$ rpki-client -vvvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: xW8Q5J2fAoTQ9zZKX7eHxdsYeU73El+n0a4Ji+/7WjY= Subject key identifier: F4:31:1D:29:9A:9D:5A:4F:DD:D5:3B:0E:2F:92:DB:DB:1C:EC:D5:BC Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0865 Signing time: Sat 14 Nov 2026 20:50:00 +0000 Manifest this update: Sat 14 Nov 2026 20:50:00 +0000 Manifest next update: Sat 21 Nov 2026 20:50:00 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: EGczyxHUA24kAwDuoiDIcxrZLis6xLBrdgtR4GCfLhg=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: tFjfeFvirq4K21vPq+LIVuacIhGqj3/ek6525SEORBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Nov 14 20:50:00 2026 GMT Not After : Nov 21 20:50:00 2026 GMT Subject: CN=6af8c978-3751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:2c:05:4f:21:c1:c4:99:b2:2d:1d:de:30: 22:7d:81:7a:85:b5:40:f1:c1:71:e3:fc:33:78:03: 06:98:7d:4a:5d:1f:f8:d0:45:91:e0:29:68:f2:06: cb:e6:e4:9e:25:b0:02:e4:cd:5f:f4:d4:36:04:6e: b1:06:11:b9:d9:98:38:34:a7:e0:2c:06:5b:c8:a5: fa:f8:72:aa:b0:80:73:2d:7d:f2:a1:33:1a:f5:77: 2b:43:03:f3:a9:a6:76:9d:1b:09:be:dd:d7:86:79: 11:0c:c8:f5:b9:8a:cf:5e:7b:38:3b:85:8f:29:91: 2a:7d:e6:e9:dc:53:da:d1:34:d8:08:ab:a3:39:bb: 1d:b5:2e:7b:bc:e4:f1:36:68:40:07:65:52:fb:5e: c3:da:07:83:82:b1:9e:0d:df:97:17:fd:f8:f2:e8: df:70:b0:3f:48:ef:a5:cc:bf:1d:b8:98:f0:4c:49: cb:b5:b9:35:ea:6a:fa:8f:88:3d:1e:35:5e:6b:02: f1:20:ed:9b:80:f1:8f:26:d5:5b:7e:7a:c4:46:fb: 88:7b:dd:63:b7:6a:aa:a2:d4:bd:28:3b:45:c4:31: 3f:2f:ed:2c:61:97:08:ac:95:58:a0:7a:01:df:f9: f7:99:06:db:b1:63:3b:20:26:79:8b:43:79:57:10: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:31:1D:29:9A:9D:5A:4F:DD:D5:3B:0E:2F:92:DB:DB:1C:EC:D5:BC X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a9:74:d5:fd:2d:45:23:79:03:5d:c7:91:8b:3f:e2:ab:1e: 95:eb:01:2f:d8:13:b3:54:d9:39:69:6f:2e:e2:c3:84:e5:02: cc:81:22:5f:32:b8:a8:c4:ad:a2:e4:79:bf:d3:61:51:bc:e5: eb:29:ce:80:51:96:c2:f1:e9:01:9b:1b:25:08:6f:b3:2a:83: 2d:c3:9a:bd:89:35:08:3f:60:1a:3e:ad:85:57:6e:ce:6c:81: 2d:b9:20:cc:84:97:2a:b6:c6:e8:38:2b:2d:f9:a6:ba:20:54: c3:3a:8c:ec:cc:1d:07:44:f8:ac:42:21:7e:29:5a:7f:6c:13: e3:36:a1:22:be:7c:60:88:a0:d1:a3:11:e4:ba:67:1f:a6:e6: 7d:12:2c:5e:2d:6c:94:e3:94:1e:21:32:e4:35:10:66:c9:dc: b6:90:46:09:15:3f:6d:4a:bc:36:00:0f:d6:5c:0f:6a:e0:cc: b3:3a:1f:3a:ff:b5:24:71:4c:13:b3:d0:56:11:f5:ec:ac:65: 16:8f:50:75:5b:c5:50:5d:6f:44:49:c2:c2:ed:90:0e:de:d5: 32:a4:c0:e0:91:e7:20:92:1e:95:3c:98:ff:21:96:e8:b8:72: 8f:98:e0:72:e4:fb:fe:be:f5:2d:db:bb:4e:bf:80:18:c0:19: bc:09:50:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjYxMTE0MjA1MDAwWhcNMjYxMTIxMjA1MDAwWjAYMRYwFAYD VQQDEw02YWY4Yzk3OC0zNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WYsBU8hwcSZsi0d3jAifYF6hbVA8cFx4/wzeAMGmH1KXR/40EWR4Clo8gbL 5uSeJbAC5M1f9NQ2BG6xBhG52Zg4NKfgLAZbyKX6+HKqsIBzLX3yoTMa9XcrQwPz qaZ2nRsJvt3XhnkRDMj1uYrPXns4O4WPKZEqfebp3FPa0TTYCKujObsdtS57vOTx NmhAB2VS+17D2geDgrGeDd+XF/348ujfcLA/SO+lzL8duJjwTEnLtbk16mr6j4g9 HjVeawLxIO2bgPGPJtVbfnrERvuIe91jt2qqotS9KDtFxDE/L+0sYZcIrJVYoHoB 3/n3mQbbsWM7ICZ5i0N5VxAs0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQxHSma nVpP3dU7Di+S29sc7NW8MB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6l01f0tRSN5A13HkYs/4qselesBL9gTs1TZOWlvLuLDhOUCzIEiXzK4qMSt ouR5v9NhUbzl6ynOgFGWwvHpAZsbJQhvsyqDLcOavYk1CD9gGj6thVduzmyBLbkg zISXKrbG6DgrLfmmuiBUwzqM7MwdB0T4rEIhfilaf2wT4zahIr58YIig0aMR5Lpn H6bmfRIsXi1slOOUHiEy5DUQZsnctpBGCRU/bUq8NgAP1lwPauDMszofOv+1JHFM E7PQVhH17KxlFo9QdVvFUF1vREnCwu2QDt7VMqTA4JHnIJIelTyY/yGW6Lhyj5jg cuT7/r71Ldu7Tr+AGMAZvAlQww== -----END CERTIFICATE-----Generated at Sun Nov 15 11:55:26 2026 by rpki-client