$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: uf+4XjfB8NUWbj9dymTWUpGjecvpqBY2ADGqPEpu0eo= Subject key identifier: A6:1E:57:F9:05:AE:75:FE:F5:B9:98:4A:E6:DC:9B:94:BF:94:B1:BF Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2958 Signing time: Sat 24 Oct 2026 15:35:39 +0000 Manifest this update: Sat 24 Oct 2026 15:35:39 +0000 Manifest next update: Sat 31 Oct 2026 15:35:39 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: GN6UP+PLtpnOmyFH8s2S10rDaDUHEp9VD0y8GfA/Ax0=) 2: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=) 3: WejB4JlmVbh8du19u5Ho4rCbARg.asa (hash: aIB7oyHmPX9q9erR0/T0nCIhWI26IaYdAumRrQY2K8M=) 4: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: tDiNjxHLhZC1joZZn8et4eDqQovSvtK/L6hvpTBMkFE=) 5: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=) 6: UUjN7dchhhdAUKPSWXkr__UcJYE.asa (hash: dekenOEzvvmjQhgJoPUBE8BRp0caAZ1BGxLSoyWGAzs=) 7: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=) 8: 258E51CC8C1311F18E34296D4511F970.roa (hash: luo6QUjddxSOZwocbav2etITZgoNfd3LgW+NMljL44E=) 9: t5maU3WjEwiHY114jpx62P7h0-0.asa (hash: 012YtPauaYUD3hpUK7sp8sIX39ybxbW0ELJOdzY8hIc=) 10: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10876 (0x2a7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Oct 24 15:35:39 2026 GMT Not After : Oct 31 15:35:39 2026 GMT Subject: CN=6adcd04b-f8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:fe:3d:cc:00:d7:e4:8c:28:87:ec:2e:0c: 92:f8:16:65:d5:7b:7d:82:48:b3:f9:b9:da:c8:60: 47:f9:f6:5e:d0:1e:b9:9f:e7:34:91:81:b5:9b:63: e4:77:d3:69:26:17:8b:3e:8e:29:08:d0:f1:35:78: be:36:1d:fa:61:13:00:ff:dc:eb:72:a6:af:d6:0c: f1:ec:c5:da:ce:aa:83:1c:ef:35:e3:63:d2:7f:91: 55:0f:9d:d5:41:13:1b:f3:ea:6a:24:c8:0f:1d:26: 84:86:67:15:df:15:d2:b2:fa:6f:a5:e5:12:de:96: 61:72:da:78:5a:c0:82:53:e8:7c:8a:d7:e0:66:7f: 4e:01:47:fe:7d:1d:47:0f:90:b8:01:fa:3c:5c:c0: fc:e7:b9:0a:c7:db:52:f6:2c:31:a6:5f:26:b1:4f: 1c:98:b2:81:f7:c4:29:20:b4:00:33:ad:23:04:13: d9:3e:ea:81:2b:ba:2a:f0:17:1c:b8:80:0d:eb:51: 23:de:d3:0a:4b:9c:40:b6:ac:51:33:26:7e:4c:9b: 1c:a1:eb:75:5a:08:44:3a:f7:61:c0:53:17:39:d8: ee:79:95:2e:56:8d:4f:3c:bf:3a:ad:56:df:1e:de: 17:69:ad:f3:2e:5b:d5:03:a4:db:56:f7:b6:de:48: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:57:F9:05:AE:75:FE:F5:B9:98:4A:E6:DC:9B:94:BF:94:B1:BF X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0f:eb:93:9f:88:2c:f5:43:7d:e6:23:40:0c:a9:e0:4c:32: 3c:d3:40:e6:5b:0c:bc:45:73:eb:d1:2e:1e:c8:9e:39:dc:9f: fa:ea:fc:27:64:3b:6b:0f:4d:f2:f4:e3:6b:55:0b:08:c9:dc: b4:0b:6c:b8:36:12:c5:f6:ea:70:4e:87:08:80:bc:b3:3c:05: 55:30:d5:b9:ea:38:c7:4e:69:00:5b:96:ae:ac:93:a4:57:fb: 74:d3:6d:71:b1:03:a4:bc:34:6b:4a:1c:1a:41:21:64:bf:ea: 9a:5e:31:bc:6c:27:ad:3e:2c:c9:1c:c2:21:c7:42:98:fb:84: 58:95:02:fd:33:1b:a6:af:50:82:f5:54:15:88:e6:43:54:f2: 5a:8e:c6:49:36:d7:86:36:55:cd:84:53:aa:03:28:07:12:4d: bb:bc:cf:5f:eb:a4:06:73:1f:6e:9d:10:d8:fc:7c:37:84:d8: 60:1b:b8:54:ed:06:19:b7:ba:19:23:56:73:7a:5a:45:ff:5c: c8:75:4a:39:e6:ca:d4:00:a4:54:82:18:dd:c4:a3:fc:4b:51: d2:8d:b8:a6:a0:b8:97:08:99:bd:b6:07:36:c9:6c:33:22:cd: 9a:82:b4:9d:f9:70:62:1e:6c:7b:ba:00:22:c6:db:64:11:a3: 9a:d4:d3:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYxMDI0MTUzNTM5WhcNMjYxMDMxMTUzNTM5WjAYMRYwFAYD VQQDEw02YWRjZDA0Yi1mOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8/+PcwA1+SMKIfsLgyS+BZl1Xt9gkiz+bnayGBH+fZe0B65n+c0kYG1m2Pk d9NpJheLPo4pCNDxNXi+Nh36YRMA/9zrcqav1gzx7MXazqqDHO8142PSf5FVD53V QRMb8+pqJMgPHSaEhmcV3xXSsvpvpeUS3pZhctp4WsCCU+h8itfgZn9OAUf+fR1H D5C4Afo8XMD857kKx9tS9iwxpl8msU8cmLKB98QpILQAM60jBBPZPuqBK7oq8Bcc uIAN61Ej3tMKS5xAtqxRMyZ+TJscoet1WghEOvdhwFMXOdjueZUuVo1PPL86rVbf Ht4Xaa3zLlvVA6TbVve23kgdjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYeV/kF rnX+9bmYSubcm5S/lLG/MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAow/rk5+ILPVDfeYjQAyp4EwyPNNA5lsMvEVz69EuHsieOdyf+ur8J2Q7aw9N 8vTja1ULCMnctAtsuDYSxfbqcE6HCIC8szwFVTDVueo4x05pAFuWrqyTpFf7dNNt cbEDpLw0a0ocGkEhZL/qml4xvGwnrT4syRzCIcdCmPuEWJUC/TMbpq9QgvVUFYjm Q1TyWo7GSTbXhjZVzYRTqgMoBxJNu7zPX+ukBnMfbp0Q2Px8N4TYYBu4VO0GGbe6 GSNWc3paRf9cyHVKOebK1ACkVIIY3cSj/EtR0o24pqC4lwiZvbYHNslsMyLNmoK0 nflwYh5se7oAIsbbZBGjmtTTtg== -----END CERTIFICATE-----Generated at Mon Oct 26 02:21:28 2026 by rpki-client