$ rpki-client -vvvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: iWBj2Ra1SQlKcUUapMjGz/dsP2Fc+Dc3/V4dapq8Sec= Subject key identifier: 14:1B:01:2F:5B:99:38:8C:CC:CA:C6:2A:2C:0D:12:DE:99:CB:96:54 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 049C Signing time: Sat 14 Nov 2026 23:46:27 +0000 Manifest this update: Sat 14 Nov 2026 23:46:27 +0000 Manifest next update: Sat 21 Nov 2026 23:46:27 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: NQoZ67NDGagxMGMuEz32oEsh2pLZKCaQTf/3V8KHsZc=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=) 4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Nov 14 23:46:27 2026 GMT Not After : Nov 21 23:46:27 2026 GMT Subject: CN=6af8f2d3-9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:e5:54:b7:62:29:9d:f0:09:3d:71:78:97: 7e:47:ce:ae:cc:f6:60:8b:c8:0d:4a:18:c9:b5:36: a5:8f:f0:7f:fd:55:4e:b1:bc:76:a6:13:70:75:ec: b8:42:63:5a:55:cb:c1:e9:9c:25:16:cd:89:b5:f6: cd:99:06:97:50:50:b5:99:a7:3f:32:53:a7:ab:73: 49:8f:ee:b8:4f:b1:e9:8d:32:ac:fd:f9:92:ac:9e: 48:18:42:89:7f:c5:8d:9b:38:a2:3b:0e:ea:ad:e2: 1a:1a:40:51:03:18:99:02:a9:90:00:cd:a7:aa:d2: 1a:d0:62:6d:c8:6d:b4:de:8d:4b:b9:36:ca:75:d8: be:bb:ab:0f:81:ee:39:16:4a:ba:44:d9:99:8f:65: 89:7e:b5:59:56:c9:06:cb:87:35:5b:d9:8f:d5:3c: 7c:da:72:fe:bd:59:07:aa:3f:b8:36:0a:05:21:20: af:b0:ac:7c:77:d6:68:24:82:f1:01:e8:46:e7:f3: 4a:d5:66:27:af:95:61:6e:cf:a9:d0:a6:f9:2c:84: 80:d5:c9:0b:34:eb:10:24:6d:19:b6:58:8d:10:23: 56:60:4d:bf:16:79:65:c9:e6:b1:6b:51:ec:9c:89: 8b:0f:aa:d0:a1:45:fc:7c:b6:83:67:2e:21:6b:a6: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:01:2F:5B:99:38:8C:CC:CA:C6:2A:2C:0D:12:DE:99:CB:96:54 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:d7:3c:c9:a4:9c:3b:82:99:31:ce:c3:d9:de:13:0f:1f: 65:b5:0a:79:ac:85:ce:96:d1:af:2b:32:72:2d:f7:19:0a:79: 34:64:86:2f:fa:8c:b5:54:7f:49:09:12:4b:6d:10:b0:4c:57: df:ae:36:a0:76:2d:b6:6f:16:ab:6e:19:1f:03:d8:83:10:6c: 97:76:8d:4d:d4:c9:1f:58:af:94:79:c2:0d:2c:bf:a4:ee:c7: 16:31:c9:05:11:c3:77:d3:c3:75:87:0b:2a:d5:93:34:6a:7f: 67:c5:a3:da:0d:d5:3e:9b:be:ed:f1:b3:e9:84:f5:99:1a:30: b4:7b:2a:79:c6:d4:42:7d:2b:0f:1b:1c:42:d8:c9:d9:1f:c6: f8:ad:5a:7b:42:26:07:94:62:e7:f2:d5:4b:5e:a8:03:76:00: cf:e4:a9:5f:78:9d:e4:3b:01:20:48:eb:a8:3c:23:45:94:fb: 2e:3b:0e:0a:4d:a6:7b:95:f3:54:23:3a:d6:52:5a:f0:33:3c: 44:75:06:49:14:eb:fb:be:9c:d7:2f:cf:82:99:2c:f6:23:2f: f0:0f:33:c7:a6:b7:49:7f:69:3f:55:65:c0:d6:84:86:c7:04: 8c:da:c9:f8:d2:9c:9c:9c:5a:da:c5:a2:f6:af:d0:f0:e2:bc: 9a:28:d3:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYxMTE0MjM0NjI3WhcNMjYxMTIxMjM0NjI3WjAYMRYwFAYD VQQDEw02YWY4ZjJkMy05Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjmrlVLdiKZ3wCT1xeJd+R86uzPZgi8gNShjJtTalj/B//VVOsbx2phNwdey4 QmNaVcvB6ZwlFs2JtfbNmQaXUFC1mac/MlOnq3NJj+64T7HpjTKs/fmSrJ5IGEKJ f8WNmziiOw7qreIaGkBRAxiZAqmQAM2nqtIa0GJtyG203o1LuTbKddi+u6sPge45 Fkq6RNmZj2WJfrVZVskGy4c1W9mP1Tx82nL+vVkHqj+4NgoFISCvsKx8d9ZoJILx AehG5/NK1WYnr5Vhbs+p0Kb5LISA1ckLNOsQJG0ZtliNECNWYE2/Fnllyeaxa1Hs nImLD6rQoUX8fLaDZy4ha6aL9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQbAS9b mTiMzMrGKiwNEt6Zy5ZUMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHjXPMmknDuCmTHOw9neEw8fZbUKeayFzpbRrysyci33GQp5NGSGL/qMtVR/ SQkSS20QsExX3642oHYttm8Wq24ZHwPYgxBsl3aNTdTJH1ivlHnCDSy/pO7HFjHJ BRHDd9PDdYcLKtWTNGp/Z8Wj2g3VPpu+7fGz6YT1mRowtHsqecbUQn0rDxscQtjJ 2R/G+K1ae0ImB5Ri5/LVS16oA3YAz+SpX3id5DsBIEjrqDwjRZT7LjsOCk2me5Xz VCM61lJa8DM8RHUGSRTr+76c1y/Pgpks9iMv8A8zx6a3SX9pP1VlwNaEhscEjNrJ +NKcnJxa2sWi9q/Q8OK8mijTJw== -----END CERTIFICATE-----Generated at Sun Nov 15 18:35:43 2026 by rpki-client