$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.mft (raw, json) Hash identifier: VpSJskPC06AeCcJjOMK1rkRQuiaVPvihHCzm5ZDe5ug= Subject key identifier: 13:60:B2:EC:7E:4D:51:88:49:C7:ED:17:F5:61:22:37:BB:91:DB:55 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft Manifest number: 0CF9 Signing time: Sat 14 Nov 2026 18:30:39 +0000 Manifest this update: Sat 14 Nov 2026 18:30:39 +0000 Manifest next update: Sat 21 Nov 2026 18:30:39 +0000 Files and hashes: 1: _KoIYibfAq-DlPqyLR-5bgt9Zd0.crl (hash: sRicMRXBycOGBFc8Gz1J1Hcnhhvsa5xp+cCiyg4jlO0=) 2: C5A0F51AD6EC11F1993DC0600E66CEF9.roa (hash: Ptb+gUSfO2IIvMzqFODflpOWsEel65sFcTBtV7vJQGs=) 3: 45DE9550BADF11F09B91D509C4F9AE02.roa (hash: p36IxgJSYxSVxDcgWekbNQXRkHJAnWyPDPHksjl233k=) 4: pSugHZb7grmoqz4MGW-uXNQfn8M.asa (hash: 8e0fvlXLYarhVQq0dc3QdqsjXLDF2NkVgp4m7IllYW4=) 5: 50229D303D6711F1A0848E61AE833773.roa (hash: reIxgqe05sEBUJKY+WscmjdUtjvd2Rhqu3ZL/1RHcqc=) 6: 09102B0AC4B311F198C2224D5D11F970.roa (hash: IBN53rxAyAOubtU0YAuDwBwmK8ruUnB7D9JPnDVtQks=) 7: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (hash: gzcKTWUYCkW7/UycwF0pi+085wVbUmNYAwtTydE5q9k=) 8: 1100C490D6ED11F18834EC660E66CEF9.roa (hash: blHhhxLPbRi8aBeyv6NAclMEiwVa+Rww1QXCon5VlQE=) 9: 336E2134D0FF11F0904A3785C4F9AE02.roa (hash: 8ReXEY/ooZI9VWwdjyL+EpSnY0MpgK9LpTHh2PDG6Qw=) 10: 16C56390B6FF11F096DEAA71C4F9AE02.roa (hash: BgUHPnvLwPxqiAYZUON/ST5O2jioUi7aR9uP+MPdncA=) 11: E2D5171C2F3211ED958A415DC4F9AE02.roa (hash: EKgPE59Um2mB3Cb/fDjzGAqBUuX41HjcK3tgwN7mb6g=) 12: 78E949B8BA2B11F091659A18C4F9AE02.roa (hash: jySnNcQ/+odq2S87rB45bvuTiaw3wlS7bGHDCJXajj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 18:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: Nov 14 18:30:39 2026 GMT Not After : Nov 21 18:30:39 2026 GMT Subject: CN=6af8a8cf-93c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:ff:d4:fc:e7:d3:3e:74:20:ca:f0:f3:51: c8:7e:54:42:b9:67:61:f7:dc:1d:47:7d:4b:6b:dc: 71:d9:b7:d8:75:82:a3:41:75:73:0f:f0:5f:54:cb: 7c:75:68:f1:12:52:09:a0:02:c0:90:50:3f:9e:d1: 23:3e:3d:8b:d2:b9:e5:5f:cc:58:b8:d5:80:32:c9: 3a:ff:75:eb:cc:7b:cc:1a:54:6f:5d:0b:b8:61:02: e9:0b:3b:13:7b:a3:63:90:28:b3:eb:8c:ba:60:2f: 11:b7:91:e6:eb:55:ca:36:6c:bd:b4:b8:fe:b5:f6: 36:65:fb:85:fb:78:9f:7f:29:ac:65:70:24:79:ea: 8e:98:4e:00:db:77:db:25:74:c0:b5:87:9a:5f:e5: cf:35:41:1f:d7:1c:2d:0a:6b:ff:db:c2:1f:62:cf: 7a:27:be:f2:e8:fb:3e:8e:ef:79:46:2f:a3:43:88: 5b:d2:2a:e0:f6:b2:63:48:27:fa:bc:68:3f:1a:20: cc:5c:04:9c:19:58:67:0f:7b:f5:cb:44:1b:5d:b5: 0c:04:b7:22:72:16:c4:65:c3:3d:96:b1:2e:d6:2d: 30:d6:a7:85:80:89:ed:25:ce:b2:0b:fd:6e:38:e0: 31:d1:38:89:3f:4b:82:9c:fd:35:df:67:e6:91:21: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:60:B2:EC:7E:4D:51:88:49:C7:ED:17:F5:61:22:37:BB:91:DB:55 X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:29:71:ab:f2:61:e8:bb:80:99:54:13:dd:38:32:f7:b5:b6: dd:94:b2:5c:e7:52:3b:d3:64:10:30:de:6f:7a:10:f9:ad:08: ed:c9:2e:e0:d1:b0:b3:af:b9:af:e7:e5:71:af:09:a1:e1:e1: ed:8a:4b:61:6c:18:15:8d:ac:c1:6f:ca:58:f7:8e:11:65:c8: 25:0a:73:de:dd:4d:28:cf:33:15:9a:8f:63:57:c9:81:3e:45: 73:b1:5e:28:32:59:6a:5f:d4:51:fe:c7:f1:ec:7c:19:c2:e2: a9:6d:d7:a9:da:c8:eb:72:19:02:e7:27:70:7d:9e:c5:17:fc: 22:c1:1e:fd:0a:92:aa:b6:f1:8d:bc:e1:f5:43:84:7b:e0:f7: 8d:97:d6:36:42:1a:d5:aa:83:75:fb:ba:1d:8c:e0:b4:b2:af: 17:5d:b7:fd:48:97:22:63:f4:eb:11:06:4c:18:59:ee:f1:e4: a2:48:00:dc:c1:ce:dd:8a:6e:35:87:d8:b0:35:26:d2:7b:43: e9:21:07:f9:e3:d7:65:64:1c:89:13:aa:5f:a8:64:f7:3f:a8: b6:4a:b3:c2:87:86:5b:e1:5a:31:fd:0b:2c:ce:68:b1:b7:64: 3d:8a:91:89:91:44:92:d6:83:49:fa:24:f2:6f:2f:67:15:1c: be:a9:c1:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjYxMTE0MTgzMDM5WhcNMjYxMTIxMTgzMDM5WjAYMRYwFAYD VQQDEw02YWY4YThjZi05M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxav/1Pzn0z50IMrw81HIflRCuWdh99wdR31La9xx2bfYdYKjQXVzD/BfVMt8 dWjxElIJoALAkFA/ntEjPj2L0rnlX8xYuNWAMsk6/3XrzHvMGlRvXQu4YQLpCzsT e6NjkCiz64y6YC8Rt5Hm61XKNmy9tLj+tfY2ZfuF+3iffymsZXAkeeqOmE4A23fb JXTAtYeaX+XPNUEf1xwtCmv/28IfYs96J77y6Ps+ju95Ri+jQ4hb0irg9rJjSCf6 vGg/GiDMXAScGVhnD3v1y0QbXbUMBLcichbEZcM9lrEu1i0w1qeFgIntJc6yC/1u OOAx0TiJP0uCnP0132fmkSFsTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNgsux+ TVGIScftF/VhIje7kdtVMB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThEQS8zNEYzNjEyRTI2ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFx LURsUHF5TFItNWJndDlaZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPylxq/Jh6LuAmVQT3Tgy97W23ZSyXOdSO9NkEDDeb3oQ+a0I7cku4NGws6+5 r+flca8JoeHh7YpLYWwYFY2swW/KWPeOEWXIJQpz3t1NKM8zFZqPY1fJgT5Fc7Fe KDJZal/UUf7H8ex8GcLiqW3XqdrI63IZAucncH2exRf8IsEe/QqSqrbxjbzh9UOE e+D3jZfWNkIa1aqDdfu6HYzgtLKvF123/UiXImP06xEGTBhZ7vHkokgA3MHO3Ypu NYfYsDUm0ntD6SEH+ePXZWQciROqX6hk9z+otkqzwoeGW+FaMf0LLM5osbdkPYqR iZFEktaDSfok8m8vZxUcvqnBLw== -----END CERTIFICATE-----Generated at Sun Nov 15 17:27:55 2026 by rpki-client