$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: r1e0Dalw1M+OrWcen4sYe4TzqIAEWCTVmFFWbIV5BLE= Subject key identifier: 2F:E5:B5:79:04:8C:92:9F:E7:C8:2E:81:4A:2D:EC:24:CF:56:7A:4D Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0249 Signing time: Mon 09 Nov 2026 03:00:30 +0000 Manifest this update: Mon 09 Nov 2026 03:00:29 +0000 Manifest next update: Mon 16 Nov 2026 03:00:29 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 86xWbXoce2h0PloEEUcVaBHrpm9DYq7tyE381A1MOw4=) 2: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=) 3: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=) 4: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=) 6: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=) 7: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=) 8: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=) 9: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Nov 9 03:00:29 2026 GMT Not After : Nov 16 03:00:29 2026 GMT Subject: CN=6af1374e-4c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:b9:cf:b0:0b:98:40:1e:4e:3e:05:89:2d: 56:f2:00:41:6e:4b:95:bd:44:a4:b0:cb:24:70:61: 6d:0c:3a:9d:9e:9e:55:e8:26:f4:fa:e2:ab:9e:08: 48:98:ec:4c:fd:ed:37:b1:63:f3:6c:ed:42:42:80: 92:11:72:13:a6:77:87:08:72:51:06:7d:e3:d0:02: 32:54:a5:00:cc:db:97:7c:86:ca:39:74:31:fa:b3: df:df:48:64:61:c2:ea:ab:69:5d:45:86:d4:16:9b: b1:98:83:bc:aa:e1:7c:c9:81:7c:8d:76:91:ee:bd: 8e:00:e4:4b:b6:59:d7:56:ce:18:7e:1a:31:cd:c6: 3e:9b:37:64:90:f2:e6:34:a0:18:e7:df:32:a8:e0: 7e:15:01:73:25:a8:90:c2:24:ed:b5:b6:d0:56:64: 9b:a0:e8:97:1d:2f:43:4e:45:44:3d:54:99:20:d4: 2a:e2:70:66:99:a1:de:9f:02:ce:4a:c1:22:02:a3: c0:ef:0a:e5:d4:66:41:a4:2c:30:3e:4a:1e:af:2b: 09:db:4f:63:1a:2d:62:ac:2f:6c:bd:ea:15:a7:3d: fa:1e:47:dc:e8:16:78:99:f7:c9:de:1c:9f:3d:6f: 2a:3f:b4:77:bb:20:4d:3d:c9:48:39:08:a9:8f:e5: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:B5:79:04:8C:92:9F:E7:C8:2E:81:4A:2D:EC:24:CF:56:7A:4D X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0c:99:51:6b:21:d5:49:a1:9b:22:cf:ac:09:77:e5:fb:8f: 4c:a3:55:d2:fb:79:5c:2f:fb:29:73:8f:8a:06:73:15:41:e6: d5:c4:83:83:d2:21:fa:2e:e6:70:6a:0b:10:41:31:b9:8b:6f: 76:4a:9a:0a:75:7d:7a:25:36:f6:38:b4:9c:32:bf:31:60:33: 0a:f9:8e:44:87:f3:ac:c2:bb:c0:8e:1d:da:64:de:5e:45:05: 33:69:22:19:24:e6:54:3a:3a:4f:a9:01:eb:15:82:a5:6e:cc: 46:0a:26:97:61:40:62:c0:b7:59:75:96:cd:ef:22:40:77:a5: b8:ba:6e:36:b1:8a:55:9f:97:c9:79:3e:46:80:28:62:3a:47: 3c:91:b6:e3:22:f6:61:30:8f:cd:e4:af:69:db:ec:8f:54:33: b3:c2:1b:a8:20:ef:99:ec:6e:df:82:21:e9:17:be:06:54:ef: 23:21:f7:ee:2a:ff:5d:e0:69:56:3c:d9:ce:1a:84:89:4a:14: 55:00:9e:b3:9e:80:16:20:2c:13:cd:45:80:c8:c8:17:6d:3c: a3:7d:9c:15:85:e6:59:1e:50:6a:24:e5:0a:75:c7:16:4f:1c: e7:94:b8:cb:1b:ea:70:ef:73:12:03:65:eb:9e:38:b9:27:7a: 5a:e9:f1:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYxMTA5MDMwMDI5WhcNMjYxMTE2MDMwMDI5WjAYMRYwFAYD VQQDEw02YWYxMzc0ZS00YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/G5z7ALmEAeTj4FiS1W8gBBbkuVvUSksMskcGFtDDqdnp5V6Cb0+uKrnghI mOxM/e03sWPzbO1CQoCSEXITpneHCHJRBn3j0AIyVKUAzNuXfIbKOXQx+rPf30hk YcLqq2ldRYbUFpuxmIO8quF8yYF8jXaR7r2OAORLtlnXVs4YfhoxzcY+mzdkkPLm NKAY598yqOB+FQFzJaiQwiTttbbQVmSboOiXHS9DTkVEPVSZINQq4nBmmaHenwLO SsEiAqPA7wrl1GZBpCwwPkoerysJ209jGi1irC9sveoVpz36Hkfc6BZ4mffJ3hyf PW8qP7R3uyBNPclIOQipj+WAYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/ltXkE jJKf58gugUot7CTPVnpNMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKAyZUWsh1UmhmyLPrAl35fuPTKNV0vt5XC/7KXOPigZzFUHm1cSDg9Ih+i7m cGoLEEExuYtvdkqaCnV9eiU29ji0nDK/MWAzCvmORIfzrMK7wI4d2mTeXkUFM2ki GSTmVDo6T6kB6xWCpW7MRgoml2FAYsC3WXWWze8iQHeluLpuNrGKVZ+XyXk+RoAo YjpHPJG24yL2YTCPzeSvadvsj1Qzs8IbqCDvmexu34Ih6Re+BlTvIyH37ir/XeBp VjzZzhqEiUoUVQCes56AFiAsE81FgMjIF208o32cFYXmWR5QaiTlCnXHFk8c55S4 yxvqcO9zEgNl6544uSd6Wunxmg== -----END CERTIFICATE-----Generated at Tue Nov 10 11:58:15 2026 by rpki-client