$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: iGEphhnlHqkD+EkoarGHCbN8X4TTsH7iGdLKI2qSMe8= Subject key identifier: 34:3D:F5:A2:D0:09:5D:62:56:0F:B0:6A:73:E7:DD:BF:A6:19:98:B3 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: EC Signing time: Sun 15 Nov 2026 06:48:20 +0000 Manifest this update: Sun 15 Nov 2026 06:48:19 +0000 Manifest next update: Sun 22 Nov 2026 06:48:19 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: 0uGC9Xcl5L9b/+iDOryCnBFoPYLJFtWU8ad9T/blG24=) 2: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: KXhj7RsgxFUQZbwMKbg/7yB+kCVQwT78PSTadZw1k48=) 3: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: DEFVGm59VVJPmUFHSPNcZ52zcqrPZ6/Nyvm2+lEJprE=) 4: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: fnlmor83f4zOs/e32/aecWKfxIQo6ta8eCmsFjhtaQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Nov 15 06:48:19 2026 GMT Not After : Nov 22 06:48:19 2026 GMT Subject: CN=6af955b4-4e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:7e:3e:94:2b:bb:d2:8d:6f:a1:0b:da:48: 39:3d:65:54:f5:9e:54:fa:bb:44:10:82:9f:2d:8a: 19:7c:ee:a3:06:7e:aa:a3:08:f5:33:0a:48:35:cd: ec:e0:66:20:90:4d:60:9b:5a:15:ba:cc:3d:89:b0: 83:d9:18:fa:de:ae:78:42:2d:10:1b:6a:d0:5e:c5: 98:fe:3f:fc:ad:7e:39:6c:d1:1e:8e:f4:41:00:c2: 56:eb:b7:67:f8:2c:19:0a:7d:d5:c8:54:3b:83:4c: 55:e6:1a:c4:bf:03:02:56:26:57:54:d0:49:b6:c5: 3b:07:06:71:cb:bc:02:c1:f6:aa:d3:ba:06:f1:4b: 78:2c:10:ae:8b:d9:7c:10:b3:51:00:04:83:55:50: 65:ec:75:a3:c1:c2:d5:16:ce:77:53:d2:98:bb:62: a9:db:09:54:71:30:b0:7c:e4:fa:74:94:61:77:29: 6d:19:ab:0c:b8:1f:af:8d:e4:99:86:fc:32:ba:1f: b9:ab:a1:6e:e3:f8:94:23:9b:bd:69:11:0b:42:d6: 4c:b6:e2:30:96:71:1a:c8:5c:34:cf:99:34:9f:33: b0:9b:db:09:a1:12:04:58:9c:ce:36:ba:bf:80:d2: 55:ea:46:f4:a7:00:e5:1e:ad:2b:df:b3:22:20:fb: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:F5:A2:D0:09:5D:62:56:0F:B0:6A:73:E7:DD:BF:A6:19:98:B3 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bb:1c:6e:29:ee:6d:b2:2c:eb:15:ef:62:a7:18:29:0f:c5: d5:5d:c5:1d:24:4f:6c:b1:bd:79:ab:37:2b:8b:bc:cf:65:af: f9:d4:5c:b2:80:d2:60:d2:5e:8a:9d:e6:c8:69:ce:9c:02:20: 3f:eb:4b:b5:1f:9f:6d:e9:dd:71:93:58:bb:a9:5b:a8:da:29: e1:64:15:c8:e0:ff:9a:75:47:92:20:fd:83:14:5b:58:b6:4a: f3:83:28:4f:70:64:1e:99:69:1a:0d:ca:21:47:12:82:39:3f: c1:d4:af:b1:88:66:fd:8c:8f:21:77:3e:43:61:c6:84:75:e9: d9:4a:4c:02:c0:fa:a9:ed:6a:ce:e3:b1:e3:b7:c8:ae:49:3a: 33:e6:4e:fa:4f:15:b5:09:94:d0:b1:cb:1d:c5:36:2a:f2:90: 6d:d7:11:72:63:56:5d:e7:3b:78:e6:e9:86:fa:21:d0:24:4c: 24:56:0e:9a:31:9c:e3:1c:e9:44:41:54:69:04:a2:b3:b3:d4: 16:7c:b8:31:99:20:bf:8b:b1:22:e1:a0:a1:51:13:bf:22:65: 5c:73:8d:34:1a:ab:38:38:45:28:04:03:16:ee:ec:48:fb:9c: 9b:2b:1c:ca:c5:7e:9e:ac:ed:62:eb:6e:f6:b2:38:97:56:12: 4f:c2:d1:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVEMUYxMTAvBgNVBAUTKDBDQUI2OEUwNjkwODNBNDM4OEU4RkM2OTc1OEYwNDU5 NjJGRDAxQUYwHhcNMjYxMTE1MDY0ODE5WhcNMjYxMTIyMDY0ODE5WjAYMRYwFAYD VQQDEw02YWY5NTViNC00ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjHl+PpQru9KNb6EL2kg5PWVU9Z5U+rtEEIKfLYoZfO6jBn6qowj1MwpINc3s 4GYgkE1gm1oVusw9ibCD2Rj63q54Qi0QG2rQXsWY/j/8rX45bNEejvRBAMJW67dn +CwZCn3VyFQ7g0xV5hrEvwMCViZXVNBJtsU7BwZxy7wCwfaq07oG8Ut4LBCui9l8 ELNRAASDVVBl7HWjwcLVFs53U9KYu2Kp2wlUcTCwfOT6dJRhdyltGasMuB+vjeSZ hvwyuh+5q6Fu4/iUI5u9aRELQtZMtuIwlnEayFw0z5k0nzOwm9sJoRIEWJzONrq/ gNJV6kb0pwDlHq0r37MiIPv7vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQ99aLQ CV1iVg+wanPn3b+mGZizMB8GA1UdIwQYMBaAFAyraOBpCDpDiOj8aXWPBFli/QGv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUQxRi9BRDIwMjFBNDk3 NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9rT0k2UHhwZFk4RVdXTDlB YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9r T0k2UHhwZFk4RVdXTDlBYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrscbinubbIs6xXvYqcYKQ/F1V3FHSRPbLG9eas3K4u8z2Wv+dRcsoDSYNJe ip3myGnOnAIgP+tLtR+fbendcZNYu6lbqNop4WQVyOD/mnVHkiD9gxRbWLZK84Mo T3BkHplpGg3KIUcSgjk/wdSvsYhm/YyPIXc+Q2HGhHXp2UpMAsD6qe1qzuOx47fI rkk6M+ZO+k8VtQmU0LHLHcU2KvKQbdcRcmNWXec7eObphvoh0CRMJFYOmjGc4xzp REFUaQSis7PUFny4MZkgv4uxIuGgoVETvyJlXHONNBqrODhFKAQDFu7sSPucmysc ysV+nqztYutu9rI4l1YST8LRWw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:26:36 2026 by rpki-client