$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: 30sJFExU2IihxY1aqHzPCFe7jFh5RH07o2FXZCHgITQ= Subject key identifier: 2B:52:2F:42:7F:4D:C2:AB:A7:38:4E:46:2B:FE:22:4C:F5:AF:DD:2D Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 063E Signing time: Sat 14 Nov 2026 22:37:54 +0000 Manifest this update: Sat 14 Nov 2026 22:37:54 +0000 Manifest next update: Sat 21 Nov 2026 22:37:54 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: m+s7TDlnydf+F48GyOGa/V5n9RnjLA7qQK/zhNU6KYM=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ebf0Pq1ZcQTFqHtlNPjAU0kHXeHT/rPIgCSm2nzK2Sw=) 3: 6DD2A340714011F191B402BC77A30FBC.roa (hash: 5RQLeH5JGG0f7y+AD5RK8Ky61/BnNlB61yy95K8JePU=) 4: A486779E6FED11F1B401E8288CA30FBC.roa (hash: UpK9c8N8ZSB4zwZRHjceSr8yRtw/Sm4QRpoWWyjkIM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Nov 14 22:37:54 2026 GMT Not After : Nov 21 22:37:54 2026 GMT Subject: CN=6af8e2c2-3723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:46:c7:6a:44:a8:7c:45:d6:53:5e:6d:a6: 74:f5:55:68:29:24:c9:83:42:49:8e:19:d4:ba:22: df:8f:da:9c:89:78:2a:91:e5:bd:f2:21:6e:97:da: af:1d:24:f5:50:05:66:c2:7b:68:24:77:be:2d:15: 6c:c4:63:77:b8:ea:1f:de:f2:ef:9f:13:a7:7c:25: e6:41:f0:dc:cb:15:32:d4:48:68:67:f9:65:59:6d: 31:1d:3b:88:c2:a1:0b:e8:10:a7:8d:e6:6c:6c:ba: df:31:96:ed:a2:07:de:3a:c7:de:56:36:ee:00:50: 14:f2:8d:82:11:14:04:53:05:ff:21:1a:e8:37:55: 3d:99:50:ec:1d:8a:5e:d7:e4:a8:6e:1c:48:a0:b7: 20:ba:ec:08:56:d0:d6:a3:80:9c:30:3b:58:ba:8c: 69:6f:e4:3d:f1:82:36:73:69:e0:ef:70:55:20:40: ef:45:b6:cd:0f:63:95:9f:73:b1:a4:29:c1:bb:8f: 18:17:b4:8c:08:ce:f0:c1:a9:24:94:c0:71:8d:6a: 32:ce:40:a8:d6:5b:27:5d:c8:2a:fd:b3:d0:5e:e4: e5:6a:73:84:8b:e2:cf:f9:74:80:16:1a:64:44:d5: e4:1e:60:3e:df:4f:81:cc:13:ff:71:b6:81:72:f0: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:2F:42:7F:4D:C2:AB:A7:38:4E:46:2B:FE:22:4C:F5:AF:DD:2D X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:40:03:fa:c4:4e:1d:64:b0:67:f3:db:f2:ef:63:aa:d1: 34:cd:1c:05:70:bc:61:ba:82:29:58:32:90:7d:e1:81:1a:12: ee:05:af:15:ad:52:ce:04:66:5c:04:e4:0d:8b:e0:4c:a4:0c: 4f:44:a7:61:be:3b:1a:40:90:cf:56:af:42:10:77:b2:fe:e2: b0:85:3f:cb:d3:78:2b:2d:76:bd:6a:41:d8:4c:31:21:95:86: ca:1d:5b:fc:0f:ae:4d:21:ba:9c:3f:7c:bd:d5:6c:a4:09:ea: 25:4f:6d:35:41:a4:b1:da:d2:53:34:3e:24:f9:f8:97:b2:8d: bd:bf:4e:cb:c8:e0:4b:ef:39:da:24:c3:86:37:3b:e2:2a:38: 40:0a:1b:a9:42:7c:02:40:29:06:08:6d:c8:88:ba:bb:9d:b4: cb:82:4e:6b:6f:83:95:b2:a9:df:9d:b7:12:94:7a:28:b2:ac: 99:7f:9c:dd:03:da:80:57:59:66:ce:96:f2:80:0f:a2:0f:a0: 30:ca:f1:b8:a9:bc:e4:d0:2c:56:b6:19:79:05:31:2d:f4:8b: a1:08:22:f5:90:cd:1f:da:a8:39:9d:63:f1:22:d8:61:35:d2: 37:00:f1:23:68:cf:24:5d:30:30:67:27:01:16:82:24:62:8a: 63:0d:44:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYxMTE0MjIzNzU0WhcNMjYxMTIxMjIzNzU0WjAYMRYwFAYD VQQDEw02YWY4ZTJjMi0zNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WBGx2pEqHxF1lNebaZ09VVoKSTJg0JJjhnUuiLfj9qciXgqkeW98iFul9qv HST1UAVmwntoJHe+LRVsxGN3uOof3vLvnxOnfCXmQfDcyxUy1EhoZ/llWW0xHTuI wqEL6BCnjeZsbLrfMZbtogfeOsfeVjbuAFAU8o2CERQEUwX/IRroN1U9mVDsHYpe 1+SobhxIoLcguuwIVtDWo4CcMDtYuoxpb+Q98YI2c2ng73BVIEDvRbbND2OVn3Ox pCnBu48YF7SMCM7wwakklMBxjWoyzkCo1lsnXcgq/bPQXuTlanOEi+LP+XSAFhpk RNXkHmA+30+BzBP/cbaBcvBPnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtSL0J/ TcKrpzhORiv+Ikz1r90tMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR79AA/rETh1ksGfz2/LvY6rRNM0cBXC8YbqCKVgykH3hgRoS7gWvFa1SzgRm XATkDYvgTKQMT0SnYb47GkCQz1avQhB3sv7isIU/y9N4Ky12vWpB2EwxIZWGyh1b /A+uTSG6nD98vdVspAnqJU9tNUGksdrSUzQ+JPn4l7KNvb9Oy8jgS+852iTDhjc7 4io4QAobqUJ8AkApBghtyIi6u520y4JOa2+DlbKp3523EpR6KLKsmX+c3QPagFdZ Zs6W8oAPog+gMMrxuKm85NAsVrYZeQUxLfSLoQgi9ZDNH9qoOZ1j8SLYYTXSNwDx I2jPJF0wMGcnARaCJGKKYw1E4g== -----END CERTIFICATE-----Generated at Sun Nov 15 10:50:14 2026 by rpki-client