$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: LYrO1OaRcuT3V316agWG0eIhVlh0eqU4eNXcqlvf/5c= Subject key identifier: 02:C2:4E:55:F2:E0:D4:CF:32:6E:F5:D9:C4:55:7B:DB:AD:B1:C6:3B Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 021A Signing time: Sun 15 Nov 2026 02:49:50 +0000 Manifest this update: Sun 15 Nov 2026 02:49:49 +0000 Manifest next update: Sun 22 Nov 2026 02:49:49 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: cYLxLa4kcoie+/mTe80M0PFfrCOzGYpMwgx3gbNI57g=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Nov 15 02:49:49 2026 GMT Not After : Nov 22 02:49:49 2026 GMT Subject: CN=6af91dce-60fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:52:0f:e0:92:9f:d2:73:c3:c1:f6:d7:65: c5:9d:2f:c1:71:8e:57:f8:99:47:04:67:c8:72:e2: 7d:19:23:f2:3d:7a:6b:07:e0:b3:9c:22:ef:22:83: dd:39:93:6e:41:c9:6e:0d:32:ba:d5:ed:2f:37:2b: 4d:6c:84:31:0d:ed:29:ee:5c:7c:37:5b:22:6b:76: cd:bf:c5:bf:71:c5:1e:aa:8e:00:2a:9a:f0:68:b1: e5:7d:f1:49:8a:70:bd:5a:3c:a3:eb:73:9f:28:62: 82:10:2f:07:4f:b4:9d:55:b7:a9:fb:5c:65:51:5e: 96:7c:4c:26:61:1f:86:b4:01:df:84:76:d6:97:a7: dc:fc:40:77:cc:15:02:3c:16:93:45:54:43:ac:76: c0:92:5a:11:b6:e8:84:4c:ac:90:fc:42:83:f6:3b: 28:e7:ce:3f:1f:ea:1d:34:2a:2e:4f:b5:05:5b:f3: 28:53:cd:bb:00:49:e8:92:ec:79:8b:36:31:3e:f6: 43:3a:5f:d5:5d:1c:82:18:6b:6f:cd:1c:23:b4:47: 7d:aa:88:cd:c8:53:31:f3:7a:a0:35:8d:23:9e:42: c8:0b:84:25:ee:c7:07:b4:27:90:8f:bb:00:c4:10: 2c:3f:92:3a:11:fb:f6:eb:ef:79:dd:7f:ff:26:1c: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:4E:55:F2:E0:D4:CF:32:6E:F5:D9:C4:55:7B:DB:AD:B1:C6:3B X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6b:41:40:08:c7:20:5e:3c:46:7e:e4:d0:d2:a2:d7:56:65: ba:1c:69:07:33:81:8a:03:54:17:9c:71:4b:9e:20:36:23:d1: 9f:44:3f:63:12:0f:22:6a:35:a5:bb:b2:9e:53:88:f8:00:00: 93:d5:2b:21:34:21:03:72:be:f8:ed:41:de:d7:b7:f7:85:f3: 8f:18:84:db:89:f7:e8:7d:5a:ff:ac:e6:a7:6f:74:c5:5d:ed: 5c:e1:e8:12:48:c6:84:24:9e:a0:77:be:44:03:56:af:62:7a: f6:8f:ee:38:9f:08:ac:b8:1e:b1:20:fb:47:a8:e6:58:15:10: 7a:98:fb:93:b4:99:0d:5e:76:e3:63:63:6f:c3:ff:5c:b1:88: 30:92:16:ad:a2:51:4f:8e:7d:26:ce:b4:d1:5e:8f:40:34:ab: 13:7b:86:34:0f:80:ee:aa:59:81:a6:cf:13:4c:2e:67:ef:65: cc:e6:7a:d7:06:50:81:a1:fa:87:29:99:9b:2a:89:a5:69:58: 96:14:9c:8c:e2:16:a1:af:3a:a6:f5:3e:b9:4f:c2:5b:16:18: f5:fe:94:71:a7:08:38:01:03:df:5f:0b:44:92:46:15:9e:c9: 16:2b:58:7e:82:dd:5d:13:49:ee:b1:21:f6:0a:3e:77:5b:e9: a8:f3:0a:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjYxMTE1MDI0OTQ5WhcNMjYxMTIyMDI0OTQ5WjAYMRYwFAYD VQQDEw02YWY5MWRjZS02MGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjtSD+CSn9Jzw8H212XFnS/BcY5X+JlHBGfIcuJ9GSPyPXprB+CznCLvIoPd OZNuQcluDTK61e0vNytNbIQxDe0p7lx8N1sia3bNv8W/ccUeqo4AKprwaLHlffFJ inC9Wjyj63OfKGKCEC8HT7SdVbep+1xlUV6WfEwmYR+GtAHfhHbWl6fc/EB3zBUC PBaTRVRDrHbAkloRtuiETKyQ/EKD9jso584/H+odNCouT7UFW/MoU827AEnokux5 izYxPvZDOl/VXRyCGGtvzRwjtEd9qojNyFMx83qgNY0jnkLIC4Ql7scHtCeQj7sA xBAsP5I6Efv26+953X//JhzDNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALCTlXy 4NTPMm712cRVe9utscY7MB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAimtBQAjHIF48Rn7k0NKi11ZluhxpBzOBigNUF5xxS54gNiPRn0Q/YxIPImo1 pbuynlOI+AAAk9UrITQhA3K++O1B3te394XzjxiE24n36H1a/6zmp290xV3tXOHo EkjGhCSeoHe+RANWr2J69o/uOJ8IrLgesSD7R6jmWBUQepj7k7SZDV5242Njb8P/ XLGIMJIWraJRT459Js600V6PQDSrE3uGNA+A7qpZgabPE0wuZ+9lzOZ61wZQgaH6 hymZmyqJpWlYlhScjOIWoa86pvU+uU/CWxYY9f6UcacIOAED318LRJJGFZ7JFitY foLdXRNJ7rEh9go+d1vpqPMK9A== -----END CERTIFICATE-----Generated at Sun Nov 15 11:32:28 2026 by rpki-client