$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: 4Pzd28NH1eQhqn+q+MBWlrNpjlK/uMa4ThE4DEFGgZ4= Subject key identifier: 51:D5:82:AC:54:46:29:74:FA:4E:80:90:D1:C1:6B:DB:3E:FA:0C:25 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 024A Signing time: Tue 03 Nov 2026 03:09:33 +0000 Manifest this update: Tue 03 Nov 2026 03:09:33 +0000 Manifest next update: Tue 10 Nov 2026 03:09:33 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: gSNpWdfNRjgfu/8rMsWHP3Z9bJMrVMg2vLtbAI/m85M=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=) 3: C95DC5F4A27411F1A78F91D46611F970.roa (hash: ORURaqb/tZ2urpCugRZ8/FpqoxngJp0Iv3YmiEfInTM=) 4: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 03:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Nov 3 03:09:33 2026 GMT Not After : Nov 10 03:09:33 2026 GMT Subject: CN=6ae9506d-f78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:53:d9:bc:8f:9f:12:30:7a:7b:d1:25:c3: dd:08:a9:56:ed:14:4b:59:a5:4f:6e:3d:6b:73:4c: a6:f6:23:f0:cb:05:e0:e1:82:c8:ef:de:e0:38:ec: dc:57:0e:37:33:e2:13:1e:b7:25:7f:0c:2d:8d:84: 90:7e:7a:4d:c5:d0:aa:77:1e:91:dc:76:02:a3:c4: 4b:5f:0f:17:74:6c:75:49:0f:53:13:12:81:0c:d4: 64:5b:44:9f:42:2e:23:12:18:0b:b8:0b:73:ed:cc: 99:19:8a:af:6d:b9:20:59:bf:d7:92:36:6d:0d:db: 5e:df:e0:4d:b9:5f:05:dd:7a:93:1e:f8:37:d7:30: 09:86:7f:26:41:76:37:c3:cf:20:90:dc:74:82:60: 48:45:61:06:02:b1:91:62:96:57:23:b1:60:f6:da: 7d:60:c6:de:e0:5c:ed:13:a8:d8:6e:68:97:0f:d2: 45:cb:b1:0d:53:a8:09:40:19:56:f4:24:a7:e0:c9: ab:d2:59:53:d7:65:1c:b9:89:33:f5:f1:9f:78:1b: 22:2e:cc:e2:80:7e:87:95:8a:69:8a:5c:9e:a2:f9: 81:7a:bd:d5:72:9a:4e:7b:e0:fd:46:99:0b:25:84: f8:9e:88:57:8a:3a:1c:6d:7e:30:68:77:a2:ed:3b: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D5:82:AC:54:46:29:74:FA:4E:80:90:D1:C1:6B:DB:3E:FA:0C:25 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:14:56:6f:66:a1:cf:57:4d:68:24:85:c7:77:2c:55:d1:81: de:44:7b:b3:e8:db:66:5f:74:41:54:cd:ea:cf:42:b0:9d:9f: e4:6a:c6:62:b8:a8:e4:ae:65:b7:a8:cc:ff:07:a0:4c:d4:4c: f0:a0:54:cf:09:d2:ce:12:83:cd:81:c3:aa:64:73:4a:58:65: ca:5f:49:5e:aa:a3:42:84:a5:0e:75:61:95:c1:45:fe:2f:12: 05:bd:2f:ee:e3:ee:41:a8:af:ba:03:3f:fc:5e:d1:c0:cd:da: 77:67:a9:34:2f:ed:36:29:53:ce:d0:08:c8:3a:05:cb:f0:77: 59:64:03:c3:eb:b0:7f:b0:15:e6:82:64:da:63:16:93:51:10: 21:4a:2b:88:03:96:2f:2a:4c:ad:54:ee:48:ac:65:e8:43:aa: 48:80:ac:f1:33:9b:7a:0c:ff:b7:81:99:27:74:49:79:e1:c3: 1d:9a:b0:4b:a3:b2:af:69:45:f9:66:8e:77:9d:74:51:46:df: 30:70:02:db:43:86:fc:26:ad:bd:8a:9e:bb:6b:40:00:a5:9f: 09:7b:be:87:36:f4:2d:c2:55:98:2f:59:a6:5a:61:93:e5:f8: d1:7a:85:39:63:42:78:0f:04:0f:e0:66:1f:8e:aa:b6:39:06: 51:84:30:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjYxMTAzMDMwOTMzWhcNMjYxMTEwMDMwOTMzWjAYMRYwFAYD VQQDEw02YWU5NTA2ZC1mNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/ZT2byPnxIwenvRJcPdCKlW7RRLWaVPbj1rc0ym9iPwywXg4YLI797gOOzc Vw43M+ITHrclfwwtjYSQfnpNxdCqdx6R3HYCo8RLXw8XdGx1SQ9TExKBDNRkW0Sf Qi4jEhgLuAtz7cyZGYqvbbkgWb/XkjZtDdte3+BNuV8F3XqTHvg31zAJhn8mQXY3 w88gkNx0gmBIRWEGArGRYpZXI7Fg9tp9YMbe4FztE6jYbmiXD9JFy7ENU6gJQBlW 9CSn4Mmr0llT12UcuYkz9fGfeBsiLszigH6HlYppilyeovmBer3VcppOe+D9RpkL JYT4nohXijocbX4waHei7TuGbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHVgqxU Ril0+k6AkNHBa9s++gwlMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXxRWb2ahz1dNaCSFx3csVdGB3kR7s+jbZl90QVTN6s9CsJ2f5GrGYrio5K5l t6jM/wegTNRM8KBUzwnSzhKDzYHDqmRzSlhlyl9JXqqjQoSlDnVhlcFF/i8SBb0v 7uPuQaivugM//F7RwM3ad2epNC/tNilTztAIyDoFy/B3WWQDw+uwf7AV5oJk2mMW k1EQIUoriAOWLypMrVTuSKxl6EOqSICs8TObegz/t4GZJ3RJeeHDHZqwS6Oyr2lF +WaOd510UUbfMHAC20OG/CatvYqeu2tAAKWfCXu+hzb0LcJVmC9Zplphk+X40XqF OWNCeA8ED+BmH46qtjkGUYQwAA== -----END CERTIFICATE-----Generated at Thu Nov 5 05:26:02 2026 by rpki-client