$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: QKzaj2/GbhGi4vDjblITZFrdWB1GknJcTPMz7yRktaE= Subject key identifier: 40:2F:DA:92:86:86:00:7F:D4:4B:31:35:11:54:4D:43:95:5F:77:1F Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 08A4 Signing time: Sat 14 Nov 2026 20:33:03 +0000 Manifest this update: Sat 14 Nov 2026 20:33:03 +0000 Manifest next update: Sat 21 Nov 2026 20:33:03 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 7NfRxMLnf9WKdxOZHaj8lFzr2+1gZOo6nuWalpFwDmo=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: HKGRir2n7i6fdg97EN5g+9sFpLyOtuQtaP0V1gAFbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Nov 14 20:33:03 2026 GMT Not After : Nov 21 20:33:03 2026 GMT Subject: CN=6af8c57f-82dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:e2:42:90:9b:85:07:55:03:fd:cf:69:a4: aa:0c:27:31:1d:8d:fc:c9:dd:54:f3:2c:3c:65:31: 25:dd:ff:9f:7e:fc:2f:33:13:7a:73:75:c5:3c:a5: 6c:09:73:1d:a4:f8:83:f4:6e:3a:75:f9:87:b1:0c: 9c:71:cf:92:e7:58:4e:4c:99:af:5a:11:52:82:33: f6:98:19:45:7d:c7:a4:99:16:60:0c:5e:8e:b0:ee: 84:57:40:d7:9c:01:16:49:40:9b:d2:92:3a:0c:2f: f0:8c:84:2c:2c:e5:37:92:5d:65:6a:e6:c0:8f:a3: e2:f0:e8:e4:8a:38:41:70:5b:0d:28:d1:d5:0a:18: d2:86:0e:1b:2f:23:79:d6:c1:e3:d3:16:b1:69:b3: 5c:75:2b:e7:c3:c3:c7:5c:1a:97:a2:00:8f:41:db: cd:56:9d:0d:87:33:e9:2d:bd:df:8f:78:18:60:86: 8a:da:70:c4:ef:67:93:a8:31:8f:1f:14:6c:13:9c: c6:8e:72:46:a6:d0:d0:2a:83:b3:1f:ca:8a:f2:e8: bf:b3:6f:4c:63:12:74:0b:de:85:31:99:2c:95:ff: c8:d3:f9:77:a6:81:8c:62:c8:3a:21:5b:e9:57:ec: ac:99:47:23:e9:54:8b:dc:5d:20:4a:ae:5c:0e:45: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2F:DA:92:86:86:00:7F:D4:4B:31:35:11:54:4D:43:95:5F:77:1F X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:97:97:21:66:cc:6b:bf:0d:d7:85:6f:78:c9:d9:28:67:2b: 9a:89:54:6f:dd:a2:27:3e:d3:41:b1:63:36:56:c6:4d:99:e7: fd:8a:fc:d6:98:3b:28:2f:a7:29:06:2b:c7:d8:f6:21:69:36: 82:c9:db:9b:84:61:f0:f5:64:33:29:4e:c3:a0:0d:ab:e4:b9: 01:ef:b4:3d:1b:6e:7c:b9:7f:16:17:c5:23:ea:4f:af:8f:46: 16:ec:7e:04:45:a4:9a:4d:6a:ad:f7:8a:b6:88:f9:26:2b:b0: 9f:97:d1:fa:31:30:a3:2e:98:d0:8c:18:25:72:97:03:6f:e1: c7:e0:53:c0:99:d6:1e:d8:77:b3:8d:9d:4f:0d:77:48:88:8c: 62:32:76:30:2f:f0:b6:52:7b:bb:41:98:21:f3:d7:e5:2e:cf: 2a:55:e0:3b:40:b6:7b:a0:6e:91:8d:db:99:99:82:72:b8:ac: 80:f4:7c:86:96:70:db:76:2a:9c:b6:55:2c:24:b2:bb:70:2d: 20:b7:63:6f:d7:20:13:08:55:fd:91:15:48:ac:c0:65:6a:21: 0c:82:89:f5:74:79:86:18:18:68:11:70:22:4c:57:ef:c1:ea: 89:29:cc:65:88:0d:b1:04:d5:e1:c8:66:77:c7:65:9e:86:56: a0:0c:c7:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjYxMTE0MjAzMzAzWhcNMjYxMTIxMjAzMzAzWjAYMRYwFAYD VQQDEw02YWY4YzU3Zi04MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0jiQpCbhQdVA/3PaaSqDCcxHY38yd1U8yw8ZTEl3f+ffvwvMxN6c3XFPKVs CXMdpPiD9G46dfmHsQyccc+S51hOTJmvWhFSgjP2mBlFfcekmRZgDF6OsO6EV0DX nAEWSUCb0pI6DC/wjIQsLOU3kl1laubAj6Pi8OjkijhBcFsNKNHVChjShg4bLyN5 1sHj0xaxabNcdSvnw8PHXBqXogCPQdvNVp0NhzPpLb3fj3gYYIaK2nDE72eTqDGP HxRsE5zGjnJGptDQKoOzH8qK8ui/s29MYxJ0C96FMZkslf/I0/l3poGMYsg6IVvp V+ysmUcj6VSL3F0gSq5cDkUfxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAv2pKG hgB/1EsxNRFUTUOVX3cfMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp5eXIWbMa78N14VveMnZKGcrmolUb92iJz7TQbFjNlbGTZnn/Yr81pg7KC+n KQYrx9j2IWk2gsnbm4Rh8PVkMylOw6ANq+S5Ae+0PRtufLl/FhfFI+pPr49GFux+ BEWkmk1qrfeKtoj5Jiuwn5fR+jEwoy6Y0IwYJXKXA2/hx+BTwJnWHth3s42dTw13 SIiMYjJ2MC/wtlJ7u0GYIfPX5S7PKlXgO0C2e6BukY3bmZmCcrisgPR8hpZw23Yq nLZVLCSyu3AtILdjb9cgEwhV/ZEVSKzAZWohDIKJ9XR5hhgYaBFwIkxX78HqiSnM ZYgNsQTV4chmd8dlnoZWoAzHKw== -----END CERTIFICATE-----Generated at Sun Nov 15 13:03:38 2026 by rpki-client