$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: bq79OFg3HeAJU8pjjQSqmTxWrgeoZQk2t93swdtDpaM= Subject key identifier: EF:EC:32:E5:92:3A:53:45:A6:D7:26:ED:2F:7D:ED:0D:EF:8A:51:43 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 04D2 Signing time: Sat 14 Nov 2026 23:35:58 +0000 Manifest this update: Sat 14 Nov 2026 23:35:58 +0000 Manifest next update: Sat 21 Nov 2026 23:35:58 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: SCtPp7II4EkZeJs/eSVgFPergHZg9yzyosMvNXd6JoU=) 2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 3: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Nov 14 23:35:58 2026 GMT Not After : Nov 21 23:35:58 2026 GMT Subject: CN=6af8f05e-ba84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:a7:30:d6:94:2e:d9:14:8a:8c:b8:64:26: ab:b9:60:f1:dc:a4:a1:17:c8:eb:07:8b:26:c0:a8: 7c:c6:c2:64:e7:d2:fc:36:18:0a:80:e0:5b:0e:e9: 25:01:c3:15:dc:ed:c1:c0:26:0a:ee:f6:d1:4b:ee: 30:22:07:7c:7b:18:a9:c2:ef:8f:70:2b:6e:30:65: 75:5b:00:d6:10:5e:92:d3:fb:db:bc:b3:aa:bb:77: ec:e2:3d:0a:38:ea:56:18:46:59:7d:2d:ed:26:0d: 37:57:9e:01:f7:81:f0:e8:ab:d3:f2:bb:0f:b8:12: 08:2d:4f:04:de:1d:9f:35:c4:3e:13:cd:1b:ee:34: 95:f7:67:f0:6f:1a:86:7e:70:95:f8:2e:ee:14:cb: 03:48:47:d9:7f:46:98:72:53:94:ce:ff:ee:95:ce: fd:5b:88:a6:ef:b7:6b:d9:a6:4a:91:6e:f9:2d:c0: c4:26:14:f9:ca:48:05:a1:15:39:95:16:6d:43:6e: 7e:81:8c:13:d8:ed:a3:ab:c8:44:e2:1b:df:67:fe: 60:dc:ae:28:fa:94:51:be:ee:75:b9:a8:38:65:ea: d3:04:be:f0:9f:18:3c:b0:52:07:1f:c4:3f:1d:d8: b1:fa:60:5d:b5:47:c5:41:5d:ef:95:08:d0:b1:2d: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EC:32:E5:92:3A:53:45:A6:D7:26:ED:2F:7D:ED:0D:EF:8A:51:43 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:89:e7:46:2d:b6:05:d0:00:5a:18:05:74:da:24:9a:7d:ca: 76:d6:f8:37:88:35:72:e9:61:a8:71:08:10:41:7f:0c:91:29: 2d:4e:a9:22:50:e4:86:b6:6b:fc:4e:11:af:63:02:ba:19:b4: f5:8f:04:9f:77:c4:2e:4e:64:92:c8:e6:54:b5:dc:e8:18:8a: ce:17:d0:75:ad:c4:9a:e0:b2:1d:ca:79:f9:da:4a:e5:97:65: 5e:1d:a1:be:b3:be:e9:82:00:af:be:b0:a9:96:91:0f:93:bb: 1e:8a:49:66:49:02:52:37:77:43:e0:4c:2c:7f:7f:98:21:da: 02:06:78:f7:24:33:02:45:01:cd:e5:17:59:34:86:7d:bc:c1: 5d:5c:59:6b:88:d0:81:b3:f7:76:d5:63:f4:0a:44:f6:bd:8e: 97:8f:5a:87:05:7c:a2:f9:0e:95:e0:f1:ef:f8:57:96:9c:6c: cf:a7:62:e1:bd:06:f9:96:14:a6:70:f0:ab:c1:d2:df:97:d8: 2b:f1:54:15:5d:5a:9f:ac:41:65:4f:fa:5d:b0:a2:24:c5:ae: c7:81:e7:16:4b:b5:8b:8c:0d:0d:df:ee:89:57:53:17:35:e8: 91:38:08:cc:f0:4c:3a:ba:27:c5:73:17:e4:15:e6:30:d2:f2: e5:db:f1:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYxMTE0MjMzNTU4WhcNMjYxMTIxMjMzNTU4WjAYMRYwFAYD VQQDEw02YWY4ZjA1ZS1iYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YynMNaULtkUioy4ZCaruWDx3KShF8jrB4smwKh8xsJk59L8NhgKgOBbDukl AcMV3O3BwCYK7vbRS+4wIgd8exipwu+PcCtuMGV1WwDWEF6S0/vbvLOqu3fs4j0K OOpWGEZZfS3tJg03V54B94Hw6KvT8rsPuBIILU8E3h2fNcQ+E80b7jSV92fwbxqG fnCV+C7uFMsDSEfZf0aYclOUzv/ulc79W4im77dr2aZKkW75LcDEJhT5ykgFoRU5 lRZtQ25+gYwT2O2jq8hE4hvfZ/5g3K4o+pRRvu51uag4ZerTBL7wnxg8sFIHH8Q/ Hdix+mBdtUfFQV3vlQjQsS0e8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/sMuWS OlNFptcm7S997Q3vilFDMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFInnRi22BdAAWhgFdNokmn3Kdtb4N4g1culhqHEIEEF/DJEpLU6pIlDkhrZr /E4Rr2MCuhm09Y8En3fELk5kksjmVLXc6BiKzhfQda3EmuCyHcp5+dpK5ZdlXh2h vrO+6YIAr76wqZaRD5O7HopJZkkCUjd3Q+BMLH9/mCHaAgZ49yQzAkUBzeUXWTSG fbzBXVxZa4jQgbP3dtVj9ApE9r2Ol49ahwV8ovkOleDx7/hXlpxsz6di4b0G+ZYU pnDwq8HS35fYK/FUFV1an6xBZU/6XbCiJMWux4HnFku1i4wNDd/uiVdTFzXokTgI zPBMOronxXMX5BXmMNLy5dvxXg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:05:54 2026 by rpki-client