:9f:aa:d7:57: 8a:49:86:f4:22:eb:3a:aa:8a:f8:11:66:e9:e8:cf: 48:6f:90:b3:22:48:0f:68:e4:68:bb:59:d9:3b:0d: 64:7e:48:4f:eb:a5:0d:c1:ba:fb:bd:c5:b5:b2:03: 52:32:89:51:87:4a:e4:69:c5:fb:4e:a3:7e:18:96: c3:ab:f1:86:a7:67:e0:09:52:7f:f7:3d:2d:40:4a: 3d:06:49:83:11:6c:07:8b:0c:58:03:aa:11:4f:d3: 50:d8:0b:aa:e2:8b:73:0c:29:a0:32:cc:d3:df:8b: 33:c8:fb:35:6b:53:c5:bb:66:1d:48:ab:ee:29:7c: 0f:fb:0f:50:32:77:72:a7:10:3b:50:30:5c:33:55: a9:09:21:29:1b:46:cf:c9:0f:c3:52:ef:3b:37:8f: 46:8a:c3:73:67:f1:60:3d:71:20:60:68:12:53:71: d6:5c:1a:11:9e:fe:10:c4:79:86:a9:f7:35:7d:98: 0c:dd:3f:bd:cd:4c:25:d6:65:17:85:cb:ac:82:a3: b3:d0:9a:eb:ae:e2:96:02:de:c1:6f:c8:eb:db:bd: 13:d6:c5:1a:0a:34:e4:96:31:6f:b5:96:e9:ea:6d: 84:02:d6:80:5a:d0:79:69:d6:06:fe:be:10:ee:d1: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F6:73:6B:13:1D:1C:B6:D2:85:DB:94:46:57:67:B7:82:82:E2:60 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ec:3e:5b:52:73:dc:1c:55:42:e0:de:fc:3c:51:80:3a:d1: f2:6c:fa:e9:45:0a:f6:20:c4:b0:14:df:61:a6:4e:55:1a:f1: 4e:7b:1c:fd:92:ba:d1:5b:22:af:00:42:31:f9:7f:b5:bf:ea: 3f:4b:00:73:9a:d3:bc:83:53:03:26:e9:91:88:fa:16:95:0d: e1:85:4a:13:b3:52:97:df:3a:c2:52:02:8f:f5:15:c3:df:4f: a2:a5:37:23:1c:c7:3b:9d:e7:f8:1a:c2:00:e4:ee:3f:db:2c: e9:bb:b0:3e:c1:92:cc:4e:87:a8:9c:fb:d7:50:77:45:11:c6: 24:b1:28:02:8d:89:76:29:ea:fe:81:19:f2:f5:ad:d3:48:0e: b7:d9:32:0f:91:23:94:8d:4c:44:24:2a:d0:ee:df:95:36:15: d8:03:1f:0b:b4:a6:f0:7b:75:ec:dd:57:17:0f:54:bd:2f:b4: 5d:e5:82:1b:c8:ee:08:01:79:f5:86:53:73:f6:5f:a1:01:45: 83:23:49:aa:d6:fb:31:70:c0:3c:3e:a6:36:cf:25:59:92:d4: f4:e4:dc:74:5b:f4:c0:57:ac:d5:c1:5f:97:12:13:20:78:2b: 63:33:f4:23:87:ad:a9:24:18:30:70:60:92:c8:ba:1a:76:e0: 57:8b:48:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYxMTE0MjExMjAxWhcNMjYxMTIxMjExMjAxWjAYMRYwFAYD VQQDEw02YWY4Y2VhMS0yMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YpuYrYnOC8dZJ+q11eKSYb0Ius6qor4EWbp6M9Ib5CzIkgPaORou1nZOw1k fkhP66UNwbr7vcW1sgNSMolRh0rkacX7TqN+GJbDq/GGp2fgCVJ/9z0tQEo9BkmD EWwHiwxYA6oRT9NQ2Auq4otzDCmgMszT34szyPs1a1PFu2YdSKvuKXwP+w9QMndy pxA7UDBcM1WpCSEpG0bPyQ/DUu87N49GisNzZ/FgPXEgYGgSU3HWXBoRnv4QxHmG qfc1fZgM3T+9zUwl1mUXhcusgqOz0JrrruKWAt7Bb8jr270T1sUaCjTkljFvtZbp 6m2EAtaAWtB5adYG/r4Q7tGkPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFET2c2sT HRy20oXblEZXZ7eCguJgMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq+w+W1Jz3BxVQuDe/DxRgDrR8mz66UUK9iDEsBTfYaZOVRrxTnsc/ZK60Vsi rwBCMfl/tb/qP0sAc5rTvINTAybpkYj6FpUN4YVKE7NSl986wlICj/UVw99PoqU3 IxzHO53n+BrCAOTuP9ss6buwPsGSzE6HqJz711B3RRHGJLEoAo2Jdinq/oEZ8vWt 00gOt9kyD5EjlI1MRCQq0O7flTYV2AMfC7Sm8Ht17N1XFw9UvS+0XeWCG8juCAF5 9YZTc/ZfoQFFgyNJqtb7MXDAPD6mNs8lWZLU9OTcdFv0wFes1cFflxITIHgrYzP0 I4etqSQYMHBgksi6GnbgV4tI1g== -----END CERTIFICATE-----Generated at Sun Nov 15 17:20:27 2026 by rpki-client