$ rpki-client -vvvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: tXAru/zMI2JA4sadNP1pLUppDBKk0/2Cmdx1dE4cizM= Subject key identifier: 8E:48:F2:05:A2:A1:25:54:42:B6:6B:AA:75:67:AD:32:0A:8B:0C:AD Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 0281 Signing time: Fri 13 Nov 2026 02:21:09 +0000 Manifest this update: Fri 13 Nov 2026 02:21:08 +0000 Manifest next update: Fri 20 Nov 2026 02:21:08 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: r/8oeuF5ugVL3VRB6y5hxSt8iMM6vAr8mzYeQ2fJOYI=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 83mEH4MdqJa2Mi54QCe87Hcel+LeamfIiaKQ+N8+vvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 02:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Nov 13 02:21:08 2026 GMT Not After : Nov 20 02:21:08 2026 GMT Subject: CN=6af67414-1d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:d3:21:50:d9:ca:5e:5f:a9:f8:36:8e:c3: b6:2a:b3:b2:6a:39:d7:58:5b:04:04:ab:60:a9:f7: 39:39:5e:61:0f:d6:8b:10:c9:67:aa:99:24:70:fe: ba:1a:18:5c:00:e6:12:71:3a:92:5d:fc:ea:67:77: 8b:d2:22:bf:00:61:af:e0:34:ba:32:5a:ed:de:96: b4:9a:a7:f1:63:89:b4:22:0e:98:7b:70:46:28:79: bc:21:9a:72:ca:95:57:5a:f9:0a:85:de:9d:fa:d6: 17:a6:4b:c3:a4:c4:85:c8:51:8a:f4:05:e4:bd:31: 8a:e1:b1:10:55:21:07:dc:ee:8c:c7:d5:1d:31:a5: 69:5c:a5:ff:e0:22:d6:b2:b7:d1:5d:a3:8e:ad:05: be:1f:7b:42:4e:d1:f7:b1:73:a4:5c:34:a2:18:45: bb:fd:9e:90:8b:28:5f:78:6d:8d:9c:fb:f0:dd:50: 81:f6:27:17:19:9d:dc:7f:0b:d3:d1:6a:f8:38:e5: 91:2c:ea:45:0c:00:f0:ea:09:2a:10:99:eb:41:b4: bd:c2:9c:11:f1:df:7a:d0:f0:9a:be:db:da:5c:d4: 0e:56:c0:79:5f:e9:42:0a:53:04:af:50:b0:29:47: fb:f1:87:03:71:c4:8e:33:04:7e:5e:ab:c3:b0:5c: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:48:F2:05:A2:A1:25:54:42:B6:6B:AA:75:67:AD:32:0A:8B:0C:AD X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:49:d3:b2:a2:5e:c5:87:08:fa:ea:7b:23:ef:a9:9a:42:04: d6:48:3c:8b:3d:7e:e7:bf:46:5f:a2:36:52:04:f3:c5:b8:eb: 17:3d:76:60:dd:01:7c:1f:37:6a:47:da:fc:13:ec:da:50:15: 1d:6e:67:fa:14:1f:7c:dd:08:4a:07:38:17:46:7b:91:f5:25: 60:c0:40:80:8c:8c:47:f3:83:b8:c3:86:ea:82:9e:1a:ee:1e: 71:b1:09:56:7e:d2:5d:0a:0f:58:5e:ed:1c:d3:24:84:18:27: 5c:59:15:be:dd:4a:cf:16:b8:20:da:51:c8:b9:b8:23:10:7a: d0:30:95:64:05:5e:55:c7:89:ca:6a:9e:7a:3e:98:ba:d5:91: 56:5d:22:da:44:52:c6:4c:88:f7:90:2b:6a:54:45:83:07:44: a0:d7:b6:25:f5:b5:21:cf:e5:10:18:02:54:98:e3:27:22:5c: 8e:2f:96:09:91:5a:c2:89:2a:fc:18:24:0d:8f:bb:4d:75:99: f0:28:3f:72:d9:8e:94:aa:a2:b4:b4:ea:1e:d9:c9:e7:af:35: 9d:79:72:b9:a7:40:bd:ff:6b:c6:80:51:bb:68:29:dc:bf:9e: 9c:40:1e:4e:72:6a:49:7c:5b:03:e1:43:16:65:93:82:1e:84: 46:aa:23:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjYxMTEzMDIyMTA4WhcNMjYxMTIwMDIyMTA4WjAYMRYwFAYD VQQDEw02YWY2NzQxNC0xZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS7TIVDZyl5fqfg2jsO2KrOyajnXWFsEBKtgqfc5OV5hD9aLEMlnqpkkcP66 GhhcAOYScTqSXfzqZ3eL0iK/AGGv4DS6Mlrt3pa0mqfxY4m0Ig6Ye3BGKHm8IZpy ypVXWvkKhd6d+tYXpkvDpMSFyFGK9AXkvTGK4bEQVSEH3O6Mx9UdMaVpXKX/4CLW srfRXaOOrQW+H3tCTtH3sXOkXDSiGEW7/Z6QiyhfeG2NnPvw3VCB9icXGZ3cfwvT 0Wr4OOWRLOpFDADw6gkqEJnrQbS9wpwR8d960PCavtvaXNQOVsB5X+lCClMEr1Cw KUf78YcDccSOMwR+XqvDsFyH2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5I8gWi oSVUQrZrqnVnrTIKiwytMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACknTsqJexYcI+up7I++pmkIE1kg8iz1+579GX6I2UgTzxbjrFz12YN0BfB83 akfa/BPs2lAVHW5n+hQffN0ISgc4F0Z7kfUlYMBAgIyMR/ODuMOG6oKeGu4ecbEJ Vn7SXQoPWF7tHNMkhBgnXFkVvt1Kzxa4INpRyLm4IxB60DCVZAVeVceJymqeej6Y utWRVl0i2kRSxkyI95AralRFgwdEoNe2JfW1Ic/lEBgCVJjjJyJcji+WCZFawokq /BgkDY+7TXWZ8Cg/ctmOlKqitLTqHtnJ5681nXlyuadAvf9rxoBRu2gp3L+enEAe TnJqSXxbA+FDFmWTgh6ERqojEQ== -----END CERTIFICATE-----Generated at Sun Nov 15 01:21:53 2026 by rpki-client