$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: A8x2CMuljbonZ7hfqquVPDsIL3ind47KWpGlpQHb2f0= Subject key identifier: 96:1D:BE:35:E9:69:0B:F2:1A:1D:C4:14:EF:CE:60:6B:4D:6F:D0:86 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0951 Signing time: Sat 14 Nov 2026 20:03:01 +0000 Manifest this update: Sat 14 Nov 2026 20:03:00 +0000 Manifest next update: Sat 21 Nov 2026 20:03:00 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: UER916MArslHTANOY6dfhzRz5ivdktqwdhygoCsZ9dE=) 2: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=) 3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=) 4: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: 5Kt9wV6bTC+vMVJhq4EjYXAVqjOGKBQRiXvBwrhAt2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Nov 14 20:03:00 2026 GMT Not After : Nov 21 20:03:00 2026 GMT Subject: CN=6af8be75-0a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:e7:16:e9:80:3e:25:25:72:f5:48:22:e2: 5b:ca:39:a5:c8:2a:6a:fb:61:42:9f:30:dd:08:72: 09:64:23:75:93:13:30:aa:89:b1:26:27:52:79:35: c5:c8:a4:81:24:34:8c:5a:a6:cb:cf:82:a4:a9:d6: 1d:e0:c8:d4:6e:81:9a:db:e6:d2:12:66:89:58:ed: 7c:56:2b:96:ab:77:ba:00:c7:0e:8a:48:02:69:9d: a7:72:e8:71:15:03:60:e2:8e:e0:1f:46:fd:dc:c3: 3e:eb:67:bb:e0:ea:5b:b9:7b:98:48:2c:c6:fa:42: 2c:5c:3e:ac:86:04:1a:d2:0a:a5:de:80:e2:cc:e1: b4:68:34:64:08:1d:c0:71:01:e5:2f:be:4b:76:bb: 81:82:85:75:8f:51:98:0b:22:c5:d7:83:c6:11:64: 4e:9a:31:fc:0a:e7:d3:b9:54:3f:88:b0:80:d4:91: 62:45:21:53:4d:73:99:8d:e4:e7:5c:40:d3:c3:28: fb:3b:ef:63:ba:f5:c9:c9:c4:1b:0a:c3:16:7a:42: 8c:86:37:9a:e5:d8:d8:ef:36:60:3b:5e:00:9f:06: d6:a0:46:1d:76:3f:29:38:fb:3c:09:30:e8:79:5b: 70:3f:49:7a:56:de:37:ea:a1:8c:9d:48:59:ce:7d: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:BE:35:E9:69:0B:F2:1A:1D:C4:14:EF:CE:60:6B:4D:6F:D0:86 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:1f:03:1d:85:36:33:13:ef:e2:04:bf:82:eb:a1:9c:ab: 4f:cd:c2:d7:66:0c:27:50:78:34:91:6f:4c:71:bc:08:a1:0b: 45:01:61:e3:fa:a7:02:3f:b6:58:56:07:ea:68:07:bc:d8:46: ce:60:91:9f:6c:92:72:b2:5f:4e:be:80:76:66:ae:46:20:9c: 9f:ec:e6:7f:fc:ba:32:a1:ea:33:ce:45:50:ff:8f:16:b2:04: 6f:e5:b0:4e:6b:8f:ad:13:b8:bf:b8:96:bb:25:ff:5c:44:0a: 28:38:13:56:0e:5a:ab:fd:1d:02:d7:60:19:7c:b4:84:0a:ca: cf:09:cc:fc:3b:27:43:c8:8d:f8:6d:27:a4:46:f8:7d:89:97: ec:ce:01:86:c5:b4:4a:73:96:6d:2b:91:18:f5:2c:fc:1c:06: 05:1d:13:2f:9d:e9:d4:85:df:ad:2f:df:79:d1:a6:91:db:4b: da:43:86:f9:74:93:5a:23:dc:cf:c8:89:7a:75:6f:d0:32:20: 93:04:7a:71:44:ce:2b:52:62:14:64:a2:7b:23:c3:3f:29:f8: a1:55:b8:79:f3:0a:81:44:55:fd:c2:76:de:01:31:68:22:82: de:1e:87:8e:f8:bb:22:45:73:66:2a:a7:c0:a7:5e:85:d8:8a: 5d:66:29:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYxMTE0MjAwMzAwWhcNMjYxMTIxMjAwMzAwWjAYMRYwFAYD VQQDEw02YWY4YmU3NS0wYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsjnFumAPiUlcvVIIuJbyjmlyCpq+2FCnzDdCHIJZCN1kxMwqomxJidSeTXF yKSBJDSMWqbLz4KkqdYd4MjUboGa2+bSEmaJWO18ViuWq3e6AMcOikgCaZ2ncuhx FQNg4o7gH0b93MM+62e74OpbuXuYSCzG+kIsXD6shgQa0gql3oDizOG0aDRkCB3A cQHlL75LdruBgoV1j1GYCyLF14PGEWROmjH8CufTuVQ/iLCA1JFiRSFTTXOZjeTn XEDTwyj7O+9juvXJycQbCsMWekKMhjea5djY7zZgO14AnwbWoEYddj8pOPs8CTDo eVtwP0l6Vt436qGMnUhZzn0Z2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYdvjXp aQvyGh3EFO/OYGtNb9CGMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASHcfAx2FNjMT7+IEv4LroZyrT83C12YMJ1B4NJFvTHG8CKELRQFh4/qnAj+2 WFYH6mgHvNhGzmCRn2yScrJfTr6AdmauRiCcn+zmf/y6MqHqM85FUP+PFrIEb+Ww TmuPrRO4v7iWuyX/XEQKKDgTVg5aq/0dAtdgGXy0hArKzwnM/DsnQ8iN+G0npEb4 fYmX7M4BhsW0SnOWbSuRGPUs/BwGBR0TL53p1IXfrS/fedGmkdtL2kOG+XSTWiPc z8iJenVv0DIgkwR6cUTOK1JiFGSieyPDPyn4oVW4efMKgURV/cJ23gExaCKC3h6H jvi7IkVzZiqnwKdehdiKXWYp8Q== -----END CERTIFICATE-----Generated at Sun Nov 15 17:52:45 2026 by rpki-client