$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: ICpMb4m5rm5q08Sr25j+oSvIGBAH23tQcQsSozIfUcs= Subject key identifier: 98:3A:46:1B:E4:2C:65:22:E8:3D:0C:EC:33:EB:6A:5B:65:FD:DC:27 Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2CAC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2C45 Signing time: Sat 14 Nov 2026 15:30:23 +0000 Manifest this update: Sat 14 Nov 2026 15:30:23 +0000 Manifest next update: Sat 21 Nov 2026 15:30:23 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: nz8/1Nvxod2UeH6tGkUJscL4wbG0agBKs2H1woahcI4=) 2: 67651980457511F1A878DB0BB4833773.roa (hash: CbnlijH2x4Ft1TEKptp1p5G8ICI1ZcbvpB+WwaI4aoo=) 3: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: b4dUJUsflstBmfkTo+6WB27BRTM43w5uV9OUP+GZroI=) 4: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: yhb7QiTNwaWZ43QEtEdSQmUgbkqueVHBiH7mFyaEGz0=) 5: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: O1KjNFYquoWK1QcR2byS/JmrbBhF5FfSwYJTB0+MwzI=) 6: 994EDA7E477011F19156235992833773.roa (hash: 1hC10MLLED1ieGexLaVRyCq07RG6S3oek0GO+3joQEk=) 7: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: W75lhz8qeJnkZlqY0a8HErBGtduWKn0r2gMd7akKn1I=) 8: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: ZRgcko4mZDU94zW1mE2zsmeg1CEm3cVuoBFvJp8bDbw=) 9: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: lm86AbCRcdzPDBKNa+uwq/jScnKUTOerK/ZRzjBHp4k=) 10: E8573BE8F1C111F098487417396F56BC.roa (hash: DXYFlPFZJbTgCXiYCSA164GI8iIK5udt+JzmMbupbPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 15:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11436 (0x2cac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Nov 14 15:30:23 2026 GMT Not After : Nov 21 15:30:23 2026 GMT Subject: CN=6af87e8f-f00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:27:f9:b4:d2:ea:47:57:a5:b6:91:a7:fd:fa: fc:e2:56:1c:11:49:1f:ae:11:e5:5b:4d:dc:fd:85: 86:20:f0:97:e0:3c:02:65:87:ba:a7:e8:91:5c:12: 10:b8:b8:ec:57:0b:4d:d4:34:9f:53:99:c2:47:4a: a0:38:5f:d7:08:91:3d:45:83:f0:2e:f9:b8:29:f6: 23:57:41:75:b6:62:54:7f:52:5d:6c:1d:7d:66:8c: b7:f4:fc:ca:f4:3e:ce:68:cd:06:aa:48:1d:de:7d: 89:c6:2f:db:5c:e5:ca:d3:54:f3:af:2c:90:40:7f: be:71:05:6a:19:90:71:4f:7d:da:3a:35:c2:dc:75: a8:eb:01:29:21:a7:9d:0b:04:07:cd:c5:7f:c3:b6: 23:5c:75:2d:bb:ff:ba:04:d3:b6:49:68:8a:06:86: fb:ee:a4:56:ae:0a:1f:e4:b2:8c:a1:f1:ef:9f:c2: 36:25:74:5d:65:cf:ab:b8:ce:95:4f:aa:57:da:1d: 5c:2d:eb:bc:fa:28:13:6e:e1:61:a9:24:fe:0c:7a: 78:80:ac:41:bb:d2:66:d4:f4:23:7c:c2:a6:f1:ac: 78:b7:60:bf:f4:28:13:bd:4b:82:59:f6:91:85:41: a4:0f:44:0c:51:b5:c8:a6:c4:99:1d:6e:e6:07:d0: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:46:1B:E4:2C:65:22:E8:3D:0C:EC:33:EB:6A:5B:65:FD:DC:27 X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:64:a8:91:50:d4:f0:4a:50:e0:6a:8f:ad:ad:e0:c8:1e:0a: c8:df:3a:c4:b3:dc:4a:3c:70:b7:a9:2f:36:64:14:71:41:84: bc:17:4a:ab:5c:7f:6a:ca:dc:4c:7d:fb:2c:33:d2:58:89:04: dc:aa:33:85:5e:34:5f:55:99:b9:70:f7:21:c5:7c:34:69:e9: ed:30:12:23:b5:f9:97:8a:c0:f3:6a:bc:1a:48:f5:20:e2:5e: e2:31:b0:73:3d:ef:a4:82:22:05:d5:07:6d:d5:f4:ae:7e:e1: c6:d6:91:07:12:f6:92:81:65:7a:f4:af:4a:60:65:b7:b7:6b: ac:e6:5a:6f:d7:71:74:d5:e4:67:38:99:93:6a:75:51:e6:28: 11:23:05:b5:54:36:2b:e1:2b:8c:66:14:38:e9:3a:2b:ca:74: ee:4e:e2:8f:be:9f:5d:9d:4c:20:a4:74:00:da:e7:f1:ba:58: 95:36:3d:c1:00:ad:59:d7:99:c6:27:41:49:65:45:38:d3:03: 84:e9:f5:d6:9b:02:12:05:ae:76:d2:85:47:83:78:70:b3:28: eb:32:ee:fc:a2:32:af:98:95:63:00:96:ff:d0:9e:c7:cb:77: 52:15:94:3f:35:cb:25:63:7a:cc:92:dd:56:39:a3:1c:24:0d: bf:44:32:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjYxMTE0MTUzMDIzWhcNMjYxMTIxMTUzMDIzWjAYMRYwFAYD VQQDEw02YWY4N2U4Zi1mMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yf5tNLqR1eltpGn/fr84lYcEUkfrhHlW03c/YWGIPCX4DwCZYe6p+iRXBIQ uLjsVwtN1DSfU5nCR0qgOF/XCJE9RYPwLvm4KfYjV0F1tmJUf1JdbB19Zoy39PzK 9D7OaM0Gqkgd3n2Jxi/bXOXK01TzryyQQH++cQVqGZBxT33aOjXC3HWo6wEpIaed CwQHzcV/w7YjXHUtu/+6BNO2SWiKBob77qRWrgof5LKMofHvn8I2JXRdZc+ruM6V T6pX2h1cLeu8+igTbuFhqST+DHp4gKxBu9Jm1PQjfMKm8ax4t2C/9CgTvUuCWfaR hUGkD0QMUbXIpsSZHW7mB9AYkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJg6Rhvk LGUi6D0M7DPraltl/dwnMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkmSokVDU8EpQ4GqPra3gyB4KyN86xLPcSjxwt6kvNmQUcUGEvBdKq1x/asrc TH37LDPSWIkE3KozhV40X1WZuXD3IcV8NGnp7TASI7X5l4rA82q8Gkj1IOJe4jGw cz3vpIIiBdUHbdX0rn7hxtaRBxL2koFlevSvSmBlt7drrOZab9dxdNXkZziZk2p1 UeYoESMFtVQ2K+ErjGYUOOk6K8p07k7ij76fXZ1MIKR0ANrn8bpYlTY9wQCtWdeZ xidBSWVFONMDhOn11psCEgWudtKFR4N4cLMo6zLu/KIyr5iVYwCW/9Cex8t3UhWU PzXLJWN6zJLdVjmjHCQNv0Qygg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:04:37 2026 by rpki-client