$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: wgnXq4ZXF2fOgIi1C9wzZx4wgOlIlZ7UQqiP3Jv0M0M= Subject key identifier: 1E:FF:BB:2C:10:63:71:D0:8F:F4:A1:9C:AB:5F:88:BB:6D:9A:95:A4 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 073B Signing time: Sat 14 Nov 2026 22:06:55 +0000 Manifest this update: Sat 14 Nov 2026 22:06:54 +0000 Manifest next update: Sat 21 Nov 2026 22:06:54 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: SdM3G7SLPOjgLIP+QgKjOChPBsXx5ji4moS/b1OgJ0Q=) 2: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 2brVbLcxFpkOdqJzW7e08UEC0cEZEhN9mp+0lEZR2Nc=) 3: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: QwaEFZfeUvxCO4C9N6QWi95pA8ZdXykPIPjTIxRRzf8=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: JTbKsHFx+JSM84iW9xko9N7Okk/mqyrOefd13JgYJNw=) 5: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: lKlHcPk4OtOc4NS/UdbE4j0ub1XPeST9dptNnvXi284=) 6: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: mPpc2gVSiIA4mhoDYgTXEf2CYWV9o2k7934LA3uchfI=) 7: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: fjPsSTXHCwq9dYW/T8+PnWa4nkvEbsqfSwtShP7NsbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Nov 14 22:06:54 2026 GMT Not After : Nov 21 22:06:54 2026 GMT Subject: CN=6af8db7f-23f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:a0:ee:dc:9f:ac:32:3b:42:56:91:ff:6f: 35:ee:77:2a:41:88:fe:4b:fd:46:ca:cb:c7:35:8e: 61:f2:62:f5:b6:8d:66:cd:95:18:76:17:4d:3b:75: 93:47:cd:3f:95:e1:09:7d:69:de:fe:a6:c4:4b:15: 04:88:75:94:a8:cf:f5:b0:60:78:87:6f:b1:5f:40: b6:96:6d:94:55:ea:40:47:d9:2d:00:75:31:3a:2d: 66:cc:1e:72:13:91:d8:d1:f2:bb:60:18:8c:44:7c: 17:cb:0a:64:3b:20:d1:cb:65:74:e7:4a:a0:00:3f: 1d:96:c9:70:37:c5:b7:f7:b3:9c:3d:14:a9:4f:2b: 3a:35:3f:c8:37:f8:db:f6:0e:49:d5:af:8b:77:f9: 81:65:db:58:c9:34:75:b6:05:1a:e1:17:e1:9a:0a: 30:27:b5:e0:91:2d:1f:1b:b6:8c:e7:d8:16:8b:33: a7:73:74:f8:ad:2c:15:f2:64:74:9c:2e:95:3d:84: dc:98:c9:b9:3d:37:89:b9:97:43:37:ae:b9:c7:61: 2a:7f:d9:b9:cd:9d:3f:e4:08:2c:9a:e2:ae:93:37: 61:e6:c6:87:42:80:97:bd:40:55:b5:dc:c2:d5:80: 4b:d9:5a:e6:b5:f2:96:7c:da:a3:19:54:30:82:f3: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:BB:2C:10:63:71:D0:8F:F4:A1:9C:AB:5F:88:BB:6D:9A:95:A4 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:60:6b:75:86:21:cf:60:f4:43:79:a5:fb:ab:2c:e2:65:56: 81:f2:4b:85:2e:51:19:d8:cc:e3:d6:13:a4:0b:04:3e:af:34: a3:b9:81:e5:d0:60:64:58:87:3e:b5:7d:f4:75:de:ca:7e:42: 25:27:f1:7a:d6:71:e3:62:a8:0a:1e:2d:69:7c:b4:76:42:41: b4:67:43:69:d6:0b:7f:ed:32:91:3d:1c:62:36:7b:76:c3:50: 42:16:93:99:da:09:9c:61:79:83:a5:6e:82:0e:9d:13:78:e5: cf:d6:d0:8a:a1:77:0b:bd:2f:0c:8c:55:7a:51:b5:6d:25:88: bc:8c:78:fd:99:d3:75:10:cf:5b:e5:c8:a0:e6:b1:ec:f5:b4: fb:58:72:67:ba:1b:85:44:89:d6:2b:af:2a:2a:4a:50:3a:e0: 79:20:1c:9d:9e:9f:94:c1:e4:7c:47:68:24:db:e7:d7:88:bb: 61:34:5c:67:9d:41:6b:9d:de:3c:8b:af:fd:16:b1:56:eb:de: 63:56:37:07:48:2a:d7:50:0c:08:50:73:63:98:f2:f1:df:36: 61:3c:c8:d9:10:e4:0b:91:95:fd:b0:f7:6a:00:ae:c2:33:35: a6:1e:4a:a9:99:2b:cd:40:21:3b:ab:2b:a4:f7:3a:be:86:53: 4c:d6:53:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYxMTE0MjIwNjU0WhcNMjYxMTIxMjIwNjU0WjAYMRYwFAYD VQQDEw02YWY4ZGI3Zi0yM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iOg7tyfrDI7QlaR/2817ncqQYj+S/1GysvHNY5h8mL1to1mzZUYdhdNO3WT R80/leEJfWne/qbESxUEiHWUqM/1sGB4h2+xX0C2lm2UVepAR9ktAHUxOi1mzB5y E5HY0fK7YBiMRHwXywpkOyDRy2V050qgAD8dlslwN8W397OcPRSpTys6NT/IN/jb 9g5J1a+Ld/mBZdtYyTR1tgUa4RfhmgowJ7XgkS0fG7aM59gWizOnc3T4rSwV8mR0 nC6VPYTcmMm5PTeJuZdDN665x2Eqf9m5zZ0/5AgsmuKukzdh5saHQoCXvUBVtdzC 1YBL2VrmtfKWfNqjGVQwgvPY6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7/uywQ Y3HQj/ShnKtfiLttmpWkMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmBrdYYhz2D0Q3ml+6ss4mVWgfJLhS5RGdjM49YTpAsEPq80o7mB5dBgZFiH PrV99HXeyn5CJSfxetZx42KoCh4taXy0dkJBtGdDadYLf+0ykT0cYjZ7dsNQQhaT mdoJnGF5g6Vugg6dE3jlz9bQiqF3C70vDIxVelG1bSWIvIx4/ZnTdRDPW+XIoOax 7PW0+1hyZ7obhUSJ1iuvKipKUDrgeSAcnZ6flMHkfEdoJNvn14i7YTRcZ51Ba53e PIuv/RaxVuveY1Y3B0gq11AMCFBzY5jy8d82YTzI2RDkC5GV/bD3agCuwjM1ph5K qZkrzUAhO6srpPc6voZTTNZT/Q== -----END CERTIFICATE-----Generated at Sun Nov 15 11:03:57 2026 by rpki-client