$ rpki-client -vvvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: 9OanIP8qrMtbwqrOSFAqWNGhu/kf5r0P3Iu7jqn9+HI= Subject key identifier: 2C:85:EF:B2:92:F6:3A:89:75:ED:07:B2:9A:70:9B:32:5C:B4:33:2F Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 0609 Signing time: Sat 14 Nov 2026 22:41:58 +0000 Manifest this update: Sat 14 Nov 2026 22:41:58 +0000 Manifest next update: Sat 21 Nov 2026 22:41:58 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: auW/fdV26XUILNv5DyulgfFTYyTUeZR6VY4icE7NZKI=) 2: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: +gAjMETIZVTwgsDFO2qKEqW2MhjTXO1u1mjqlUHpdbc=) 3: D575368892D011F0B767031EC4F9AE02.roa (hash: 24rhC/kI9813Kpf55FB3HQ+L1kbPoJIalWHTXjPeaO4=) 4: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: Vvhf+boCEpLuGGFJDAIh2MyKhZZB5ySRIuVYjKw5QFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: Nov 14 22:41:58 2026 GMT Not After : Nov 21 22:41:58 2026 GMT Subject: CN=6af8e3b6-1921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:50:a0:79:cc:c1:cb:29:ef:77:0d:7e:49: 32:6b:46:b8:ec:86:e1:8f:a3:40:61:68:fd:01:70: fe:a2:90:6b:f9:24:05:62:61:72:1d:cc:b7:43:90: 4a:d4:d2:76:b5:f3:5a:7d:2d:8a:02:77:8a:5a:cf: 9d:9e:62:6d:ed:68:10:cf:dc:b3:a4:21:fa:ac:35: 4b:29:96:ec:73:0b:49:9e:62:19:37:95:fc:c0:6e: de:73:51:90:40:42:e9:1f:2d:8a:05:e5:b8:37:63: 7c:b7:df:e0:52:a4:ba:73:78:fc:10:dd:ae:3b:6e: 5a:b1:e9:5b:5f:44:81:11:3b:84:51:b5:5f:09:c9: 4d:3e:7e:93:a1:6c:a8:2a:81:d2:ef:ba:e3:ed:38: 7f:d6:b0:67:b2:79:6a:0d:e0:25:af:eb:7a:0c:f9: cc:7a:11:e1:ca:3d:1b:d0:f6:d5:a8:17:77:71:4e: 42:b5:97:76:8f:1a:18:81:e7:79:88:22:52:25:ed: 0b:6c:d4:ef:f5:59:8a:53:9b:17:3d:09:f5:49:20: aa:3a:6d:8f:e4:f8:84:da:ef:31:f0:b5:ba:c9:05: a5:20:9a:7c:46:ad:1a:36:15:1f:a6:0e:4c:fc:81: 12:64:6d:a9:c9:9c:13:ac:53:63:cd:a1:dc:63:d1: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:85:EF:B2:92:F6:3A:89:75:ED:07:B2:9A:70:9B:32:5C:B4:33:2F X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b3:c6:01:64:13:00:a9:89:4f:22:e4:16:c2:f3:3f:cd:db: a8:81:b2:5d:76:85:d2:df:03:c9:13:3d:88:26:6d:f4:21:3c: fd:62:67:08:d0:07:24:6c:9a:0c:8b:ff:49:15:09:d8:29:80: 7c:21:46:18:15:54:d5:76:1c:5a:95:31:f3:07:90:d3:23:58: 3a:80:df:2f:d9:a7:36:a6:c6:2f:f9:e2:0c:c9:16:5f:cc:b8: 95:c3:f1:52:11:e5:f4:0c:83:95:4b:87:0e:a8:23:4d:41:79: 62:c7:ae:6c:ed:2f:62:5c:ed:91:de:03:93:6a:bc:b8:92:e3: 8f:90:e6:56:41:57:69:d3:92:e4:81:22:ce:81:f6:ab:7b:14: 97:f6:eb:79:16:59:42:82:68:ed:19:7d:f0:84:6f:f3:c1:6b: bc:08:ff:ec:00:f9:20:22:83:ae:e1:64:20:4e:b6:d5:b5:a6: 57:cb:59:c1:3f:20:15:ee:cc:ca:cc:38:56:33:9a:a5:b6:73: d5:b0:55:48:68:b0:33:30:73:4f:a4:d1:3e:58:ff:a3:50:f3: 97:20:90:5f:0f:9b:65:d2:71:d0:19:3e:ef:20:4e:0c:f3:c3: 66:b6:59:72:22:3a:9e:c6:96:ea:2a:c6:d1:12:ba:da:5c:de: 8d:99:cb:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjYxMTE0MjI0MTU4WhcNMjYxMTIxMjI0MTU4WjAYMRYwFAYD VQQDEw02YWY4ZTNiNi0xOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kdQoHnMwcsp73cNfkkya0a47Ibhj6NAYWj9AXD+opBr+SQFYmFyHcy3Q5BK 1NJ2tfNafS2KAneKWs+dnmJt7WgQz9yzpCH6rDVLKZbscwtJnmIZN5X8wG7ec1GQ QELpHy2KBeW4N2N8t9/gUqS6c3j8EN2uO25aselbX0SBETuEUbVfCclNPn6ToWyo KoHS77rj7Th/1rBnsnlqDeAlr+t6DPnMehHhyj0b0PbVqBd3cU5CtZd2jxoYged5 iCJSJe0LbNTv9VmKU5sXPQn1SSCqOm2P5PiE2u8x8LW6yQWlIJp8Rq0aNhUfpg5M /IESZG2pyZwTrFNjzaHcY9G+9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyF77KS 9jqJde0HsppwmzJctDMvMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbPGAWQTAKmJTyLkFsLzP83bqIGyXXaF0t8DyRM9iCZt9CE8/WJnCNAHJGya DIv/SRUJ2CmAfCFGGBVU1XYcWpUx8weQ0yNYOoDfL9mnNqbGL/niDMkWX8y4lcPx UhHl9AyDlUuHDqgjTUF5YseubO0vYlztkd4Dk2q8uJLjj5DmVkFXadOS5IEizoH2 q3sUl/breRZZQoJo7Rl98IRv88FrvAj/7AD5ICKDruFkIE621bWmV8tZwT8gFe7M ysw4VjOapbZz1bBVSGiwMzBzT6TRPlj/o1DzlyCQXw+bZdJx0Bk+7yBODPPDZrZZ ciI6nsaW6irG0RK62lzejZnL8A== -----END CERTIFICATE-----Generated at Sun Nov 15 16:28:19 2026 by rpki-client