$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: wIFO/bmYoWieNSF6HL24RRe2kjQxeimG2ISoO4p9Q+A= Subject key identifier: 8D:78:18:EB:40:97:94:C3:53:15:BB:B2:4A:AE:E8:C1:93:11:1C:51 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 0239 Signing time: Sat 14 Nov 2026 16:40:21 +0000 Manifest this update: Sat 14 Nov 2026 16:40:20 +0000 Manifest next update: Sat 21 Nov 2026 16:40:20 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: edAX8tbOgmEE37gDSvzj4TEgr8VxYaYWzOEnIA8kmFY=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Nov 14 16:40:20 2026 GMT Not After : Nov 21 16:40:20 2026 GMT Subject: CN=6af88ef4-0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:d4:2c:da:60:e8:a7:30:a6:55:19:c4:fb: 69:28:53:22:33:ea:92:58:61:46:1e:f2:0f:2c:33: 71:4f:d2:bb:b0:cf:52:a8:74:21:c7:b1:3f:8c:19: d9:06:48:5f:c6:d9:1b:89:39:a5:a0:b8:88:32:fe: 56:f8:35:4d:7e:4e:30:f0:75:c2:72:be:f5:c0:0a: af:81:0e:a4:c5:9e:8f:5f:d0:d9:b1:9e:37:c1:a1: 7b:64:b4:1d:50:28:bf:b9:d4:a6:a7:48:29:d5:e3: 05:05:54:33:1e:49:26:0a:72:a6:72:8c:54:7a:b7: 2d:a4:8c:4d:30:25:11:e1:ca:f0:5a:ee:f2:8f:d6: 9b:44:3e:18:04:a6:20:fc:97:13:ac:7f:21:ed:4a: da:21:c6:6a:0e:cf:41:5a:1f:3d:43:2a:62:f4:d3: 28:a5:36:27:cf:cf:1c:ad:ae:18:2c:b1:4e:94:58: a5:01:28:19:57:09:6f:02:ab:e3:95:d4:08:26:6b: 4c:c1:0f:38:00:9f:95:fb:98:3b:44:44:88:f4:92: 60:e0:8b:63:94:af:64:11:c1:53:e9:7d:81:24:bc: a4:78:25:bd:47:a7:43:1e:e1:b9:f8:c5:eb:19:14: 90:0d:ae:96:ed:25:07:6b:d6:24:da:f5:13:95:6b: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:18:EB:40:97:94:C3:53:15:BB:B2:4A:AE:E8:C1:93:11:1C:51 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8e:b7:32:68:c0:8b:e2:4b:81:07:8e:04:99:99:0c:ba:3a: 93:d5:9b:66:ad:1b:33:4e:11:21:99:fe:e8:d2:6a:ce:2b:17: 99:18:13:2b:ec:ba:9c:4b:0f:80:a3:c3:bf:ed:76:fc:9d:e8: 2e:f3:81:1c:7e:e8:4e:43:2d:78:23:96:2f:96:7a:2e:81:8f: e0:32:9c:c9:19:38:37:bd:9b:70:3f:ba:8a:06:e3:e6:f1:3c: 43:97:2e:19:ad:48:36:2d:48:0c:a3:f4:49:cd:22:d2:bc:b7: 8e:7d:b5:ef:8c:b6:7c:0c:13:f8:a5:e9:51:e7:2c:42:38:3e: 1f:fd:d4:df:fb:63:d9:ef:68:1e:cb:bf:09:5f:d5:47:a6:a9: b6:3a:19:38:0d:65:a7:3e:02:ff:61:18:b3:41:55:f6:4f:cc: 8e:9d:6c:93:d8:84:6b:ca:8e:c1:95:86:62:79:c0:99:3d:2d: b4:2a:ec:4d:d2:d5:a4:41:aa:17:c8:a1:4a:1a:a6:c1:41:c7: 2f:8a:61:c2:18:42:1f:e0:98:ef:a8:46:60:2f:2c:64:72:0b: 6f:8e:0d:c9:45:84:a9:d2:3c:74:90:8e:5d:3a:ee:e4:83:cc: 9b:9e:1b:e1:35:3b:02:9d:d9:6f:56:8b:8c:aa:7e:d8:e0:3c: 81:98:bb:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjYxMTE0MTY0MDIwWhcNMjYxMTIxMTY0MDIwWjAYMRYwFAYD VQQDEw02YWY4OGVmNC0wMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0izULNpg6KcwplUZxPtpKFMiM+qSWGFGHvIPLDNxT9K7sM9SqHQhx7E/jBnZ BkhfxtkbiTmloLiIMv5W+DVNfk4w8HXCcr71wAqvgQ6kxZ6PX9DZsZ43waF7ZLQd UCi/udSmp0gp1eMFBVQzHkkmCnKmcoxUerctpIxNMCUR4crwWu7yj9abRD4YBKYg /JcTrH8h7UraIcZqDs9BWh89Qypi9NMopTYnz88cra4YLLFOlFilASgZVwlvAqvj ldQIJmtMwQ84AJ+V+5g7RESI9JJg4ItjlK9kEcFT6X2BJLykeCW9R6dDHuG5+MXr GRSQDa6W7SUHa9Yk2vUTlWuW2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI14GOtA l5TDUxW7skqu6MGTERxRMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHo63MmjAi+JLgQeOBJmZDLo6k9WbZq0bM04RIZn+6NJqzisXmRgTK+y6nEsP gKPDv+12/J3oLvOBHH7oTkMteCOWL5Z6LoGP4DKcyRk4N72bcD+6igbj5vE8Q5cu Ga1INi1IDKP0Sc0i0ry3jn2174y2fAwT+KXpUecsQjg+H/3U3/tj2e9oHsu/CV/V R6aptjoZOA1lpz4C/2EYs0FV9k/Mjp1sk9iEa8qOwZWGYnnAmT0ttCrsTdLVpEGq F8ihShqmwUHHL4phwhhCH+CY76hGYC8sZHILb44NyUWEqdI8dJCOXTru5IPMm54b 4TU7Ap3Zb1aLjKp+2OA8gZi7zw== -----END CERTIFICATE-----Generated at Sat Nov 14 20:55:46 2026 by rpki-client