$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: 9cZ1AZhqWLEzCu7oYoAuwWDL1k/Z6wU9RnTC2Dh1eKA= Subject key identifier: F8:BB:BE:BA:7D:5E:5A:8A:40:CA:25:9C:D7:72:E1:3A:D2:B8:72:4F Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 02B5 Signing time: Sun 15 Nov 2026 01:42:20 +0000 Manifest this update: Sun 15 Nov 2026 01:42:20 +0000 Manifest next update: Sun 22 Nov 2026 01:42:20 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: Lfm4RT+WKJZKzqLIgHYYlijs2y0jNwkpS19dP+HYow4=) 2: 327147F689B011F19349356D4711F970.roa (hash: ihDtYJVq2PQ5SWPk4tgAwQuLNouh02/KpYG4RBW6HTo=) 3: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: ChbWxifo/6+meKUlWnVzvTz6439KwZeyjHcg5zJTcwI=) 4: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: SnL1PG2+NsLkTmntkoMlK8MLaloc2c+xDMNJk+mY8q8=) 5: E9198B6E91E711F1BB1861D25611F970.roa (hash: xIMbuSgztSC9t/r1Ai4qyUdk1VhLozu7o1gIAnwugtA=) 6: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: tVBR6nv+Wa6lZyjGAKO8lfOoX0W/tb6WbJqBAEHgIOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Nov 15 01:42:20 2026 GMT Not After : Nov 22 01:42:20 2026 GMT Subject: CN=6af90dfc-f6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:dc:a1:9d:58:0f:9a:8a:6d:ae:fd:31:db: 96:8d:52:ce:83:80:ee:6f:ba:fc:c7:f4:57:b8:de: be:ed:d7:7e:ed:6d:7a:a8:52:26:74:b6:46:7a:bc: 0d:8e:07:ee:1f:cc:2b:49:11:9f:6c:48:8f:16:84: c4:23:12:b9:5a:40:0e:be:3c:b3:0b:74:55:0c:a8: fd:b5:88:de:d0:0d:28:d6:0c:92:e6:95:32:70:2d: a3:8f:d0:77:4e:4b:68:aa:46:9c:53:3e:e9:88:84: a7:d0:1b:f6:0a:ed:41:9b:97:de:15:9b:9f:ca:e3: 81:40:3e:22:a3:ec:a7:12:84:66:c6:0b:f9:54:60: b9:5d:20:5a:8f:32:72:96:41:a9:60:8b:cd:32:fe: 5a:b2:80:ff:c3:ca:84:bf:e7:c5:93:47:a1:a2:fa: 53:25:58:c1:17:f6:1e:13:cf:71:10:0e:3d:87:fd: 23:62:23:33:bd:db:d7:d2:05:49:4d:a9:68:c8:2b: 5b:ed:7b:35:ae:06:af:f5:0e:eb:79:59:6a:e1:02: 73:64:ca:91:a1:7e:ef:12:65:6c:d9:f2:ed:2f:a7: 5d:60:af:1c:a7:5e:cf:d4:78:7c:a4:59:b8:a6:71: 14:a0:6e:01:32:9a:d4:8c:98:6b:18:da:76:f0:cf: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:BE:BA:7D:5E:5A:8A:40:CA:25:9C:D7:72:E1:3A:D2:B8:72:4F X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:12:ba:0b:3d:15:d2:50:03:b8:e2:1a:98:77:cf:58:0f:66: 6c:ad:82:0f:5c:57:b1:d6:3c:4b:b7:dc:b7:98:db:61:e2:42: e4:d8:6b:c2:47:10:f6:f9:ef:6b:7d:10:d9:9d:3f:49:9d:23: ef:b9:8c:6b:53:3d:50:f6:c4:3e:55:1a:0c:fa:ee:0b:57:f6: e4:24:ea:67:63:01:af:2e:ec:41:86:26:c3:c0:98:58:1d:32: 2d:92:86:ef:34:08:da:21:1c:5d:6f:62:49:b8:6b:60:fa:01: 8b:85:96:dc:22:92:5e:5f:ee:6e:ea:00:63:3b:09:67:ed:16: 7f:c7:05:6f:a6:48:9d:16:ec:82:38:fb:30:90:32:50:6e:c1: 6e:ef:94:5b:07:de:8a:02:1f:2f:bc:00:02:dd:4e:9d:43:26: d5:8b:be:e6:d0:b5:93:cd:da:37:ef:6a:c9:15:c4:e2:e7:59: 3f:cd:92:90:55:da:22:c8:a8:a6:ea:7a:1b:e9:2a:c8:12:a8: be:bf:8a:52:25:a6:67:22:1c:f8:2f:f1:23:ff:6d:11:56:8a: 19:f6:4d:80:cb:d4:d6:01:92:11:13:f0:1e:93:2e:3c:5c:dc: e7:04:02:2b:b7:59:d2:af:91:33:31:2d:96:43:18:28:9f:5b: 53:20:e0:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjYxMTE1MDE0MjIwWhcNMjYxMTIyMDE0MjIwWjAYMRYwFAYD VQQDEw02YWY5MGRmYy1mNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOHcoZ1YD5qKba79MduWjVLOg4Dub7r8x/RXuN6+7dd+7W16qFImdLZGerwN jgfuH8wrSRGfbEiPFoTEIxK5WkAOvjyzC3RVDKj9tYje0A0o1gyS5pUycC2jj9B3 TktoqkacUz7piISn0Bv2Cu1Bm5feFZufyuOBQD4io+ynEoRmxgv5VGC5XSBajzJy lkGpYIvNMv5asoD/w8qEv+fFk0ehovpTJVjBF/YeE89xEA49h/0jYiMzvdvX0gVJ TaloyCtb7Xs1rgav9Q7reVlq4QJzZMqRoX7vEmVs2fLtL6ddYK8cp17P1Hh8pFm4 pnEUoG4BMprUjJhrGNp28M9HLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi7vrp9 XlqKQMolnNdy4TrSuHJPMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBK6Cz0V0lADuOIamHfPWA9mbK2CD1xXsdY8S7fct5jbYeJC5NhrwkcQ9vnv a30Q2Z0/SZ0j77mMa1M9UPbEPlUaDPruC1f25CTqZ2MBry7sQYYmw8CYWB0yLZKG 7zQI2iEcXW9iSbhrYPoBi4WW3CKSXl/ubuoAYzsJZ+0Wf8cFb6ZInRbsgjj7MJAy UG7Bbu+UWwfeigIfL7wAAt1OnUMm1Yu+5tC1k83aN+9qyRXE4udZP82SkFXaIsio pup6G+kqyBKovr+KUiWmZyIc+C/xI/9tEVaKGfZNgMvU1gGSERPwHpMuPFzc5wQC K7dZ0q+RMzEtlkMYKJ9bUyDgkg== -----END CERTIFICATE-----Generated at Sun Nov 15 17:00:06 2026 by rpki-client