$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: pBnE2sfSaAlYZ9DjkJ6pm9pI8K6F06PJpbCLyNq1TLI= Subject key identifier: 21:ED:01:D4:8D:49:06:4B:C7:8E:3D:47:D2:DA:37:CB:EE:17:7F:8F Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 1109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 10EB Signing time: Wed 04 Nov 2026 17:25:09 +0000 Manifest this update: Wed 04 Nov 2026 17:25:09 +0000 Manifest next update: Wed 11 Nov 2026 17:25:09 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: n1Z/zt1OyDRuzG6QNaHxwbRwW5GBzIOhFIFKjJdmfYY=) 2: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: FSH4LGHmCoYoOJO4j4TtaEvquXPAlXoI4u1Q0paHlwc=) 3: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: sXBQBxueKe1CqsSkcLSZtAl1yOR3L97KsnKbAwvpYXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4361 (0x1109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Nov 4 17:25:09 2026 GMT Not After : Nov 11 17:25:09 2026 GMT Subject: CN=6aeb6a75-e533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:39:fc:d2:de:ef:c8:da:b4:5c:ac:cf:40: e8:31:da:b0:cf:fb:b9:16:98:2c:54:ec:e4:28:15: 1a:a4:5d:54:b2:32:f6:56:d7:66:e3:19:ba:f5:a4: 1c:87:f7:09:ba:67:16:62:11:28:fc:df:2d:02:44: 29:b3:92:45:75:5e:97:83:97:2b:be:ee:b5:43:45: 3c:c9:4d:90:a7:ae:ef:35:9f:5e:3c:50:d8:c9:62: 5f:6a:72:ad:10:52:ba:60:93:5e:79:b2:fd:c5:a0: a7:92:b8:ba:cc:92:11:b8:45:44:61:65:13:9f:b1: af:8b:44:24:06:4b:37:57:bc:00:f8:30:50:69:77: bf:3d:a2:69:dd:4d:1f:69:d7:ed:15:f4:33:da:de: 00:f7:e0:ce:75:87:55:49:93:44:7b:37:0a:ef:f5: 18:49:02:c1:f6:2f:93:11:d0:73:13:e7:d2:0c:8a: c1:47:ff:eb:ea:f7:3a:4b:ec:7f:65:ce:9a:b7:dc: 9a:17:6d:64:94:65:01:b1:aa:7b:27:79:f5:83:f5: 39:82:30:62:77:56:6f:bd:f0:61:53:14:5b:5b:08: df:7a:79:6b:ad:3e:ad:43:de:f1:44:fe:6a:52:ab: 35:49:ca:22:52:e9:ba:3a:a7:37:7f:dc:31:38:bd: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:01:D4:8D:49:06:4B:C7:8E:3D:47:D2:DA:37:CB:EE:17:7F:8F X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:4a:d3:5a:68:c7:e9:df:01:9b:7d:c6:5b:ba:b5:ba:ec: 6c:a6:d0:d9:40:65:ae:5d:d8:8f:38:f2:80:6b:ee:67:cd:08: e5:a6:07:3c:4d:83:bc:3c:05:01:61:d0:4b:de:f8:02:2d:e5: a1:f1:0e:24:49:d4:ec:92:b9:42:51:a3:4a:18:5a:90:27:04: 1b:e1:9d:51:ef:27:02:4d:c2:bb:47:91:19:f1:10:d1:a8:d7: cc:48:e9:50:ff:ff:84:b2:cb:25:48:8e:e9:96:37:90:82:e2: 46:38:f7:41:d3:cc:dc:d6:74:0a:f2:af:aa:8c:4a:08:88:09: 8b:52:9a:62:91:f6:68:37:ad:d7:8f:5c:49:41:b3:be:26:79: d8:0e:9d:b2:86:d9:20:1c:6f:cb:a2:4d:f6:12:ff:51:46:85: 02:b7:fe:2a:f3:c8:be:c1:e3:4b:e1:9c:f4:f0:49:06:19:a3: 29:d5:8e:48:e5:b6:a2:36:ef:52:ce:33:93:a3:2e:6e:95:2a: 86:4b:41:63:27:4b:19:eb:04:d8:b1:7a:b0:66:b4:fc:5f:c2: 26:2a:39:d6:22:21:7f:92:33:4f:1c:5d:c4:0d:21:17:59:ff: f5:50:d9:5e:71:08:f4:32:6b:df:96:3e:7c:ae:ff:56:fb:ef: 01:1b:90:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjYxMTA0MTcyNTA5WhcNMjYxMTExMTcyNTA5WjAYMRYwFAYD VQQDEw02YWViNmE3NS1lNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6I5/NLe78jatFysz0DoMdqwz/u5FpgsVOzkKBUapF1UsjL2Vtdm4xm69aQc h/cJumcWYhEo/N8tAkQps5JFdV6Xg5crvu61Q0U8yU2Qp67vNZ9ePFDYyWJfanKt EFK6YJNeebL9xaCnkri6zJIRuEVEYWUTn7Gvi0QkBks3V7wA+DBQaXe/PaJp3U0f adftFfQz2t4A9+DOdYdVSZNEezcK7/UYSQLB9i+TEdBzE+fSDIrBR//r6vc6S+x/ Zc6at9yaF21klGUBsap7J3n1g/U5gjBid1ZvvfBhUxRbWwjfenlrrT6tQ97xRP5q Uqs1ScoiUum6Oqc3f9wxOL1LZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHtAdSN SQZLx449R9LaN8vuF3+PMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMiRK01pox+nfAZt9xlu6tbrsbKbQ2UBlrl3YjzjygGvuZ80I5aYHPE2DvDwF AWHQS974Ai3lofEOJEnU7JK5QlGjShhakCcEG+GdUe8nAk3Cu0eRGfEQ0ajXzEjp UP//hLLLJUiO6ZY3kILiRjj3QdPM3NZ0CvKvqoxKCIgJi1KaYpH2aDet149cSUGz viZ52A6dsobZIBxvy6JN9hL/UUaFArf+KvPIvsHjS+Gc9PBJBhmjKdWOSOW2ojbv Us4zk6MubpUqhktBYydLGesE2LF6sGa0/F/CJio51iIhf5IzTxxdxA0hF1n/9VDZ XnEI9DJr35Y+fK7/VvvvARuQsw== -----END CERTIFICATE-----Generated at Thu Nov 5 14:59:45 2026 by rpki-client