$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: MEM6NE/xyd7aeZov1n7uSvCrynAd3++n5sjU5bvxD54= Subject key identifier: 92:AD:A6:4D:A8:9F:DC:91:5E:74:93:92:BA:41:30:2D:0A:75:E9:30 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0C3D Signing time: Sat 14 Nov 2026 18:43:04 +0000 Manifest this update: Sat 14 Nov 2026 18:43:03 +0000 Manifest next update: Sat 21 Nov 2026 18:43:03 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: AZOkHKG2bGmUTpQayJ2ttYCDOzI6uXGclsfk2KlFapk=) 2: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) 3: 94FFF24CA5CA11F181152D707111F970.roa (hash: Sg/maMpg/w2UI4nRD9hbatihlbcBBZLif00188ZZAbA=) 4: 94469964A5CA11F181152D707111F970.roa (hash: QqrZhvjRVVLJYdk/4iDOjN1gnzEDjY7DvM5B+0DqUxE=) 5: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 6: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 7: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 8: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 9: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) 10: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw=) 11: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 12: 290B43C0A79611F1864335344711F970.roa (hash: nN752nqhRtARbodYQ3u7efmdKu6erwNwIIGPPDmLusE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Nov 14 18:43:03 2026 GMT Not After : Nov 21 18:43:03 2026 GMT Subject: CN=6af8abb8-027b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:e7:c9:ea:16:16:f2:ce:e3:6e:36:fb:66: 5a:8f:4a:36:a6:44:8c:d3:81:2c:04:73:ee:0c:1d: 6e:cb:2a:ac:78:fa:01:a4:0d:e1:78:d9:65:30:d4: 86:88:e9:5d:2e:b9:b5:3c:21:a6:b7:ba:87:f1:89: 74:fe:4d:46:26:ad:1d:77:e2:8b:a7:b0:3b:9a:b8: f2:4e:53:16:78:89:05:1d:88:80:d6:c6:e4:49:b6: 49:d2:06:70:f1:1d:43:8e:1a:7b:7e:22:66:8e:48: 41:12:7f:52:a9:73:9e:68:a7:94:08:26:d9:97:7c: 63:1f:a2:f8:85:7c:32:c3:8c:46:ef:72:a0:2c:af: eb:c5:d4:f4:72:76:9e:e5:a8:0c:e3:a5:29:7b:ba: 93:9c:15:8f:57:27:e2:78:89:2d:16:8a:e2:ff:59: 69:7f:c4:44:08:94:17:86:92:da:15:7b:69:b9:62: 71:35:a3:c0:fd:76:25:ae:c5:9d:b1:73:5a:f3:c7: 92:1b:6c:7b:a6:6e:85:99:fc:bf:59:ab:31:5b:4b: 88:31:dd:58:f2:2a:5a:58:90:73:ba:28:a1:c8:ba: ca:d8:41:47:38:98:03:52:06:34:cf:08:ca:c2:e6: de:8f:ae:15:e3:f3:8b:d5:f4:59:93:84:30:e1:75: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AD:A6:4D:A8:9F:DC:91:5E:74:93:92:BA:41:30:2D:0A:75:E9:30 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f8:9d:44:ae:33:7e:cf:76:d1:ce:2f:ec:cf:47:a5:0f:05: 5b:89:82:0a:03:19:37:3d:3f:c1:85:f0:65:4b:e1:5c:d4:47: ed:4b:c2:46:2f:84:c2:52:b9:48:5c:b1:10:f9:c8:52:05:f8: 3d:8d:74:15:65:ce:e9:bf:d2:5f:a5:80:9e:64:9d:36:1e:d4: 32:86:24:45:d5:00:70:53:19:c3:b6:5f:f4:b0:88:e4:ca:90: 06:82:d7:82:14:6e:4f:e8:d8:c5:55:25:28:9a:a7:f9:66:31: d1:6c:6c:8a:f8:76:5f:03:96:23:7b:f7:9a:f4:a9:aa:14:06: b8:68:d0:2e:7b:9c:35:f3:e2:5a:25:85:c1:e2:57:38:ef:93: 6d:21:fb:ca:54:3a:cf:7f:f6:a7:8a:20:e1:8c:4e:ab:e7:a4: b5:27:17:74:ca:41:b0:ff:13:6b:81:ea:24:05:18:43:a7:1b: 5b:a7:67:b2:95:ea:a5:a4:3b:1a:c8:b8:aa:f7:02:9e:99:81: 3e:96:6c:37:d9:f3:60:15:f0:98:3d:d4:e9:26:2d:af:ee:0c: f3:ff:d7:aa:0b:4a:fa:22:0b:e5:12:bd:43:0f:0c:63:e7:a7: de:5e:65:0f:ed:7f:40:2f:dc:41:e5:1e:79:17:aa:51:4e:e6: 39:51:f7:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYxMTE0MTg0MzAzWhcNMjYxMTIxMTg0MzAzWjAYMRYwFAYD VQQDEw02YWY4YWJiOC0wMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0rnyeoWFvLO4242+2Zaj0o2pkSM04EsBHPuDB1uyyqsePoBpA3heNllMNSG iOldLrm1PCGmt7qH8Yl0/k1GJq0dd+KLp7A7mrjyTlMWeIkFHYiA1sbkSbZJ0gZw 8R1Djhp7fiJmjkhBEn9SqXOeaKeUCCbZl3xjH6L4hXwyw4xG73KgLK/rxdT0cnae 5agM46Upe7qTnBWPVyfieIktFori/1lpf8RECJQXhpLaFXtpuWJxNaPA/XYlrsWd sXNa88eSG2x7pm6Fmfy/WasxW0uIMd1Y8ipaWJBzuiihyLrK2EFHOJgDUgY0zwjK wubej64V4/OL1fRZk4Qw4XUsnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKtpk2o n9yRXnSTkrpBMC0KdekwMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM/idRK4zfs920c4v7M9HpQ8FW4mCCgMZNz0/wYXwZUvhXNRH7UvCRi+EwlK5 SFyxEPnIUgX4PY10FWXO6b/SX6WAnmSdNh7UMoYkRdUAcFMZw7Zf9LCI5MqQBoLX ghRuT+jYxVUlKJqn+WYx0Wxsivh2XwOWI3v3mvSpqhQGuGjQLnucNfPiWiWFweJX OO+TbSH7ylQ6z3/2p4og4YxOq+ektScXdMpBsP8Ta4HqJAUYQ6cbW6dnspXqpaQ7 Gsi4qvcCnpmBPpZsN9nzYBXwmD3U6SYtr+4M8//XqgtK+iIL5RK9Qw8MY+en3l5l D+1/QC/cQeUeeReqUU7mOVH3Sw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:15:42 2026 by rpki-client