$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.mft File: vL8SeWNlHMM_a7aNXevQW-GHTOM.mft (raw, json) Hash identifier: tLdyHijKdODrbPGURBQv8W35pHJxiX6rtd019DpT4lE= Subject key identifier: E4:55:6D:B0:02:78:ED:85:BC:FC:06:38:55:E2:61:D4:31:8C:EE:08 Authority key identifier: BC:BF:12:79:63:65:1C:C3:3F:6B:B6:8D:5D:EB:D0:5B:E1:87:4C:E3 Certificate issuer: /CN=A917EBAA/serialNumber=BCBF127963651CC33F6BB68D5DEBD05BE1874CE3 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.mft Manifest number: 09 Signing time: Thu 05 Nov 2026 10:14:02 +0000 Manifest this update: Thu 05 Nov 2026 10:14:02 +0000 Manifest next update: Thu 12 Nov 2026 10:14:02 +0000 Files and hashes: 1: vL8SeWNlHMM_a7aNXevQW-GHTOM.crl (hash: 85uEmv4tltuQHjGy5xo41CD+vs1V3lrNhVSKu2baPV8=) 2: AC38C0F6D40511F18C8F75EC2866CEF9.roa (hash: TX6SOZtlOKLo8jNFken+KMZIiH3LPHRhwbfk+Qx/ls8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.crl rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EBAA, serialNumber=BCBF127963651CC33F6BB68D5DEBD05BE1874CE3 Validity Not Before: Nov 5 10:14:02 2026 GMT Not After : Nov 12 10:14:02 2026 GMT Subject: CN=6aec56ea-c2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:aa:42:d4:69:e1:be:f7:01:9e:38:52:ed: 67:d8:1f:ca:80:89:6b:44:0c:c3:27:47:6b:0d:4e: a3:e4:2c:6e:29:af:4e:80:f0:4a:eb:1a:d5:fe:88: 84:05:db:a0:e1:48:5d:d1:84:16:bc:13:f9:f5:bb: 72:46:5e:0e:5c:08:34:6d:d6:2e:a8:4e:ca:a8:d7: b0:f7:a7:35:ed:db:c3:a9:c5:38:43:7d:9e:b7:a7: b9:b1:40:38:ce:36:b6:c6:70:7b:ad:a5:97:fe:2e: e9:29:ae:32:4c:49:3c:ff:21:b5:30:df:55:9e:02: e4:72:17:fe:e9:7f:ea:66:65:e7:31:39:ab:cb:16: f0:aa:e7:5d:f2:7b:33:c9:cb:15:cd:59:21:4b:9a: ce:6c:a4:9f:ab:30:c1:31:9d:0d:0b:fd:1b:8c:3a: 4a:bf:33:1e:12:02:f6:ba:c1:b2:5d:47:fe:26:2c: 9c:19:7e:66:54:e5:8c:17:c3:7d:06:2c:52:05:98: dc:9e:b1:83:f3:88:29:ce:2b:30:20:e4:2d:f2:e8: ca:de:80:60:00:3a:13:81:5d:dd:7b:47:40:24:2e: ad:21:6c:81:27:9d:9b:34:96:d2:28:43:5a:93:f2: b4:b0:3f:88:40:df:79:85:e6:f6:8a:7e:20:3d:e6: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:55:6D:B0:02:78:ED:85:BC:FC:06:38:55:E2:61:D4:31:8C:EE:08 X509v3 Authority Key Identifier: keyid:BC:BF:12:79:63:65:1C:C3:3F:6B:B6:8D:5D:EB:D0:5B:E1:87:4C:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:ce:8e:cd:9e:f0:3c:2e:80:45:1d:0a:be:83:40:b8:e2: ab:0f:74:ab:e4:77:3b:38:8b:ab:6b:20:d8:51:78:14:d2:4c: 19:e8:10:a3:33:9c:fe:81:38:69:89:02:93:71:82:b2:52:ad: cd:01:c0:96:6f:df:02:b5:ca:6d:bb:15:1b:6f:27:84:9a:58: 8e:13:04:07:37:d1:a5:33:dd:f2:69:aa:2e:42:8e:a0:94:17: f1:ac:9f:c8:c5:cf:f6:96:ad:cc:a6:c2:04:92:8e:52:64:81: 85:d4:12:3c:dd:14:94:ec:6a:5d:b4:26:a5:2a:44:c7:08:c6: 42:4f:70:c3:28:99:eb:8e:1e:8a:71:9f:f5:4e:f6:d8:80:1c: 86:f9:2d:b9:b0:73:87:85:bc:91:a5:0c:b5:aa:4b:c3:05:01: f6:65:56:2d:5a:b6:16:81:ab:86:d7:ca:26:21:7f:98:cc:6b: 6d:59:bc:d0:89:27:87:a4:c1:14:5d:d3:3b:e8:fb:4d:f8:ee: 4e:ed:8a:93:f1:a0:ab:09:d7:00:7a:14:d1:e0:92:d5:52:a4: 23:c5:1a:f6:bc:c5:89:f1:02:8f:fa:44:f8:2b:89:f1:d5:3e: 5a:8d:42:af:68:11:b9:55:8a:6c:d0:46:04:75:80:29:05:f8: 94:08:df:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUJBQTExMC8GA1UEBRMoQkNCRjEyNzk2MzY1MUNDMzNGNkJCNjhENURFQkQwNUJF MTg3NENFMzAeFw0yNjExMDUxMDE0MDJaFw0yNjExMTIxMDE0MDJaMBgxFjAUBgNV BAMTDTZhZWM1NmVhLWMyZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8OapC1GnhvvcBnjhS7WfYH8qAiWtEDMMnR2sNTqPkLG4pr06A8ErrGtX+iIQF 26DhSF3RhBa8E/n1u3JGXg5cCDRt1i6oTsqo17D3pzXt28OpxThDfZ63p7mxQDjO NrbGcHutpZf+LukprjJMSTz/IbUw31WeAuRyF/7pf+pmZecxOavLFvCq513yezPJ yxXNWSFLms5spJ+rMMExnQ0L/RuMOkq/Mx4SAva6wbJdR/4mLJwZfmZU5YwXw30G LFIFmNyesYPziCnOKzAg5C3y6MregGAAOhOBXd17R0AkLq0hbIEnnZs0ltIoQ1qT 8rSwP4hA33mF5vaKfiA95vcFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5FVtsAJ4 7YW8/AY4VeJh1DGM7ggwHwYDVR0jBBgwFoAUvL8SeWNlHMM/a7aNXevQW+GHTOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQkFBLzk0NjdGMzZDRDQw NDExRjFCOUJBREVDMzI4NjZDRUY5L3ZMOFNlV05sSE1NX2E3YU5YZXZRVy1HSFRP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkw4U2VXTmxITU1fYTdhTlhldlFXLUdIVE9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QkFBLzk0NjdGMzZDRDQwNDExRjFCOUJBREVDMzI4NjZDRUY5L3ZMOFNlV05sSE1N X2E3YU5YZXZRVy1HSFRPTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGZs6OzZ7wPC6ARR0KvoNAuOKrD3Sr5Hc7OIurayDYUXgU0kwZ6BCjM5z+gThp iQKTcYKyUq3NAcCWb98CtcptuxUbbyeEmliOEwQHN9GlM93yaaouQo6glBfxrJ/I xc/2lq3MpsIEko5SZIGF1BI83RSU7GpdtCalKkTHCMZCT3DDKJnrjh6KcZ/1TvbY gByG+S25sHOHhbyRpQy1qkvDBQH2ZVYtWrYWgauG18omIX+YzGttWbzQiSeHpMEU XdM76PtN+O5O7YqT8aCrCdcAehTR4JLVUqQjxRr2vMWJ8QKP+kT4K4nx1T5ajUKv aBG5VYps0EYEdYApBfiUCN9s -----END CERTIFICATE-----Generated at Sat Nov 7 10:35:26 2026 by rpki-client