$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft File: CIaR8feL2c7-2A021lDWd2emvbA.mft (raw, json) Hash identifier: evU6sWprJspR7gydEjV45YJscIlJ4Ku9ddO+5OUH8KU= Subject key identifier: 78:BF:AA:1B:1D:C1:19:0A:A7:C1:FA:AB:99:A9:2D:49:44:C7:11:08 Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft Manifest number: 089A Signing time: Fri 06 Nov 2026 20:49:18 +0000 Manifest this update: Fri 06 Nov 2026 20:49:17 +0000 Manifest next update: Fri 13 Nov 2026 20:49:17 +0000 Files and hashes: 1: CIaR8feL2c7-2A021lDWd2emvbA.crl (hash: MOG6OWkTXtYI7IwxMar2JiPop7wXwSZCWCm5YUk1TUg=) 2: F126F04A11A911EBB5A4DD83C4F9AE02.roa (hash: gKg5HfquJDWxf6FguB+IjVE9zWcFlZAOKarqs8xULuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 20:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Validity Not Before: Nov 6 20:49:17 2026 GMT Not After : Nov 13 20:49:17 2026 GMT Subject: CN=6aee3d4e-701c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:42:5c:3c:e1:36:cc:ed:21:ed:ea:fa:58: 50:78:24:a5:39:68:43:9a:d8:07:4d:a9:62:39:0e: 34:af:1e:dd:33:3e:2f:ff:61:ea:0a:fc:cd:f3:71: d0:5e:96:01:68:d1:28:b1:20:44:61:cb:ac:6f:db: 9d:d2:72:89:e5:d8:5f:f6:1e:2d:eb:00:c9:9e:4f: 9f:30:5a:4e:ab:76:93:8b:bb:a7:54:fa:f9:c3:f9: f9:68:41:09:8b:75:ec:41:75:35:c0:7d:ac:3f:b0: 6f:35:0d:ac:e4:1c:15:32:ed:41:38:f6:25:e1:12: a0:3a:5c:9b:c4:fd:45:c3:ed:be:ca:14:4d:a5:88: 4b:d9:94:cc:68:e9:5a:39:81:84:a7:57:de:91:ce: 67:d9:63:d5:db:8a:b4:34:dd:78:9b:30:0d:68:ea: 21:d7:7d:ab:35:5a:11:25:2e:60:da:09:a4:a0:92: f8:b7:80:c7:f7:d9:a8:d1:76:b7:a8:f3:7b:a6:67: 02:a0:3b:4e:07:7d:87:30:1f:93:25:25:74:89:af: 34:8f:c4:ea:67:8a:08:3d:40:8b:39:90:83:39:bd: 43:74:a0:e1:11:95:7e:6c:bf:8f:12:ab:c4:5f:fb: 89:ab:18:1f:03:97:98:eb:4e:73:93:2f:1e:0e:40: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:AA:1B:1D:C1:19:0A:A7:C1:FA:AB:99:A9:2D:49:44:C7:11:08 X509v3 Authority Key Identifier: keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:51:c9:b7:d4:c6:9d:81:94:54:01:66:ba:cd:f4:28:d8:b0: 32:8d:fe:c7:59:66:f9:4d:79:08:fd:0e:ae:ec:30:e0:67:92: 64:a2:da:53:c6:20:2e:d1:02:39:23:d0:e3:bc:eb:12:b8:c6: e1:7f:13:43:c8:34:e4:e4:e9:85:2b:17:24:f0:95:f7:63:13: fc:ed:26:4d:a1:aa:d6:57:ad:03:17:c9:0d:06:1b:00:4d:85: 53:8a:22:5c:dc:6f:aa:41:a7:5c:07:45:99:c1:8f:d4:cb:86: c1:5c:93:0d:33:c3:39:eb:10:f8:41:ae:e6:12:53:a2:aa:95: 9e:64:e3:b0:e9:05:84:a5:13:5f:7f:9d:57:90:82:a6:a8:f1: d5:ca:93:bc:59:95:a1:ea:0c:3b:36:02:6d:57:83:6b:c5:0c: f8:80:d7:00:a9:cf:52:a4:14:23:56:93:3c:74:c6:5a:4e:65: 71:0c:b2:d7:41:f1:87:96:0b:25:dc:23:fb:38:6b:31:4c:b3: 5b:58:2c:21:de:be:52:cc:40:19:09:30:05:a3:47:32:4e:39: 04:00:d4:dc:81:3e:36:25:9e:ae:d5:27:84:0c:85:dd:65:f9: 10:4c:90:37:e4:67:b6:63:72:5e:d3:c2:52:76:a4:bb:15:0b: 1a:d3:b6:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RBNEExMTAvBgNVBAUTKDA4ODY5MUYxRjc4QkQ5Q0VGRUQ4MEQzNkQ2NTBENjc3 NjdBNkJEQjAwHhcNMjYxMTA2MjA0OTE3WhcNMjYxMTEzMjA0OTE3WjAYMRYwFAYD VQQDEw02YWVlM2Q0ZS03MDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5RCXDzhNsztIe3q+lhQeCSlOWhDmtgHTaliOQ40rx7dMz4v/2HqCvzN83HQ XpYBaNEosSBEYcusb9ud0nKJ5dhf9h4t6wDJnk+fMFpOq3aTi7unVPr5w/n5aEEJ i3XsQXU1wH2sP7BvNQ2s5BwVMu1BOPYl4RKgOlybxP1Fw+2+yhRNpYhL2ZTMaOla OYGEp1fekc5n2WPV24q0NN14mzANaOoh132rNVoRJS5g2gmkoJL4t4DH99mo0Xa3 qPN7pmcCoDtOB32HMB+TJSV0ia80j8TqZ4oIPUCLOZCDOb1DdKDhEZV+bL+PEqvE X/uJqxgfA5eY605zky8eDkBVLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHi/qhsd wRkKp8H6q5mpLUlExxEIMB8GA1UdIwQYMBaAFAiGkfH3i9nO/tgNNtZQ1ndnpr2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REE0QS8wNTFEQUY1QTBE QzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJjNy0yQTAyMWxEV2QyZW12 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NJYVI4ZmVMMmM3LTJBMDIxbERXZDJlbXZiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REE0QS8wNTFEQUY1QTBEQzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJj Ny0yQTAyMWxEV2QyZW12YkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlHJt9TGnYGUVAFmus30KNiwMo3+x1lm+U15CP0Oruww4GeSZKLaU8YgLtEC OSPQ47zrErjG4X8TQ8g05OTphSsXJPCV92MT/O0mTaGq1letAxfJDQYbAE2FU4oi XNxvqkGnXAdFmcGP1MuGwVyTDTPDOesQ+EGu5hJToqqVnmTjsOkFhKUTX3+dV5CC pqjx1cqTvFmVoeoMOzYCbVeDa8UM+IDXAKnPUqQUI1aTPHTGWk5lcQyy10Hxh5YL Jdwj+zhrMUyzW1gsId6+UsxAGQkwBaNHMk45BADU3IE+NiWertUnhAyF3WX5EEyQ N+RntmNyXtPCUnakuxULGtO2lQ== -----END CERTIFICATE-----Generated at Sun Nov 8 07:58:25 2026 by rpki-client