$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: RnRM+RVelaQCTlQfTU03DiBBZot9OkgSJTjHBcjmx+U= Subject key identifier: 0A:BA:AE:D2:21:6F:4B:C9:D6:13:FF:F6:D8:9B:DE:67:77:88:C9:C5 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0F6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0F44 Signing time: Sat 14 Nov 2026 17:29:58 +0000 Manifest this update: Sat 14 Nov 2026 17:29:58 +0000 Manifest next update: Sat 21 Nov 2026 17:29:58 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: 7A5EhKqu8WcMVlJZlqXiCIt1zb0F0/Hpcof68a5uaaU=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 17:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3947 (0xf6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Nov 14 17:29:58 2026 GMT Not After : Nov 21 17:29:58 2026 GMT Subject: CN=6af89a96-8626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:4d:9a:2a:6c:f3:c8:ad:fd:74:1d:7f:c4: 56:29:ca:c2:df:60:db:b0:cc:5d:1c:ab:ee:df:57: 25:91:74:00:a1:c7:4d:29:ba:ea:6f:da:28:4b:a7: 46:cc:ce:b1:77:2f:c1:2e:c3:a5:ae:4d:e4:6f:c7: 85:46:1c:74:d8:52:e7:ae:a7:89:70:28:2e:e8:03: 5a:b1:3d:01:e3:0a:de:bf:6d:ad:e4:79:7f:58:9e: c0:bd:5e:b1:fb:4d:60:77:1e:79:38:2f:b2:1a:01: d3:29:0c:b6:3b:34:d2:b5:62:1a:d0:b8:ca:c2:57: b5:88:57:fb:04:b5:51:f3:1a:69:42:f8:6f:26:66: 58:ea:e9:70:e1:6a:bb:27:53:8a:4f:87:7f:2f:05: ea:53:bc:82:4b:b3:c2:bc:d5:38:98:16:ce:12:06: 12:eb:0a:b8:74:e4:59:c3:6e:d8:42:3e:78:62:ac: 76:07:26:f9:86:f8:69:88:94:2a:20:ff:bb:9a:5a: e0:3c:99:f0:72:39:11:95:36:61:5c:26:50:c1:00: 1f:50:d4:ed:1a:57:e4:8b:6f:0d:ce:6d:83:23:c1: da:b8:76:51:3a:a9:1d:25:5e:05:db:ac:1c:9b:c5: 0d:21:f0:2e:73:ce:d9:7a:5d:20:5a:0a:aa:b6:71: 73:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BA:AE:D2:21:6F:4B:C9:D6:13:FF:F6:D8:9B:DE:67:77:88:C9:C5 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f4:90:b6:83:39:89:fc:e2:26:e1:8c:72:62:cb:fb:64:aa: 9d:9d:47:4a:a2:55:2a:b0:02:53:9d:74:6b:b0:79:27:0e:eb: 7f:d1:d3:b8:9e:b2:79:be:5b:d5:6e:45:ef:c5:80:ef:0b:70: 40:88:66:6e:2c:e7:d0:e1:60:7a:8b:73:3d:01:63:a0:f4:e3: 26:35:89:89:0d:78:b6:d2:c3:24:17:77:f1:19:3d:80:83:10: 58:7d:24:53:dd:a7:65:f9:71:34:4d:44:be:24:bb:b1:94:aa: 0e:5d:d6:dc:d1:7f:f4:99:36:04:19:b2:1b:08:90:65:a7:fc: 17:a1:83:bf:6a:7b:0b:f9:5e:39:f1:01:63:58:db:d8:d2:58: 77:6e:af:9a:2f:62:71:90:c3:9d:7d:ed:9f:e0:35:76:dc:9f: 36:76:99:60:74:f1:75:e8:a9:79:93:7d:72:13:3c:f6:7a:c9: ce:f0:32:37:80:80:d4:cc:2d:0e:b7:f5:b3:c2:2e:4b:db:4c: ab:1d:2e:e1:69:32:56:b2:22:2a:f4:04:a8:b1:4a:01:a1:c6: b5:8d:21:17:6d:68:84:63:38:64:9e:b8:ce:f6:a8:90:cf:a6: e1:8b:42:8c:bd:e6:db:0f:9c:f6:0a:e7:28:26:a9:7d:7c:9a: 83:15:04:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjYxMTE0MTcyOTU4WhcNMjYxMTIxMTcyOTU4WjAYMRYwFAYD VQQDEw02YWY4OWE5Ni04NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcxNmips88it/XQdf8RWKcrC32DbsMxdHKvu31clkXQAocdNKbrqb9ooS6dG zM6xdy/BLsOlrk3kb8eFRhx02FLnrqeJcCgu6ANasT0B4wrev22t5Hl/WJ7AvV6x +01gdx55OC+yGgHTKQy2OzTStWIa0LjKwle1iFf7BLVR8xppQvhvJmZY6ulw4Wq7 J1OKT4d/LwXqU7yCS7PCvNU4mBbOEgYS6wq4dORZw27YQj54Yqx2Byb5hvhpiJQq IP+7mlrgPJnwcjkRlTZhXCZQwQAfUNTtGlfki28Nzm2DI8HauHZROqkdJV4F26wc m8UNIfAuc87Zel0gWgqqtnFzGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq6rtIh b0vJ1hP/9tib3md3iMnFMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/SQtoM5ifziJuGMcmLL+2SqnZ1HSqJVKrACU510a7B5Jw7rf9HTuJ6yeb5b 1W5F78WA7wtwQIhmbizn0OFgeotzPQFjoPTjJjWJiQ14ttLDJBd38Rk9gIMQWH0k U92nZflxNE1EviS7sZSqDl3W3NF/9Jk2BBmyGwiQZaf8F6GDv2p7C/leOfEBY1jb 2NJYd26vmi9icZDDnX3tn+A1dtyfNnaZYHTxdeipeZN9chM89nrJzvAyN4CA1Mwt Drf1s8IuS9tMqx0u4WkyVrIiKvQEqLFKAaHGtY0hF21ohGM4ZJ64zvaokM+m4YtC jL3m2w+c9grnKCapfXyagxUEmQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:53:44 2026 by rpki-client