$ rpki-client -vvvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json) Hash identifier: a1m/omWenzOqS4wAzMbuNKESFxN/6dStldb/Xw+1MC0= Subject key identifier: 3E:DB:1D:BE:C6:30:85:21:47:A7:23:98:C3:56:F7:10:23:A5:D2:9A Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft Manifest number: 0740 Signing time: Thu 12 Nov 2026 21:31:40 +0000 Manifest this update: Thu 12 Nov 2026 21:31:40 +0000 Manifest next update: Thu 19 Nov 2026 21:31:40 +0000 Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: fPANlZJBHyaczuhYhBgSsEYHcNSgpLsTROVPar3loXE=) 2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 21:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Validity Not Before: Nov 12 21:31:40 2026 GMT Not After : Nov 19 21:31:40 2026 GMT Subject: CN=6af6303c-2e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:35:f9:3c:30:b5:5e:1e:51:12:52:bf:72: 72:7c:a3:27:e6:3a:84:56:d6:b3:a3:33:c0:5f:8d: dc:4e:7f:d9:87:51:16:03:c9:80:f1:eb:00:68:09: 32:21:b2:4f:f3:be:4e:9d:25:0d:71:12:e9:24:de: 13:e1:91:4c:4a:39:56:e1:29:cc:35:11:6a:70:e2: 4f:15:8f:38:5e:4f:cb:ae:a0:49:a9:95:22:83:00: 83:43:74:5a:60:43:a4:83:4c:3b:18:b4:a2:21:a7: 30:ff:a2:a6:d6:90:46:d1:b6:46:b0:9d:a1:63:ad: 70:13:8d:17:7d:10:66:be:8b:07:c7:04:86:7c:b5: 6c:06:b8:c7:c8:a5:f4:d1:f7:b4:3b:7f:9e:d7:f6: c2:dd:6a:df:92:0f:3f:d7:79:72:57:4a:e3:62:20: 6f:72:9d:bb:c0:99:96:b9:e6:05:05:f7:41:8c:78: 48:19:f3:04:38:83:db:71:b1:4d:d4:79:c7:b4:9d: e9:19:b6:97:9b:25:61:23:b8:52:8c:0b:a6:12:72: ae:69:73:e9:81:45:8f:16:cb:bf:66:fc:9c:6d:a4: 82:32:77:fd:65:15:4e:be:8f:ef:97:61:8d:50:84: af:d3:05:82:56:e1:3a:31:a5:3b:ed:44:9f:07:c9: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:1D:BE:C6:30:85:21:47:A7:23:98:C3:56:F7:10:23:A5:D2:9A X509v3 Authority Key Identifier: keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:81:5c:61:17:b4:89:fd:99:43:bd:55:d7:a3:c4:6c:2f:2a: bc:b5:8a:a7:56:59:92:71:b0:8c:a9:17:8c:9f:ee:ce:d9:11: 27:ac:60:73:a8:f1:22:3c:7f:ad:c1:6e:01:5a:bc:f8:14:7b: 11:31:4c:f6:35:bf:85:e6:4b:f5:33:63:46:58:4c:ad:f9:05: 2c:37:9f:45:c1:fa:d5:47:26:d4:48:cc:3b:b6:76:7f:a0:ff: cd:e1:02:bd:a6:f5:6d:15:cf:af:3a:94:b3:bc:aa:aa:0c:f8: c2:9e:c7:47:8b:d5:b1:14:e4:29:8a:6b:18:64:b1:2b:de:d2: 61:ea:d5:f1:e5:b1:f3:ce:51:60:5c:81:2c:3d:1c:48:5f:f0: 7e:e8:06:50:81:ec:f5:1d:4c:c6:19:f7:b6:13:60:86:3b:71: 62:1d:d4:b9:4e:6c:32:76:4a:3a:77:93:d6:43:85:dd:46:81: c0:91:b0:fc:de:0b:fe:02:58:e2:74:0d:4a:9a:8c:83:66:0c: 7b:90:48:f5:c5:34:84:a5:e4:ef:c8:6f:f2:3b:1c:a7:08:90: 2b:dc:02:7f:b5:ff:54:90:23:8b:75:3d:c7:d6:cf:80:14:a1: 47:96:f8:9c:7e:7f:b0:c0:88:3b:a4:f2:d5:df:ca:b2:8e:4a: 32:c3:48:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3 MkU3NTRDQjUwHhcNMjYxMTEyMjEzMTQwWhcNMjYxMTE5MjEzMTQwWjAYMRYwFAYD VQQDEw02YWY2MzAzYy0yZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM01+TwwtV4eURJSv3JyfKMn5jqEVtazozPAX43cTn/Zh1EWA8mA8esAaAky IbJP875OnSUNcRLpJN4T4ZFMSjlW4SnMNRFqcOJPFY84Xk/LrqBJqZUigwCDQ3Ra YEOkg0w7GLSiIacw/6Km1pBG0bZGsJ2hY61wE40XfRBmvosHxwSGfLVsBrjHyKX0 0fe0O3+e1/bC3Wrfkg8/13lyV0rjYiBvcp27wJmWueYFBfdBjHhIGfMEOIPbcbFN 1HnHtJ3pGbaXmyVhI7hSjAumEnKuaXPpgUWPFsu/ZvycbaSCMnf9ZRVOvo/vl2GN UISv0wWCVuE6MaU77USfB8lsywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7bHb7G MIUhR6cjmMNW9xAjpdKaMB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4 MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS82MzQ3Mzc1Njk4MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdy UkJfZDdlYl9QTk55NTFUTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgYFcYRe0if2ZQ71V16PEbC8qvLWKp1ZZknGwjKkXjJ/uztkRJ6xgc6jxIjx/ rcFuAVq8+BR7ETFM9jW/heZL9TNjRlhMrfkFLDefRcH61Ucm1EjMO7Z2f6D/zeEC vab1bRXPrzqUs7yqqgz4wp7HR4vVsRTkKYprGGSxK97SYerV8eWx885RYFyBLD0c SF/wfugGUIHs9R1Mxhn3thNghjtxYh3UuU5sMnZKOneT1kOF3UaBwJGw/N4L/gJY 4nQNSpqMg2YMe5BI9cU0hKXk78hv8jscpwiQK9wCf7X/VJAji3U9x9bPgBShR5b4 nH5/sMCIO6Ty1d/Kso5KMsNI2w== -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:37 2026 by rpki-client