$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: ZKTAw3jyHh4RFp02F2D4mKpjWN/ExjnIW5311GRs5ZA= Subject key identifier: 4A:FD:81:2E:3A:F4:20:DA:F2:15:83:11:92:7A:62:B0:E0:C4:9B:20 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 054F Signing time: Sat 14 Nov 2026 23:15:12 +0000 Manifest this update: Sat 14 Nov 2026 23:15:11 +0000 Manifest next update: Sat 21 Nov 2026 23:15:11 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: 9FQiZX7IEZemYl5wG8o/W44Tz/KYmLLwNhBKukK/UIo=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=) 3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=) 4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Nov 14 23:15:11 2026 GMT Not After : Nov 21 23:15:11 2026 GMT Subject: CN=6af8eb80-0e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:87:87:a8:d3:31:5d:fa:aa:54:ad:da:78: b7:9a:90:3b:ea:f4:df:32:d6:cf:5c:91:80:61:4b: 07:2f:e1:66:97:bd:33:90:8e:09:70:c8:a0:bc:ba: 58:97:3d:6c:36:f5:e6:33:6c:30:8e:97:48:23:02: 07:23:7b:b6:c1:b6:9e:32:83:c6:cf:5c:24:bf:b4: 1e:61:b7:24:a1:f7:e5:c4:d7:7f:dd:45:e1:f9:96: 9d:80:94:3e:4f:57:e6:f8:25:ce:01:dc:de:ce:5f: 5f:ae:83:9e:72:39:07:65:77:a6:2b:9f:4b:e5:53: 3c:87:81:95:c0:58:54:30:1f:5e:b4:66:e6:3f:73: 8c:eb:ac:4b:99:07:d6:74:c7:40:a4:43:1a:f8:06: eb:f6:02:93:41:a3:2a:ca:02:41:99:9a:8a:d3:fe: ab:ff:6c:dd:d1:85:91:e9:db:b6:81:0d:c3:54:e1: 96:76:13:af:fd:8f:81:9d:4e:4b:10:ad:39:9f:e3: ec:1a:bb:93:0c:ee:8e:ba:d5:06:0e:f5:ec:4e:95: bc:63:38:38:d5:2b:bf:cc:74:96:4b:a5:b8:12:ed: 2a:37:ce:27:d4:d3:39:e1:f5:d8:2e:07:8b:b2:5c: 6a:01:a2:bb:e2:89:4e:63:d7:5e:9f:67:ca:28:79: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:81:2E:3A:F4:20:DA:F2:15:83:11:92:7A:62:B0:E0:C4:9B:20 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:05:67:e1:89:94:ef:4f:49:ad:01:98:16:5b:7a:9a:db:5f: dc:80:8a:c6:5d:66:bb:8f:64:77:5e:11:f3:d3:90:dc:a3:5a: 76:4a:89:9b:9b:da:5f:90:15:78:2b:20:9e:97:9a:68:f4:03: 95:e7:e5:8c:7f:2b:f4:8c:12:8f:08:5c:e2:8a:6d:96:e2:73: 7d:cc:e0:83:6e:b5:1c:85:70:ba:b6:a6:8e:f8:48:29:5c:d0: 33:f8:93:d1:cd:28:5c:21:4e:c2:ec:10:72:e5:03:66:a8:39: e0:7c:7c:1a:48:23:bb:7f:db:ad:99:ca:37:57:69:43:bf:44: b8:90:6f:a2:90:3e:6e:d4:71:91:92:63:4d:b6:00:39:5a:b1: 69:ba:1d:ea:7b:e0:6c:33:02:44:e7:83:0a:e3:31:b0:91:9e: d3:2a:8b:c3:fc:07:42:2e:3d:a3:79:88:fb:42:f1:2b:eb:99: 82:16:79:e9:85:6c:9c:67:28:7b:4c:ec:fa:ee:54:94:2a:ba: c8:88:af:5c:99:1a:c9:32:5d:53:69:a8:8c:d9:c9:2d:f4:b5: 2f:d0:a0:a2:cf:c3:d0:16:ad:ee:45:f9:4f:91:70:dc:f3:36: 07:90:cb:2a:5e:1e:6a:e6:fc:e1:14:90:3d:f1:c6:b5:59:c3: e0:6a:75:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjYxMTE0MjMxNTExWhcNMjYxMTIxMjMxNTExWjAYMRYwFAYD VQQDEw02YWY4ZWI4MC0wZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAimCHh6jTMV36qlSt2ni3mpA76vTfMtbPXJGAYUsHL+Fml70zkI4JcMigvLpY lz1sNvXmM2wwjpdIIwIHI3u2wbaeMoPGz1wkv7QeYbckofflxNd/3UXh+ZadgJQ+ T1fm+CXOAdzezl9froOecjkHZXemK59L5VM8h4GVwFhUMB9etGbmP3OM66xLmQfW dMdApEMa+Abr9gKTQaMqygJBmZqK0/6r/2zd0YWR6du2gQ3DVOGWdhOv/Y+BnU5L EK05n+PsGruTDO6OutUGDvXsTpW8Yzg41Su/zHSWS6W4Eu0qN84n1NM54fXYLgeL slxqAaK74olOY9den2fKKHlhCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEr9gS46 9CDa8hWDEZJ6YrDgxJsgMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADAVn4YmU709JrQGYFlt6mttf3ICKxl1mu49kd14R89OQ3KNadkqJm5vaX5AV eCsgnpeaaPQDlefljH8r9IwSjwhc4optluJzfczgg261HIVwuramjvhIKVzQM/iT 0c0oXCFOwuwQcuUDZqg54Hx8Gkgju3/brZnKN1dpQ79EuJBvopA+btRxkZJjTbYA OVqxabod6nvgbDMCROeDCuMxsJGe0yqLw/wHQi49o3mI+0LxK+uZghZ56YVsnGco e0zs+u5UlCq6yIivXJkayTJdU2mojNnJLfS1L9Cgos/D0Bat7kX5T5Fw3PM2B5DL Kl4eaub84RSQPfHGtVnD4Gp10A== -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:30 2026 by rpki-client