$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: zKXeIHPTuBwEJeUtRcc7QMJ/SRh4NHlRH4wRSxxihRk= Subject key identifier: 8D:85:D4:7F:37:1E:B1:4E:F8:2A:5D:85:37:E0:40:9F:3F:10:E1:43 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 083B Signing time: Sat 14 Nov 2026 21:03:50 +0000 Manifest this update: Sat 14 Nov 2026 21:03:49 +0000 Manifest next update: Sat 21 Nov 2026 21:03:49 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: XXcmn8rHXe0LQsGI8UlQszz5c3ct5HzbMVydUvNn3ZE=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: la63BA0PxQXwAwc4lMp5AyHrUtUe8vBqW+bXasUdsW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: Nov 14 21:03:49 2026 GMT Not After : Nov 21 21:03:49 2026 GMT Subject: CN=6af8ccb6-bd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:db:16:36:85:2b:ee:8f:9a:80:6c:a3:2e: c3:d9:32:fe:6f:d6:e2:e6:91:c0:7b:ea:b9:5d:36: aa:3b:46:05:11:be:11:0e:98:48:40:e5:ce:28:95: 6c:e6:0a:ca:31:44:97:88:3f:ee:a8:58:d9:85:fd: cf:ec:a4:8a:2a:db:29:10:3d:88:c4:33:30:de:10: ed:83:ea:cb:3c:a5:d1:f4:fc:7b:43:4f:5a:05:c4: 71:18:c8:e3:c4:37:6a:98:66:5b:d0:33:6b:88:bc: ac:d9:84:b4:7f:62:15:dd:ec:f8:ea:b6:16:89:cd: 13:7c:a4:c0:f5:e8:5a:d4:f0:a4:cd:7b:d7:bd:77: da:a0:47:69:1a:8e:31:91:14:3e:6d:4e:33:20:46: e5:44:18:4b:97:e6:06:a6:7d:27:7c:9d:80:f8:ed: 90:22:3c:c5:f1:fe:92:fa:54:fb:40:e5:d0:fb:c3: f3:6d:48:58:bf:7c:0d:8d:6e:77:64:6a:5b:15:32: 25:a1:04:66:6e:e9:92:10:85:97:e4:1b:54:1d:84: 0a:c6:66:1b:42:2a:db:83:19:24:42:3a:af:29:57: e2:a2:9c:a0:fe:f0:87:63:74:39:30:e5:2f:d5:68: 6f:c0:21:87:3f:a4:9a:1f:a9:82:78:bc:d2:ee:47: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:D4:7F:37:1E:B1:4E:F8:2A:5D:85:37:E0:40:9F:3F:10:E1:43 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:34:6d:3a:cc:bc:02:ac:eb:81:ff:45:86:87:48:89:a3: d0:7a:84:d2:71:7c:98:b7:af:f1:57:e8:6b:ce:7c:7d:35:27: 7b:6c:b6:85:5d:72:42:93:94:c0:c0:94:99:53:9b:a6:65:e3: 32:10:37:79:4b:83:80:e9:77:fb:8f:d9:60:e5:34:7a:0c:14: e0:19:17:95:ea:61:71:fc:66:6d:6a:f7:a5:75:bc:6c:40:ea: 46:d0:e3:e8:5a:4a:fd:bb:9f:1f:22:73:6e:c8:96:d5:6d:00: cd:4a:23:63:9e:24:ae:8b:83:84:5f:58:6d:2d:90:81:66:44: 57:d4:8c:5d:66:ff:84:76:7a:06:e0:20:d0:1c:f8:10:5b:d2: fe:37:66:5b:4f:95:cc:6b:e7:33:77:59:cb:3e:47:8f:3d:6d: bc:d7:22:2e:64:74:4b:19:7e:4e:98:03:91:fa:b6:1f:27:e9: 98:16:2d:04:b6:4d:70:95:d7:03:09:38:e6:90:5e:fc:a4:dd: 4a:e9:7f:93:22:44:06:6a:ed:aa:4b:2c:68:aa:60:f4:e3:41: 3f:18:37:de:cd:8c:0d:b5:12:5c:e6:28:4e:5b:48:fa:1f:72: 1f:53:dc:79:28:57:e2:b5:d8:d6:c9:74:33:a8:07:11:5f:76: 66:4e:fe:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjYxMTE0MjEwMzQ5WhcNMjYxMTIxMjEwMzQ5WjAYMRYwFAYD VQQDEw02YWY4Y2NiNi1iZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxrbFjaFK+6PmoBsoy7D2TL+b9bi5pHAe+q5XTaqO0YFEb4RDphIQOXOKJVs 5grKMUSXiD/uqFjZhf3P7KSKKtspED2IxDMw3hDtg+rLPKXR9Px7Q09aBcRxGMjj xDdqmGZb0DNriLys2YS0f2IV3ez46rYWic0TfKTA9eha1PCkzXvXvXfaoEdpGo4x kRQ+bU4zIEblRBhLl+YGpn0nfJ2A+O2QIjzF8f6S+lT7QOXQ+8PzbUhYv3wNjW53 ZGpbFTIloQRmbumSEIWX5BtUHYQKxmYbQirbgxkkQjqvKVfiopyg/vCHY3Q5MOUv 1WhvwCGHP6SaH6mCeLzS7kchGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2F1H83 HrFO+CpdhTfgQJ8/EOFDMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO5Q0bTrMvAKs64H/RYaHSImj0HqE0nF8mLev8Vfoa858fTUne2y2hV1yQpOU wMCUmVObpmXjMhA3eUuDgOl3+4/ZYOU0egwU4BkXlephcfxmbWr3pXW8bEDqRtDj 6FpK/bufHyJzbsiW1W0AzUojY54krouDhF9YbS2QgWZEV9SMXWb/hHZ6BuAg0Bz4 EFvS/jdmW0+VzGvnM3dZyz5Hjz1tvNciLmR0Sxl+TpgDkfq2HyfpmBYtBLZNcJXX Awk45pBe/KTdSul/kyJEBmrtqkssaKpg9ONBPxg33s2MDbUSXOYoTltI+h9yH1Pc eShX4rXY1sl0M6gHEV92Zk7+hw== -----END CERTIFICATE-----Generated at Sun Nov 15 22:33:50 2026 by rpki-client