$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft File: k8AGrOprUHWaPH3DPvhLR6cRfWg.mft (raw, json) Hash identifier: L1SToM8MW2n0W4QeDnJ1icRdrXVnlHpQXJwy/dUg85E= Subject key identifier: 41:95:4F:69:C6:31:59:BD:E2:E4:D2:F5:B2:8C:85:5A:64:ED:8E:83 Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 Certificate issuer: /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft Manifest number: 29 Signing time: Tue 03 Nov 2026 09:56:54 +0000 Manifest this update: Tue 03 Nov 2026 09:56:54 +0000 Manifest next update: Tue 10 Nov 2026 09:56:54 +0000 Files and hashes: 1: k8AGrOprUHWaPH3DPvhLR6cRfWg.crl (hash: cYY/JWCwDB+3GVOJs4GfQ7+KpsHIfxD7U5VEkGHIvg4=) 2: EXC8be9JdyHppT7JxqzJe0TXCXw.asa (hash: 93itLPNDswBkIJ+WVnIMTMwxeZsWUrco8IhBc7A8oig=) 3: AD1172A4A46511F1B6EFAD894111F970.roa (hash: MeDX9xtee7Adps8/vHko4TVMAm5zSooxiRA8qORbSQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Validity Not Before: Nov 3 09:56:54 2026 GMT Not After : Nov 10 09:56:54 2026 GMT Subject: CN=6ae9afe6-c119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:31:4d:a8:04:e6:55:e4:15:ba:7a:98:4f: fe:bc:72:d5:e0:22:d2:96:2f:01:22:5a:43:3c:fe: 3a:df:d7:d8:91:a9:78:df:75:bd:08:b9:1b:d0:1f: bf:e5:94:db:9b:ad:8e:96:fd:7e:b2:f8:96:0d:a8: 46:a6:3c:91:58:97:f0:c0:da:26:ad:be:ed:c6:23: 46:f0:4d:49:74:39:48:aa:d9:9a:6a:73:a2:68:66: e0:8c:1a:58:a8:3a:56:bf:e0:44:28:4d:ea:45:85: 57:75:6e:e3:30:40:30:77:ca:09:82:63:87:21:fd: c9:9b:6d:9b:3b:aa:7c:ec:d7:11:3d:95:9f:37:e2: 65:0f:99:74:b9:74:bd:b1:14:3e:91:e8:7f:c8:84: 09:b9:d8:fc:14:cc:8f:c6:26:e8:2e:b2:c7:93:d3: 9e:1f:83:28:bd:88:c7:19:b7:6a:89:41:e4:4f:d5: c4:80:94:b0:85:62:17:9c:0c:17:b5:54:60:70:00: c5:ea:5b:68:ad:19:24:9c:5f:c2:c4:d7:1e:86:58: a9:9b:a8:10:89:e7:e0:ba:27:d8:19:5b:38:5d:ad: f9:e5:d8:1e:70:e9:a5:40:4c:62:c2:db:d7:59:c1: 5d:6e:2d:28:a5:50:3e:95:e9:b9:49:0d:05:32:5b: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:95:4F:69:C6:31:59:BD:E2:E4:D2:F5:B2:8C:85:5A:64:ED:8E:83 X509v3 Authority Key Identifier: keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5b:29:60:76:0d:be:46:79:c5:73:f4:f8:8b:a3:9e:99:3f: 6b:6c:88:00:41:6c:cd:dc:8f:52:a9:fa:df:e7:4a:c2:d4:c1: 83:8a:7d:f8:33:bf:a7:3b:ba:f8:e5:3d:a3:84:94:4b:e9:82: 16:9d:c8:ad:cf:3e:bc:d1:a4:a3:89:df:e7:ea:61:eb:28:87: 3b:44:52:c1:bc:c8:a7:57:3c:d7:16:41:87:71:f1:22:ed:82: c6:d2:50:81:e3:c2:5d:c4:58:8c:72:75:76:78:fc:ed:e2:f0: 15:d0:7c:f9:5a:16:00:e0:8e:20:5f:1d:c2:d5:39:cf:0d:a0: a7:31:10:c6:7a:f3:35:1e:22:90:4b:66:d3:fd:b1:8f:e6:3d: 85:95:fe:dc:36:c4:9c:41:d7:f6:a9:70:54:fb:6e:92:16:c9: f8:a1:7b:49:77:6b:b5:51:0f:43:d9:74:1e:46:6d:b3:77:bc: f6:f6:ba:ab:6e:35:cb:dd:6f:ad:2e:f7:38:97:51:b6:9f:7f: 98:c2:49:aa:e0:51:34:bb:93:c9:91:b4:2a:07:d9:49:9a:7e: d9:ec:d8:6f:b9:bb:aa:7c:bb:b9:11:82:3d:7e:29:75:76:6c: 9c:22:29:c7:d5:6b:74:2a:8e:f8:db:88:5a:77:35:e3:52:57: 3d:6b:e3:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkM1NDExMC8GA1UEBRMoOTNDMDA2QUNFQTZCNTA3NTlBM0M3REMzM0VGODRCNDdB NzExN0Q2ODAeFw0yNjExMDMwOTU2NTRaFw0yNjExMTAwOTU2NTRaMBgxFjAUBgNV BAMTDTZhZTlhZmU2LWMxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC0jFNqATmVeQVunqYT/68ctXgItKWLwEiWkM8/jrf19iRqXjfdb0IuRvQH7/l lNubrY6W/X6y+JYNqEamPJFYl/DA2iatvu3GI0bwTUl0OUiq2Zpqc6JoZuCMGlio Ola/4EQoTepFhVd1buMwQDB3ygmCY4ch/cmbbZs7qnzs1xE9lZ834mUPmXS5dL2x FD6R6H/IhAm52PwUzI/GJugusseT054fgyi9iMcZt2qJQeRP1cSAlLCFYhecDBe1 VGBwAMXqW2itGSScX8LE1x6GWKmbqBCJ5+C6J9gZWzhdrfnl2B5w6aVATGLC29dZ wV1uLSilUD6V6blJDQUyW/YXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQZVPacYx Wb3i5NL1soyFWmTtjoMwHwYDVR0jBBgwFoAUk8AGrOprUHWaPH3DPvhLR6cRfWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyQzU0LzkxNzQxMjIwQTNE MTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhXYVBIM0RQdmhMUjZjUmZX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazhBR3JPcHJVSFdhUEgzRFB2aExSNmNSZldnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy QzU0LzkxNzQxMjIwQTNEMTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhX YVBIM0RQdmhMUjZjUmZXZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWWylgdg2+RnnFc/T4i6OemT9rbIgAQWzN3I9Sqfrf50rC1MGDin34M7+nO7r4 5T2jhJRL6YIWncitzz680aSjid/n6mHrKIc7RFLBvMinVzzXFkGHcfEi7YLG0lCB 48JdxFiMcnV2ePzt4vAV0Hz5WhYA4I4gXx3C1TnPDaCnMRDGevM1HiKQS2bT/bGP 5j2Flf7cNsScQdf2qXBU+26SFsn4oXtJd2u1UQ9D2XQeRm2zd7z29rqrbjXL3W+t Lvc4l1G2n3+Ywkmq4FE0u5PJkbQqB9lJmn7Z7NhvubuqfLu5EYI9fil1dmycIinH 1Wt0Ko7424hadzXjUlc9a+PS -----END CERTIFICATE-----Generated at Thu Nov 5 05:36:05 2026 by rpki-client