$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: IxHnUMbPb+GFhVU3SyYORHToJvP7cRpPnFMR8iEp8FM= Subject key identifier: F5:7E:2F:22:22:EA:CC:FF:5A:64:B9:01:CA:D2:34:73:E2:9B:D2:FC Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08F3 Signing time: Sat 14 Nov 2026 20:22:28 +0000 Manifest this update: Sat 14 Nov 2026 20:22:27 +0000 Manifest next update: Sat 21 Nov 2026 20:22:27 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: zskiaAKm2xsLvhDAr+lrG6vl/AELvc/b9Hkh7hsKn1I=) 2: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 3: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 4: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 6: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 7: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 8: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 9: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 10: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Nov 14 20:22:27 2026 GMT Not After : Nov 21 20:22:27 2026 GMT Subject: CN=6af8c303-cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:15:15:76:57:43:43:cb:22:a5:c5:28:1c: 74:a1:b6:9e:ee:6f:f9:6f:d8:a3:78:e5:86:eb:ea: a0:05:17:84:e3:a8:9c:e6:92:ac:00:d4:f4:3b:b5: 77:d3:cb:37:0f:d1:08:57:cf:26:22:7e:dc:e2:df: c3:14:cc:f5:18:58:bb:c4:35:41:0b:92:45:0b:d1: 42:bd:c4:22:ab:a6:b5:e0:fb:e3:8a:b4:80:1c:3d: 7d:5d:69:9b:f4:0b:b1:dc:c8:08:1c:79:8a:bd:99: c1:ca:b4:c8:7d:c8:82:94:52:f6:89:cc:8a:8b:d0: cd:1a:f6:6f:2e:63:72:be:fb:1c:88:db:0b:0e:aa: fe:47:df:a4:0b:7e:cf:de:6d:05:0e:5f:61:a1:54: 37:4c:b0:2b:b1:95:42:9e:e8:9f:a8:8c:49:33:4c: b1:23:47:bc:44:35:b1:77:a5:c8:db:35:dd:d7:72: 54:1d:3d:2c:f3:d8:07:ae:a4:27:b1:d7:b8:e5:31: 8f:21:8e:ef:d5:b8:0d:a1:72:7c:b9:95:1b:71:aa: b0:2c:a2:19:bf:1c:a4:d9:b4:62:b0:19:b0:25:7b: ba:b5:8c:39:0a:90:00:38:df:27:47:03:34:18:4c: 48:c1:54:d5:24:4a:ae:90:92:85:a7:3f:a8:37:1b: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:2F:22:22:EA:CC:FF:5A:64:B9:01:CA:D2:34:73:E2:9B:D2:FC X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:76:4b:f6:70:b9:e9:54:5c:1d:47:bf:d9:7b:e0:19:a7:63: 8e:87:93:a9:25:7e:c3:5d:c5:3a:a4:0a:90:c3:97:28:7d:ad: 23:d6:97:1d:a9:76:2c:d3:4c:a4:a2:33:d3:74:c8:87:e2:c7: e2:87:99:2d:8e:87:c8:fe:f6:a1:dd:3f:17:0a:9a:51:8c:85: dc:36:5a:51:b2:38:95:35:14:1f:93:73:a2:3c:44:5b:89:fc: 60:90:9a:6d:89:6e:63:e4:38:16:31:ae:e8:c4:64:36:1b:ab: b8:8b:cf:0d:79:22:be:86:7f:a8:bb:96:37:8d:17:75:95:65: 23:1c:fb:ce:2f:ce:e5:6e:5b:1e:ae:22:31:2a:5c:28:11:5d: e1:9d:a9:d5:77:fb:6b:d8:35:de:72:7a:7f:75:9d:af:57:4c: cc:b6:06:b3:d5:32:94:fa:9f:c3:7a:4f:f6:b4:ee:1b:76:32: 99:15:0b:f0:2e:b7:fe:a0:8f:dc:02:9f:be:9c:59:d9:e8:20: 7a:d0:98:d0:1e:3e:4f:33:cd:54:09:d8:ae:4e:f7:2d:ca:5b: 39:91:05:11:17:15:6b:fc:7a:16:e2:2e:15:88:21:ee:6a:56: 12:f5:61:3b:ab:5b:4f:9b:ae:8b:cf:2e:27:6d:1d:f9:63:ac: 90:dc:71:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYxMTE0MjAyMjI3WhcNMjYxMTIxMjAyMjI3WjAYMRYwFAYD VQQDEw02YWY4YzMwMy1jZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JwVFXZXQ0PLIqXFKBx0obae7m/5b9ijeOWG6+qgBReE46ic5pKsANT0O7V3 08s3D9EIV88mIn7c4t/DFMz1GFi7xDVBC5JFC9FCvcQiq6a14PvjirSAHD19XWmb 9Aux3MgIHHmKvZnByrTIfciClFL2icyKi9DNGvZvLmNyvvsciNsLDqr+R9+kC37P 3m0FDl9hoVQ3TLArsZVCnuifqIxJM0yxI0e8RDWxd6XI2zXd13JUHT0s89gHrqQn sde45TGPIY7v1bgNoXJ8uZUbcaqwLKIZvxyk2bRisBmwJXu6tYw5CpAAON8nRwM0 GExIwVTVJEqukJKFpz+oNxsHdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV+LyIi 6sz/WmS5AcrSNHPim9L8MB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHZL9nC56VRcHUe/2XvgGadjjoeTqSV+w13FOqQKkMOXKH2tI9aXHal2LNNM pKIz03TIh+LH4oeZLY6HyP72od0/FwqaUYyF3DZaUbI4lTUUH5NzojxEW4n8YJCa bYluY+Q4FjGu6MRkNhuruIvPDXkivoZ/qLuWN40XdZVlIxz7zi/O5W5bHq4iMSpc KBFd4Z2p1Xf7a9g13nJ6f3Wdr1dMzLYGs9UylPqfw3pP9rTuG3YymRUL8C63/qCP 3AKfvpxZ2eggetCY0B4+TzPNVAnYrk73LcpbOZEFERcVa/x6FuIuFYgh7mpWEvVh O6tbT5uui88uJ20d+WOskNxx1w== -----END CERTIFICATE-----Generated at Sun Nov 15 12:11:46 2026 by rpki-client