$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: iQphXYq9aKmqnyG5+RThOUowTq63QE7ZW4wV2y6VaHA= Subject key identifier: 8B:6D:4D:75:95:5D:34:01:7B:11:C6:CD:30:05:2F:4B:97:DF:4D:8B Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0936 Signing time: Mon 26 Oct 2026 20:10:49 +0000 Manifest this update: Mon 26 Oct 2026 20:10:49 +0000 Manifest next update: Mon 02 Nov 2026 20:10:49 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: UViZw8BzJrXn4BzimIQn9H3REiLi7flHkUfov/YxJVs=) 2: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) 4: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Oct 26 20:10:49 2026 GMT Not After : Nov 2 20:10:49 2026 GMT Subject: CN=6adfb3c9-b0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:a4:16:83:74:08:19:22:16:50:03:52:53: 45:34:09:2e:21:ab:ef:76:9e:7e:94:2c:06:91:d9: 59:05:63:1a:f5:79:7a:b7:00:93:a5:b1:c6:3e:b4: 3e:c6:5f:9d:3e:c6:19:ac:43:e0:00:57:48:5e:4c: db:a8:f4:a7:a7:94:51:e2:40:83:6d:8e:0b:ac:3e: 14:3b:da:57:b1:29:a0:a2:6a:8e:fe:7c:e3:82:0d: e3:6b:ea:f2:43:35:8d:10:c4:f2:53:43:22:a6:7c: 59:b0:a4:af:27:e4:d7:db:53:1f:ad:21:8b:4f:ee: 23:46:d1:be:62:de:5c:1a:32:fe:ff:7c:1d:58:e0: db:92:37:10:d0:27:c4:24:dc:08:68:eb:fc:0a:9f: 23:7d:2d:85:3e:f6:c5:d0:e0:00:83:97:21:03:9d: be:42:b0:e9:e5:84:a9:88:97:a8:9b:0b:48:3d:d7: fe:19:6a:4e:46:18:7a:47:43:f2:7a:38:eb:8e:c7: 75:fa:24:ff:cb:42:de:15:fa:b4:29:b6:aa:30:00: 2d:61:ae:98:69:d2:9b:fe:ed:81:0f:1e:9b:0b:e8: c7:32:68:73:52:3a:98:5d:e2:ec:50:bc:cc:2a:69: db:fc:68:00:16:88:5d:b4:d2:df:fe:d2:ee:7b:bc: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6D:4D:75:95:5D:34:01:7B:11:C6:CD:30:05:2F:4B:97:DF:4D:8B X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8d:76:a2:7e:6a:a1:08:a0:a9:c3:63:d6:54:cd:57:24:8f: 04:be:1d:f6:3e:71:da:51:9c:d0:df:32:a8:8b:5c:da:b2:61: 57:d9:13:41:17:69:c5:0c:81:f1:50:41:b4:6b:fa:69:d4:16: fc:f7:c1:32:09:ae:70:cd:83:e8:53:ae:c9:46:f5:91:f7:cb: 8c:9e:2a:b9:01:d2:ab:a6:6d:fe:d6:3f:78:e6:6b:bc:45:02: b1:fb:8c:46:ff:8a:7a:e4:ee:ce:dc:26:90:c1:e8:87:59:f1: 54:fe:a8:50:a4:e1:d0:3d:93:5c:65:1a:bc:af:f6:dc:ea:50: 43:b6:9c:c1:6f:07:72:af:b8:c6:d6:e4:76:e6:2f:02:17:59: b6:70:df:27:60:bb:b8:0c:f4:1f:a1:5d:98:06:eb:ff:94:0f: 81:c1:74:46:a0:60:f0:55:10:fa:80:a9:30:fa:db:3a:a5:6f: 8f:3c:f3:8b:9f:97:7b:20:76:dd:cd:a4:72:88:70:4c:bc:5a: 2b:f3:06:29:3f:ce:ba:40:a6:ca:53:94:37:19:dc:16:ac:7f: ee:19:0f:51:dd:f9:46:ec:e8:ea:16:d5:66:f3:27:38:64:42: 27:e7:ae:c3:ad:44:65:a9:c0:39:c5:ff:fe:74:21:9f:10:b7: 13:eb:a4:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYxMDI2MjAxMDQ5WhcNMjYxMTAyMjAxMDQ5WjAYMRYwFAYD VQQDEw02YWRmYjNjOS1iMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wykFoN0CBkiFlADUlNFNAkuIavvdp5+lCwGkdlZBWMa9Xl6twCTpbHGPrQ+ xl+dPsYZrEPgAFdIXkzbqPSnp5RR4kCDbY4LrD4UO9pXsSmgomqO/nzjgg3ja+ry QzWNEMTyU0MipnxZsKSvJ+TX21MfrSGLT+4jRtG+Yt5cGjL+/3wdWODbkjcQ0CfE JNwIaOv8Cp8jfS2FPvbF0OAAg5chA52+QrDp5YSpiJeomwtIPdf+GWpORhh6R0Py ejjrjsd1+iT/y0LeFfq0KbaqMAAtYa6YadKb/u2BDx6bC+jHMmhzUjqYXeLsULzM Kmnb/GgAFohdtNLf/tLue7xx3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIttTXWV XTQBexHGzTAFL0uX302LMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcY12on5qoQigqcNj1lTNVySPBL4d9j5x2lGc0N8yqItc2rJhV9kTQRdpxQyB 8VBBtGv6adQW/PfBMgmucM2D6FOuyUb1kffLjJ4quQHSq6Zt/tY/eOZrvEUCsfuM Rv+KeuTuztwmkMHoh1nxVP6oUKTh0D2TXGUavK/23OpQQ7acwW8Hcq+4xtbkduYv AhdZtnDfJ2C7uAz0H6FdmAbr/5QPgcF0RqBg8FUQ+oCpMPrbOqVvjzzzi5+XeyB2 3c2kcohwTLxaK/MGKT/OukCmylOUNxncFqx/7hkPUd35Ruzo6hbVZvMnOGRCJ+eu w61EZanAOcX//nQhnxC3E+ukFQ== -----END CERTIFICATE-----Generated at Wed Oct 28 12:53:01 2026 by rpki-client