$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: VrdjocjWfxKDG7OR3PzbBcNfSPrWajI3khD4U5dkYhI= Subject key identifier: 60:D2:89:C3:EF:78:C7:CE:60:54:8E:E4:31:D4:64:08:1D:AB:4B:7E Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 06B7 Signing time: Sat 14 Nov 2026 22:13:13 +0000 Manifest this update: Sat 14 Nov 2026 22:13:13 +0000 Manifest next update: Sat 21 Nov 2026 22:13:13 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: c3xrx/DGNpv/Pk2tja1F6qX9hLQ4Bm4COkfzGQviPxE=) 2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=) 3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=) 4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Nov 14 22:13:13 2026 GMT Not After : Nov 21 22:13:13 2026 GMT Subject: CN=6af8dcf9-dddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:ac:26:e2:56:6f:2c:a5:f7:a3:e8:c8:ea: fc:8e:1b:63:27:ff:b5:d7:21:04:8d:1a:5c:40:ac: 5e:d6:0a:08:83:05:8f:22:e6:95:77:c7:c9:07:58: 4a:c5:6b:cf:f0:98:08:e5:f5:5a:42:5f:d4:1e:dd: a3:43:fc:2b:65:5c:db:97:1f:94:b6:68:a0:ed:f6: 84:f5:2a:78:72:04:46:66:68:73:4f:5d:9e:7e:c9: 49:6e:58:64:35:6b:75:17:96:c9:9b:28:8d:a9:b0: 65:c3:39:0c:3b:ab:87:c0:bf:9b:f7:43:39:ce:f9: 05:6b:41:f4:1e:bf:7b:4c:75:4c:62:96:8c:92:0d: 9f:9e:f9:ad:e3:58:bc:7d:1b:ae:e3:0d:94:e0:6b: 05:ad:c3:d4:4e:7f:fe:57:c1:73:59:2c:00:a9:19: 92:1c:6d:c6:d9:f0:c7:a8:53:10:c6:30:fe:d4:c8: 49:2b:d2:4a:5b:3a:20:f8:a2:42:04:7a:33:6c:b0: 7b:ae:ab:fa:89:7b:5a:df:f0:db:02:f4:4b:4e:8d: f5:85:5f:97:42:23:c4:e5:a4:31:c0:ef:94:8e:1e: 84:33:a0:86:d4:c2:ed:4c:3f:7b:35:1c:77:b1:e4: a1:6b:e7:5d:b1:1e:dc:f5:28:84:67:4e:ba:18:36: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:89:C3:EF:78:C7:CE:60:54:8E:E4:31:D4:64:08:1D:AB:4B:7E X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f8:0f:d9:9c:ee:03:16:81:9f:c5:d6:af:01:43:1b:69:41: 34:73:75:c1:10:c0:2a:61:c7:a5:69:d4:f5:4f:03:6a:8c:ff: 49:0d:8c:a4:31:4e:c3:9b:a7:d1:d2:3f:b3:95:45:30:35:9b: 5d:5d:9e:19:ae:99:bc:cf:39:cd:c4:b5:9a:e4:f3:51:6c:51: 22:d4:3a:8f:44:03:89:ca:a8:3e:55:2a:d8:06:c9:02:5a:54: 37:39:b5:38:fe:d1:54:7e:91:51:05:04:cc:34:9d:74:df:61: 85:e8:a0:4c:12:c7:09:56:7e:43:50:28:03:75:da:98:40:65: 5c:a9:db:46:38:32:24:8f:da:d4:98:fb:25:3f:d5:e7:78:b7: 86:4e:4d:b1:34:37:48:8e:e2:2a:14:75:03:1e:d6:04:bf:6e: 70:82:c0:1d:7a:ac:7c:36:36:2d:55:0c:32:43:40:7e:be:b0: 4f:dd:2a:8f:bc:fb:c0:0d:c1:ef:4b:be:eb:c9:28:0a:c9:bb: ab:69:79:35:a7:f8:c9:43:2c:2a:88:f9:06:17:61:9f:5b:3d: d8:11:73:d0:6f:f1:59:97:68:bb:07:23:7f:54:dc:b5:bd:8d: 2c:23:1a:de:c2:5f:07:53:e1:dc:9c:7b:8e:5c:1c:4d:35:2d: 69:56:76:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjYxMTE0MjIxMzEzWhcNMjYxMTIxMjIxMzEzWjAYMRYwFAYD VQQDEw02YWY4ZGNmOS1kZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtasJuJWbyyl96PoyOr8jhtjJ/+11yEEjRpcQKxe1goIgwWPIuaVd8fJB1hK xWvP8JgI5fVaQl/UHt2jQ/wrZVzblx+Utmig7faE9Sp4cgRGZmhzT12efslJblhk NWt1F5bJmyiNqbBlwzkMO6uHwL+b90M5zvkFa0H0Hr97THVMYpaMkg2fnvmt41i8 fRuu4w2U4GsFrcPUTn/+V8FzWSwAqRmSHG3G2fDHqFMQxjD+1MhJK9JKWzog+KJC BHozbLB7rqv6iXta3/DbAvRLTo31hV+XQiPE5aQxwO+Ujh6EM6CG1MLtTD97NRx3 seSha+ddsR7c9SiEZ066GDaDtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDSicPv eMfOYFSO5DHUZAgdq0t+MB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAePgP2ZzuAxaBn8XWrwFDG2lBNHN1wRDAKmHHpWnU9U8Daoz/SQ2MpDFOw5un 0dI/s5VFMDWbXV2eGa6ZvM85zcS1muTzUWxRItQ6j0QDicqoPlUq2AbJAlpUNzm1 OP7RVH6RUQUEzDSddN9hheigTBLHCVZ+Q1AoA3XamEBlXKnbRjgyJI/a1Jj7JT/V 53i3hk5NsTQ3SI7iKhR1Ax7WBL9ucILAHXqsfDY2LVUMMkNAfr6wT90qj7z7wA3B 70u+68koCsm7q2l5Naf4yUMsKoj5Bhdhn1s92BFz0G/xWZdouwcjf1Tctb2NLCMa 3sJfB1Ph3Jx7jlwcTTUtaVZ2dg== -----END CERTIFICATE-----Generated at Sun Nov 15 11:15:57 2026 by rpki-client