$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: WPF9KpCK+wh2AoEqcNvvQB9tekriUzf3WjdjSDbw5Y4= Subject key identifier: 94:6E:9E:7C:2E:8F:25:41:2A:AB:AA:DE:5B:9A:A5:A0:FE:36:3F:C7 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 02F3 Signing time: Tue 03 Nov 2026 01:43:54 +0000 Manifest this update: Tue 03 Nov 2026 01:43:53 +0000 Manifest next update: Tue 10 Nov 2026 01:43:53 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: hWsnMWFcisWZdeXLZxtNBk5kah7a9Rdw7kpeFCsJIpU=) 2: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=) 3: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=) 4: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=) 6: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=) 7: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=) 8: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=) 9: 84EE99E868A911F1B1EBC4147A47A888.roa (hash: z/+T5dr4icEG46i7t+MZU5zchUhuJVVudXp4434069I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 01:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Nov 3 01:43:53 2026 GMT Not After : Nov 10 01:43:53 2026 GMT Subject: CN=6ae93c59-17e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:59:e5:fb:bb:c8:fd:aa:81:2d:10:48:d1: 72:c5:72:92:db:31:41:7a:25:5b:af:92:32:58:e3: 4d:37:f9:e6:cf:2a:bc:a7:d5:15:9f:dd:17:99:9e: 07:0c:90:42:40:e4:01:b2:ca:76:a2:62:99:25:fb: 95:cd:bf:7c:13:60:18:81:68:e2:cc:c4:1d:24:c2: 9c:c1:16:e5:88:9c:4c:fd:c8:01:2e:dd:72:93:28: a4:a6:f7:2f:da:41:d9:74:9c:43:08:42:e1:15:9c: 51:0d:1a:2c:07:32:aa:f3:9a:19:f8:89:8a:dc:0c: f8:08:3d:f6:4c:75:c9:bb:ba:b7:f5:e6:e1:50:ac: 01:38:14:9c:85:5f:34:76:55:a3:69:0c:e1:f6:89: 4d:cb:49:e1:c7:e6:36:de:fb:4d:d3:73:81:a2:ab: b0:44:b7:dc:ac:2f:02:7f:d4:72:34:ae:cc:6a:b1: fb:a3:16:bf:59:e6:f3:e3:0e:25:28:9a:5e:2e:9f: 2f:e6:3d:a2:70:0c:fd:cc:93:c7:4d:45:ea:bc:19: c7:7d:a2:83:af:ba:8d:77:56:83:2b:0f:69:ee:72: 09:09:c2:b9:fd:5a:95:26:5f:2f:27:58:ef:fb:32: 06:c6:a4:a1:27:ea:53:a6:f7:31:4e:a0:1c:60:aa: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6E:9E:7C:2E:8F:25:41:2A:AB:AA:DE:5B:9A:A5:A0:FE:36:3F:C7 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4b:0d:dc:a5:0e:0f:66:8d:a6:6e:25:b1:e3:bd:38:ca:54: ce:64:25:5e:66:bf:3e:59:ca:c0:46:70:41:27:2a:fc:c4:a6: df:39:4e:c8:8e:4c:0b:0b:c7:89:e3:f3:26:c8:64:7a:93:b2: 03:d2:dd:c3:30:7b:4f:2a:ed:63:42:f5:dc:68:be:f9:0c:84: c8:a7:5f:76:03:16:5e:c5:d6:ff:a7:03:fc:bc:a4:81:ee:81: 9f:2a:e8:48:8d:b1:59:7a:61:57:d5:b3:2b:84:31:0d:94:da: 55:d3:09:51:bd:71:c8:a7:6b:86:3c:1a:48:3f:58:f1:ce:8f: e4:af:eb:8c:bf:ce:ad:49:bb:34:e6:e4:74:32:b1:4f:d2:d3: 04:57:f4:ac:79:2c:7f:28:5d:46:83:b5:83:45:19:5d:c5:94: 62:ee:88:dc:01:dc:de:e8:59:f9:04:87:56:b2:c3:2c:06:43: af:48:1a:e8:23:95:51:43:51:3e:c6:08:fe:48:05:ee:39:5a: 95:16:85:44:26:5c:e4:9e:ff:3d:df:3a:1b:8a:38:4e:20:40: aa:13:84:65:0c:31:07:42:4c:ab:3f:2b:82:fb:93:92:82:fa: cc:aa:02:6e:66:f0:87:cd:5b:9a:e6:42:04:44:4c:22:c2:69: d9:5e:7f:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjYxMTAzMDE0MzUzWhcNMjYxMTEwMDE0MzUzWjAYMRYwFAYD VQQDEw02YWU5M2M1OS0xN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutJZ5fu7yP2qgS0QSNFyxXKS2zFBeiVbr5IyWONNN/nmzyq8p9UVn90XmZ4H DJBCQOQBssp2omKZJfuVzb98E2AYgWjizMQdJMKcwRbliJxM/cgBLt1ykyikpvcv 2kHZdJxDCELhFZxRDRosBzKq85oZ+ImK3Az4CD32THXJu7q39ebhUKwBOBSchV80 dlWjaQzh9olNy0nhx+Y23vtN03OBoquwRLfcrC8Cf9RyNK7MarH7oxa/Webz4w4l KJpeLp8v5j2icAz9zJPHTUXqvBnHfaKDr7qNd1aDKw9p7nIJCcK5/VqVJl8vJ1jv +zIGxqShJ+pTpvcxTqAcYKoLawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRunnwu jyVBKquq3luapaD+Nj/HMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARksN3KUOD2aNpm4lseO9OMpUzmQlXma/PlnKwEZwQScq/MSm3zlOyI5MCwvH iePzJshkepOyA9LdwzB7TyrtY0L13Gi++QyEyKdfdgMWXsXW/6cD/Lykge6Bnyro SI2xWXphV9WzK4QxDZTaVdMJUb1xyKdrhjwaSD9Y8c6P5K/rjL/OrUm7NObkdDKx T9LTBFf0rHksfyhdRoO1g0UZXcWUYu6I3AHc3uhZ+QSHVrLDLAZDr0ga6COVUUNR PsYI/kgF7jlalRaFRCZc5J7/Pd86G4o4TiBAqhOEZQwxB0JMqz8rgvuTkoL6zKoC bmbwh81bmuZCBERMIsJp2V5/hA== -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:22 2026 by rpki-client