$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: dFbu7pEMq9yHe1fUa+lOWE27T9VH6Hl2mYTLlNLqcNE= Subject key identifier: AA:33:9C:D8:96:79:56:11:11:41:C0:4C:64:19:B3:58:53:3C:14:56 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 0216 Signing time: Sun 15 Nov 2026 03:07:34 +0000 Manifest this update: Sun 15 Nov 2026 03:07:34 +0000 Manifest next update: Sun 22 Nov 2026 03:07:34 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: KZU0FzilnLWMJdDlz+e/HgEGJLXVoDXzzcjt+yyr1FI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Nov 15 03:07:34 2026 GMT Not After : Nov 22 03:07:34 2026 GMT Subject: CN=6af921f6-9443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:85:e5:97:16:aa:cb:53:69:09:12:f6:0f: 16:7b:f3:e2:36:67:c0:9d:0f:4d:6a:87:40:fb:ca: dc:1d:9e:b9:95:f5:e0:30:19:c8:a7:41:81:6d:cf: 8d:5c:49:98:4f:e6:e3:4f:be:14:01:bc:0f:2e:e5: a2:e7:a0:a5:ce:60:a3:99:a7:7d:78:e6:4e:ef:79: a3:9e:3c:9b:01:b4:00:f0:2e:8b:ef:09:6e:ed:e5: 31:5c:8e:34:20:0c:f2:e9:89:d0:c5:a0:ab:ae:09: 96:ed:6a:a8:61:fc:21:ba:a2:70:0c:d4:8e:ca:16: 5b:c0:c2:6b:af:3e:c0:f2:a1:86:20:f3:7f:96:fe: df:4c:20:8c:02:59:e1:2a:00:19:ba:d2:dd:c5:e4: a2:5c:e9:54:a9:4f:cb:f5:ce:8f:7a:ef:0d:17:74: 39:68:9d:8e:de:23:ed:f3:bb:86:ae:65:e1:37:46: f9:d9:50:33:8f:b4:27:66:05:bd:88:cd:e3:2a:25: 83:7c:92:89:2d:e6:8b:2a:d1:97:8d:9a:99:f6:7e: 43:0a:46:34:eb:7a:73:e7:48:c8:37:20:47:19:f2: cc:6c:29:d5:8e:88:a5:85:1b:95:6b:85:d1:40:9a: 04:a6:a3:95:ac:47:21:00:d8:4f:9d:21:49:cb:27: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:33:9C:D8:96:79:56:11:11:41:C0:4C:64:19:B3:58:53:3C:14:56 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:67:36:bc:31:5c:6c:0e:29:4e:81:10:4b:20:cb:2c:b9:a8: ee:30:12:1f:56:8a:b7:43:ce:a5:40:57:2c:a5:bf:98:9d:d6: 37:a0:71:83:62:cc:72:8f:c8:b6:9f:c5:87:38:70:42:22:42: 10:82:0f:3e:81:12:0a:41:6c:a3:18:4b:18:aa:82:d2:7a:97: 0b:82:c5:ae:f5:f5:d5:54:92:18:84:e2:69:d5:ca:ad:d0:c5: 43:70:89:be:06:a6:d1:b2:fe:7f:15:6b:30:d9:d9:e3:30:d8: ae:25:8e:a1:86:65:f0:e8:af:10:dc:b9:24:3f:99:1d:71:89: c4:43:d3:d8:29:65:e5:cc:00:98:d7:b8:70:16:22:16:23:12: a7:04:26:0b:4d:49:c9:e3:17:83:b0:5d:af:a7:93:ac:09:bc: 86:d3:f4:c4:26:62:da:17:96:68:7c:72:9d:d9:e7:a0:49:fe: 84:08:20:74:cc:dd:da:18:8a:88:e6:e2:81:18:b3:2f:9d:33: 07:6c:0d:25:fe:d5:8f:c6:7e:d6:db:d2:b5:89:00:f7:20:28: 61:49:09:c6:81:5f:dd:a9:c3:29:44:5f:97:b0:bd:dd:47:32: c1:9f:73:77:eb:6e:2b:18:27:65:d0:b4:7d:15:1d:32:56:8f: 13:e7:86:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjYxMTE1MDMwNzM0WhcNMjYxMTIyMDMwNzM0WjAYMRYwFAYD VQQDEw02YWY5MjFmNi05NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPSF5ZcWqstTaQkS9g8We/PiNmfAnQ9NaodA+8rcHZ65lfXgMBnIp0GBbc+N XEmYT+bjT74UAbwPLuWi56ClzmCjmad9eOZO73mjnjybAbQA8C6L7wlu7eUxXI40 IAzy6YnQxaCrrgmW7WqoYfwhuqJwDNSOyhZbwMJrrz7A8qGGIPN/lv7fTCCMAlnh KgAZutLdxeSiXOlUqU/L9c6Peu8NF3Q5aJ2O3iPt87uGrmXhN0b52VAzj7QnZgW9 iM3jKiWDfJKJLeaLKtGXjZqZ9n5DCkY063pz50jINyBHGfLMbCnVjoilhRuVa4XR QJoEpqOVrEchANhPnSFJyycS5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoznNiW eVYREUHATGQZs1hTPBRWMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnmc2vDFcbA4pToEQSyDLLLmo7jASH1aKt0POpUBXLKW/mJ3WN6Bxg2LMco/I tp/FhzhwQiJCEIIPPoESCkFsoxhLGKqC0nqXC4LFrvX11VSSGITiadXKrdDFQ3CJ vgam0bL+fxVrMNnZ4zDYriWOoYZl8OivENy5JD+ZHXGJxEPT2Cll5cwAmNe4cBYi FiMSpwQmC01JyeMXg7Bdr6eTrAm8htP0xCZi2heWaHxyndnnoEn+hAggdMzd2hiK iObigRizL50zB2wNJf7Vj8Z+1tvStYkA9yAoYUkJxoFf3anDKURfl7C93UcywZ9z d+tuKxgnZdC0fRUdMlaPE+eGxA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:16:18 2026 by rpki-client