$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: OQeeq/HbtH9sBhW2PcyI4WQIbirsuIoWytt6jLXHwaQ= Subject key identifier: 61:90:DE:E1:C8:BC:CA:6F:B6:1B:F3:FA:AD:86:C6:4A:73:EC:A5:3C Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 09AD Signing time: Sat 14 Nov 2026 19:51:21 +0000 Manifest this update: Sat 14 Nov 2026 19:51:21 +0000 Manifest next update: Sat 21 Nov 2026 19:51:21 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: di8/VlDjzZUO02JG7MoC6o0QEDdzz6RWElcoYFCEeDk=) 2: 3A30A1505D7611F1A65CDC84C1833773.roa (hash: xhAHuvmO3aSQ7a3p7cQ67FVXsueoW86sk1sPeDMX+RA=) 3: 9F5F74265D7511F18F235C80C1833773.roa (hash: 0fZccuokxMBdsDfqfz3v6IokDESdGPotG9nJBoFw7Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Nov 14 19:51:21 2026 GMT Not After : Nov 21 19:51:21 2026 GMT Subject: CN=6af8bbb9-6343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:b9:9b:ab:55:9d:03:a8:f8:2a:19:51:12: c7:59:f5:1e:55:e1:db:a4:8f:00:6c:a7:a9:2f:14: 8c:98:9a:60:db:17:0b:69:00:c2:3f:f7:f4:49:cf: 01:aa:1c:ee:25:42:05:a7:31:03:6b:f9:18:6c:e7: db:02:fb:10:cc:f5:f4:1f:d0:6c:0f:31:7e:ba:b1: 99:b1:2b:ef:5a:2b:0f:d4:a7:7c:02:3c:65:5a:c1: 65:80:82:c0:8b:06:36:b9:e2:49:f5:a3:04:05:9f: 30:0b:00:48:28:61:cd:ac:34:d5:ac:2c:f7:af:0c: 03:e0:3c:38:1d:fc:9d:44:7a:fa:45:09:b7:89:18: e4:67:c8:7e:35:9d:a0:f2:fe:30:74:4c:2f:65:ee: d0:e3:fd:72:92:cc:92:cc:6d:18:86:92:81:99:ee: e0:80:ee:fa:39:04:39:e1:aa:8a:09:a0:e0:a9:3d: 53:5f:81:1b:22:c1:9a:ca:21:5a:de:46:37:63:5b: 87:e2:4e:36:9f:a8:7b:45:cd:a2:46:5b:63:f0:52: f5:7a:aa:8b:e1:2f:68:17:49:da:9b:b1:77:6d:c1: 51:05:f1:42:54:a4:16:f8:c6:3b:de:e3:7d:cb:44: 93:be:60:27:80:da:9a:fd:69:69:dd:c7:33:dd:b6: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:DE:E1:C8:BC:CA:6F:B6:1B:F3:FA:AD:86:C6:4A:73:EC:A5:3C X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:cb:6a:02:46:a2:5d:c6:d8:fe:f1:51:30:c9:f5:d5:d0:da: 19:75:62:60:65:09:66:45:24:f7:1e:e9:79:94:51:2e:ef:24: aa:76:67:46:3b:f7:ca:8e:6b:08:79:50:0b:9f:f7:4f:4d:73: 31:02:cd:cd:47:e9:19:00:59:91:03:30:35:40:5f:47:f9:b7: cf:07:7a:7d:3c:71:ed:11:67:a0:a1:f9:9a:55:73:14:9d:50: ef:ad:5a:6a:32:e0:8a:36:e1:b4:80:46:a8:6d:2b:72:14:cc: 1e:a2:8f:53:9e:55:61:25:25:79:d1:95:99:d8:46:f3:82:60: 77:33:8e:b1:e5:79:1a:c3:7e:a3:82:5e:57:61:e6:e6:9a:0d: 2c:be:1c:81:a1:35:7c:1d:0d:92:0e:d3:10:b9:d8:b8:08:61: 13:44:03:12:d4:c0:7a:e4:0a:fa:16:d9:05:77:0b:ad:97:25: be:b3:f5:da:16:63:e4:a7:72:04:8e:da:64:2d:d2:e2:da:52: 7e:bf:4e:6f:28:93:67:14:5c:3a:33:75:80:fc:7c:26:15:b1: 7b:a8:8a:5b:4a:b3:44:a5:28:74:69:e0:ac:63:87:0c:b0:a3: a2:58:f9:e2:22:8b:f5:b4:e4:9a:6b:f9:66:61:ed:9e:dd:eb: d9:90:60:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjYxMTE0MTk1MTIxWhcNMjYxMTIxMTk1MTIxWjAYMRYwFAYD VQQDEw02YWY4YmJiOS02MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEa5m6tVnQOo+CoZURLHWfUeVeHbpI8AbKepLxSMmJpg2xcLaQDCP/f0Sc8B qhzuJUIFpzEDa/kYbOfbAvsQzPX0H9BsDzF+urGZsSvvWisP1Kd8AjxlWsFlgILA iwY2ueJJ9aMEBZ8wCwBIKGHNrDTVrCz3rwwD4Dw4HfydRHr6RQm3iRjkZ8h+NZ2g 8v4wdEwvZe7Q4/1yksySzG0YhpKBme7ggO76OQQ54aqKCaDgqT1TX4EbIsGayiFa 3kY3Y1uH4k42n6h7Rc2iRltj8FL1eqqL4S9oF0nam7F3bcFRBfFCVKQW+MY73uN9 y0STvmAngNqa/Wlp3ccz3baP+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGQ3uHI vMpvthvz+q2Gxkpz7KU8MB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzMtqAkaiXcbY/vFRMMn11dDaGXViYGUJZkUk9x7peZRRLu8kqnZnRjv3yo5r CHlQC5/3T01zMQLNzUfpGQBZkQMwNUBfR/m3zwd6fTxx7RFnoKH5mlVzFJ1Q761a ajLgijbhtIBGqG0rchTMHqKPU55VYSUledGVmdhG84JgdzOOseV5GsN+o4JeV2Hm 5poNLL4cgaE1fB0Nkg7TELnYuAhhE0QDEtTAeuQK+hbZBXcLrZclvrP12hZj5Kdy BI7aZC3S4tpSfr9ObyiTZxRcOjN1gPx8JhWxe6iKW0qzRKUodGngrGOHDLCjolj5 4iKL9bTkmmv5ZmHtnt3r2ZBguQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:36:45 2026 by rpki-client