$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: ByiDnfMpex1kcHuSi9vTE1UEtk85g3ym8py5PSgJKQI= Subject key identifier: CB:70:39:81:E6:E0:63:CD:80:E2:6B:E8:F0:C0:DD:DF:E2:00:C3:97 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: 018B Signing time: Sun 15 Nov 2026 04:54:45 +0000 Manifest this update: Sun 15 Nov 2026 04:54:44 +0000 Manifest next update: Sun 22 Nov 2026 04:54:44 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: Iw0Prdl5JWZAY0LKG4cMY9xA0Q+xvKS9Lw9OG62Cc50=) 2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: Z/SrkSQ3T+H42p10G5ggeapuYQPaVSS5Kle4HYUjqBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Nov 15 04:54:44 2026 GMT Not After : Nov 22 04:54:44 2026 GMT Subject: CN=6af93b14-11f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:c7:1f:36:24:ec:e7:7f:da:c5:82:8b:ea: 85:4d:07:e0:d6:25:fc:3c:1b:36:b0:9a:a3:ed:14: 21:22:30:fa:91:22:d1:79:8f:87:0e:bb:aa:96:e5: 9a:83:a7:b3:77:f0:a8:71:39:9c:13:e3:cd:ad:c2: 6b:e0:dd:22:89:a0:0d:a0:a8:80:28:cd:f6:f3:eb: d4:d7:25:66:a0:51:06:a4:bb:b5:74:2a:a8:8f:b6: 95:5c:18:b6:18:76:9c:a1:19:a7:14:02:9b:d0:9e: 28:17:6d:6c:25:6f:18:cf:6b:27:69:96:1d:04:8f: 58:8b:6d:ab:7d:65:15:d9:b0:f1:90:0b:7d:86:28: 30:24:11:05:0b:58:e1:7e:c8:cc:d3:95:eb:61:77: fe:93:aa:fe:94:71:04:b4:70:47:ee:21:7b:ed:19: 00:c4:8e:43:c2:88:ad:c0:ee:66:37:69:cb:d0:cf: 2f:66:d3:c5:0e:e5:0c:9f:d9:23:60:b6:62:74:86: df:61:91:af:ba:dd:2f:15:06:c3:4f:c2:81:0f:34: 3a:c4:21:0b:f1:0b:ae:dd:62:cb:3d:33:08:33:84: d2:29:9c:d3:dd:8d:d3:6c:97:84:c8:ac:5a:06:83: 4f:31:79:2b:49:10:71:54:1d:27:cb:f3:08:25:95: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:70:39:81:E6:E0:63:CD:80:E2:6B:E8:F0:C0:DD:DF:E2:00:C3:97 X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:04:a1:8f:0d:6c:d6:8f:45:0d:41:68:92:8a:08:2c:90:84: d5:5b:5b:a8:6c:f9:64:cf:fa:43:98:4e:3a:8d:57:70:9c:8b: 4c:c4:85:25:e4:e7:8a:09:67:2b:79:d8:6d:c0:b9:91:15:82: c7:e2:f2:68:4f:cc:b7:d6:fa:95:c9:7b:7a:f0:74:c0:82:be: 86:78:26:ff:37:84:e7:02:01:89:d8:4c:b6:87:00:b9:ec:c8: b4:3a:78:de:ae:d3:77:b2:4a:9f:6e:27:4f:97:23:67:85:55: a8:0f:a0:2e:d4:63:95:c1:26:c8:b9:f2:26:ab:9b:89:5c:bd: c8:9f:fd:42:29:98:f8:29:26:b2:92:78:46:71:df:82:93:40: 3b:e6:7f:67:c9:e5:76:c3:a9:18:eb:13:b6:0c:f3:76:7c:bb: 49:3f:4c:66:57:df:18:2e:7e:26:25:f4:90:98:38:c5:a3:0f: b5:e0:c2:21:d3:ea:f7:1a:08:5a:4b:b8:60:e3:e6:ea:83:11: 0d:30:33:3b:2d:b0:56:68:c8:73:fb:70:34:a2:41:db:27:8d: 3e:72:1f:09:f1:41:13:71:9a:96:81:ce:b7:ca:19:05:5b:76: 2b:8d:23:3d:5e:7a:a9:5c:9e:23:87:5d:42:86:26:ee:d0:ea: fb:54:33:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjYxMTE1MDQ1NDQ0WhcNMjYxMTIyMDQ1NDQ0WjAYMRYwFAYD VQQDEw02YWY5M2IxNC0xMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC3HHzYk7Od/2sWCi+qFTQfg1iX8PBs2sJqj7RQhIjD6kSLReY+HDruqluWa g6ezd/CocTmcE+PNrcJr4N0iiaANoKiAKM328+vU1yVmoFEGpLu1dCqoj7aVXBi2 GHacoRmnFAKb0J4oF21sJW8Yz2snaZYdBI9Yi22rfWUV2bDxkAt9higwJBEFC1jh fsjM05XrYXf+k6r+lHEEtHBH7iF77RkAxI5DwoitwO5mN2nL0M8vZtPFDuUMn9kj YLZidIbfYZGvut0vFQbDT8KBDzQ6xCEL8Quu3WLLPTMIM4TSKZzT3Y3TbJeEyKxa BoNPMXkrSRBxVB0ny/MIJZWKaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtwOYHm 4GPNgOJr6PDA3d/iAMOXMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwAShjw1s1o9FDUFokooILJCE1VtbqGz5ZM/6Q5hOOo1XcJyLTMSFJeTnigln K3nYbcC5kRWCx+LyaE/Mt9b6lcl7evB0wIK+hngm/zeE5wIBidhMtocAuezItDp4 3q7Td7JKn24nT5cjZ4VVqA+gLtRjlcEmyLnyJqubiVy9yJ/9QimY+CkmspJ4RnHf gpNAO+Z/Z8nldsOpGOsTtgzzdny7ST9MZlffGC5+JiX0kJg4xaMPteDCIdPq9xoI Wku4YOPm6oMRDTAzOy2wVmjIc/twNKJB2yeNPnIfCfFBE3GaloHOt8oZBVt2K40j PV56qVyeI4ddQoYm7tDq+1Qz7Q== -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:59 2026 by rpki-client