$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: fNiGeZja5cYcIEUtSWThdwJswVbt54kj66S7FlX2HCc= Subject key identifier: 18:4B:A6:93:BF:E0:7D:E3:3D:40:22:B2:07:82:56:21:DE:39:19:B0 Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 012F Signing time: Sun 15 Nov 2026 05:59:15 +0000 Manifest this update: Sun 15 Nov 2026 05:59:15 +0000 Manifest next update: Sun 22 Nov 2026 05:59:15 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: Zpawt+8S8PbfKO8bpAUTl6MYOxY3q3hw0QB4rPPwaJI=) 2: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: vNh/5KqyGcLBgRea4GEaf1GiSDPNGV2ayLMJqKrT05s=) 3: E31A926E6EAF11F088699976C4F9AE02.roa (hash: FKzaSN7wk2dTCiUFf01WiFdCMnfThuKnhdLTnhYbGgM=) 4: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 05:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Nov 15 05:59:15 2026 GMT Not After : Nov 22 05:59:15 2026 GMT Subject: CN=6af94a33-04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:e2:7e:df:d5:99:f6:3b:a0:f8:42:82:9f: 67:86:08:fb:25:f7:20:de:31:14:5d:1b:87:af:65: ed:de:69:53:fd:c2:48:34:0e:d1:7b:e8:e4:95:3f: b1:ff:80:80:60:eb:ee:3b:b0:10:5c:74:61:2a:05: 8a:c9:27:a4:13:cc:3a:39:e9:38:78:e4:e6:43:25: ed:cf:1a:fa:97:23:1c:f8:55:f0:34:f3:99:ec:bf: 51:68:dc:24:53:05:ee:d9:71:52:55:59:5d:82:44: 7f:35:0a:d4:88:80:d4:db:67:3d:62:de:22:8c:e8: f9:99:bf:c0:c3:15:5b:54:32:ad:23:90:fa:f1:a3: 93:1f:1b:c8:c2:5c:4f:7f:24:e0:3c:47:d2:c3:f0: be:00:c7:22:bf:37:39:b8:8f:1c:d9:4d:19:19:86: 8c:41:2f:cd:61:ea:50:a3:12:07:ee:fa:8f:bf:83: 5c:d1:a6:1b:86:83:69:06:40:5b:24:e1:1f:50:9c: bc:1c:17:d4:a6:01:08:b8:87:a5:15:de:b4:3c:e1: 86:1a:d2:5a:ae:7a:2c:52:c7:1d:68:cc:6e:68:c2: b1:b3:02:35:e5:3f:69:98:03:3a:35:f2:e3:38:41: c9:e9:99:03:85:c1:1d:e9:af:90:21:03:9b:7f:95: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4B:A6:93:BF:E0:7D:E3:3D:40:22:B2:07:82:56:21:DE:39:19:B0 X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a4:43:38:e3:30:6e:16:2c:a0:98:78:ad:a3:2a:e2:1b:a7: 43:9c:8b:21:80:8f:45:f2:f6:7a:22:ed:92:bd:44:9b:cd:8a: f4:2b:b9:48:6e:1a:91:c8:af:d1:b2:1e:d6:d5:dd:fb:40:8c: 9e:13:d8:8b:66:2b:e3:55:d8:80:fb:88:fd:da:f9:c7:e3:c0: 89:19:78:44:17:68:73:0d:18:36:8f:20:86:d0:c2:1c:51:5a: 19:78:3c:96:ac:4f:75:00:61:21:e3:e1:b4:5b:84:95:0d:d6: 48:ff:97:9e:41:9f:ed:7d:85:b7:91:06:a0:e9:ca:37:b5:3c: e7:bd:d5:71:09:ad:a2:5d:8c:48:25:8a:73:59:86:14:de:cb: cf:b4:7a:db:da:f9:77:d7:0d:ae:ce:50:e7:24:33:92:9f:6c: c9:67:34:64:3e:6b:4e:51:41:b2:72:73:20:f1:89:ac:6c:27: a1:84:0a:2e:d3:6c:1e:b0:8d:08:af:f5:8d:d2:ac:9b:db:68: ca:7d:62:10:65:45:41:fe:f1:53:03:1f:7f:e8:c2:e3:5d:00: fb:73:09:c7:97:d0:24:fb:72:3c:82:50:f7:18:91:d9:3e:d2: ca:38:2c:6e:6a:40:9f:cf:0c:89:44:92:35:df:6e:15:eb:b1: 4f:61:91:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5 RDE2Nzc0QjEwHhcNMjYxMTE1MDU1OTE1WhcNMjYxMTIyMDU1OTE1WjAYMRYwFAYD VQQDEw02YWY5NGEzMy0wNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDjift/VmfY7oPhCgp9nhgj7Jfcg3jEUXRuHr2Xt3mlT/cJINA7Re+jklT+x /4CAYOvuO7AQXHRhKgWKySekE8w6Oek4eOTmQyXtzxr6lyMc+FXwNPOZ7L9RaNwk UwXu2XFSVVldgkR/NQrUiIDU22c9Yt4ijOj5mb/AwxVbVDKtI5D68aOTHxvIwlxP fyTgPEfSw/C+AMcivzc5uI8c2U0ZGYaMQS/NYepQoxIH7vqPv4Nc0aYbhoNpBkBb JOEfUJy8HBfUpgEIuIelFd60POGGGtJarnosUscdaMxuaMKxswI15T9pmAM6NfLj OEHJ6ZkDhcEd6a+QIQObf5Uk/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhLppO/ 4H3jPUAisgeCViHeORmwMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjZCQy9BMDMwQ0QzMDIwNEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6 bm5WajhrRTdjakdkRm5kTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKqRDOOMwbhYsoJh4raMq4hunQ5yLIYCPRfL2eiLtkr1Em82K9Cu5SG4akciv 0bIe1tXd+0CMnhPYi2Yr41XYgPuI/dr5x+PAiRl4RBdocw0YNo8ghtDCHFFaGXg8 lqxPdQBhIePhtFuElQ3WSP+XnkGf7X2Ft5EGoOnKN7U8573VcQmtol2MSCWKc1mG FN7Lz7R629r5d9cNrs5Q5yQzkp9syWc0ZD5rTlFBsnJzIPGJrGwnoYQKLtNsHrCN CK/1jdKsm9toyn1iEGVFQf7xUwMff+jC410A+3MJx5fQJPtyPIJQ9xiR2T7Syjgs bmpAn88MiUSSNd9uFeuxT2GRrw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:28:42 2026 by rpki-client