$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: ++ZVuxYt9l27L4yqwtMt27qc5ICOJj8ZG0h16O5X9es= Subject key identifier: B6:F1:DB:00:63:44:08:9C:66:15:95:3C:76:E2:98:66:24:0B:A2:21 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2964 Signing time: Sat 14 Nov 2026 15:34:14 +0000 Manifest this update: Sat 14 Nov 2026 15:34:14 +0000 Manifest next update: Sat 21 Nov 2026 15:34:14 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: SqNYfcURPESxdkfWPEPN/pVclAQ804YpRrRtSmPfjrs=) 2: 258E51CC8C1311F18E34296D4511F970.roa (hash: luo6QUjddxSOZwocbav2etITZgoNfd3LgW+NMljL44E=) 3: t5maU3WjEwiHY114jpx62P7h0-0.asa (hash: 012YtPauaYUD3hpUK7sp8sIX39ybxbW0ELJOdzY8hIc=) 4: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=) 5: UUjN7dchhhdAUKPSWXkr__UcJYE.asa (hash: dekenOEzvvmjQhgJoPUBE8BRp0caAZ1BGxLSoyWGAzs=) 6: WejB4JlmVbh8du19u5Ho4rCbARg.asa (hash: aIB7oyHmPX9q9erR0/T0nCIhWI26IaYdAumRrQY2K8M=) 7: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=) 8: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=) 9: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: tDiNjxHLhZC1joZZn8et4eDqQovSvtK/L6hvpTBMkFE=) 10: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: NdbaQx/vlQuIWHvVJJeJMf05tQQcoGWFbK4+IqhqfIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 15:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10889 (0x2a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Nov 14 15:34:14 2026 GMT Not After : Nov 21 15:34:14 2026 GMT Subject: CN=6af87f76-7fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:66:3f:51:9e:ec:e9:9e:dd:a4:24:ca:54: 80:51:6b:91:3a:99:0b:f3:cd:f9:22:fd:f1:ec:2d: 43:0b:1e:18:72:8e:02:e6:e4:93:fd:bc:20:2f:a4: 6d:38:5f:68:2f:a8:73:cd:a3:32:31:62:24:0f:66: 17:d6:0d:96:f1:7b:ec:8d:13:5d:bd:e1:5f:2c:f8: b4:ea:05:0a:7d:e3:7b:38:e8:8c:e8:7e:b5:ec:19: cb:1c:96:1b:12:b8:e5:a1:da:a6:64:5d:1a:38:3e: 0d:cb:4f:dd:c1:bc:73:f0:38:91:6e:79:09:9c:80: b2:00:eb:a0:3e:b6:6d:39:13:42:0f:28:17:2e:5a: 60:c5:28:4e:61:4a:f0:e5:42:b9:61:91:66:f0:d5: 97:9f:ee:22:9f:bb:d7:ad:55:86:6c:bc:56:20:92: 29:45:d2:d7:d8:c7:ba:2f:99:e3:ce:0a:fc:b9:ca: 81:8d:c6:66:9c:f3:b9:7e:67:44:f6:b1:0e:11:53: b6:47:19:50:8f:86:14:65:ed:74:a7:97:27:0b:39: a6:11:d5:57:45:cd:41:2f:63:67:80:e9:88:cd:b9: 3f:f8:0b:df:88:7d:5e:c6:f7:d8:c3:75:85:64:0e: 9a:73:26:15:2b:ab:0c:e8:bc:c8:b1:bc:52:1b:19: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F1:DB:00:63:44:08:9C:66:15:95:3C:76:E2:98:66:24:0B:A2:21 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a9:71:0a:a1:69:4c:89:49:db:01:88:5d:d7:e5:33:51:78: f3:83:90:48:57:65:0f:d3:26:b5:b5:2c:94:bf:32:a6:4a:d4: 39:0d:79:6e:26:2c:90:c2:f4:64:55:cb:8c:44:a9:6e:1b:b8: 5f:77:6b:10:da:7a:6d:ef:cb:26:30:3a:93:06:67:19:a3:15: 8a:61:c7:34:e9:1c:ed:73:45:b0:4f:bd:e9:e7:8f:9d:85:8e: d8:2f:ad:6b:86:14:84:ce:1f:06:8c:b2:27:7b:fc:d6:f7:00: ed:48:c8:e4:cf:fd:c3:4f:98:ff:2a:9b:ae:eb:c2:c3:ae:34: dc:f9:ed:14:4d:e9:f0:b3:de:9c:a0:a2:65:b7:ac:d8:57:e8: 49:15:58:d0:a6:59:dc:50:42:fe:ce:d3:2b:37:a3:c2:16:f8: ce:14:d0:78:43:61:e8:ab:2b:ec:9f:7e:b9:ff:07:57:f0:0b: 9e:4e:a4:41:a7:88:40:9b:e7:af:0e:79:21:45:bc:b8:e3:a9: d5:f9:c0:45:53:82:38:94:ac:4c:b6:7f:e2:74:7d:d5:22:ee: 2a:15:14:85:9e:e5:a1:27:98:8d:cc:8b:f8:9b:4d:5c:9e:c7: 6c:25:82:8c:06:de:d7:e4:b2:78:74:7c:96:a1:7d:cb:fd:17: a8:df:52:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYxMTE0MTUzNDE0WhcNMjYxMTIxMTUzNDE0WjAYMRYwFAYD VQQDEw02YWY4N2Y3Ni03ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9RmP1Ge7Ome3aQkylSAUWuROpkL8835Iv3x7C1DCx4Yco4C5uST/bwgL6Rt OF9oL6hzzaMyMWIkD2YX1g2W8XvsjRNdveFfLPi06gUKfeN7OOiM6H617BnLHJYb ErjlodqmZF0aOD4Ny0/dwbxz8DiRbnkJnICyAOugPrZtORNCDygXLlpgxShOYUrw 5UK5YZFm8NWXn+4in7vXrVWGbLxWIJIpRdLX2Me6L5njzgr8ucqBjcZmnPO5fmdE 9rEOEVO2RxlQj4YUZe10p5cnCzmmEdVXRc1BL2NngOmIzbk/+AvfiH1exvfYw3WF ZA6acyYVK6sM6LzIsbxSGxmFowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbx2wBj RAicZhWVPHbimGYkC6IhMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlKlxCqFpTIlJ2wGIXdflM1F484OQSFdlD9MmtbUslL8ypkrUOQ15biYskML0 ZFXLjESpbhu4X3drENp6be/LJjA6kwZnGaMVimHHNOkc7XNFsE+96eePnYWO2C+t a4YUhM4fBoyyJ3v81vcA7UjI5M/9w0+Y/yqbruvCw6403PntFE3p8LPenKCiZbes 2FfoSRVY0KZZ3FBC/s7TKzejwhb4zhTQeENh6Ksr7J9+uf8HV/ALnk6kQaeIQJvn rw55IUW8uOOp1fnARVOCOJSsTLZ/4nR91SLuKhUUhZ7loSeYjcyL+JtNXJ7HbCWC jAbe1+SyeHR8lqF9y/0XqN9SPw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:46:33 2026 by rpki-client