$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft File: cGjaz2pbXiZfvAzluaSV8Im24FA.mft (raw, json) Hash identifier: OmQ0ipiIrPnaipjMN5QtPlRPi9WSjmsvDFAmcGdliLQ= Subject key identifier: 00:85:8D:38:99:0D:FF:08:3A:D4:97:87:DD:2C:F8:38:77:BE:2E:77 Authority key identifier: 70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50 Certificate issuer: /CN=A914DB80/serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft Manifest number: 15 Signing time: Thu 05 Nov 2026 10:04:12 +0000 Manifest this update: Thu 05 Nov 2026 10:04:11 +0000 Manifest next update: Thu 12 Nov 2026 10:04:11 +0000 Files and hashes: 1: cGjaz2pbXiZfvAzluaSV8Im24FA.crl (hash: CZi3J7jRuDEFdkoWGKkprcW2R3txmnBbQ9xWDkotz3Y=) 2: LxI9tON6NNjn3bVg0Httl1Wx1SU.asa (hash: qpAq5HHyNv1pYsQKGuoyPlcsxFsA95bB3IWQEzst+8Y=) 3: D2996894BD3111F1A57D50EB5111F970.roa (hash: GRfKnOOMPFxAQIyw+SLp7bii3WJZvJN70Pmrrt/VNpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB80, serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050 Validity Not Before: Nov 5 10:04:11 2026 GMT Not After : Nov 12 10:04:11 2026 GMT Subject: CN=6aec549c-f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:3e:6b:99:11:c5:85:a3:cb:f2:f3:76:76: 3c:57:99:1b:8b:12:99:52:d1:95:77:4d:5f:91:a6: 63:9b:96:51:0f:43:22:b4:e3:3b:4c:8a:b4:07:5a: 25:5b:87:a4:b8:3d:21:b0:96:40:06:22:9b:98:6e: 84:03:91:85:b3:9c:fa:9e:a5:89:e6:80:c9:42:c5: e3:6e:e8:8d:e9:d0:df:4f:a9:17:02:33:81:77:05: e3:08:97:e9:b4:f9:6c:22:71:a8:9b:73:ab:1c:b2: fb:72:83:48:e5:3b:53:1d:4d:a9:ef:a9:cf:86:77: 0d:02:a4:a7:e7:e2:70:f2:6e:86:5f:a2:c8:49:1a: 38:1a:a8:4c:c8:1a:3f:b0:2a:ad:70:b5:0b:1a:78: a3:5d:00:fa:96:af:2b:c2:2b:66:9e:1c:63:c3:32: 34:b8:b1:3d:36:11:f9:cf:1b:4f:7b:e6:4e:39:34: 16:5e:3a:1a:a5:5a:cd:60:74:e9:81:3b:34:7f:b1: ff:60:c2:b5:6a:5d:ea:97:94:46:cc:50:1f:3d:46: 6a:e6:33:81:4d:24:ff:a7:d1:6c:61:22:fc:5c:8d: 97:a7:6e:23:de:3d:06:cd:37:bd:29:a9:ce:9e:d1: 92:a8:82:e9:bc:76:03:48:9a:93:bd:d8:ae:59:7d: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:8D:38:99:0D:FF:08:3A:D4:97:87:DD:2C:F8:38:77:BE:2E:77 X509v3 Authority Key Identifier: keyid:70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f8:bc:39:7d:0e:4f:50:ed:d8:e2:ad:6c:b3:b7:99:ae:c3: 84:b4:08:86:bb:de:e9:58:74:0c:d6:d4:05:ad:75:5d:c3:8b: 09:e3:e1:eb:67:e6:31:76:ab:6b:00:39:cd:d0:7f:d7:d1:78: 7f:07:4c:2e:c9:5b:39:f8:f4:92:28:fd:b1:3c:fd:06:0b:3e: 41:33:dc:80:a8:f0:83:3f:c5:d9:61:d2:ed:8a:09:97:d6:5a: fa:6b:ad:18:60:b6:e1:11:a9:8c:a0:b1:ff:b4:f0:84:3c:4b: c2:da:eb:98:c2:eb:5b:9e:b0:c8:6e:c2:43:88:30:e2:66:6d: 0a:bb:12:ea:05:0b:7a:14:b4:d9:95:9a:4f:ca:69:82:97:76: 6a:cc:b7:d3:f6:b1:3b:9b:2c:8e:ec:3d:1b:40:f1:5f:c8:b3: 39:0d:8a:c3:af:85:13:b1:dc:64:4e:11:78:77:eb:84:b2:10: 84:86:7f:a7:65:8c:60:fc:43:f7:bd:40:7c:ac:24:fa:ab:11: cb:3f:48:31:e8:3e:f4:8c:f8:22:e4:c4:f2:fb:6d:43:02:6e: 99:b0:cf:c2:88:78:73:59:e2:bb:61:ab:6f:27:92:18:9d:dc: ad:fb:2c:18:9f:4a:c5:c6:ab:30:17:f0:32:36:3a:b6:bf:20: 9d:01:a5:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REI4MDExMC8GA1UEBRMoNzA2OERBQ0Y2QTVCNUUyNjVGQkMwQ0U1QjlBNDk1RjA4 OUI2RTA1MDAeFw0yNjExMDUxMDA0MTFaFw0yNjExMTIxMDA0MTFaMBgxFjAUBgNV BAMTDTZhZWM1NDljLWYxYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOtD5rmRHFhaPL8vN2djxXmRuLEplS0ZV3TV+RpmObllEPQyK04ztMirQHWiVb h6S4PSGwlkAGIpuYboQDkYWznPqepYnmgMlCxeNu6I3p0N9PqRcCM4F3BeMIl+m0 +Wwicaibc6scsvtyg0jlO1MdTanvqc+Gdw0CpKfn4nDyboZfoshJGjgaqEzIGj+w Kq1wtQsaeKNdAPqWryvCK2aeHGPDMjS4sT02EfnPG0975k45NBZeOhqlWs1gdOmB OzR/sf9gwrVqXeqXlEbMUB89RmrmM4FNJP+n0WxhIvxcjZenbiPePQbNN70pqc6e 0ZKogum8dgNImpO92K5ZfYrFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAIWNOJkN /wg61JeH3Sz4OHe+LncwHwYDVR0jBBgwFoAUcGjaz2pbXiZfvAzluaSV8Im24FAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQjgwLzFGODkyRDQ0QkQz MDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGlaZnZBemx1YVNWOEltMjRG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0dqYXoycGJYaVpmdkF6bHVhU1Y4SW0yNEZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QjgwLzFGODkyRDQ0QkQzMDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGla ZnZBemx1YVNWOEltMjRGQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCN+Lw5fQ5PUO3Y4q1ss7eZrsOEtAiGu97pWHQM1tQFrXVdw4sJ4+HrZ+Yxdqtr ADnN0H/X0Xh/B0wuyVs5+PSSKP2xPP0GCz5BM9yAqPCDP8XZYdLtigmX1lr6a60Y YLbhEamMoLH/tPCEPEvC2uuYwutbnrDIbsJDiDDiZm0KuxLqBQt6FLTZlZpPymmC l3ZqzLfT9rE7myyO7D0bQPFfyLM5DYrDr4UTsdxkThF4d+uEshCEhn+nZYxg/EP3 vUB8rCT6qxHLP0gx6D70jPgi5MTy+21DAm6ZsM/CiHhzWeK7YatvJ5IYndyt+ywY n0rFxqswF/AyNjq2vyCdAaUl -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:39 2026 by rpki-client