$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json) Hash identifier: +5ZPjoSqqyecbjSNXDn51kzZf874YtbAYQYhnzhtuj0= Subject key identifier: 1C:6B:3A:AA:6A:36:11:A1:26:18:07:C9:CC:7E:AD:53:D9:45:6C:B7 Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft Manifest number: 08B0 Signing time: Sat 14 Nov 2026 20:33:36 +0000 Manifest this update: Sat 14 Nov 2026 20:33:35 +0000 Manifest next update: Sat 21 Nov 2026 20:33:35 +0000 Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: DngMrRt6yXUf9IjpGTSBl1KVzdLH4j3BqVgE30cJpao=) 2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=) 3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=) 4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Nov 14 20:33:35 2026 GMT Not After : Nov 21 20:33:35 2026 GMT Subject: CN=6af8c5a0-7c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:b8:77:19:82:04:c3:f7:1e:3d:64:92:24: 3b:4b:63:1a:31:09:a6:9e:79:d5:27:2f:16:e2:59: 5f:1a:9f:ba:fd:f3:bc:1c:85:73:e0:5a:ba:75:b0: 20:c5:25:d5:1f:6f:6c:16:1a:07:18:e3:e4:f3:02: de:79:59:75:01:c6:76:d8:3d:e6:be:fc:b6:17:68: df:0e:b3:26:5a:bf:b3:4e:39:32:99:55:ef:2d:e9: 6a:be:8d:da:69:ca:48:b2:4c:fd:aa:e4:db:8e:59: 91:89:02:4e:cc:47:7c:6a:3f:3c:c3:dd:1a:47:45: bd:e4:39:83:51:7c:8a:d5:cf:95:f0:6e:d5:b2:95: 89:f7:1c:4b:c4:68:52:da:63:4d:33:74:4a:6c:a9: f2:4a:18:19:ad:71:d5:6a:91:43:59:fa:1a:89:18: e6:f1:af:ec:a0:a6:ca:8b:3e:ca:a2:ae:ba:ba:71: 95:c1:e3:bf:a6:16:d2:4c:f5:ba:98:94:7c:77:17: b6:3f:de:c0:fa:41:4d:ed:82:e2:44:e2:7f:db:ec: 54:51:e9:e9:4a:7a:0f:31:aa:80:82:cc:5e:95:37: d9:34:af:32:3d:df:a9:2a:b8:73:05:d2:c7:39:9c: b4:39:2d:15:52:cd:0a:19:b6:c1:03:0a:73:30:b0: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6B:3A:AA:6A:36:11:A1:26:18:07:C9:CC:7E:AD:53:D9:45:6C:B7 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7b:64:29:e1:84:ef:72:ca:17:9a:16:09:5e:a2:b4:fa:e0: 6c:67:ad:11:af:da:1f:55:7d:58:c9:4b:ca:07:55:44:3b:f1: cc:93:e2:22:b2:bb:15:4c:24:a9:a8:a6:03:a9:09:e3:f6:96: 96:a7:6e:99:63:25:ee:73:39:e3:24:92:67:7d:67:8e:ed:66: fe:29:0c:b2:6b:81:2e:43:bb:78:3b:9a:30:61:38:10:99:35: 42:ca:62:06:5f:3d:16:38:a3:91:56:62:eb:55:66:84:c8:ed: 30:f4:1f:0a:1e:e2:08:0e:d7:c4:53:67:11:7b:9e:98:c6:40: 51:b0:f4:de:8f:5c:1a:e9:16:6a:63:c3:18:17:64:60:43:7e: af:f2:b7:62:84:45:29:27:40:b9:25:d5:42:af:b5:fd:3c:d4: 3a:7d:1f:92:fa:a5:1e:8e:69:50:a3:31:41:98:dd:a4:a9:15: 76:72:5f:8e:9b:8b:3f:95:46:77:f6:38:7e:91:e3:1f:e9:2a: 2a:fa:61:f1:1f:55:4f:83:08:16:e3:c5:9d:9d:3c:66:ab:ad: be:27:52:08:29:2e:c8:54:e6:6f:f0:48:8d:ad:b5:94:aa:fc: 0f:2f:fa:29:a2:01:0b:18:57:c1:b4:b6:03:80:da:de:7a:24: 77:e2:42:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjYxMTE0MjAzMzM1WhcNMjYxMTIxMjAzMzM1WjAYMRYwFAYD VQQDEw02YWY4YzVhMC03Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6G4dxmCBMP3Hj1kkiQ7S2MaMQmmnnnVJy8W4llfGp+6/fO8HIVz4Fq6dbAg xSXVH29sFhoHGOPk8wLeeVl1AcZ22D3mvvy2F2jfDrMmWr+zTjkymVXvLelqvo3a acpIskz9quTbjlmRiQJOzEd8aj88w90aR0W95DmDUXyK1c+V8G7VspWJ9xxLxGhS 2mNNM3RKbKnyShgZrXHVapFDWfoaiRjm8a/soKbKiz7Koq66unGVweO/phbSTPW6 mJR8dxe2P97A+kFN7YLiROJ/2+xUUenpSnoPMaqAgsxelTfZNK8yPd+pKrhzBdLH OZy0OS0VUs0KGbbBAwpzMLDQfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxrOqpq NhGhJhgHycx+rVPZRWy3MB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL aXdNTjQtcUotay12RjVIeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQntkKeGE73LKF5oWCV6itPrgbGetEa/aH1V9WMlLygdVRDvxzJPiIrK7FUwk qaimA6kJ4/aWlqdumWMl7nM54ySSZ31nju1m/ikMsmuBLkO7eDuaMGE4EJk1Qspi Bl89FjijkVZi61VmhMjtMPQfCh7iCA7XxFNnEXuemMZAUbD03o9cGukWamPDGBdk YEN+r/K3YoRFKSdAuSXVQq+1/TzUOn0fkvqlHo5pUKMxQZjdpKkVdnJfjpuLP5VG d/Y4fpHjH+kqKvph8R9VT4MIFuPFnZ08ZqutvidSCCkuyFTmb/BIja21lKr8Dy/6 KaIBCxhXwbS2A4Da3nokd+JCHA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:55:15 2026 by rpki-client