$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: UGMADqXDrI4fDlYI2Q4vh4/D/byKx5nmshdYgNAUmkw= Subject key identifier: 52:F7:0A:70:97:25:23:5F:4C:60:9E:29:B3:74:97:7F:92:8D:AF:46 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 02BF Signing time: Sun 15 Nov 2026 01:38:19 +0000 Manifest this update: Sun 15 Nov 2026 01:38:19 +0000 Manifest next update: Sun 22 Nov 2026 01:38:19 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: H2uJIa/f0ekQ/JhTjNAb5II8BSbzRGydKAJf6IEQs0A=) 2: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: knwAy1rtJDWZY4Y6R/yETlWGYWJ5XZIzWNn6IPXqUDM=) 3: 9936E74CC80411F1847B0DA56811F970.roa (hash: tP2f1c83JL3Vu7cAQoMo9VLSqymcXf+2nOHEsCAqIVk=) 4: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: EOOyEemvSCtMoGoZHm5TFDc+5MAWjIHVtxA7v3CDPt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Nov 15 01:38:19 2026 GMT Not After : Nov 22 01:38:19 2026 GMT Subject: CN=6af90d0b-9beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:02:73:8b:fb:c2:b4:97:0b:6f:c3:b7:53: d5:f9:a2:75:57:9e:3b:8e:49:11:63:fe:9c:f6:5a: a4:df:ab:44:23:cb:d5:fa:9c:c7:72:2e:0b:14:ca: 9e:41:13:4d:14:e5:f1:c9:d8:80:08:c7:bd:14:65: 1b:83:19:e6:9d:b4:1a:51:98:e3:35:07:c1:d8:b1: 4c:a4:ce:9d:0f:40:07:36:3d:cc:93:44:42:03:f4: 29:f2:21:c6:2d:ee:73:e4:35:98:ba:e8:46:fd:61: 9c:3d:64:25:31:90:56:06:f2:31:34:af:09:5c:9b: 2c:e1:12:7a:9a:43:2b:a1:ea:86:30:65:ae:ac:08: b0:3b:31:e8:e3:12:fe:3e:a1:8f:22:de:ac:8e:83: 5f:4a:9d:df:c6:5c:fd:72:e5:b6:f9:3a:8e:6b:27: 45:43:6a:45:7e:49:51:f8:ed:0a:f5:1c:11:21:98: 7b:d4:6a:5a:50:82:0a:30:60:3b:44:93:80:df:ce: 07:db:af:2a:8f:65:1c:71:bd:6d:b3:a3:10:fc:3b: f4:55:61:25:0f:a9:8d:1d:fc:51:39:1c:8c:a9:34: 17:28:da:96:dd:e6:c6:b2:e8:31:59:3a:b3:24:ad: 8d:21:aa:61:ec:54:43:3f:76:38:b7:88:47:fd:43: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:0A:70:97:25:23:5F:4C:60:9E:29:B3:74:97:7F:92:8D:AF:46 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:47:3d:16:24:17:b7:bb:85:04:17:bd:60:38:82:8f:ed:69: 8e:b3:fa:3f:3e:a1:5d:6f:19:06:5a:70:02:25:7f:b4:15:7f: a6:e4:65:e3:22:68:5d:2d:ab:d4:b1:73:a8:ac:62:82:4e:f8: a1:45:3a:1d:f2:19:a3:38:f3:8b:c2:81:ff:cf:2c:83:e6:6f: d1:9c:17:4c:eb:58:0c:52:da:a2:32:52:f9:db:07:81:f2:df: a4:57:77:fd:e2:1f:62:9d:a0:bd:72:03:1b:ec:8a:29:ab:f4: 10:71:12:4a:be:ef:a3:eb:c2:b6:09:0b:c4:e7:0f:0f:8c:7f: 63:c4:fd:4c:2f:13:e6:4b:cd:47:2d:25:dc:3b:02:84:93:50: 6d:e7:71:bd:3a:5b:d3:8a:5f:48:12:fb:a5:30:3e:57:a8:a8: bf:65:bc:ba:33:19:08:d0:a2:c6:ac:be:11:cd:f5:42:8a:6b: f5:5a:4c:d7:c9:b5:66:49:13:7a:1c:0d:b7:57:a1:5c:a9:74: a1:81:ae:cf:89:0f:e2:cc:00:f4:c7:79:bf:a7:a0:8d:f7:a8: 43:67:40:f8:04:a6:31:8a:8c:c5:d2:07:81:ab:ef:f6:ba:73: ee:f4:47:e8:6b:ea:b8:aa:e0:2c:09:54:f8:4a:c6:08:c4:c3: 3c:96:3d:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjYxMTE1MDEzODE5WhcNMjYxMTIyMDEzODE5WjAYMRYwFAYD VQQDEw02YWY5MGQwYi05YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMUCc4v7wrSXC2/Dt1PV+aJ1V547jkkRY/6c9lqk36tEI8vV+pzHci4LFMqe QRNNFOXxydiACMe9FGUbgxnmnbQaUZjjNQfB2LFMpM6dD0AHNj3Mk0RCA/Qp8iHG Le5z5DWYuuhG/WGcPWQlMZBWBvIxNK8JXJss4RJ6mkMroeqGMGWurAiwOzHo4xL+ PqGPIt6sjoNfSp3fxlz9cuW2+TqOaydFQ2pFfklR+O0K9RwRIZh71GpaUIIKMGA7 RJOA384H268qj2Uccb1ts6MQ/Dv0VWElD6mNHfxRORyMqTQXKNqW3ebGsugxWTqz JK2NIaph7FRDP3Y4t4hH/UNt+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL3CnCX JSNfTGCeKbN0l3+Sja9GMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn0c9FiQXt7uFBBe9YDiCj+1pjrP6Pz6hXW8ZBlpwAiV/tBV/puRl4yJoXS2r 1LFzqKxigk74oUU6HfIZozjzi8KB/88sg+Zv0ZwXTOtYDFLaojJS+dsHgfLfpFd3 /eIfYp2gvXIDG+yKKav0EHESSr7vo+vCtgkLxOcPD4x/Y8T9TC8T5kvNRy0l3DsC hJNQbedxvTpb04pfSBL7pTA+V6iov2W8ujMZCNCixqy+Ec31Qopr9VpM18m1ZkkT ehwNt1ehXKl0oYGuz4kP4swA9Md5v6egjfeoQ2dA+ASmMYqMxdIHgavv9rpz7vRH 6GvquKrgLAlU+ErGCMTDPJY9Mg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:48:09 2026 by rpki-client