$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: 2+f6cGG1sUZye8ltek53ufHwFIfeBXp1eKWNnDjizc4= Subject key identifier: 06:04:19:F9:16:8C:35:63:C6:88:78:9D:D6:E7:61:07:EB:3B:DB:1B Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: 0151 Signing time: Fri 13 Nov 2026 05:26:17 +0000 Manifest this update: Fri 13 Nov 2026 05:26:17 +0000 Manifest next update: Fri 20 Nov 2026 05:26:17 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: bTimq2+Qvmv8469SDQ/MAD/Ym9kFBXNiMtBjTMJb5tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 05:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Nov 13 05:26:17 2026 GMT Not After : Nov 20 05:26:17 2026 GMT Subject: CN=6af69f79-c7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:0a:c1:4c:79:bf:85:22:6d:fa:13:03:fa: 60:1f:94:d3:11:21:55:92:5c:e8:38:82:16:f1:9d: 56:0f:64:45:cb:91:10:3f:04:8a:73:49:9d:df:ab: 82:5b:4d:67:27:1c:3f:2a:25:23:bc:85:d5:d7:30: 4e:c9:dd:10:90:9d:46:24:9e:e8:2b:3e:0f:25:70: 23:71:d7:11:74:c5:51:32:1f:99:ee:44:5a:74:63: 7c:83:64:72:b5:32:6c:f0:38:3f:bd:d8:00:da:35: 8f:30:f4:f0:6e:a5:da:41:fe:59:c7:50:81:f1:e4: 0b:5b:c7:fe:77:1a:f8:a2:ac:1c:95:5b:87:be:43: 2c:f6:90:3c:fa:f3:4c:e3:83:45:26:4e:6c:d3:e2: 34:c0:48:e4:69:3f:4a:a0:17:dd:a6:4f:da:d0:91: b7:b3:68:5b:0d:09:54:3b:c5:af:3f:e2:11:af:c8: c7:5c:a6:4f:8e:0e:48:67:58:62:d9:e6:d4:6f:01: 8f:53:d2:f4:c5:a7:08:a2:94:b5:58:39:c0:8f:e2: b4:87:77:dc:87:b9:0b:4f:d7:1f:14:1b:86:7a:fe: aa:03:04:b6:c5:f0:45:2e:ea:b3:d2:ae:d6:f1:ac: 7e:a9:10:73:f6:b2:8b:60:16:1c:b1:b6:7d:b6:eb: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:04:19:F9:16:8C:35:63:C6:88:78:9D:D6:E7:61:07:EB:3B:DB:1B X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:9d:9d:78:18:7e:49:ed:b7:ac:37:87:e2:0a:87:e9:93: 81:ac:1f:6c:db:35:76:46:36:77:0e:34:72:e0:71:2f:25:bb: a6:8a:93:75:c3:8f:0d:1a:4b:33:87:0d:2a:bf:94:35:51:7e: 2f:03:ed:bd:2a:ef:25:5b:23:f0:76:cd:f9:f8:fa:ad:fd:4f: c9:d5:3b:5a:f9:e4:6d:21:8f:cb:fd:70:05:11:5d:13:14:bc: b0:7c:8c:44:10:93:17:a8:1a:c1:09:41:f0:3f:44:bf:ed:9d: c4:da:4a:0a:2d:6d:14:8e:b9:fb:b1:b1:1e:87:2c:c6:b1:92: af:1f:ea:ca:0f:4b:5a:5c:cd:77:5e:4b:83:87:6b:69:02:31: 07:d8:ee:1d:e2:6f:2f:29:95:64:69:43:09:54:a1:fd:49:7d: 49:47:61:14:9a:b6:2a:31:6a:e4:d3:a8:60:78:22:2d:08:c8: e3:53:54:5c:7d:ab:70:aa:5b:cf:c1:d8:a0:d1:e3:1f:50:d2: c8:93:2c:f9:44:30:56:88:6c:c7:17:37:79:be:54:07:70:08: 06:f4:f4:88:a4:d9:05:15:13:88:17:6d:5e:8a:54:77:2f:d6: 2a:e7:85:33:05:10:7b:c3:49:d5:e2:08:27:62:0a:e8:1a:e4: e2:fb:3b:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjYxMTEzMDUyNjE3WhcNMjYxMTIwMDUyNjE3WjAYMRYwFAYD VQQDEw02YWY2OWY3OS1jN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRIKwUx5v4UibfoTA/pgH5TTESFVklzoOIIW8Z1WD2RFy5EQPwSKc0md36uC W01nJxw/KiUjvIXV1zBOyd0QkJ1GJJ7oKz4PJXAjcdcRdMVRMh+Z7kRadGN8g2Ry tTJs8Dg/vdgA2jWPMPTwbqXaQf5Zx1CB8eQLW8f+dxr4oqwclVuHvkMs9pA8+vNM 44NFJk5s0+I0wEjkaT9KoBfdpk/a0JG3s2hbDQlUO8WvP+IRr8jHXKZPjg5IZ1hi 2ebUbwGPU9L0xacIopS1WDnAj+K0h3fch7kLT9cfFBuGev6qAwS2xfBFLuqz0q7W 8ax+qRBz9rKLYBYcsbZ9tusSeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYEGfkW jDVjxoh4ndbnYQfrO9sbMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATIudnXgYfkntt6w3h+IKh+mTgawfbNs1dkY2dw40cuBxLyW7poqTdcOPDRpL M4cNKr+UNVF+LwPtvSrvJVsj8HbN+fj6rf1PydU7WvnkbSGPy/1wBRFdExS8sHyM RBCTF6gawQlB8D9Ev+2dxNpKCi1tFI65+7GxHocsxrGSrx/qyg9LWlzNd15Lg4dr aQIxB9juHeJvLymVZGlDCVSh/Ul9SUdhFJq2KjFq5NOoYHgiLQjI41NUXH2rcKpb z8HYoNHjH1DSyJMs+UQwVohsxxc3eb5UB3AIBvT0iKTZBRUTiBdtXopUdy/WKueF MwUQe8NJ1eIIJ2IK6Brk4vs76w== -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:29 2026 by rpki-client