$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: i5XsTS1Z+rrabOObNyvFoaWknsm6bAsqaL6tqlojtvo= Subject key identifier: 26:87:CF:96:E7:CD:D7:18:FF:CC:0A:7E:5B:FA:31:E8:F1:47:3C:E2 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 09AA Signing time: Sat 14 Nov 2026 20:17:03 +0000 Manifest this update: Sat 14 Nov 2026 20:17:02 +0000 Manifest next update: Sat 21 Nov 2026 20:17:02 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: p0x1xrgeSxqQNc7TZ0bDQMuNV9pBgJz814fY0aAu6/8=) 2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI=) 3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=) 4: 47B17AE48B2911F198C4B09681EE528E.roa (hash: jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Nov 14 20:17:02 2026 GMT Not After : Nov 21 20:17:02 2026 GMT Subject: CN=6af8c1bf-ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:df:d9:6f:c3:31:15:64:7c:c7:05:41:65: a4:a6:ba:b1:69:3b:91:3a:c6:92:b4:c7:0a:27:82: 46:aa:14:f1:70:24:2d:16:33:66:35:38:a3:c8:19: 59:1d:2e:c5:d8:d2:ee:7a:5f:7e:37:86:d6:16:48: 23:3e:ec:86:a5:c6:4d:68:f8:f8:4f:2c:cc:00:81: d7:fb:41:aa:ab:78:fb:b3:c5:49:19:8b:4e:cb:41: 54:1a:09:10:5c:73:27:89:ad:02:fc:b1:48:0d:de: c9:88:c8:fd:bd:e7:9c:65:1c:49:9f:07:ba:42:c0: ae:44:c3:bf:da:f0:05:71:b5:a6:fc:dd:c4:ae:49: 6e:26:ad:cc:32:eb:0b:0a:12:13:4f:77:97:5d:ad: e5:9a:d9:e2:d9:26:e4:3b:5b:59:6d:1d:dc:8f:f8: 3a:df:ff:67:37:10:13:4a:46:0d:0d:d7:7f:01:16: d7:26:be:7e:ab:91:c8:e5:a3:b0:04:db:e1:14:79: bc:d7:52:52:d7:1c:e4:0f:c5:1e:1d:ac:fa:d1:b3: 77:92:e8:82:a9:f4:ec:b0:5d:e0:cb:8a:45:6f:a2: 55:52:6c:77:94:5e:8e:0d:32:5b:1b:11:b0:65:72: 25:39:9b:c4:89:2f:b2:44:5a:73:84:dd:e6:40:a5: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:CF:96:E7:CD:D7:18:FF:CC:0A:7E:5B:FA:31:E8:F1:47:3C:E2 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:42:40:b9:53:ba:e1:43:4c:f1:32:0f:ad:6a:f6:fe:a7:cf: c1:b3:d4:b2:f9:ef:d9:1a:f3:56:a0:ae:95:15:21:fc:56:df: 77:25:6c:d6:44:5d:38:a8:41:4b:5e:7c:14:77:be:ec:60:a7: 44:1a:06:b9:9e:6f:98:84:35:48:d1:4c:0a:e9:5e:f6:de:9b: 75:95:ef:fa:c1:b5:d7:27:f4:64:93:8f:16:69:8f:9c:24:a8: 78:02:2c:ea:33:48:e6:b6:e9:d9:6e:32:6b:86:57:51:47:14: cd:6b:72:42:6c:7c:3e:ad:ee:2a:fb:47:11:60:81:a1:e0:64: 36:de:ed:9f:33:5f:a1:22:60:94:e6:84:14:8d:8a:51:e1:77: 55:eb:39:8f:46:b5:99:6b:fe:8b:d9:81:68:f7:6c:c3:09:cc: e8:5f:13:88:55:b8:6f:bb:2f:dd:bf:87:ad:b4:aa:a3:dc:79: 16:13:dd:55:31:09:b4:83:c8:97:00:63:ea:52:d8:84:33:a4: ea:fd:7f:ff:0a:21:cc:92:a0:f7:04:bd:cd:cd:f9:50:55:d6: 27:39:b1:92:08:3b:2e:34:7c:a8:24:9a:08:75:c3:3c:a9:47: 4c:64:7f:88:cb:ef:9b:bf:21:f2:cc:e0:88:ba:26:7a:07:a9: 8b:67:2f:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYxMTE0MjAxNzAyWhcNMjYxMTIxMjAxNzAyWjAYMRYwFAYD VQQDEw02YWY4YzFiZi1hYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG7f2W/DMRVkfMcFQWWkprqxaTuROsaStMcKJ4JGqhTxcCQtFjNmNTijyBlZ HS7F2NLuel9+N4bWFkgjPuyGpcZNaPj4TyzMAIHX+0Gqq3j7s8VJGYtOy0FUGgkQ XHMnia0C/LFIDd7JiMj9veecZRxJnwe6QsCuRMO/2vAFcbWm/N3ErkluJq3MMusL ChITT3eXXa3lmtni2SbkO1tZbR3cj/g63/9nNxATSkYNDdd/ARbXJr5+q5HI5aOw BNvhFHm811JS1xzkD8UeHaz60bN3kuiCqfTssF3gy4pFb6JVUmx3lF6ODTJbGxGw ZXIlOZvEiS+yRFpzhN3mQKX6KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaHz5bn zdcY/8wKflv6MejxRzziMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQEJAuVO64UNM8TIPrWr2/qfPwbPUsvnv2RrzVqCulRUh/FbfdyVs1kRdOKhB S158FHe+7GCnRBoGuZ5vmIQ1SNFMCule9t6bdZXv+sG11yf0ZJOPFmmPnCSoeAIs 6jNI5rbp2W4ya4ZXUUcUzWtyQmx8Pq3uKvtHEWCBoeBkNt7tnzNfoSJglOaEFI2K UeF3Ves5j0a1mWv+i9mBaPdswwnM6F8TiFW4b7sv3b+HrbSqo9x5FhPdVTEJtIPI lwBj6lLYhDOk6v1//wohzJKg9wS9zc35UFXWJzmxkgg7LjR8qCSaCHXDPKlHTGR/ iMvvm78h8szgiLomegepi2cvhw== -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:33 2026 by rpki-client