$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: krVq8/9uFWOwqF4I/HXY++PfWj7R+bAhrEvHvq/d5nY= Subject key identifier: 93:09:E2:F1:0B:AA:F9:0F:52:A1:23:F6:86:68:B1:B1:6F:D3:40:F7 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 027B Signing time: Fri 13 Nov 2026 02:11:40 +0000 Manifest this update: Fri 13 Nov 2026 02:11:40 +0000 Manifest next update: Fri 20 Nov 2026 02:11:40 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: ymZ1jTHVs45kII0VZTW99xHuztLmYFtnp5CVe3nJ2OE=) 2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=) 3: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 02:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Nov 13 02:11:40 2026 GMT Not After : Nov 20 02:11:40 2026 GMT Subject: CN=6af671dc-7c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:91:58:ed:4a:d0:e6:eb:2e:e3:88:19:d8: 0e:ad:30:62:0a:33:aa:8f:a2:50:39:39:61:a8:c6: 84:e2:cd:ef:25:c6:e2:e5:44:37:a2:8b:fc:3b:84: 14:31:8f:82:04:4f:87:5d:c0:c8:99:be:f8:94:47: ba:f6:65:12:39:ab:e8:69:1d:d0:fb:20:fe:44:e0: 65:8c:c5:80:6f:13:1d:61:eb:c5:09:a6:99:06:cc: c9:ca:40:f7:19:e2:dc:5f:89:1c:57:ae:b1:90:4d: f6:9c:80:45:72:be:d3:80:b2:ef:b8:76:d2:72:66: 68:cc:95:1e:37:f6:2e:3d:ed:5e:96:e9:c4:cb:82: d0:68:f0:7a:3b:61:53:a3:e8:07:41:62:1d:40:bd: bb:8f:22:50:56:cb:50:65:c6:1a:ed:6d:10:5a:13: d0:0b:82:89:a7:d6:2e:3c:72:77:57:94:1a:80:ae: e9:81:f4:14:86:dc:fa:c1:8f:9b:2b:16:7c:b2:5c: fb:c9:0a:41:5e:ba:9e:3b:19:84:1e:e9:2b:6b:d6: be:ec:af:24:99:cc:7d:80:cb:c8:63:de:aa:a6:d2: fa:a6:1c:94:ac:6e:62:32:23:a5:cc:53:84:b0:8b: 24:73:c0:eb:38:d0:ee:73:42:37:51:ab:77:ae:93: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:09:E2:F1:0B:AA:F9:0F:52:A1:23:F6:86:68:B1:B1:6F:D3:40:F7 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b3:6a:05:a3:35:d0:bb:d8:5b:4d:8e:38:d9:9a:3a:4d:11: e8:21:65:3c:22:f5:c6:c9:43:c9:59:50:37:ed:58:39:54:3d: de:60:8e:f6:bd:3a:02:c4:1a:43:d6:f0:20:21:e4:ef:56:dd: 76:d9:30:b0:99:79:bd:4e:fe:a7:ce:df:84:b1:3a:27:37:a0: a0:19:90:d0:05:7d:3c:c1:c1:ae:d1:8d:bf:d2:d4:8e:7f:06: 80:27:13:20:ed:53:19:9e:b6:27:be:48:a8:e5:d8:f9:88:4a: a7:cb:4b:33:0e:86:c3:d5:c9:f7:c4:93:bd:0a:fb:f2:f5:60: 28:2c:38:7b:58:2b:e0:df:a3:8c:c3:02:13:fe:5a:b2:08:3a: 01:ad:77:9e:ef:9c:4a:21:8c:01:53:ea:ed:d9:cf:31:38:e4: d4:7e:89:fe:df:33:74:42:bb:e4:db:b3:b4:59:00:f1:22:ac: a6:84:fb:7c:f1:d7:81:bd:7d:06:62:57:e5:fe:b6:48:a3:6d: 49:1b:7c:cf:48:7b:90:98:6e:65:2a:6c:89:55:bc:b6:b1:e6: 36:4c:f0:a2:36:8e:6c:79:e1:05:10:21:2a:37:52:9b:25:29: c1:40:44:da:73:86:9c:af:2d:ec:81:56:09:f6:d2:26:ff:62: e5:d4:03:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjYxMTEzMDIxMTQwWhcNMjYxMTIwMDIxMTQwWjAYMRYwFAYD VQQDEw02YWY2NzFkYy03YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzamRWO1K0ObrLuOIGdgOrTBiCjOqj6JQOTlhqMaE4s3vJcbi5UQ3oov8O4QU MY+CBE+HXcDImb74lEe69mUSOavoaR3Q+yD+ROBljMWAbxMdYevFCaaZBszJykD3 GeLcX4kcV66xkE32nIBFcr7TgLLvuHbScmZozJUeN/YuPe1elunEy4LQaPB6O2FT o+gHQWIdQL27jyJQVstQZcYa7W0QWhPQC4KJp9YuPHJ3V5QagK7pgfQUhtz6wY+b KxZ8slz7yQpBXrqeOxmEHukra9a+7K8kmcx9gMvIY96qptL6phyUrG5iMiOlzFOE sIskc8DrONDuc0I3Uat3rpM6hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMJ4vEL qvkPUqEj9oZosbFv00D3MB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7NqBaM10LvYW02OONmaOk0R6CFlPCL1xslDyVlQN+1YOVQ93mCO9r06AsQa Q9bwICHk71bddtkwsJl5vU7+p87fhLE6JzegoBmQ0AV9PMHBrtGNv9LUjn8GgCcT IO1TGZ62J75IqOXY+YhKp8tLMw6Gw9XJ98STvQr78vVgKCw4e1gr4N+jjMMCE/5a sgg6Aa13nu+cSiGMAVPq7dnPMTjk1H6J/t8zdEK75NuztFkA8SKspoT7fPHXgb19 BmJX5f62SKNtSRt8z0h7kJhuZSpsiVW8trHmNkzwojaObHnhBRAhKjdSmyUpwUBE 2nOGnK8t7IFWCfbSJv9i5dQDiw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:09:05 2026 by rpki-client