$ rpki-client -vvvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: AYmuq37tNbxxZx9zDkVO67lPrHYqadrQTYVMiGlT/rE= Subject key identifier: 8A:A2:4E:E8:67:99:A3:B1:E1:0A:9C:42:D7:45:93:66:C6:8C:E2:60 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 192F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 1919 Signing time: Sat 14 Nov 2026 16:23:17 +0000 Manifest this update: Sat 14 Nov 2026 16:23:16 +0000 Manifest next update: Sat 21 Nov 2026 16:23:16 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: EZkzGCzjszTgapIdn4w3VrirRs1QQzw9w9IEbntxByg=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: f8X+npi+JLQaJzm85+PGyFP1DtvAuywwMt9O4+IYXEo=) 3: TFsOg13ZBqAbWxl-EsSyPQJTHKs.asa (hash: 7ZDTmhAUT+M9Jy3Ebpjbx71ETxuefLsapEjttf42itE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6447 (0x192f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Nov 14 16:23:16 2026 GMT Not After : Nov 21 16:23:16 2026 GMT Subject: CN=6af88af4-aca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:78:0f:c2:75:57:e1:94:38:f5:ff:a0:a6: d6:1f:92:ad:33:ef:4c:25:f2:a9:0a:1d:3b:64:9a: 1f:bf:8d:bc:a9:f8:5b:da:fe:8e:da:fd:a8:21:76: e2:32:d3:91:23:39:49:80:e3:1b:ea:37:da:c4:a5: c1:24:04:5a:0e:fa:ce:ee:3a:d0:3c:56:fe:00:59: 30:7f:38:ab:71:a4:d5:f8:eb:d7:5f:3a:2a:9b:2c: 49:32:c2:b7:3a:60:98:7e:ad:3e:18:f4:49:4d:e6: dd:3b:ee:48:80:15:30:2e:75:0a:65:77:dc:51:75: 46:f6:e5:d0:40:62:a9:c6:5a:88:70:d5:12:f2:64: 68:7a:a8:c6:81:98:8f:4b:2b:c8:9f:6c:98:27:af: 07:95:9e:39:3d:3e:24:86:11:27:b6:1c:4d:f6:c3: 8c:f6:bd:da:68:d5:8a:56:23:0d:f7:fd:82:4e:da: 31:08:cb:88:84:15:7c:4a:e9:43:3d:bd:3f:79:3f: 2d:f3:a1:9a:e6:a8:c8:83:c5:11:84:16:e1:e4:fe: c1:d1:64:e9:7e:5e:db:2e:e3:19:ae:05:03:2f:9d: ae:61:4f:26:4c:b8:50:14:e9:58:7f:b9:73:31:5c: 76:4d:3a:1d:9d:c4:e6:f7:86:5f:e6:92:b7:3c:f9: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A2:4E:E8:67:99:A3:B1:E1:0A:9C:42:D7:45:93:66:C6:8C:E2:60 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fd:a2:c9:5c:e0:0c:ac:53:11:13:dd:c2:cd:03:5d:ad:5d: 9c:1f:23:31:bf:2a:56:18:18:e0:fb:4b:ec:e9:29:18:88:56: 10:21:88:34:23:9a:48:8a:8c:62:fd:7f:7d:a6:a0:70:6e:3e: 3f:7d:5e:4d:64:2c:a7:38:ce:f6:42:7e:a7:66:57:7d:4c:bd: b1:41:14:f7:c6:86:89:3a:bc:c1:fa:31:77:85:7f:2b:03:36: 08:df:e6:66:7a:a0:69:90:10:7c:60:1c:c3:1a:48:02:c3:7c: 87:c8:91:52:41:dd:54:3f:ea:4e:4d:8b:e8:da:e7:1f:0e:c6: 23:68:16:1b:de:87:94:f5:75:a7:68:05:e1:a7:67:61:5c:97: e0:d0:a2:3d:d9:40:9c:c3:60:fc:a6:6d:71:de:cc:9c:8e:a8: 28:ce:c9:b3:1d:c3:58:d9:d4:d1:19:9b:80:3f:5d:30:0c:96: f3:96:77:9b:93:56:7f:41:5a:18:cc:20:4d:74:32:9f:63:98: d6:0e:47:9f:97:ae:99:6f:b3:8e:e8:d4:2b:59:01:eb:83:4e: c7:10:3e:a2:27:89:41:57:f6:5c:95:4c:96:94:77:ff:60:e3: 70:c6:d3:71:b3:62:6b:5c:f6:70:03:02:62:7c:d5:e5:5e:f2: 6c:a7:9e:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjYxMTE0MTYyMzE2WhcNMjYxMTIxMTYyMzE2WjAYMRYwFAYD VQQDEw02YWY4OGFmNC1hY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RR4D8J1V+GUOPX/oKbWH5KtM+9MJfKpCh07ZJofv428qfhb2v6O2v2oIXbi MtORIzlJgOMb6jfaxKXBJARaDvrO7jrQPFb+AFkwfzircaTV+OvXXzoqmyxJMsK3 OmCYfq0+GPRJTebdO+5IgBUwLnUKZXfcUXVG9uXQQGKpxlqIcNUS8mRoeqjGgZiP SyvIn2yYJ68HlZ45PT4khhEnthxN9sOM9r3aaNWKViMN9/2CTtoxCMuIhBV8SulD Pb0/eT8t86Ga5qjIg8URhBbh5P7B0WTpfl7bLuMZrgUDL52uYU8mTLhQFOlYf7lz MVx2TTodncTm94Zf5pK3PPlBbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqiTuhn maOx4QqcQtdFk2bGjOJgMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgv2iyVzgDKxTERPdws0DXa1dnB8jMb8qVhgY4PtL7OkpGIhWECGINCOaSIqM Yv1/faagcG4+P31eTWQspzjO9kJ+p2ZXfUy9sUEU98aGiTq8wfoxd4V/KwM2CN/m ZnqgaZAQfGAcwxpIAsN8h8iRUkHdVD/qTk2L6NrnHw7GI2gWG96HlPV1p2gF4adn YVyX4NCiPdlAnMNg/KZtcd7MnI6oKM7Jsx3DWNnU0RmbgD9dMAyW85Z3m5NWf0Fa GMwgTXQyn2OY1g5Hn5eumW+zjujUK1kB64NOxxA+oieJQVf2XJVMlpR3/2DjcMbT cbNia1z2cAMCYnzV5V7ybKeewQ== -----END CERTIFICATE-----Generated at Sun Nov 15 14:10:20 2026 by rpki-client