$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.mft File: kcc4r7gdHZNzZnjds8vVT7sAsKo.mft (raw, json) Hash identifier: MQYzWn4i1aU3pyRkKvoBYNP0yyzXOChQNpcwgyv90xs= Subject key identifier: BC:6F:D9:20:CA:C2:E6:B1:90:91:5B:9D:4F:11:18:AD:EE:90:34:C1 Authority key identifier: 91:C7:38:AF:B8:1D:1D:93:73:66:78:DD:B3:CB:D5:4F:BB:00:B0:AA Certificate issuer: /CN=A914DED1/serialNumber=91C738AFB81D1D93736678DDB3CBD54FBB00B0AA Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcc4r7gdHZNzZnjds8vVT7sAsKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.mft Manifest number: 0B Signing time: Sun 15 Nov 2026 09:20:25 +0000 Manifest this update: Sun 15 Nov 2026 09:20:24 +0000 Manifest next update: Sun 22 Nov 2026 09:20:24 +0000 Files and hashes: 1: kcc4r7gdHZNzZnjds8vVT7sAsKo.crl (hash: KeHZ9oDbuFe0yeBSr8LXnltaUeqNH694s5Ks2eJm3eI=) 2: 21050706D36011F1907C164AF665CEF9.roa (hash: 8pvNyegC5F5jssUEWPo3zl71aV2i81fN4EBw5UwUBjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.crl rsync://rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcc4r7gdHZNzZnjds8vVT7sAsKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 09:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DED1, serialNumber=91C738AFB81D1D93736678DDB3CBD54FBB00B0AA Validity Not Before: Nov 15 09:20:24 2026 GMT Not After : Nov 22 09:20:24 2026 GMT Subject: CN=6af97959-e052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:20:db:72:5b:1e:f6:66:c1:e6:a0:71:23: 24:fb:d9:4f:18:c8:23:76:ea:77:41:85:08:3a:3a: d7:25:e7:64:e9:99:d9:18:a3:24:2a:a0:ce:c3:f9: c9:66:7c:3b:15:5c:a1:d3:8f:91:a2:f2:fd:05:12: f1:6a:09:df:8d:8e:61:eb:f5:7a:76:ba:ad:db:51: ab:aa:c7:16:71:5c:3d:c5:8a:04:61:b1:6f:92:74: 0c:c1:9b:d2:91:1e:48:47:0b:b2:8f:f9:c9:3f:83: 77:8a:26:f0:db:22:be:12:4e:2b:32:d8:ca:f8:f3: 07:33:82:d7:3b:1b:a5:2c:a0:21:eb:d4:ba:49:b4: c3:5b:c5:d0:ce:aa:86:1a:9b:ef:3d:23:3a:ed:41: 91:38:cf:c6:f2:45:1c:7d:19:de:5b:e0:9c:f7:75: 99:f0:88:07:c3:56:5d:84:59:87:98:95:6c:c2:d3: 05:1b:44:b2:3e:be:33:30:f3:c5:68:7b:0f:0c:ec: f8:02:2e:c0:95:bf:7f:b9:61:9c:21:a6:24:fb:33: 8e:0f:53:a2:ea:a3:7d:bf:15:e1:9d:1e:bd:d3:21: b2:80:1a:1b:3f:27:8d:fd:c6:40:3e:16:cd:1f:12: e6:09:59:f5:c4:de:6d:59:fa:cc:88:94:d9:3b:ca: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:D9:20:CA:C2:E6:B1:90:91:5B:9D:4F:11:18:AD:EE:90:34:C1 X509v3 Authority Key Identifier: keyid:91:C7:38:AF:B8:1D:1D:93:73:66:78:DD:B3:CB:D5:4F:BB:00:B0:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcc4r7gdHZNzZnjds8vVT7sAsKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DED1/CA5CD1A4D35F11F19A8D2C1BF665CEF9/kcc4r7gdHZNzZnjds8vVT7sAsKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bb:d1:c7:40:9d:7e:63:cc:c0:c9:31:3f:09:7c:f0:92:51: 60:95:80:c2:f7:4a:13:29:9d:f3:0f:69:cd:87:33:d8:46:f3: 7d:74:4b:67:5b:9d:7f:06:75:16:38:a5:4c:21:2c:9b:0b:41: b2:40:6d:7e:99:da:6b:a5:82:4e:84:75:53:1f:80:e7:e1:1d: 71:e6:42:ad:ec:29:6a:9b:c1:eb:70:4e:1b:40:a8:ae:4b:63: 66:3b:65:5f:62:1b:a1:4b:47:de:13:8a:01:2a:ed:b2:d1:48: 7e:e8:00:16:53:03:e6:99:37:80:03:73:d5:60:14:1a:51:66: d7:84:ee:c6:f6:c2:41:a2:96:fe:7d:5c:63:83:92:01:66:a7: 51:e3:cb:f1:ab:1c:a8:df:aa:f9:a3:da:25:eb:fc:ce:b3:d7: da:cb:aa:39:c4:8e:dc:19:6d:60:0c:17:b7:aa:0c:dc:54:2f: ed:48:43:44:10:51:27:6c:03:a2:90:a5:fa:9b:de:8a:72:d2: 7a:c7:41:e2:fa:4b:e2:2c:1e:a6:4a:cb:b9:4f:db:d5:b4:49: a5:60:13:15:5f:70:f9:1b:83:d9:65:52:30:f7:af:0a:32:9d: de:38:7e:a3:da:9f:d0:f0:ac:c5:4a:4e:37:d7:aa:d9:e6:97: 87:71:0f:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REVEMTExMC8GA1UEBRMoOTFDNzM4QUZCODFEMUQ5MzczNjY3OEREQjNDQkQ1NEZC QjAwQjBBQTAeFw0yNjExMTUwOTIwMjRaFw0yNjExMjIwOTIwMjRaMBgxFjAUBgNV BAMTDTZhZjk3OTU5LWUwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqWSDbclse9mbB5qBxIyT72U8YyCN26ndBhQg6Otcl52TpmdkYoyQqoM7D+clm fDsVXKHTj5Gi8v0FEvFqCd+NjmHr9Xp2uq3bUauqxxZxXD3FigRhsW+SdAzBm9KR HkhHC7KP+ck/g3eKJvDbIr4STisy2Mr48wczgtc7G6UsoCHr1LpJtMNbxdDOqoYa m+89IzrtQZE4z8byRRx9Gd5b4Jz3dZnwiAfDVl2EWYeYlWzC0wUbRLI+vjMw88Vo ew8M7PgCLsCVv3+5YZwhpiT7M44PU6Lqo32/FeGdHr3TIbKAGhs/J439xkA+Fs0f EuYJWfXE3m1Z+syIlNk7ynQzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvG/ZIMrC 5rGQkVudTxEYre6QNMEwHwYDVR0jBBgwFoAUkcc4r7gdHZNzZnjds8vVT7sAsKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRERUQxL0NBNUNEMUE0RDM1 RjExRjE5QThEMkMxQkY2NjVDRUY5L2tjYzRyN2dkSFpOelpuamRzOHZWVDdzQXNL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2NjNHI3Z2RIWk56Wm5qZHM4dlZUN3NBc0tvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE RUQxL0NBNUNEMUE0RDM1RjExRjE5QThEMkMxQkY2NjVDRUY5L2tjYzRyN2dkSFpO elpuamRzOHZWVDdzQXNLby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzu9HHQJ1+Y8zAyTE/CXzwklFglYDC90oTKZ3zD2nNhzPYRvN9dEtnW51/BnUW OKVMISybC0GyQG1+mdprpYJOhHVTH4Dn4R1x5kKt7Clqm8HrcE4bQKiuS2NmO2Vf YhuhS0feE4oBKu2y0Uh+6AAWUwPmmTeAA3PVYBQaUWbXhO7G9sJBopb+fVxjg5IB ZqdR48vxqxyo36r5o9ol6/zOs9fay6o5xI7cGW1gDBe3qgzcVC/tSENEEFEnbAOi kKX6m96KctJ6x0Hi+kviLB6mSsu5T9vVtEmlYBMVX3D5G4PZZVIw968KMp3eOH6j 2p/Q8KzFSk4316rZ5peHcQ+l -----END CERTIFICATE-----Generated at Sun Nov 15 21:26:59 2026 by rpki-client