$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: BHLjQJDOu9/XXPPgY92BxMdN3yiDAKVVO+ySrysNf90= Subject key identifier: 57:95:44:2A:F0:D3:DE:44:31:8F:05:4B:87:9C:6B:77:96:73:E8:20 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 35C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 35AA Signing time: Sat 14 Nov 2026 14:36:26 +0000 Manifest this update: Sat 14 Nov 2026 14:36:25 +0000 Manifest next update: Sat 21 Nov 2026 14:36:25 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: tl8COPzl6BAPs0ORVh28BJujvbB/RLNG0rV8F5XwtJk=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) 3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) 4: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13765 (0x35c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Nov 14 14:36:25 2026 GMT Not After : Nov 21 14:36:25 2026 GMT Subject: CN=6af871ea-9fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:4f:a7:a0:6d:7c:e0:e4:75:92:55:7e:f4: 00:ee:44:a9:fd:1c:f7:24:e0:cf:9c:04:f8:f7:8b: 32:17:b4:4b:7b:80:f9:c1:17:0c:2e:43:15:75:1a: ab:c6:bc:54:ac:a7:ee:8b:95:d4:06:0f:17:37:93: 36:87:b3:6d:14:14:84:89:a6:c3:54:07:bb:da:0a: 3a:e2:a9:b9:f5:59:e7:9b:3c:fa:21:3e:70:cd:c5: 1b:70:59:36:bc:c7:4a:97:69:2d:68:aa:a6:c8:52: 2a:67:44:8d:30:d5:41:58:3e:2e:36:7a:2f:ca:1d: 40:2d:11:a4:df:de:3b:5f:27:58:7d:bf:c8:ea:60: 83:f8:aa:04:2b:7b:d8:36:d2:70:31:77:1b:10:4c: 90:72:93:3e:88:c9:63:1d:f7:ed:27:14:7c:7e:0f: f2:61:f8:14:23:a7:a2:e2:10:21:7a:cb:6a:05:9f: c6:fa:b6:92:21:65:e4:4a:f0:d2:da:36:58:ab:40: 6c:6e:c9:70:d6:cc:61:78:ba:c8:44:36:d1:87:04: 5a:17:b4:fe:3b:a3:0f:87:dc:d0:c3:84:a7:93:d7: 53:47:40:44:fa:dd:ff:df:9d:b7:a2:fe:11:e5:ef: 19:b7:bb:5a:b0:b7:92:0a:40:34:a4:a0:42:ea:20: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:95:44:2A:F0:D3:DE:44:31:8F:05:4B:87:9C:6B:77:96:73:E8:20 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f5:be:50:6c:8b:1e:77:46:12:37:c6:fd:48:e3:b2:6b:d5: 50:49:40:94:c2:5d:50:0a:e0:f0:1e:5d:23:96:3e:04:4c:60: 76:bd:62:fb:db:08:99:d2:d5:2c:51:e5:9f:0f:da:13:cc:e2: 38:61:06:99:2e:5f:f8:e0:00:97:de:61:7e:b1:6b:38:f4:2f: 4f:ba:08:7d:88:85:8e:f6:2d:c1:b5:33:97:97:e8:93:59:cf: 22:5b:ea:e8:c1:a8:94:66:fa:6e:9b:e3:33:ae:28:69:f5:33: 50:4d:9e:9f:d0:e1:96:0d:3f:94:0d:31:ec:dc:35:c4:5e:8f: e5:49:5b:bc:a9:94:f6:a9:27:cb:bb:15:b0:97:6c:41:d1:90: 0f:f0:cc:12:71:ea:c6:7c:20:2f:a3:01:ef:53:a0:b2:3a:28: ba:13:78:1d:7a:2b:f0:6d:b0:76:79:28:96:e6:e1:b1:bb:dc: e5:de:77:85:51:2b:29:05:46:d3:aa:6d:8e:d8:aa:95:57:cc: d3:70:16:b7:13:08:69:dd:01:07:7a:64:61:60:7a:01:8b:9a: 58:5d:61:35:8d:53:04:bb:bd:6f:35:83:16:d4:64:5d:bf:d5: 64:65:61:34:06:53:bb:43:83:d2:5f:4c:5d:7b:66:09:6b:ba: 1a:c0:a6:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYxMTE0MTQzNjI1WhcNMjYxMTIxMTQzNjI1WjAYMRYwFAYD VQQDEw02YWY4NzFlYS05ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+NPp6BtfODkdZJVfvQA7kSp/Rz3JODPnAT494syF7RLe4D5wRcMLkMVdRqr xrxUrKfui5XUBg8XN5M2h7NtFBSEiabDVAe72go64qm59Vnnmzz6IT5wzcUbcFk2 vMdKl2ktaKqmyFIqZ0SNMNVBWD4uNnovyh1ALRGk3947XydYfb/I6mCD+KoEK3vY NtJwMXcbEEyQcpM+iMljHfftJxR8fg/yYfgUI6ei4hAhestqBZ/G+raSIWXkSvDS 2jZYq0Bsbslw1sxheLrIRDbRhwRaF7T+O6MPh9zQw4Snk9dTR0BE+t3/3523ov4R 5e8Zt7tasLeSCkA0pKBC6iCLYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFeVRCrw 095EMY8FS4eca3eWc+ggMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsvW+UGyLHndGEjfG/UjjsmvVUElAlMJdUArg8B5dI5Y+BExgdr1i+9sImdLV LFHlnw/aE8ziOGEGmS5f+OAAl95hfrFrOPQvT7oIfYiFjvYtwbUzl5fok1nPIlvq 6MGolGb6bpvjM64oafUzUE2en9Dhlg0/lA0x7Nw1xF6P5UlbvKmU9qkny7sVsJds QdGQD/DMEnHqxnwgL6MB71OgsjoouhN4HXor8G2wdnkolubhsbvc5d53hVErKQVG 06ptjtiqlVfM03AWtxMIad0BB3pkYWB6AYuaWF1hNY1TBLu9bzWDFtRkXb/VZGVh NAZTu0OD0l9MXXtmCWu6GsCmeA== -----END CERTIFICATE-----Generated at Sun Nov 15 19:16:01 2026 by rpki-client