$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: PSONoQFOpCoxELrGEnGfnEzqFhvjKi5f8TCH4WWP0YU= Subject key identifier: CB:A2:F8:35:B7:D9:0D:4F:33:15:5F:1D:0B:A4:32:F3:1A:11:86:BD Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 103A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 1027 Signing time: Sat 14 Nov 2026 17:21:51 +0000 Manifest this update: Sat 14 Nov 2026 17:21:51 +0000 Manifest next update: Sat 21 Nov 2026 17:21:51 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: 45YETz5Pz4t+y83oT17BKns5mcnLAyB6LR3P6/TRum8=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 17:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4154 (0x103a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Nov 14 17:21:51 2026 GMT Not After : Nov 21 17:21:51 2026 GMT Subject: CN=6af898af-c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:6e:7f:b3:c1:15:7a:a8:9d:ae:a8:14:b0: 31:73:da:13:99:ec:c7:61:bd:1b:f8:d9:b0:df:04: 95:f5:9d:ff:0b:67:cb:c6:9e:0c:af:6f:ae:d5:e5: 8f:2b:24:fb:2f:df:e2:12:c2:66:29:4d:e9:2e:58: 86:4a:c5:11:4f:52:0d:4f:de:06:a8:3d:af:17:01: 7e:83:95:5a:f4:d3:8e:9e:eb:e4:9b:78:b2:0c:46: 38:21:bc:06:2c:aa:12:83:d2:ff:eb:7f:6a:bd:f6: 98:6a:b9:70:9c:ad:79:c1:01:6f:43:d6:ad:8d:d7: a4:18:cc:cc:c9:ea:f5:7c:18:12:ff:89:cd:38:54: ec:94:ba:c3:78:c2:6a:9f:e1:5c:48:83:60:5d:ba: 26:a0:28:21:02:10:a9:88:8f:16:7b:9c:c4:a5:9a: b5:33:0c:e6:48:10:69:69:3b:3a:c2:e4:e4:72:46: e5:b6:3a:8b:79:5f:8d:3c:e2:20:8b:20:23:b5:58: a9:64:d2:17:da:d4:e8:28:d8:17:69:6a:1e:51:e4: fe:2f:e8:18:87:f9:a7:21:b8:1c:99:1f:fb:43:3c: 2a:1d:50:7c:5e:b2:1f:f6:dc:77:d6:20:c0:69:55: bc:8e:06:d7:6d:20:ba:38:8b:94:b6:f1:36:7d:7e: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:F8:35:B7:D9:0D:4F:33:15:5F:1D:0B:A4:32:F3:1A:11:86:BD X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7a:d5:6e:70:78:b7:bd:6b:00:5d:98:d1:22:f8:05:98:4d: 9f:93:f8:1c:72:dd:7b:a1:6f:4c:21:15:35:d5:e9:a6:bc:a5: e5:be:cf:66:b3:c3:55:58:f8:b2:55:36:97:85:96:01:ec:73: 76:2d:1d:0b:b2:0e:1e:50:b9:ac:81:77:a5:8d:51:58:13:a6: 25:11:bd:6e:65:16:92:ed:0a:72:5e:7c:db:4a:d9:65:5c:9c: 91:3b:cd:35:96:4f:3e:17:cb:14:d3:ff:23:e7:d4:37:87:e0: b8:d3:53:16:fd:1b:2b:73:4a:7f:55:99:f2:d2:7b:b3:4c:b2: f2:b6:6d:24:e3:c1:37:e2:5d:6e:7a:7c:f7:3c:5d:1a:17:47: ea:93:61:83:d5:b9:30:78:a3:90:37:8c:f6:f6:f4:55:d4:a2: dc:c8:b8:bd:92:82:b1:68:fe:a8:02:0d:50:0b:7d:b2:59:e4: 67:b4:e5:02:ea:c4:75:16:1d:0a:ba:4e:a9:40:af:b5:2f:7f: bb:8b:e4:0b:87:ca:7a:4c:6b:2c:7b:ea:09:3e:18:ca:cf:d6: a5:bf:b2:c7:09:b5:07:2c:65:4a:10:c6:60:45:34:8a:d3:2c: c2:85:6c:73:d8:96:f2:c3:06:93:6b:87:e4:07:a9:8e:0f:64: 8a:4b:b5:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYxMTE0MTcyMTUxWhcNMjYxMTIxMTcyMTUxWjAYMRYwFAYD VQQDEw02YWY4OThhZi1jOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr35uf7PBFXqona6oFLAxc9oTmezHYb0b+Nmw3wSV9Z3/C2fLxp4Mr2+u1eWP KyT7L9/iEsJmKU3pLliGSsURT1INT94GqD2vFwF+g5Va9NOOnuvkm3iyDEY4IbwG LKoSg9L/639qvfaYarlwnK15wQFvQ9atjdekGMzMyer1fBgS/4nNOFTslLrDeMJq n+FcSINgXbomoCghAhCpiI8We5zEpZq1MwzmSBBpaTs6wuTkckbltjqLeV+NPOIg iyAjtVipZNIX2tToKNgXaWoeUeT+L+gYh/mnIbgcmR/7QzwqHVB8XrIf9tx31iDA aVW8jgbXbSC6OIuUtvE2fX5nVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMui+DW3 2Q1PMxVfHQukMvMaEYa9MB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGHrVbnB4t71rAF2Y0SL4BZhNn5P4HHLde6FvTCEVNdXppryl5b7PZrPDVVj4 slU2l4WWAexzdi0dC7IOHlC5rIF3pY1RWBOmJRG9bmUWku0Kcl5820rZZVyckTvN NZZPPhfLFNP/I+fUN4fguNNTFv0bK3NKf1WZ8tJ7s0yy8rZtJOPBN+Jdbnp89zxd GhdH6pNhg9W5MHijkDeM9vb0VdSi3Mi4vZKCsWj+qAINUAt9slnkZ7TlAurEdRYd CrpOqUCvtS9/u4vkC4fKekxrLHvqCT4Yys/Wpb+yxwm1ByxlShDGYEU0itMswoVs c9iW8sMGk2uH5Aepjg9kiku1HA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:25:26 2026 by rpki-client