$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: azcuoILRMpQvilcfl9xIhijjvZRgSBWbr6D+B8rTZzY= Subject key identifier: BB:2B:1E:42:E9:BD:52:A9:AC:0C:D9:B1:D0:81:5A:49:CE:89:8C:D5 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 35C2 Signing time: Sat 14 Nov 2026 14:18:21 +0000 Manifest this update: Sat 14 Nov 2026 14:18:21 +0000 Manifest next update: Sat 21 Nov 2026 14:18:21 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: V3f/BwmWCnEFeGbIwlz2/AmtdYJIzf1ATw11qGTloAg=) 2: FFF66C16B1FA11F18EC9E9F94D11F970.roa (hash: 2mv9ZOAc6mHVkd+OYaS2VGBltCSWoZlTZtwkPDhN2U0=) 3: B683232C65AA11F1B5A6BBF27847A888.roa (hash: Q1GcTAgf2nrtpktPJ+ZVkiLvWbDwB2IXx55xo1QNSIc=) 4: 1566F532B1C111F1A50EDCAD3B11F970.roa (hash: eLxkBOamtm81MpbJ50sALkQHzYmuXzOthatH6ezkZAE=) 5: 1F40296A65AA11F1A2780DB67847A888.roa (hash: 5pA71dkaLyZI4tt6GSYpT0q9d3vNjsFRCh52Rfsg9js=) 6: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: tqtw4ZzPM+7v2OXL4ee9j+OhCHpdq+ETgmzVjNEKuZM=) 7: vGD_i-ufSXp4QvGD4i80b3LhTIQ.asa (hash: fgjYIXWbUTvh0tLaOEUg6nwtsdUtFLyvcmGXgs2vsZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13816 (0x35f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Nov 14 14:18:21 2026 GMT Not After : Nov 21 14:18:21 2026 GMT Subject: CN=6af86dad-7c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:1b:12:e1:b1:c4:ee:43:1b:1f:6a:55:e0: 67:cb:a1:a8:8a:d7:40:5c:e9:59:be:9f:cd:a3:2f: e7:fc:01:61:db:0b:ce:bf:1c:08:c5:de:a9:c1:42: 8b:e4:50:2a:4b:ff:a8:c3:d0:01:ed:fb:99:01:ca: 19:65:ff:21:ca:89:57:b5:6c:57:76:44:90:f6:13: c7:1f:ff:46:c6:d4:64:42:55:a4:4c:d0:33:ba:96: 53:38:17:5b:ad:88:f3:84:99:81:ae:0e:d7:30:58: 35:a1:e4:ee:68:dd:b3:52:5c:d1:0b:fe:c1:3c:84: 9c:40:9c:aa:53:1a:34:03:f1:96:34:a9:20:30:9b: be:c5:89:3d:63:a5:19:c2:7e:b1:0c:2c:c5:1f:2a: 09:e4:69:b7:0c:d4:c6:51:ee:c6:99:65:ef:d9:a9: 1b:59:a7:d4:37:fb:08:78:a0:8c:33:02:bc:97:60: f0:b8:83:c8:b8:2d:21:7f:5c:79:1f:45:8c:19:68: d2:cd:33:88:08:cd:02:be:40:bb:6e:85:0d:dd:76: 07:37:88:e6:df:e3:86:a8:f3:7c:1d:7d:62:f8:ff: df:35:60:87:cd:3e:88:5f:ac:1d:94:f7:4a:79:cd: 2d:32:47:73:6a:30:cb:e4:59:db:0d:83:4c:00:bb: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:1E:42:E9:BD:52:A9:AC:0C:D9:B1:D0:81:5A:49:CE:89:8C:D5 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:31:62:be:0b:78:f4:e2:b0:3e:0d:89:e1:63:7b:3a:96:db: 76:0e:0b:77:b4:4a:6c:83:0b:f0:a1:fc:bd:ef:93:df:fd:13: c7:9a:96:b6:d2:ff:7c:83:1a:50:26:05:8a:58:a7:22:91:55: fc:76:ee:cd:60:4e:2f:2a:ab:43:3a:95:d7:29:28:33:42:62: 61:24:87:bc:66:6b:30:85:6e:37:b8:cc:fa:0b:7e:13:1c:05: 34:8b:49:cf:f8:a0:79:02:b4:07:4f:e1:45:38:ef:76:67:23: 06:36:6e:e6:b9:44:9d:93:5c:60:f5:80:ad:db:07:57:40:ca: b2:28:5f:81:44:35:ce:b2:47:43:48:ca:22:79:d7:e5:3b:64: e5:50:8d:20:c9:9a:16:2f:bc:b0:de:47:ce:bc:2c:41:07:41: df:2e:82:08:7c:e4:d0:4a:d8:31:3d:19:d7:28:13:95:c0:1d: 87:b8:19:c5:45:72:da:74:52:5b:4b:ae:cb:89:f2:d2:e8:cb: 9a:ce:65:8c:a9:7b:73:0b:0c:d5:54:90:50:b1:77:47:e7:66: 8f:09:56:f0:e7:68:78:3f:38:72:f8:74:15:97:de:ad:3a:da: 03:08:60:17:c4:0e:c7:81:e2:0d:8c:c1:35:22:4d:4d:54:cb: 1f:b8:ac:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYxMTE0MTQxODIxWhcNMjYxMTIxMTQxODIxWjAYMRYwFAYD VQQDEw02YWY4NmRhZC03YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOwbEuGxxO5DGx9qVeBny6GoitdAXOlZvp/Noy/n/AFh2wvOvxwIxd6pwUKL 5FAqS/+ow9AB7fuZAcoZZf8hyolXtWxXdkSQ9hPHH/9GxtRkQlWkTNAzupZTOBdb rYjzhJmBrg7XMFg1oeTuaN2zUlzRC/7BPIScQJyqUxo0A/GWNKkgMJu+xYk9Y6UZ wn6xDCzFHyoJ5Gm3DNTGUe7GmWXv2akbWafUN/sIeKCMMwK8l2DwuIPIuC0hf1x5 H0WMGWjSzTOICM0CvkC7boUN3XYHN4jm3+OGqPN8HX1i+P/fNWCHzT6IX6wdlPdK ec0tMkdzajDL5FnbDYNMALvDowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsrHkLp vVKprAzZsdCBWknOiYzVMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdTFivgt49OKwPg2J4WN7Opbbdg4Ld7RKbIML8KH8ve+T3/0Tx5qWttL/fIMa UCYFilinIpFV/HbuzWBOLyqrQzqV1ykoM0JiYSSHvGZrMIVuN7jM+gt+ExwFNItJ z/igeQK0B0/hRTjvdmcjBjZu5rlEnZNcYPWArdsHV0DKsihfgUQ1zrJHQ0jKInnX 5Ttk5VCNIMmaFi+8sN5HzrwsQQdB3y6CCHzk0ErYMT0Z1ygTlcAdh7gZxUVy2nRS W0uuy4ny0ujLms5ljKl7cwsM1VSQULF3R+dmjwlW8OdoeD84cvh0FZferTraAwhg F8QOx4HiDYzBNSJNTVTLH7is0w== -----END CERTIFICATE-----Generated at Sun Nov 15 16:41:57 2026 by rpki-client