$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: pCnSdvsTI4be3UUJkJWeqixOnWPdR7re8aOWzRVtj4M= Subject key identifier: 47:50:E3:84:A5:00:32:3A:AD:8F:24:E8:7C:AF:9E:11:52:82:D7:3B Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0662 Signing time: Sat 14 Nov 2026 22:27:28 +0000 Manifest this update: Sat 14 Nov 2026 22:27:27 +0000 Manifest next update: Sat 21 Nov 2026 22:27:27 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: JtgKbk5Ex7cC/NAkf3MUBJuIyhQz7rdWwVvVmsdCcq8=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: szdIivrmaNOf2If91WlOqRLDy+pXayJTHQKBGeGvRTQ=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: sGiM6GvJxV9yJqw6hLJjsRcyN9Otue9M3LO38P82h9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Nov 14 22:27:27 2026 GMT Not After : Nov 21 22:27:27 2026 GMT Subject: CN=6af8e050-305a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:04:e2:e3:2f:3c:bb:bd:b1:d6:ae:3e:cf: 25:7a:32:64:3b:4a:79:aa:c6:85:41:5e:f3:7c:a2: b9:d3:1f:a8:b9:6c:87:54:93:65:0b:ca:ac:ce:e0: ef:da:42:9d:ec:d0:81:e8:86:17:99:09:01:aa:a0: 9d:d2:3b:01:37:31:1d:a5:87:a9:42:64:b0:94:95: 2f:a2:fa:0e:e2:c7:d3:b7:49:f9:c9:05:65:c3:9b: 2f:8b:f0:02:9f:0e:d9:b2:02:34:13:e7:2b:bf:12: 4b:a2:ba:2b:18:0b:72:6c:de:01:d7:61:6c:06:b2: 50:d4:23:8f:8b:21:55:15:db:f9:ed:74:25:bc:85: 04:98:f9:12:66:f5:bd:01:30:cf:f5:8f:d4:f0:22: 46:04:0b:93:fe:76:ce:62:a9:c5:84:51:75:d7:30: a1:96:72:98:73:3a:e9:9d:61:bd:f4:0b:f3:b1:9a: db:2a:e8:1f:ac:34:71:f5:8b:2e:fe:bf:f5:d9:be: 91:5e:57:c9:68:77:f3:34:88:0d:b8:79:16:f9:3f: f3:3d:f0:76:9c:2d:40:0d:cc:21:f2:51:8f:0b:c6: 1f:d9:1a:ce:ed:94:df:4d:0a:cd:e1:9a:68:99:b4: f2:8e:de:02:9e:40:24:05:08:f3:0f:eb:60:dc:67: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:50:E3:84:A5:00:32:3A:AD:8F:24:E8:7C:AF:9E:11:52:82:D7:3B X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f1:72:b9:3d:0e:e5:c6:e7:1b:5e:bf:93:18:3c:dd:15:51: 88:89:4f:56:7a:cd:a4:c4:e1:1c:86:ed:32:7d:51:e4:3f:bd: b1:ab:43:2a:c4:32:65:5b:7c:08:ec:d6:fa:c2:a2:6e:32:bd: 0f:5e:cd:2d:31:9a:75:14:93:16:ff:16:4f:44:7e:65:ed:fa: 2f:c1:63:c3:57:62:f2:2e:44:d1:b2:8d:ec:99:1f:f9:2b:9a: a3:70:2a:ef:95:1a:8b:35:78:80:73:19:44:b7:5f:9e:e4:8a: cc:d3:25:4b:e4:ae:10:13:99:c8:b7:47:19:cb:2c:ae:1f:95: 6a:ff:33:c3:c8:27:0a:a1:0e:5b:5d:b0:29:79:68:a6:7a:3c: bc:0b:16:75:57:4d:77:ad:fa:55:c4:5f:1f:dc:42:48:4b:14: 2f:39:c5:ab:ba:f0:aa:d8:de:b8:4b:4d:24:b8:1c:d4:0e:31: 7d:5b:e7:51:d1:b0:55:81:7f:1a:75:27:29:a0:2b:92:ac:c7: 25:31:c7:1d:dc:e9:b8:1c:c3:70:6c:2e:df:20:0d:39:04:3f: ab:16:9f:72:17:aa:d7:3e:69:39:90:98:90:9b:72:2c:92:70: af:d4:3e:ad:b7:f2:c8:c3:7c:31:d9:de:36:a4:e2:1f:69:ce: 93:20:5c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYxMTE0MjIyNzI3WhcNMjYxMTIxMjIyNzI3WjAYMRYwFAYD VQQDEw02YWY4ZTA1MC0zMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtUE4uMvPLu9sdauPs8lejJkO0p5qsaFQV7zfKK50x+ouWyHVJNlC8qszuDv 2kKd7NCB6IYXmQkBqqCd0jsBNzEdpYepQmSwlJUvovoO4sfTt0n5yQVlw5svi/AC nw7ZsgI0E+crvxJLororGAtybN4B12FsBrJQ1COPiyFVFdv57XQlvIUEmPkSZvW9 ATDP9Y/U8CJGBAuT/nbOYqnFhFF11zChlnKYczrpnWG99AvzsZrbKugfrDRx9Ysu /r/12b6RXlfJaHfzNIgNuHkW+T/zPfB2nC1ADcwh8lGPC8Yf2RrO7ZTfTQrN4Zpo mbTyjt4CnkAkBQjzD+tg3GcO2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdQ44Sl ADI6rY8k6HyvnhFSgtc7MB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbfFyuT0O5cbnG16/kxg83RVRiIlPVnrNpMThHIbtMn1R5D+9satDKsQyZVt8 COzW+sKibjK9D17NLTGadRSTFv8WT0R+Ze36L8Fjw1di8i5E0bKN7Jkf+Suao3Aq 75UaizV4gHMZRLdfnuSKzNMlS+SuEBOZyLdHGcssrh+Vav8zw8gnCqEOW12wKXlo pno8vAsWdVdNd636VcRfH9xCSEsULznFq7rwqtjeuEtNJLgc1A4xfVvnUdGwVYF/ GnUnKaArkqzHJTHHHdzpuBzDcGwu3yANOQQ/qxafcheq1z5pOZCYkJtyLJJwr9Q+ rbfyyMN8MdneNqTiH2nOkyBcsA== -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:37 2026 by rpki-client