$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft File: k8AGrOprUHWaPH3DPvhLR6cRfWg.mft (raw, json) Hash identifier: qXyklJftHM+ifQMol6ZjVfH4Mr/MVi/RLYPJUOic16A= Subject key identifier: 12:52:36:3E:8D:DF:5A:66:C4:8C:B9:0F:45:49:9D:FD:19:A5:69:88 Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 Certificate issuer: /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft Manifest number: 2F Signing time: Sun 15 Nov 2026 08:57:55 +0000 Manifest this update: Sun 15 Nov 2026 08:57:55 +0000 Manifest next update: Sun 22 Nov 2026 08:57:55 +0000 Files and hashes: 1: k8AGrOprUHWaPH3DPvhLR6cRfWg.crl (hash: iwa/6VZlHD0t071ks+DELIEbMyEMCHsthcB46MAEch0=) 2: AD1172A4A46511F1B6EFAD894111F970.roa (hash: MeDX9xtee7Adps8/vHko4TVMAm5zSooxiRA8qORbSQU=) 3: EXC8be9JdyHppT7JxqzJe0TXCXw.asa (hash: 93itLPNDswBkIJ+WVnIMTMwxeZsWUrco8IhBc7A8oig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Validity Not Before: Nov 15 08:57:55 2026 GMT Not After : Nov 22 08:57:55 2026 GMT Subject: CN=6af97413-f06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:dd:96:71:df:67:47:58:20:b3:ac:b2:e1: df:d4:31:15:97:f5:69:26:a6:0c:48:4c:cd:ac:d0: 70:3f:30:d1:e1:24:03:43:de:9c:bf:3c:e9:11:32: e7:44:cb:66:85:29:8c:a2:4d:23:3f:04:23:9f:bd: 93:fa:d8:73:14:ae:05:ec:32:58:2b:eb:10:b5:0b: 3a:84:f6:a6:9f:25:0d:fe:c7:cc:25:73:f7:4d:03: 7f:b2:36:c7:2a:eb:ce:e6:ac:c3:fe:bb:10:8b:bf: 6d:88:0a:0c:59:a0:b0:72:9a:c6:db:58:42:d6:93: 58:be:8e:2e:fa:4b:86:b5:e4:d4:55:fd:b6:71:3f: fd:ee:ef:72:03:61:46:4d:c4:a9:15:94:17:9e:75: 0f:93:aa:0d:27:a4:bc:0e:0e:9c:db:85:17:ae:19: 4d:85:8f:31:2a:39:d7:0c:5f:9b:37:5f:f8:bb:a6: 29:75:8e:84:b9:fd:1e:19:34:07:76:a3:2a:d5:54: a7:d9:c9:69:83:89:77:e4:67:6d:63:9d:44:76:51: af:b7:bc:94:2a:02:4c:d8:fe:9f:0f:ff:be:a2:c9: b5:eb:a4:36:83:1d:f5:50:61:d3:81:bf:d4:57:01: 39:5c:ea:df:dc:cf:c1:ba:30:52:1b:cc:c3:58:bc: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:36:3E:8D:DF:5A:66:C4:8C:B9:0F:45:49:9D:FD:19:A5:69:88 X509v3 Authority Key Identifier: keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d6:18:6a:f1:72:e0:8b:5b:f9:37:d7:06:9f:c3:a0:4d:85: 3d:5e:62:b8:41:a5:d5:17:d2:f9:c9:8b:1b:5f:4b:ec:1b:1d: bf:bf:d9:2b:d5:07:33:8b:41:1b:3d:60:b1:e1:0b:35:18:10: e3:68:7e:81:ef:c9:7c:1c:46:16:6d:ab:b4:ed:cd:6e:16:99: 11:06:38:f5:5d:41:d7:d9:c3:76:72:85:75:11:c7:2b:19:45: de:f3:74:a9:83:23:c9:84:d8:2d:26:7f:ed:34:e6:3b:18:8e: b9:2f:aa:0d:e5:d7:42:87:88:86:43:1f:1b:b9:0f:db:56:ba: 31:07:53:9e:e0:98:9f:09:13:38:35:61:57:16:02:16:5c:f1: 85:bc:73:0e:6d:8a:16:d6:e0:63:c1:11:13:65:92:ee:42:1f: 4f:40:c3:f8:03:95:9b:c9:95:c8:b9:b7:4a:a1:95:d7:e6:ca: 7a:a1:80:87:86:39:ee:f3:56:d4:ec:2a:ef:70:68:9e:55:2a: 7f:aa:2f:24:e0:2a:40:22:f9:09:89:78:98:fb:d3:d1:6f:44: f8:80:03:ac:43:69:d9:ba:53:61:43:8c:32:63:6e:86:26:18: ce:1b:cd:67:5b:b8:f6:24:09:63:4e:14:57:ca:4e:ac:11:8e: 91:cd:5f:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkM1NDExMC8GA1UEBRMoOTNDMDA2QUNFQTZCNTA3NTlBM0M3REMzM0VGODRCNDdB NzExN0Q2ODAeFw0yNjExMTUwODU3NTVaFw0yNjExMjIwODU3NTVaMBgxFjAUBgNV BAMTDTZhZjk3NDEzLWYwNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZld2Wcd9nR1ggs6yy4d/UMRWX9WkmpgxITM2s0HA/MNHhJAND3py/POkRMudE y2aFKYyiTSM/BCOfvZP62HMUrgXsMlgr6xC1CzqE9qafJQ3+x8wlc/dNA3+yNscq 687mrMP+uxCLv22ICgxZoLBymsbbWELWk1i+ji76S4a15NRV/bZxP/3u73IDYUZN xKkVlBeedQ+Tqg0npLwODpzbhReuGU2FjzEqOdcMX5s3X/i7pil1joS5/R4ZNAd2 oyrVVKfZyWmDiXfkZ21jnUR2Ua+3vJQqAkzY/p8P/76iybXrpDaDHfVQYdOBv9RX ATlc6t/cz8G6MFIbzMNYvE4JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUElI2Po3f WmbEjLkPRUmd/RmlaYgwHwYDVR0jBBgwFoAUk8AGrOprUHWaPH3DPvhLR6cRfWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyQzU0LzkxNzQxMjIwQTNE MTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhXYVBIM0RQdmhMUjZjUmZX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazhBR3JPcHJVSFdhUEgzRFB2aExSNmNSZldnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy QzU0LzkxNzQxMjIwQTNEMTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhX YVBIM0RQdmhMUjZjUmZXZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZ1hhq8XLgi1v5N9cGn8OgTYU9XmK4QaXVF9L5yYsbX0vsGx2/v9kr1Qczi0Eb PWCx4Qs1GBDjaH6B78l8HEYWbau07c1uFpkRBjj1XUHX2cN2coV1EccrGUXe83Sp gyPJhNgtJn/tNOY7GI65L6oN5ddCh4iGQx8buQ/bVroxB1Oe4JifCRM4NWFXFgIW XPGFvHMObYoW1uBjwRETZZLuQh9PQMP4A5WbyZXIubdKoZXX5sp6oYCHhjnu81bU 7CrvcGieVSp/qi8k4CpAIvkJiXiY+9PRb0T4gAOsQ2nZulNhQ4wyY26GJhjOG81n W7j2JAljThRXyk6sEY6RzV/l -----END CERTIFICATE-----Generated at Sun Nov 15 16:58:48 2026 by rpki-client