$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: GtMHfNar1Kk454wOIFmbS0VAqpxj60NjhPEYBvos4mM= Subject key identifier: 9A:25:37:C1:B5:A4:1D:F8:C2:F7:6C:0A:A1:72:5B:6C:B1:0B:C5:C9 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E9F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0DED Signing time: Sat 14 Nov 2026 16:43:00 +0000 Manifest this update: Sat 14 Nov 2026 16:43:00 +0000 Manifest next update: Sat 21 Nov 2026 16:43:00 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: IFTeMGQX3Mfz5QFo3SL6+BvLqMVdrchzSkhYWfaKMDQ=) 2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: NE6b3c4TBCDwsMEM8LnUEWOLbxxB7N/6QWN8gu7oBow=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 1z0DBiQnEIz3Dx2+68qVMHYw2A5RwkYWaUuHFrVt564=) 4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 09VvW3k0eoInlQS+H6ZHr0QcmrKaADNzaQ8RUnamjko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3743 (0xe9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Nov 14 16:43:00 2026 GMT Not After : Nov 21 16:43:00 2026 GMT Subject: CN=6af88f94-aa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:66:9f:43:ec:dd:d6:12:c3:f0:85:d5:95: 28:ba:a2:c2:12:e9:48:5f:f5:51:fd:1e:d5:68:9f: fe:61:cd:3a:06:66:ad:53:de:ba:78:40:e6:06:e5: 97:eb:d7:95:67:1e:b0:d3:3c:64:6c:b9:53:28:ee: 26:cb:87:4d:69:62:81:1a:f3:82:4d:60:78:80:e1: d0:51:31:0c:36:cc:fa:a5:44:e3:fa:a0:c8:bc:8a: cb:1f:00:79:4a:0c:b5:bf:9f:28:d1:5e:6f:04:c6: 9e:84:0f:f7:48:2d:60:bc:4c:b3:ba:d2:cb:4c:83: 15:9f:b9:2a:80:cb:e3:fe:8d:6e:9a:b3:27:c3:58: 2e:52:42:36:c2:61:f5:1c:54:c4:13:2b:54:98:81: 17:f2:bc:65:52:9d:52:7f:64:65:03:bf:38:10:16: 24:53:2c:7f:7c:60:8b:a5:3a:d5:21:fd:6c:9d:e3: 7f:c7:b0:c9:ae:89:87:26:2e:49:ea:f5:88:f9:e2: ff:e7:20:b5:a1:39:8b:13:3c:5e:4f:e7:ea:30:1e: b3:50:69:86:88:be:66:91:ac:5e:52:5b:18:87:ff: 41:f6:00:96:72:70:ef:c9:02:f5:6b:8b:81:c4:d4: 65:fc:56:42:da:9c:8f:30:f8:bf:0b:19:e3:19:61: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:37:C1:B5:A4:1D:F8:C2:F7:6C:0A:A1:72:5B:6C:B1:0B:C5:C9 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c5:b4:31:e1:60:fa:cd:6f:e1:af:56:46:11:8e:2d:ff:0b: 2f:db:d5:eb:e6:79:a3:fd:ff:03:fe:bb:cc:df:01:fd:95:45: 4b:35:b1:f3:5f:1b:86:39:0c:c5:78:a7:b0:7d:84:6b:c3:71: aa:a9:95:40:67:9d:18:ae:0d:11:2d:88:fe:d8:4a:7a:9b:67: ca:90:4d:18:90:d6:b5:5b:25:45:9f:76:1a:94:28:ed:f1:bb: bf:13:19:fa:54:f7:3d:15:a3:1d:b7:53:32:c1:5f:0c:43:a9: c5:14:9b:f0:31:35:24:27:95:c9:e9:22:16:7d:36:91:5c:7c: 1d:de:f4:e2:51:c6:d2:f0:78:fb:6b:69:3b:4c:d3:ff:01:d6: 3e:bd:3c:0d:0a:8c:6a:3c:c4:37:fb:08:3c:dd:66:da:45:88: 8b:dd:da:1c:2a:a8:7a:af:a9:f9:1d:9e:5b:d1:4a:d0:97:3b: 51:52:36:5a:70:a4:ec:f1:e8:0b:2d:4b:8c:d9:d0:2d:ae:bb: 56:f7:74:db:4f:f9:e5:c0:a7:30:21:61:df:4d:1a:41:ac:ac: db:2e:7c:73:b1:f7:e0:82:ce:bc:0f:ff:70:02:79:77:fb:5f: 4a:8b:76:c9:f2:d5:d4:70:71:a3:78:df:0d:9c:48:94:f7:b6: 2d:9b:5e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYxMTE0MTY0MzAwWhcNMjYxMTIxMTY0MzAwWjAYMRYwFAYD VQQDEw02YWY4OGY5NC1hYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G1mn0Ps3dYSw/CF1ZUouqLCEulIX/VR/R7VaJ/+Yc06BmatU966eEDmBuWX 69eVZx6w0zxkbLlTKO4my4dNaWKBGvOCTWB4gOHQUTEMNsz6pUTj+qDIvIrLHwB5 Sgy1v58o0V5vBMaehA/3SC1gvEyzutLLTIMVn7kqgMvj/o1umrMnw1guUkI2wmH1 HFTEEytUmIEX8rxlUp1Sf2RlA784EBYkUyx/fGCLpTrVIf1sneN/x7DJromHJi5J 6vWI+eL/5yC1oTmLEzxeT+fqMB6zUGmGiL5mkaxeUlsYh/9B9gCWcnDvyQL1a4uB xNRl/FZC2pyPMPi/CxnjGWGenwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJolN8G1 pB34wvdsCqFyW2yxC8XJMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwMW0MeFg+s1v4a9WRhGOLf8LL9vV6+Z5o/3/A/67zN8B/ZVFSzWx818bhjkM xXinsH2Ea8NxqqmVQGedGK4NES2I/thKeptnypBNGJDWtVslRZ92GpQo7fG7vxMZ +lT3PRWjHbdTMsFfDEOpxRSb8DE1JCeVyekiFn02kVx8Hd704lHG0vB4+2tpO0zT /wHWPr08DQqMajzEN/sIPN1m2kWIi93aHCqoeq+p+R2eW9FK0Jc7UVI2WnCk7PHo Cy1LjNnQLa67Vvd020/55cCnMCFh300aQays2y58c7H34ILOvA//cAJ5d/tfSot2 yfLV1HBxo3jfDZxIlPe2LZteSg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:17:34 2026 by rpki-client