$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: cUM+d6avqbGAlZGi1l71zi/P75PU3dzPxIgvCQgydpU= Subject key identifier: 33:5A:D6:97:29:E6:A4:07:82:C6:28:BD:33:19:A2:5B:AF:2F:7E:49 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 02E9 Signing time: Sun 15 Nov 2026 01:07:07 +0000 Manifest this update: Sun 15 Nov 2026 01:07:06 +0000 Manifest next update: Sun 22 Nov 2026 01:07:06 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: aFf8nqsp1PBWGSHD/Y9NlpW74XAb/T4PThDVNZ9RR5w=) 2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: cjwShy2R/IX4SYp59PfaHcQX7DFi++AhauYtmORNm1w=) 3: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: u1hB8U1hN6pEx2UctdSv1a5Px7i9y+3zW2IYksB+Ljo=) 4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: kMMi/8OmT0mR/VhcquuqdqDaCulBhHLbbmKSYFipaTY=) 5: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: M5BB+4xyXJ07VUgtkrrHEOoWgM64NxOfbeW68iI1X3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Nov 15 01:07:06 2026 GMT Not After : Nov 22 01:07:06 2026 GMT Subject: CN=6af905bb-b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:d3:dd:60:b8:99:db:3c:2f:0b:45:56:3d: 9d:4c:90:7d:6a:58:3b:da:d3:24:4a:80:68:b8:9b: c1:23:24:7f:9e:cb:0f:95:82:12:90:18:47:40:27: a1:98:b0:19:31:17:3a:52:f8:64:e3:ef:d6:64:f9: b3:c4:a6:9d:0f:69:f9:80:a9:c7:59:1c:22:54:dd: 7b:1f:66:78:a4:eb:0a:33:9c:1d:26:26:41:61:fe: f1:61:76:9a:5c:0c:94:57:3c:63:b7:52:64:aa:09: f8:3c:36:89:60:61:66:b7:d6:28:c2:ce:13:7d:53: 3d:20:2d:3b:95:2c:7f:66:44:f3:38:0f:ee:71:80: f9:81:0d:a6:ff:6d:f7:b3:66:fe:8e:a7:92:fe:03: 46:8e:b1:10:5f:75:dd:4b:38:76:7e:fb:7a:b0:ec: 53:80:5b:61:3c:4f:81:71:67:4c:9f:91:12:6f:5d: c1:7c:d8:7d:16:cb:2b:5a:b8:52:5c:fe:93:89:5f: c7:9f:e5:f5:d1:f4:72:1d:7f:7d:75:2d:66:5e:4c: 3c:3d:cc:dd:7d:2d:32:4e:cc:b5:96:f7:13:40:e3: 1d:dc:82:88:a7:4d:81:cf:dd:c9:7e:e6:19:4c:a7: 3b:5a:ab:d2:79:81:d3:7e:2f:97:73:4e:aa:4c:ca: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:D6:97:29:E6:A4:07:82:C6:28:BD:33:19:A2:5B:AF:2F:7E:49 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:36:1a:4c:8f:97:9d:b4:21:53:4c:99:2c:5e:33:03:34: 34:25:5c:c6:15:02:f2:09:04:24:23:04:c7:f5:0a:75:48:e0: 40:2c:45:f1:e3:a1:4f:21:94:89:f4:93:64:b6:43:da:0f:2d: 8c:10:16:d7:f3:04:cf:56:6b:8d:21:87:7b:7a:36:84:7e:96: 6a:0d:4a:56:8e:e8:f8:80:52:0c:3f:af:e6:15:32:48:bb:8d: a7:14:d1:8a:9f:ca:59:2d:19:98:bb:85:8a:ad:37:f8:3e:17: 32:59:87:79:75:04:3a:e4:10:2b:44:14:f1:55:2e:6c:85:92: be:51:97:81:be:53:d2:7e:31:32:1c:23:b8:64:2b:91:83:70: 42:e7:49:e3:bb:30:a6:de:75:48:0b:0b:bb:42:ff:7a:b6:22: 44:0f:84:91:3a:33:b0:68:ef:8d:04:c3:38:b3:9e:2f:82:29: c0:2f:2e:d9:8f:56:37:91:95:cc:b2:95:ad:29:c9:42:8e:e6: 1b:df:d6:6d:33:f5:ad:39:89:9e:48:5e:0f:81:af:d7:25:b6: c9:08:85:46:57:36:5c:3a:65:1e:68:c3:56:a8:c3:03:dc:4e: be:c8:7c:4a:bf:81:7f:80:1f:45:e3:dd:1a:1f:4b:3a:d0:4b: b4:10:f4:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjYxMTE1MDEwNzA2WhcNMjYxMTIyMDEwNzA2WjAYMRYwFAYD VQQDEw02YWY5MDViYi1iMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgjT3WC4mds8LwtFVj2dTJB9alg72tMkSoBouJvBIyR/nssPlYISkBhHQCeh mLAZMRc6Uvhk4+/WZPmzxKadD2n5gKnHWRwiVN17H2Z4pOsKM5wdJiZBYf7xYXaa XAyUVzxjt1Jkqgn4PDaJYGFmt9Yows4TfVM9IC07lSx/ZkTzOA/ucYD5gQ2m/233 s2b+jqeS/gNGjrEQX3XdSzh2fvt6sOxTgFthPE+BcWdMn5ESb13BfNh9FssrWrhS XP6TiV/Hn+X10fRyHX99dS1mXkw8PczdfS0yTsy1lvcTQOMd3IKIp02Bz93JfuYZ TKc7WqvSeYHTfi+Xc06qTMqHMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNa1pcp 5qQHgsYovTMZoluvL35JMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiE42GkyPl520IVNMmSxeMwM0NCVcxhUC8gkEJCMEx/UKdUjgQCxF8eOhTyGU ifSTZLZD2g8tjBAW1/MEz1ZrjSGHe3o2hH6Wag1KVo7o+IBSDD+v5hUySLuNpxTR ip/KWS0ZmLuFiq03+D4XMlmHeXUEOuQQK0QU8VUubIWSvlGXgb5T0n4xMhwjuGQr kYNwQudJ47swpt51SAsLu0L/erYiRA+EkTozsGjvjQTDOLOeL4IpwC8u2Y9WN5GV zLKVrSnJQo7mG9/WbTP1rTmJnkheD4Gv1yW2yQiFRlc2XDplHmjDVqjDA9xOvsh8 Sr+Bf4AfRePdGh9LOtBLtBD07Q== -----END CERTIFICATE-----Generated at Sun Nov 15 22:06:36 2026 by rpki-client