$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: +cSWJzhMw2zLgFLaO4f7yaKBfntdpFVWPWMaeG+j18E= Subject key identifier: 3C:0A:F7:32:E3:9D:ED:D2:22:68:FC:78:B2:48:37:E3:AB:75:74:98 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 033D Signing time: Sun 15 Nov 2026 00:44:55 +0000 Manifest this update: Sun 15 Nov 2026 00:44:55 +0000 Manifest next update: Sun 22 Nov 2026 00:44:55 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: JRjhZtRfSXgLZHGwRsuc7CAlopaID+I1Y1WYh7vy1ws=) 2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: Ag/WSAJg1umaGwKzFAK19hHyc1cKPo16yiWol4G9PIY=) 3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: 4cOxFtUj/f+VqXW3XeSAxJn3qdSwOmHu+hPFst7NTB0=) 4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 4JSxAQIunOBygnnclEHW/aZY/r5nkwq9OMPvfsT6+0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Nov 15 00:44:55 2026 GMT Not After : Nov 22 00:44:55 2026 GMT Subject: CN=6af90087-e341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:39:2c:9b:51:11:0a:d5:b6:88:4e:48:49: dd:9c:e9:1b:91:50:0c:7e:bf:8c:18:6f:82:61:e9: ae:44:3a:19:7b:8e:a4:4c:9d:66:26:28:9e:f9:d5: 81:e7:cd:4d:11:b7:72:65:59:7f:c0:31:3f:28:20: c2:24:a2:2d:92:6a:b9:be:b9:89:c2:10:9a:be:d0: 0e:00:dd:3f:cd:de:66:53:60:fe:04:19:48:74:2f: 80:ec:28:69:34:bb:f1:ae:e7:d2:96:89:25:ac:cd: d9:6c:10:39:4e:d9:82:17:b2:cd:4d:86:58:e5:67: 84:eb:da:cd:7e:71:cf:a9:04:d7:13:d3:98:1a:d2: 54:64:3c:06:aa:b6:9c:f4:b3:0f:9f:39:6c:40:6d: d4:42:ed:e1:0f:74:5e:b9:9a:53:c8:60:49:85:bb: e3:5f:8c:84:45:7d:c9:8d:9a:62:9b:bf:b2:1f:f6: be:9d:3f:16:1d:26:56:34:10:b1:02:87:aa:b3:41: 0f:28:31:5f:3d:17:cf:36:ff:db:e1:0b:02:9b:fd: 8f:19:a6:c5:8f:eb:6f:d3:a7:77:09:4e:7a:fa:71: af:3c:54:36:60:a0:bc:96:50:71:19:e8:8e:36:8d: e9:8f:15:ea:8f:7b:60:38:85:22:e7:a1:16:4a:00: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0A:F7:32:E3:9D:ED:D2:22:68:FC:78:B2:48:37:E3:AB:75:74:98 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4e:21:c0:20:c7:81:21:30:b5:66:4b:5a:8a:1d:94:cc:38: e9:97:bd:4d:6d:e7:02:c8:36:ad:8e:dd:e2:cf:c8:ce:53:eb: de:1f:31:35:9e:77:e6:f5:6a:34:19:98:b6:78:9a:5a:6a:b2: fc:02:46:62:c2:c5:3b:3b:97:c0:ad:25:6e:d0:2d:8c:6c:88: f2:0a:1a:7c:9a:0a:32:dd:0b:a8:ea:0d:8b:80:2e:32:5c:88: e3:e4:8f:f1:ba:fd:34:79:2c:9e:ad:e5:03:c0:ed:8c:72:15: bb:b0:55:ce:0d:19:33:db:73:2a:db:cf:1b:75:69:5c:cf:ce: df:66:f8:20:10:07:16:3b:32:72:f6:f7:70:36:dd:ef:7b:13: 95:ad:04:b4:23:e0:e8:aa:ec:cc:8e:21:91:a2:c3:f3:94:a9: fe:01:86:74:d0:92:68:25:c1:de:f0:f9:54:5b:7e:a3:91:76: e8:ea:5d:86:ba:cd:6e:dd:2a:ee:9a:5d:8c:f6:fb:15:34:05: db:87:3d:8c:37:04:00:48:fb:95:cb:02:6b:e5:a3:ec:ed:9f: c9:94:5d:76:ba:41:2f:e3:bc:31:15:12:28:97:49:62:90:07: f6:16:6c:7a:44:1d:f0:40:9a:34:3a:b3:97:1a:c1:99:93:37: 17:35:55:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYxMTE1MDA0NDU1WhcNMjYxMTIyMDA0NDU1WjAYMRYwFAYD VQQDEw02YWY5MDA4Ny1lMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8k5LJtREQrVtohOSEndnOkbkVAMfr+MGG+CYemuRDoZe46kTJ1mJiie+dWB 581NEbdyZVl/wDE/KCDCJKItkmq5vrmJwhCavtAOAN0/zd5mU2D+BBlIdC+A7Chp NLvxrufSloklrM3ZbBA5TtmCF7LNTYZY5WeE69rNfnHPqQTXE9OYGtJUZDwGqrac 9LMPnzlsQG3UQu3hD3ReuZpTyGBJhbvjX4yERX3JjZpim7+yH/a+nT8WHSZWNBCx Aoeqs0EPKDFfPRfPNv/b4QsCm/2PGabFj+tv06d3CU56+nGvPFQ2YKC8llBxGeiO No3pjxXqj3tgOIUi56EWSgCx/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwK9zLj ne3SImj8eLJIN+OrdXSYMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV04hwCDHgSEwtWZLWoodlMw46Ze9TW3nAsg2rY7d4s/IzlPr3h8xNZ535vVq NBmYtniaWmqy/AJGYsLFOzuXwK0lbtAtjGyI8goafJoKMt0LqOoNi4AuMlyI4+SP 8br9NHksnq3lA8DtjHIVu7BVzg0ZM9tzKtvPG3VpXM/O32b4IBAHFjsycvb3cDbd 73sTla0EtCPg6KrszI4hkaLD85Sp/gGGdNCSaCXB3vD5VFt+o5F26OpdhrrNbt0q 7ppdjPb7FTQF24c9jDcEAEj7lcsCa+Wj7O2fyZRddrpBL+O8MRUSKJdJYpAH9hZs ekQd8ECaNDqzlxrBmZM3FzVVMA== -----END CERTIFICATE-----Generated at Sun Nov 15 11:13:18 2026 by rpki-client