$ rpki-client -vvvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: yDr7EBIoFLsjVC13OagJVz1dJhkhPf4eke4kz2juXiQ= Subject key identifier: 77:1C:AB:FD:79:86:76:07:79:A9:91:30:B8:90:6F:6A:12:5E:D6:AA Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 13CB Signing time: Sat 14 Nov 2026 16:52:08 +0000 Manifest this update: Sat 14 Nov 2026 16:52:07 +0000 Manifest next update: Sat 21 Nov 2026 16:52:07 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: WVatG/lyOM2CwFfYKu9RSX4+YOTGvKReDCRXnwa51VU=) 2: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: kTVtJf0sXNv/myeQcbWLzlKqwsk/htvDmO2Qa4BwMyU=) 3: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: LjoDddRIHfdyvbMdkYPATybnnKwBZMxY+IE0OlrkYcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Nov 14 16:52:07 2026 GMT Not After : Nov 21 16:52:07 2026 GMT Subject: CN=6af891b8-87af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:ac:6e:62:87:2d:03:18:d9:76:87:9b:99: 1c:c4:27:c9:bf:de:3e:d8:10:7a:f7:7f:fe:8a:9c: 8c:61:bb:4e:8e:39:7f:77:d8:c8:1e:14:de:70:4c: 0f:c2:e3:7c:f3:0a:6b:e0:d4:6d:6b:a4:7d:dc:48: 1c:60:6e:13:e0:a4:f2:07:f9:7e:9a:cd:25:df:6d: 22:50:e1:05:aa:00:94:5b:ec:b9:00:ff:0d:ea:2a: f2:a2:a2:0f:d9:55:c5:04:23:a8:d6:48:fc:5b:82: f9:39:69:93:1f:ec:e2:e4:c8:fe:bd:6c:89:83:30: 06:85:2d:a3:19:ed:27:ce:72:d0:91:fd:2e:b8:29: f9:56:1a:9a:be:25:83:d8:7a:ab:76:00:78:e6:b4: 55:1a:27:ee:54:a7:6a:ff:84:03:4d:fc:91:1a:29: 63:fd:04:5d:06:14:6b:bd:7f:7e:95:e2:c9:dd:67: fb:1f:d3:66:0a:87:cb:ca:59:3f:75:61:f0:03:c0: 04:74:50:7a:85:ff:5e:a0:19:48:ff:9e:bd:c4:2e: 62:18:e9:7b:68:4c:59:9d:2f:a6:7f:5d:2e:a5:d0: 0b:30:0a:c8:4d:aa:c0:2f:bc:30:cc:e5:be:20:d8: 80:68:3e:2b:f9:50:a9:16:6a:1d:06:7b:19:8a:8d: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1C:AB:FD:79:86:76:07:79:A9:91:30:B8:90:6F:6A:12:5E:D6:AA X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c8:15:36:12:03:62:3f:72:67:dc:a1:80:84:f6:ce:b1:7a: 5e:dc:87:f1:1c:b4:f8:7f:3d:d6:91:b0:b6:04:c4:c1:d0:e9: 20:22:4f:02:34:48:0c:c0:74:3c:e8:53:03:d7:7d:ba:88:d5: ea:a4:5f:ff:59:f4:69:13:fa:a3:74:96:34:55:12:13:e7:c5: 44:b1:84:82:14:ff:c4:49:af:ea:f2:be:11:01:53:6d:cb:e5: ba:e8:24:4b:4f:21:5c:70:a8:1c:aa:a7:f8:63:46:df:f0:ab: 86:2e:84:9d:cf:a3:c6:fa:60:cb:3e:8b:79:38:3c:2f:ad:19: 29:5b:6c:63:fc:b2:36:8a:58:35:49:b9:fe:43:62:68:a8:e6: b4:48:10:2b:16:10:b8:35:83:c7:9f:a3:04:05:20:42:55:d9: f1:34:02:23:62:29:f4:07:80:ee:e5:75:91:9c:cf:ee:fb:b9: 2b:a9:ed:96:92:be:2a:2a:3f:cf:0c:2a:b6:d0:5c:b9:f9:3e: 77:22:4d:69:4e:0d:ac:a0:86:30:ba:bf:4e:59:ae:81:3d:27: 84:28:cf:55:86:6d:87:92:c1:fc:30:9f:10:7f:b1:05:1e:65: 6c:2b:38:e3:ae:f6:e6:88:93:7e:ac:68:ab:50:25:a0:f2:e0: 9d:ec:eb:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYxMTE0MTY1MjA3WhcNMjYxMTIxMTY1MjA3WjAYMRYwFAYD VQQDEw02YWY4OTFiOC04N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndisbmKHLQMY2XaHm5kcxCfJv94+2BB693/+ipyMYbtOjjl/d9jIHhTecEwP wuN88wpr4NRta6R93EgcYG4T4KTyB/l+ms0l320iUOEFqgCUW+y5AP8N6iryoqIP 2VXFBCOo1kj8W4L5OWmTH+zi5Mj+vWyJgzAGhS2jGe0nznLQkf0uuCn5VhqaviWD 2HqrdgB45rRVGifuVKdq/4QDTfyRGilj/QRdBhRrvX9+leLJ3Wf7H9NmCofLylk/ dWHwA8AEdFB6hf9eoBlI/569xC5iGOl7aExZnS+mf10updALMArITarAL7wwzOW+ INiAaD4r+VCpFmodBnsZio3nWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHccq/15 hnYHeamRMLiQb2oSXtaqMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdMgVNhIDYj9yZ9yhgIT2zrF6XtyH8Ry0+H891pGwtgTEwdDpICJPAjRIDMB0 POhTA9d9uojV6qRf/1n0aRP6o3SWNFUSE+fFRLGEghT/xEmv6vK+EQFTbcvluugk S08hXHCoHKqn+GNG3/Crhi6Enc+jxvpgyz6LeTg8L60ZKVtsY/yyNopYNUm5/kNi aKjmtEgQKxYQuDWDx5+jBAUgQlXZ8TQCI2Ip9AeA7uV1kZzP7vu5K6ntlpK+Kio/ zwwqttBcufk+dyJNaU4NrKCGMLq/TlmugT0nhCjPVYZth5LB/DCfEH+xBR5lbCs4 46725oiTfqxoq1AloPLgnezr5Q== -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:21 2026 by rpki-client