$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: UwPdLwDF1OHZu4NGU4GNOX/6m/CruCSm8txQq/xKQKE= Subject key identifier: AA:76:ED:B4:64:23:60:2D:4E:94:BA:05:4E:CA:7F:F5:8C:30:0D:6D Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 14CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 14A4 Signing time: Wed 04 Nov 2026 16:56:29 +0000 Manifest this update: Wed 04 Nov 2026 16:56:28 +0000 Manifest next update: Wed 11 Nov 2026 16:56:28 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: Mk5a7BQi3X0nr8Yv15arxslVOeRASYlbwzMNoGrC9g4=) 2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: SLeT7bUH2KsDQvpZ4RbBAGhcSHMAsxyJs3SQhAeMy2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5322 (0x14ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Nov 4 16:56:28 2026 GMT Not After : Nov 11 16:56:28 2026 GMT Subject: CN=6aeb63bd-8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:fb:ba:29:c4:63:7a:67:42:ea:fd:87:13: 89:89:6a:bf:14:22:29:b4:70:a3:f9:15:1c:af:2c: 85:40:6b:ad:47:50:d0:b7:89:03:65:fd:7d:b1:7a: 12:c5:d9:b4:b3:00:44:97:bd:ee:a9:f4:36:65:23: 42:2e:03:ff:3d:43:7c:08:d6:56:0a:78:74:79:35: 7d:db:5a:3a:ab:19:a0:83:30:dc:d0:c0:db:ac:3e: c7:6e:c5:04:88:88:85:53:8d:e3:48:c8:19:3b:55: 10:cd:d6:c5:62:3b:1b:59:7f:c3:b3:9f:6a:49:5e: 11:00:58:ef:92:b2:13:a5:da:fb:57:86:16:55:0b: be:87:e2:35:d9:17:07:46:c1:c8:7d:b7:7e:62:ed: 6f:44:f4:de:53:dc:26:bf:14:48:d6:75:5e:dc:38: 83:b3:9b:9e:37:30:25:68:5a:0b:b3:97:1b:29:ca: 26:35:db:02:c5:97:f0:91:a4:9f:60:1c:24:62:02: 0e:4c:09:98:18:02:cd:4d:a5:f2:fa:46:09:fe:0e: a7:28:20:89:cd:e5:42:c9:7b:ad:b3:f5:bf:58:a0: d0:a9:bd:69:40:5c:25:f3:c1:e0:01:66:09:d2:f9: 67:27:80:93:99:ab:e9:4d:cf:fa:fd:42:b6:fe:7a: 69:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:ED:B4:64:23:60:2D:4E:94:BA:05:4E:CA:7F:F5:8C:30:0D:6D X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:e1:48:9c:4f:aa:22:e1:ff:c5:a2:8a:a6:1e:e4:2a:73: d2:f3:e6:e8:73:02:47:6f:2e:86:ac:f5:62:bb:b6:d9:0c:7a: db:9a:3d:33:0e:08:73:0e:24:55:e9:98:72:a1:30:c0:98:3f: f1:24:78:b1:d2:05:04:6a:25:27:bd:44:2d:17:2e:1d:5d:0f: 9a:dc:d9:1f:69:16:7c:04:db:5a:8c:39:5c:d0:be:70:db:f0: 5b:5f:50:37:30:91:93:a7:b3:f8:4f:75:64:c4:c3:9b:f4:43: a1:f5:59:54:7b:bb:9f:ff:10:15:ff:ec:a2:8f:61:9c:5b:4a: 71:24:78:10:45:37:b3:67:19:bf:62:28:ae:e3:c3:0d:c3:9f: 61:49:f0:b9:de:d0:8b:fe:2c:54:79:69:d7:1c:b0:f0:b8:d0: 35:cc:52:69:57:f3:80:36:e3:d7:28:3a:4b:c4:1a:1b:df:fc: 3e:98:16:15:0f:20:91:70:31:e4:c3:68:b5:f3:62:cd:e4:29: b7:c8:c6:2d:22:c5:06:69:92:b7:ec:1e:27:c8:ac:ce:2c:93: 79:68:15:ed:cf:e1:7e:18:52:e0:35:5d:18:1e:3c:68:0c:33: b9:1b:c1:8e:ef:da:ad:79:2a:61:6f:db:1a:05:52:0e:55:2e: ea:31:3e:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjYxMTA0MTY1NjI4WhcNMjYxMTExMTY1NjI4WjAYMRYwFAYD VQQDEw02YWViNjNiZC04ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMj7uinEY3pnQur9hxOJiWq/FCIptHCj+RUcryyFQGutR1DQt4kDZf19sXoS xdm0swBEl73uqfQ2ZSNCLgP/PUN8CNZWCnh0eTV921o6qxmggzDc0MDbrD7HbsUE iIiFU43jSMgZO1UQzdbFYjsbWX/Ds59qSV4RAFjvkrITpdr7V4YWVQu+h+I12RcH RsHIfbd+Yu1vRPTeU9wmvxRI1nVe3DiDs5ueNzAlaFoLs5cbKcomNdsCxZfwkaSf YBwkYgIOTAmYGALNTaXy+kYJ/g6nKCCJzeVCyXuts/W/WKDQqb1pQFwl88HgAWYJ 0vlnJ4CTmavpTc/6/UK2/nppqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKp27bRk I2AtTpS6BU7Kf/WMMA1tMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHFHhSJxPqiLh/8WiiqYe5Cpz0vPm6HMCR28uhqz1Yru22Qx625o9Mw4Icw4k VemYcqEwwJg/8SR4sdIFBGolJ71ELRcuHV0PmtzZH2kWfATbWow5XNC+cNvwW19Q NzCRk6ez+E91ZMTDm/RDofVZVHu7n/8QFf/soo9hnFtKcSR4EEU3s2cZv2IoruPD DcOfYUnwud7Qi/4sVHlp1xyw8LjQNcxSaVfzgDbj1yg6S8QaG9/8PpgWFQ8gkXAx 5MNotfNizeQpt8jGLSLFBmmSt+weJ8isziyTeWgV7c/hfhhS4DVdGB48aAwzuRvB ju/arXkqYW/bGgVSDlUu6jE+4w== -----END CERTIFICATE-----Generated at Thu Nov 5 16:27:18 2026 by rpki-client