$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: RjbwWvSLZLgY4Ds2MqdTaozOzNcVP9mae6FUVVLW6f4= Subject key identifier: 0A:E4:B8:01:C1:01:14:67:11:58:04:A6:D4:49:91:12:C2:5B:12:DA Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: F1 Signing time: Sun 15 Nov 2026 06:38:48 +0000 Manifest this update: Sun 15 Nov 2026 06:38:48 +0000 Manifest next update: Sun 22 Nov 2026 06:38:48 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: rOZ0YAe/3W6pBHmFDe82kcHEVmOGVRdpncIAXje+H6E=) 2: EBF5F8EC9A1411F1A4DC90745311F970.roa (hash: 1ySc2Bvow117QZwtu3UHKMj6qSm7s9WBIKTKvXWod2M=) 3: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: 7jBehGW4jYODK/wvysq/B6gR9h8CrbXkQFlTSCxm238=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Nov 15 06:38:48 2026 GMT Not After : Nov 22 06:38:48 2026 GMT Subject: CN=6af95378-3271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:d9:fa:b0:af:72:c0:dc:b3:b4:b6:ad:16: a0:c4:13:91:39:ce:44:57:c4:96:8b:b9:aa:00:07: 62:83:d9:5b:b8:e3:4d:0a:92:1d:42:35:9e:37:59: 68:be:15:be:a6:a4:eb:de:0c:99:7c:a7:dd:88:8b: d1:ad:91:7c:46:70:4a:25:6d:af:30:fd:a9:56:ae: 11:08:48:fe:d4:c5:ee:9d:c4:b7:72:75:c6:36:20: 86:d4:b1:ce:3c:11:a4:c0:40:79:3b:ed:d9:c6:2f: bd:a9:54:69:7b:7f:72:9b:f3:f2:27:59:8f:f3:e5: 30:b1:4b:31:af:8c:12:a3:bf:b8:b4:f4:7c:7c:41: d4:e7:63:6a:06:28:d0:43:94:bc:4b:15:6c:59:48: 03:40:0f:be:ca:b4:de:25:db:1f:03:60:6b:4e:34: f8:04:24:19:66:ec:1c:6c:0a:01:a7:cd:16:e4:76: 49:c2:8d:e2:83:ad:2a:67:64:00:ce:1b:7c:04:fd: 94:cf:ed:70:1d:0e:aa:11:78:0e:a2:27:66:e3:76: ba:c3:5d:dc:14:f2:fe:23:31:64:31:5f:c0:01:88: 7d:f1:44:1c:b6:c6:c7:66:b8:0c:2e:49:f2:b9:03: 58:2f:ce:c8:05:5d:23:68:0e:da:fa:e0:98:e2:3f: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:B8:01:C1:01:14:67:11:58:04:A6:D4:49:91:12:C2:5B:12:DA X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:34:c6:31:dc:7a:c4:ed:f3:fb:0f:67:11:c7:45:7a:3f:2e: b5:8e:e7:82:8e:b6:81:4f:0d:54:4a:5d:79:09:36:b3:c2:68: 7d:48:d7:6b:50:41:bb:08:12:38:30:cd:54:a3:af:de:f9:fe: c4:47:ec:0e:c5:32:0c:d1:d9:9f:57:fa:ba:9c:d2:53:43:2d: e7:1b:02:8f:45:d0:8d:d4:bb:f0:b7:bf:6d:e3:73:39:2f:d9: 6b:2e:26:49:b7:4e:b7:a4:1c:ce:56:3d:53:b7:17:9d:31:2b: 45:00:10:e7:ba:ff:3b:24:e6:61:ee:df:08:7f:05:39:db:c6: 11:7c:7d:93:ea:ba:97:c9:d6:4d:56:b0:15:33:a3:7a:29:97: cf:dc:a5:c3:5a:67:6a:ac:ef:d7:30:c4:82:f1:7c:87:77:f8: ca:15:e0:65:e7:59:33:ea:18:0a:f6:7e:80:b5:a3:b4:64:38: 5a:b1:c1:cc:9d:97:38:0d:94:79:b6:08:fa:eb:1e:12:d4:e7: a2:12:f0:a2:39:c6:6c:b8:31:4d:71:b9:95:68:38:dd:c4:88: 68:c0:3c:64:8f:08:0f:f3:63:b3:9b:1b:c0:fe:53:12:e2:17: 86:c1:db:32:e5:a3:bb:09:0f:14:cc:32:50:94:f2:26:57:55: 14:f4:c9:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCN0ExMTAvBgNVBAUTKDBDMkY0NUI2Qzg4NjIyMzI0MkVDOUJGOTNCMzQ2OTdG NjREREY2ODAwHhcNMjYxMTE1MDYzODQ4WhcNMjYxMTIyMDYzODQ4WjAYMRYwFAYD VQQDEw02YWY5NTM3OC0zMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1XZ+rCvcsDcs7S2rRagxBOROc5EV8SWi7mqAAdig9lbuONNCpIdQjWeN1lo vhW+pqTr3gyZfKfdiIvRrZF8RnBKJW2vMP2pVq4RCEj+1MXuncS3cnXGNiCG1LHO PBGkwEB5O+3Zxi+9qVRpe39ym/PyJ1mP8+UwsUsxr4wSo7+4tPR8fEHU52NqBijQ Q5S8SxVsWUgDQA++yrTeJdsfA2BrTjT4BCQZZuwcbAoBp80W5HZJwo3ig60qZ2QA zht8BP2Uz+1wHQ6qEXgOoidm43a6w13cFPL+IzFkMV/AAYh98UQctsbHZrgMLkny uQNYL87IBV0jaA7a+uCY4j9woQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArkuAHB ARRnEVgEptRJkRLCWxLaMB8GA1UdIwQYMBaAFAwvRbbIhiIyQuyb+Ts0aX9k3faA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I3QS9DMDg1MDY5MjdE QkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNpR0lqSkM3SnY1T3pScGYyVGQ5 b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0I3QS9DMDg1MDY5MjdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNpR0lq SkM3SnY1T3pScGYyVGQ5b0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDTGMdx6xO3z+w9nEcdFej8utY7ngo62gU8NVEpdeQk2s8JofUjXa1BBuwgS ODDNVKOv3vn+xEfsDsUyDNHZn1f6upzSU0Mt5xsCj0XQjdS78Le/beNzOS/Zay4m SbdOt6QczlY9U7cXnTErRQAQ57r/OyTmYe7fCH8FOdvGEXx9k+q6l8nWTVawFTOj eimXz9ylw1pnaqzv1zDEgvF8h3f4yhXgZedZM+oYCvZ+gLWjtGQ4WrHBzJ2XOA2U ebYI+useEtTnohLwojnGbLgxTXG5lWg43cSIaMA8ZI8ID/Njs5sbwP5TEuIXhsHb MuWjuwkPFMwyUJTyJldVFPTJ5g== -----END CERTIFICATE-----Generated at Sun Nov 15 12:37:37 2026 by rpki-client