$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: yvvRGUtSEz6UQLTgbgvQgwg8zOO+dQqx4jzrkQImoIA= Subject key identifier: DE:77:E6:6B:F2:64:18:5D:49:0D:6A:94:F7:B0:0E:1E:3E:2D:81:07 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 074A Signing time: Thu 12 Nov 2026 21:45:22 +0000 Manifest this update: Thu 12 Nov 2026 21:45:21 +0000 Manifest next update: Thu 19 Nov 2026 21:45:21 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: szEE9tIj9fc6llVqYc6YAHrjOio7Gf0+d65MW+JiLAI=) 2: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc=) 3: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: 2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 21:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Nov 12 21:45:21 2026 GMT Not After : Nov 19 21:45:21 2026 GMT Subject: CN=6af63371-ebf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:6a:df:79:f3:11:db:34:c2:1f:31:a0:c9: 29:69:74:d6:95:6b:e4:95:7d:fd:de:f2:66:71:67: 3c:67:4b:e0:d8:f3:df:c9:b2:c5:43:78:e8:c6:3d: 89:be:03:d1:9c:86:6a:d7:63:f7:00:c5:03:32:7e: 4c:d9:72:97:12:bb:08:c2:9b:f3:4b:e5:04:51:92: 04:2e:2a:09:46:6b:7f:25:72:8a:f0:7e:e6:ea:02: 1a:d6:50:e3:d7:1d:36:ca:6e:41:0a:0c:75:e5:8b: 0d:6b:dd:b3:81:e1:77:17:34:3f:09:9a:d1:2d:20: 3b:db:ab:da:84:9a:13:f0:0a:8e:bf:68:84:d2:7f: 5d:b1:b3:a6:21:2e:e6:28:d3:a5:5c:5d:30:b1:46: c8:67:c8:49:3a:5c:6d:00:07:58:7c:f9:9b:59:02: 59:4b:17:cf:b7:e0:8e:8f:6c:9b:e9:d2:ab:68:7a: 9f:e5:95:41:f2:63:a8:b7:86:32:e3:2c:09:fb:36: 07:64:f2:ca:69:90:5c:99:02:b0:c1:85:15:97:49: ee:f5:64:ae:08:26:b0:16:ac:81:c7:df:f4:08:ca: 5f:0e:cc:e5:59:b4:86:62:18:68:a4:31:70:32:5d: c5:ab:01:e5:3d:d8:81:ad:dd:45:05:cc:97:c7:52: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:77:E6:6B:F2:64:18:5D:49:0D:6A:94:F7:B0:0E:1E:3E:2D:81:07 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e5:db:57:91:f5:ce:9e:9b:00:88:af:18:eb:aa:f9:c0:94: 7a:3e:b8:0d:05:44:5d:ee:bd:b7:d5:91:61:cf:9e:0a:28:3a: 9b:38:da:d6:86:79:c0:1a:08:ac:b8:76:24:da:4d:6f:22:56: 54:3e:a2:54:6f:b7:eb:95:f2:ba:a5:46:df:03:3a:2a:be:a2: f0:fa:39:5c:cd:fa:e1:2d:67:03:d0:fe:2e:6b:38:16:9c:a0: 00:81:0c:4f:df:33:c9:ad:b9:1d:45:fa:62:b1:2a:a6:46:ed: 38:9b:44:04:87:3b:34:9b:1d:64:44:bc:c2:b5:82:71:b4:5e: 40:17:a2:0c:0e:d2:77:60:f8:fa:16:33:4c:99:17:3f:fb:35: 28:47:41:c6:20:17:5a:53:7c:ba:1f:89:ef:26:d3:08:96:10: dd:28:31:ed:43:a9:71:87:f0:0e:8e:12:a5:1f:b5:61:7e:1a: c1:15:66:81:0b:dd:b7:30:14:b2:c7:5a:cb:24:b5:a3:37:a3: 39:4c:af:70:ec:f1:32:b1:ee:7f:c0:25:25:5d:3a:41:e5:db: 46:83:73:21:4c:34:52:80:f4:bc:46:29:d5:52:0a:b7:6e:67: 73:35:67:32:4d:58:e5:02:2b:13:2e:e9:9f:5c:60:70:81:28: fe:7f:cb:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjYxMTEyMjE0NTIxWhcNMjYxMTE5MjE0NTIxWjAYMRYwFAYD VQQDEw02YWY2MzM3MS1lYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG5q33nzEds0wh8xoMkpaXTWlWvklX393vJmcWc8Z0vg2PPfybLFQ3joxj2J vgPRnIZq12P3AMUDMn5M2XKXErsIwpvzS+UEUZIELioJRmt/JXKK8H7m6gIa1lDj 1x02ym5BCgx15YsNa92zgeF3FzQ/CZrRLSA726vahJoT8AqOv2iE0n9dsbOmIS7m KNOlXF0wsUbIZ8hJOlxtAAdYfPmbWQJZSxfPt+COj2yb6dKraHqf5ZVB8mOot4Yy 4ywJ+zYHZPLKaZBcmQKwwYUVl0nu9WSuCCawFqyBx9/0CMpfDszlWbSGYhhopDFw Ml3FqwHlPdiBrd1FBcyXx1JnAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN535mvy ZBhdSQ1qlPewDh4+LYEHMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeXbV5H1zp6bAIivGOuq+cCUej64DQVEXe69t9WRYc+eCig6mzja1oZ5wBoI rLh2JNpNbyJWVD6iVG+365XyuqVG3wM6Kr6i8Po5XM364S1nA9D+Lms4FpygAIEM T98zya25HUX6YrEqpkbtOJtEBIc7NJsdZES8wrWCcbReQBeiDA7Sd2D4+hYzTJkX P/s1KEdBxiAXWlN8uh+J7ybTCJYQ3Sgx7UOpcYfwDo4SpR+1YX4awRVmgQvdtzAU ssdayyS1ozejOUyvcOzxMrHuf8AlJV06QeXbRoNzIUw0UoD0vEYp1VIKt25nczVn Mk1Y5QIrEy7pn1xgcIEo/n/LuA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:49:12 2026 by rpki-client