$ rpki-client -vvvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: XCqr+x/+7gjiZxNnQSdBxR6M2y86gwNV3Q6oiWlbAdg= Subject key identifier: 71:72:23:C1:0A:4B:A9:19:D8:1B:37:B3:E3:B5:CC:8B:4B:02:9E:21 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 06E2 Signing time: Sat 14 Nov 2026 22:09:10 +0000 Manifest this update: Sat 14 Nov 2026 22:09:10 +0000 Manifest next update: Sat 21 Nov 2026 22:09:10 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: B6VKhtA2Pt9LTfke9Hw4SKqsf7PSuQm6mjpAQWwic7s=) 2: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=) 4: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Nov 14 22:09:10 2026 GMT Not After : Nov 21 22:09:10 2026 GMT Subject: CN=6af8dc06-44d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:d7:8a:83:ec:7e:54:0b:35:39:09:72:1c: 74:bf:1c:6d:2f:e5:d8:f4:51:db:3c:f0:e1:97:29: 42:7a:d5:2e:c3:bb:e7:28:97:39:78:45:98:a3:6f: 1a:8f:ca:12:63:4e:d9:7c:8d:ca:c2:a4:20:92:d3: 84:14:db:25:2c:af:fe:61:95:a2:7c:90:ee:97:61: c9:ec:57:a0:37:5d:75:46:a9:e3:61:46:c7:28:2e: 94:67:8a:47:45:66:ea:a7:fe:22:56:93:78:0b:13: c4:09:28:a5:6d:8b:4b:4d:46:e7:4d:6f:13:2e:89: 56:73:26:fe:67:65:29:99:59:f5:6c:fd:72:30:1f: 43:9b:e1:24:2e:64:0c:a2:08:59:f5:b8:a8:20:61: e0:48:2a:16:b0:62:54:c7:0d:26:07:f8:46:4d:4e: 0f:af:06:21:73:11:ea:eb:5c:4f:3d:06:90:29:3a: ac:03:c8:ee:a5:62:22:24:68:00:60:24:80:1d:d3: 79:64:22:e7:d2:fa:10:d7:58:b4:75:69:3c:23:1c: 2f:bd:cd:19:14:07:be:39:4d:45:88:e5:bc:4b:24: e9:d1:70:6f:5f:bf:d0:79:f2:d5:71:c7:86:12:42: 77:54:f0:82:c5:10:0a:45:16:fe:80:c3:80:4f:b7: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:72:23:C1:0A:4B:A9:19:D8:1B:37:B3:E3:B5:CC:8B:4B:02:9E:21 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:c6:45:73:88:e1:47:dd:cf:42:66:94:b2:48:8d:f4:60: 22:9b:23:ea:83:b1:e3:2d:d4:c8:aa:98:ab:21:f2:f6:f3:19: 26:c5:81:fb:d8:4a:7a:fc:c3:ec:2f:5d:bb:91:86:82:f6:84: dc:cb:df:1e:96:37:af:bb:08:85:6e:c4:f1:e0:da:7f:9c:ca: 8f:85:76:19:32:a3:13:00:a9:ce:60:8f:88:80:9a:86:53:f6: ae:45:22:bc:a2:60:9a:16:c7:96:20:e0:52:3b:b1:02:9f:03: eb:43:ee:98:09:40:bb:6a:61:5b:31:a1:dc:88:8e:de:2c:7a: e7:11:c9:dc:89:23:1c:98:4e:e4:9d:36:93:8c:fe:a9:72:cc: 18:3b:b5:a3:63:6d:6b:66:f1:ed:1c:7c:70:f1:69:e5:8c:0d: 13:6a:2b:3b:b8:a3:0b:fd:bb:70:53:46:d9:40:a9:5e:20:85: b4:34:eb:38:fd:f7:6d:6c:f7:df:f1:2c:fe:af:cd:10:d0:46: d1:16:cf:ec:4c:a7:c6:03:f8:be:ed:bb:37:d2:4e:d6:4c:b3: b1:48:e8:25:91:18:74:47:03:d9:7f:a5:7e:ab:32:3c:34:28: 5a:b3:8a:ee:83:81:14:43:c5:2c:9a:5f:c8:34:65:13:1e:09: 30:3d:dc:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYxMTE0MjIwOTEwWhcNMjYxMTIxMjIwOTEwWjAYMRYwFAYD VQQDEw02YWY4ZGMwNi00NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB3XioPsflQLNTkJchx0vxxtL+XY9FHbPPDhlylCetUuw7vnKJc5eEWYo28a j8oSY07ZfI3KwqQgktOEFNslLK/+YZWifJDul2HJ7FegN111RqnjYUbHKC6UZ4pH RWbqp/4iVpN4CxPECSilbYtLTUbnTW8TLolWcyb+Z2UpmVn1bP1yMB9Dm+EkLmQM oghZ9bioIGHgSCoWsGJUxw0mB/hGTU4PrwYhcxHq61xPPQaQKTqsA8jupWIiJGgA YCSAHdN5ZCLn0voQ11i0dWk8Ixwvvc0ZFAe+OU1FiOW8SyTp0XBvX7/QefLVcceG EkJ3VPCCxRAKRRb+gMOAT7dB2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFyI8EK S6kZ2Bs3s+O1zItLAp4hMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJLGRXOI4Ufdz0JmlLJIjfRgIpsj6oOx4y3UyKqYqyHy9vMZJsWB+9hKevzD 7C9du5GGgvaE3MvfHpY3r7sIhW7E8eDaf5zKj4V2GTKjEwCpzmCPiICahlP2rkUi vKJgmhbHliDgUjuxAp8D60PumAlAu2phWzGh3IiO3ix65xHJ3IkjHJhO5J02k4z+ qXLMGDu1o2Nta2bx7Rx8cPFp5YwNE2orO7ijC/27cFNG2UCpXiCFtDTrOP33bWz3 3/Es/q/NENBG0RbP7EynxgP4vu27N9JO1kyzsUjoJZEYdEcD2X+lfqsyPDQoWrOK 7oOBFEPFLJpfyDRlEx4JMD3c/g== -----END CERTIFICATE-----Generated at Sun Nov 15 15:24:23 2026 by rpki-client