$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: YBeZTgY2X/aEivpX+RLzZTyjDhESYDDzDkUpmC2n7Bo= Subject key identifier: 27:07:7F:BF:0B:EE:E8:64:6C:0D:55:BE:D1:38:F7:2F:24:DF:C6:6A Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0F23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0F06 Signing time: Sat 14 Nov 2026 17:34:17 +0000 Manifest this update: Sat 14 Nov 2026 17:34:16 +0000 Manifest next update: Sat 21 Nov 2026 17:34:16 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: mrBmGnhAd/frk0+pzNl/KC6doHi0M8P2oJa3CnArd5I=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 17:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Nov 14 17:34:16 2026 GMT Not After : Nov 21 17:34:16 2026 GMT Subject: CN=6af89b99-5ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:5f:b8:ac:35:6e:bc:84:bc:c9:bd:e8:8e: 31:57:49:6e:7b:9e:76:49:9a:6f:8c:e2:dd:9e:93: 8c:cd:ff:b5:26:79:53:f3:31:a4:6a:c6:99:75:f1: 47:10:c1:49:00:b3:c9:72:ef:30:f6:42:89:aa:9c: 60:ca:a9:c1:bf:0d:3d:96:22:a3:74:28:e7:7d:f4: f4:c8:b8:92:a9:96:7c:2d:91:e1:d6:7d:21:19:90: 67:80:fb:5a:ee:39:41:3f:b0:35:e2:2d:4b:31:82: b2:7b:40:50:38:98:4a:4a:1c:d5:19:1d:37:a9:ea: e6:97:11:63:95:1e:2d:26:15:6d:0f:5b:0d:45:92: 9e:99:94:bd:72:43:4c:01:fe:7e:ba:c5:fa:f5:24: 60:cc:65:e2:9e:b9:ce:2c:43:55:f8:4e:42:0c:66: 61:f0:f9:d7:a2:fc:af:cf:85:2e:4f:08:8a:72:2b: 41:4b:cf:37:e4:a6:45:44:9a:d9:7d:d4:8a:fb:91: 30:8b:dd:26:41:47:36:18:37:27:d0:cf:a5:24:80: 12:82:40:f8:0d:3c:82:01:48:5c:fc:a6:fd:93:93: b5:2a:e0:9a:61:84:63:b4:2e:59:9d:d1:e3:83:48: 97:a6:0f:4e:8a:64:a9:cb:dd:c5:d8:4d:41:28:fb: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:07:7F:BF:0B:EE:E8:64:6C:0D:55:BE:D1:38:F7:2F:24:DF:C6:6A X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3d:5b:21:51:e3:d7:5d:0e:51:fa:cf:6e:85:5e:c7:f1:1d: 73:58:f6:0c:d4:0c:fd:0e:02:b0:57:0d:60:52:b2:80:c9:5b: 41:a6:0c:24:24:43:ad:46:4e:ca:42:2f:33:05:ec:38:91:23: 9a:13:8d:67:84:7a:07:cb:f7:75:46:e7:bd:d4:bc:4b:fc:8b: 50:e0:db:31:8c:fb:7f:72:c8:0e:ea:4f:2e:af:c4:70:57:5c: 91:f6:d2:33:9a:2d:29:3e:bf:ca:28:57:c4:c7:32:c6:6c:55: a3:e0:c1:51:aa:47:0e:20:b7:3a:a6:87:00:36:d8:8e:62:bb: 21:2d:dd:95:36:c0:dc:07:5f:3d:0f:9c:03:35:1a:27:1a:18: 77:85:23:3f:41:d4:c4:4a:09:e2:17:27:ec:d9:59:75:7b:63: 61:dd:cc:23:6e:f4:37:06:79:3c:db:eb:b1:f3:f0:32:da:f6: 32:c6:5d:5c:26:e3:3f:68:32:13:55:49:69:38:cb:f7:90:a4: 6f:5c:1d:62:3e:bf:04:cf:a8:b5:87:2a:7c:d9:c1:b9:2a:98: e6:80:8f:42:e1:42:fd:07:48:18:7a:bf:b5:84:42:e2:9f:e7: f7:f3:d0:03:b8:7c:cd:3b:d1:c9:55:5e:7b:21:98:9f:f1:7d: 11:a3:85:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYxMTE0MTczNDE2WhcNMjYxMTIxMTczNDE2WjAYMRYwFAYD VQQDEw02YWY4OWI5OS01YWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMBfuKw1bryEvMm96I4xV0lue552SZpvjOLdnpOMzf+1JnlT8zGkasaZdfFH EMFJALPJcu8w9kKJqpxgyqnBvw09liKjdCjnffT0yLiSqZZ8LZHh1n0hGZBngPta 7jlBP7A14i1LMYKye0BQOJhKShzVGR03qermlxFjlR4tJhVtD1sNRZKemZS9ckNM Af5+usX69SRgzGXinrnOLENV+E5CDGZh8PnXovyvz4UuTwiKcitBS8835KZFRJrZ fdSK+5Ewi90mQUc2GDcn0M+lJIASgkD4DTyCAUhc/Kb9k5O1KuCaYYRjtC5ZndHj g0iXpg9OimSpy93F2E1BKPvM1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcHf78L 7uhkbA1VvtE49y8k38ZqMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnD1bIVHj110OUfrPboVex/Edc1j2DNQM/Q4CsFcNYFKygMlbQaYMJCRDrUZO ykIvMwXsOJEjmhONZ4R6B8v3dUbnvdS8S/yLUODbMYz7f3LIDupPLq/EcFdckfbS M5otKT6/yihXxMcyxmxVo+DBUapHDiC3OqaHADbYjmK7IS3dlTbA3AdfPQ+cAzUa JxoYd4UjP0HUxEoJ4hcn7NlZdXtjYd3MI270NwZ5PNvrsfPwMtr2MsZdXCbjP2gy E1VJaTjL95Ckb1wdYj6/BM+otYcqfNnBuSqY5oCPQuFC/QdIGHq/tYRC4p/n9/PQ A7h8zTvRyVVeeyGYn/F9EaOFWg== -----END CERTIFICATE-----Generated at Sun Nov 15 14:00:51 2026 by rpki-client