$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: B41Ey+J97Vwz5AdwuyvOoHpWtjqdAlNbMmetfrCWlfE= Subject key identifier: F6:ED:40:22:5F:02:C8:04:70:35:50:74:96:D0:8D:37:41:32:2F:CD Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 622A Signing time: Sat 14 Nov 2026 14:15:21 +0000 Manifest this update: Sat 14 Nov 2026 14:15:20 +0000 Manifest next update: Sat 21 Nov 2026 14:15:20 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: yn05yYYUHBnzu1ZWNDmSUV96GEUWSkTjSZUA86qpe9w=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: YDV7BZcSxL/GS299L5qq5wTtV0pYOQjm37aNEWD8Hpo=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: NApQDfsxt7jjKOoha5lUsKRVPKureaiiyrSOLJMc2s4=) 4: 813E372A946711F081C10711C4F9AE02.roa (hash: +aXUNX9qlvBiYmtIZkuO8Q0af6FFXfqW610bes/6qYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Nov 14 14:15:20 2026 GMT Not After : Nov 21 14:15:20 2026 GMT Subject: CN=6af86cf9-3287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:cc:b2:7c:85:08:03:99:e7:d3:36:65:56: 27:42:3d:f0:4f:29:5a:5e:4e:74:c1:78:84:d0:46: 17:bc:2a:fa:30:a0:1e:fd:60:db:dd:85:13:bf:94: 2e:02:7a:41:46:eb:41:fe:df:d5:7a:92:9f:c6:6e: 39:0a:4f:07:f4:79:80:c4:8f:e2:be:05:ed:27:80: e8:fa:b5:84:43:cf:4d:38:be:96:09:54:23:22:75: f0:18:e2:71:3e:42:8a:dd:4d:58:b6:19:27:85:38: 34:d9:b5:b2:4c:ce:dc:89:99:03:ab:0a:b1:03:65: ad:84:6a:dc:52:77:b9:d1:8b:d3:d9:a1:db:21:00: fe:cb:8c:59:70:42:fe:24:fa:44:c2:f8:ec:07:c8: 6e:7e:b3:bb:12:3a:e0:2e:69:00:f4:0d:01:1b:a2: 9a:2d:84:ec:cc:4c:13:d7:04:97:6a:ba:3a:b9:8f: f8:1b:2a:0c:74:b1:05:ec:d1:19:c3:07:bc:66:54: 46:dd:47:24:94:b0:c4:88:27:18:b3:35:0b:50:e1: 87:47:a0:57:ac:21:68:c9:29:e2:49:b5:87:95:1f: 86:9b:72:37:98:78:68:3f:f0:d0:b4:6f:20:13:73: 53:c2:65:30:87:a1:44:27:98:f2:5f:35:8d:6b:13: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:ED:40:22:5F:02:C8:04:70:35:50:74:96:D0:8D:37:41:32:2F:CD X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1b:94:49:2a:6a:f1:77:ca:17:6a:da:e5:cb:a5:2c:9b:fb: 8a:91:69:96:5a:35:3b:15:0e:df:6d:57:b0:a0:fc:fd:81:b4: df:82:fd:c3:5c:80:c4:19:c5:03:7e:1c:26:e6:ac:e8:59:e5: d0:d9:d8:2f:09:68:12:e3:85:8b:46:9e:21:f2:7b:ab:b5:16: f2:a7:05:20:70:2d:c5:0b:da:95:a0:83:ab:c2:fe:6c:0d:63: 79:ad:41:13:b9:c3:27:93:a4:8b:d9:78:ac:9a:94:c4:7d:cd: fe:9b:bf:20:97:bd:98:1a:98:43:9b:76:4e:41:cd:13:c8:86: 35:f6:e7:a4:05:c5:be:24:08:08:f0:45:0e:39:e8:2d:77:c9: 00:5d:de:f0:1c:5f:be:3c:88:69:77:55:90:81:23:0f:48:50: c0:fe:27:e8:60:21:77:2d:88:4b:9e:f5:23:85:a4:13:09:c9: c0:21:4e:05:55:86:1b:c4:ac:8f:e5:90:a8:63:fd:89:db:87: fe:23:42:f3:4f:f7:d5:7c:22:3b:3f:47:55:9c:f9:5a:95:9f: b2:03:8d:68:c3:c0:54:85:83:b7:b0:60:52:13:19:0b:cc:38: cd:b0:e2:ef:28:a2:94:35:1a:87:39:f3:be:7d:d1:ce:dd:eb: 0c:2d:5d:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYxMTE0MTQxNTIwWhcNMjYxMTIxMTQxNTIwWjAYMRYwFAYD VQQDEw02YWY4NmNmOS0zMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAXMsnyFCAOZ59M2ZVYnQj3wTylaXk50wXiE0EYXvCr6MKAe/WDb3YUTv5Qu AnpBRutB/t/VepKfxm45Ck8H9HmAxI/ivgXtJ4Do+rWEQ89NOL6WCVQjInXwGOJx PkKK3U1YthknhTg02bWyTM7ciZkDqwqxA2WthGrcUne50YvT2aHbIQD+y4xZcEL+ JPpEwvjsB8hufrO7EjrgLmkA9A0BG6KaLYTszEwT1wSXaro6uY/4GyoMdLEF7NEZ wwe8ZlRG3UcklLDEiCcYszULUOGHR6BXrCFoySniSbWHlR+Gm3I3mHhoP/DQtG8g E3NTwmUwh6FEJ5jyXzWNaxMPpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbtQCJf AsgEcDVQdJbQjTdBMi/NMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABBuUSSpq8XfKF2ra5culLJv7ipFpllo1OxUO321XsKD8/YG034L9w1yAxBnF A34cJuas6Fnl0NnYLwloEuOFi0aeIfJ7q7UW8qcFIHAtxQvalaCDq8L+bA1jea1B E7nDJ5Oki9l4rJqUxH3N/pu/IJe9mBqYQ5t2TkHNE8iGNfbnpAXFviQICPBFDjno LXfJAF3e8BxfvjyIaXdVkIEjD0hQwP4n6GAhdy2IS571I4WkEwnJwCFOBVWGG8Ss j+WQqGP9iduH/iNC80/31XwiOz9HVZz5WpWfsgONaMPAVIWDt7BgUhMZC8w4zbDi 7yiilDUahznzvn3Rzt3rDC1dNw== -----END CERTIFICATE-----Generated at Sat Nov 14 20:53:23 2026 by rpki-client