$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: zPS7SxK4TE7BCIP591SPN3tLs9vu5roUfnHdhTaWwG4= Subject key identifier: A0:07:77:DC:80:28:63:93:E0:06:77:B1:14:D6:6F:10:32:44:86:9C Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 0928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 08DA Signing time: Mon 02 Nov 2026 20:40:49 +0000 Manifest this update: Mon 02 Nov 2026 20:40:48 +0000 Manifest next update: Mon 09 Nov 2026 20:40:48 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: UsqEVHYOzvMUxz2IcFJEz3j0hspbyqTsSK6tJV0SR4g=) 2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: 9ZIP36TGPuA+WRwnAa8gUr2BrvoKbE5BS3ngLSX6yCk=) 3: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: v5V577VCnrqD7Nr38ijVh15qoCu6a/0P2DzKbfz479A=) 4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: HY48QgDC7aLjvIjhb7DfizhqM9/pndtnGXqI0rPAH8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 20:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2344 (0x928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Nov 2 20:40:48 2026 GMT Not After : Nov 9 20:40:48 2026 GMT Subject: CN=6ae8f551-5d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:ee:ee:85:a8:5f:27:a0:c1:c7:89:3f:b1: b4:f6:89:c6:78:c3:40:9f:37:64:1d:2c:9a:3e:ee: cc:72:38:01:5e:2b:e2:b8:f8:d9:78:e1:11:9a:50: 0b:16:54:e8:f2:ac:ce:75:2e:8e:55:ea:34:d5:2f: 88:a9:78:93:84:c7:6d:38:d4:18:3c:6e:78:f5:b9: 7e:fe:40:9a:3b:c7:5e:22:cb:63:95:36:89:93:b0: ab:19:87:ed:71:36:8c:f0:f5:66:d0:81:64:a5:85: c2:7b:98:09:39:bd:ed:64:18:2c:77:ca:1b:0f:ea: 40:cd:0d:73:78:65:1f:23:a0:e2:2b:b2:82:44:27: ca:27:19:f6:af:3b:88:a7:54:69:9f:e2:63:43:5e: 5f:4d:97:b8:6a:02:27:f9:71:5a:4b:91:61:a5:a2: da:f5:79:42:a2:f0:48:30:48:f1:98:46:c9:af:54: 15:31:57:f8:ad:1b:9e:ab:c9:b2:1f:54:e4:c8:ac: eb:dd:01:6f:e5:d6:2b:0e:eb:19:b5:92:41:c0:ef: 01:62:99:7e:2e:f2:e2:8b:83:38:2e:b3:a5:2e:26: 37:a7:c0:f9:d7:db:65:99:bf:de:8c:f3:dc:1a:c2: 00:96:13:5a:45:da:f3:6f:ef:20:8f:41:44:18:ff: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:77:DC:80:28:63:93:E0:06:77:B1:14:D6:6F:10:32:44:86:9C X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:79:a5:3e:d8:91:22:2f:09:18:e5:06:37:49:5f:9f:dc:47: c8:e5:dc:52:e6:bd:95:65:a8:83:a5:b6:b2:5c:e9:34:15:95: 1b:3c:40:af:73:a5:87:76:84:64:ca:10:05:b6:c2:13:5e:fa: 06:e7:f9:03:f6:ca:a9:c8:0c:92:fe:e8:0f:4a:8b:0d:83:15: 08:d0:8e:11:a5:0b:9d:a3:bb:3d:7a:c7:31:df:3c:b4:d2:77: 3f:de:90:a5:73:e3:7d:68:93:e9:8b:9a:2b:99:0a:2b:44:82: 1c:9a:22:f7:1c:00:f5:da:10:1c:0c:ef:54:2b:d8:20:82:a7: a9:99:cd:cb:05:15:2a:db:ff:e9:4a:56:8b:77:e9:9d:c3:63: 67:28:ad:03:27:e6:ec:cd:63:79:e6:b2:d5:7e:21:0b:ae:db: 3e:88:e3:4d:48:4b:3b:00:2b:40:8a:50:07:6f:c4:95:ec:5a: 5a:ce:85:44:f6:e5:90:43:5f:e9:f7:4b:a0:b7:87:5a:b0:0b: e0:be:19:0e:f0:ea:80:d3:50:17:1e:af:70:42:00:54:ae:7f: 55:8e:90:59:1b:b5:17:cf:46:58:0e:fc:37:cb:0c:b3:36:53: 4a:4b:68:92:c8:54:91:57:fe:3b:c1:4f:a7:bb:3f:8e:26:05: d5:85:6d:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYxMTAyMjA0MDQ4WhcNMjYxMTA5MjA0MDQ4WjAYMRYwFAYD VQQDEw02YWU4ZjU1MS01ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2nu7oWoXyegwceJP7G09onGeMNAnzdkHSyaPu7McjgBXiviuPjZeOERmlAL FlTo8qzOdS6OVeo01S+IqXiThMdtONQYPG549bl+/kCaO8deIstjlTaJk7CrGYft cTaM8PVm0IFkpYXCe5gJOb3tZBgsd8obD+pAzQ1zeGUfI6DiK7KCRCfKJxn2rzuI p1Rpn+JjQ15fTZe4agIn+XFaS5FhpaLa9XlCovBIMEjxmEbJr1QVMVf4rRueq8my H1TkyKzr3QFv5dYrDusZtZJBwO8BYpl+LvLii4M4LrOlLiY3p8D519tlmb/ejPPc GsIAlhNaRdrzb+8gj0FEGP+9lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAHd9yA KGOT4AZ3sRTWbxAyRIacMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh3mlPtiRIi8JGOUGN0lfn9xHyOXcUua9lWWog6W2slzpNBWVGzxAr3Olh3aE ZMoQBbbCE176Buf5A/bKqcgMkv7oD0qLDYMVCNCOEaULnaO7PXrHMd88tNJ3P96Q pXPjfWiT6YuaK5kKK0SCHJoi9xwA9doQHAzvVCvYIIKnqZnNywUVKtv/6UpWi3fp ncNjZyitAyfm7M1jeeay1X4hC67bPojjTUhLOwArQIpQB2/ElexaWs6FRPblkENf 6fdLoLeHWrAL4L4ZDvDqgNNQFx6vcEIAVK5/VY6QWRu1F89GWA78N8sMszZTSkto kshUkVf+O8FPp7s/jiYF1YVtMQ== -----END CERTIFICATE-----Generated at Wed Nov 4 18:58:48 2026 by rpki-client