$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: g0T8sxn/j1KH5jFi4U9M+tiXPyHD/vM1xcNtU1xu0tc= Subject key identifier: 1D:57:FD:B5:9D:41:E1:CA:FC:0C:BC:17:89:8A:46:0D:F1:DD:85:0A Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01F1 Signing time: Sun 15 Nov 2026 03:40:17 +0000 Manifest this update: Sun 15 Nov 2026 03:40:17 +0000 Manifest next update: Sun 22 Nov 2026 03:40:17 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: CEgO1wJqNmNxDjKiuB0+Hd2suFQSxu7+i58AY6g2l3c=) 2: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) 3: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) 4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Nov 15 03:40:17 2026 GMT Not After : Nov 22 03:40:17 2026 GMT Subject: CN=6af929a1-380a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:1f:70:d3:91:87:f8:5d:8f:7e:19:8e:b0: f9:4e:97:02:93:74:26:d0:55:f5:25:cb:c3:92:b3: f5:a0:38:df:02:55:49:a2:61:d5:c9:51:2d:a6:f5: 78:64:51:69:b0:a7:da:f3:45:94:54:b4:0e:5c:17: 8a:e5:cb:95:b0:af:dd:db:00:74:7a:e3:42:bb:d9: 45:b1:ff:86:a2:aa:48:79:27:26:9f:c3:79:75:04: e2:e1:90:ec:cc:74:b4:ff:18:11:6c:16:c9:6e:cb: 95:c7:d8:73:3e:8d:ce:cd:aa:8d:29:d7:3e:9d:72: 39:fc:f8:58:45:3f:bc:c7:d6:89:5b:04:b4:9a:5a: 69:3f:e3:27:aa:fa:76:93:ea:bc:9b:ea:47:d2:fc: b4:ac:2a:14:6e:c9:3d:6e:55:3e:f0:35:8f:19:3a: 09:a6:0c:2d:c0:ef:3d:e3:6b:15:8e:42:eb:13:8d: 06:a6:cb:4f:42:0c:83:1d:ed:a3:58:7b:31:37:ec: 33:0d:18:d8:e4:fc:7e:75:03:94:f4:81:a0:c3:1f: 38:ae:68:c7:9c:f0:0f:3c:89:86:50:53:f8:3e:7b: 8a:1d:ef:0b:83:26:14:f0:85:60:47:b6:7b:6a:d5: 20:e4:ed:a0:b1:29:2c:d0:42:0d:8c:10:78:cf:d2: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:57:FD:B5:9D:41:E1:CA:FC:0C:BC:17:89:8A:46:0D:F1:DD:85:0A X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6b:1b:31:eb:a9:32:09:f0:66:29:90:ea:00:6d:cd:85:fb: c0:58:53:3e:f7:27:18:e9:d1:83:ce:91:b0:8c:2f:63:45:a0: 44:17:12:70:7d:6d:e1:77:5c:b0:8a:b1:63:ac:c2:de:b8:4b: a8:99:bf:94:76:1b:63:20:04:9c:c0:8a:8a:f1:63:50:b1:63: e8:3a:43:90:72:fb:e9:cb:bb:55:52:03:5d:39:c0:67:55:10: 19:d6:13:6b:2d:9c:83:2c:83:1b:94:4d:99:77:81:51:0d:61: e8:61:d2:80:38:5a:2d:c9:a9:5a:45:98:43:eb:92:9a:1f:27: 62:3d:d3:af:e1:aa:b5:b3:14:6e:17:fe:c7:1b:bf:06:9a:4a: 18:de:7b:7f:5e:38:dc:35:9e:d0:ac:ad:f8:2a:9a:13:93:99: 34:40:0d:65:bc:a0:0c:58:b2:7d:67:56:fc:0f:c4:37:36:87: 75:13:e8:69:f8:2d:3d:ee:83:bd:31:f7:5c:45:5f:a1:38:3e: e3:62:cc:1b:36:5f:f4:99:ff:08:ff:c7:4e:26:62:db:1e:cd: 8c:58:45:2c:98:bd:aa:40:39:d3:d4:b9:1c:c0:fa:6a:bd:b7: a5:a4:4a:06:48:80:11:43:a2:19:e1:19:47:67:65:6a:15:86: eb:d1:f8:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYxMTE1MDM0MDE3WhcNMjYxMTIyMDM0MDE3WjAYMRYwFAYD VQQDEw02YWY5MjlhMS0zODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyIfcNORh/hdj34ZjrD5TpcCk3Qm0FX1JcvDkrP1oDjfAlVJomHVyVEtpvV4 ZFFpsKfa80WUVLQOXBeK5cuVsK/d2wB0euNCu9lFsf+GoqpIeScmn8N5dQTi4ZDs zHS0/xgRbBbJbsuVx9hzPo3OzaqNKdc+nXI5/PhYRT+8x9aJWwS0mlppP+Mnqvp2 k+q8m+pH0vy0rCoUbsk9blU+8DWPGToJpgwtwO8942sVjkLrE40GpstPQgyDHe2j WHsxN+wzDRjY5Px+dQOU9IGgwx84rmjHnPAPPImGUFP4PnuKHe8LgyYU8IVgR7Z7 atUg5O2gsSks0EINjBB4z9JqeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1X/bWd QeHK/Ay8F4mKRg3x3YUKMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcGsbMeupMgnwZimQ6gBtzYX7wFhTPvcnGOnRg86RsIwvY0WgRBcScH1t4Xdc sIqxY6zC3rhLqJm/lHYbYyAEnMCKivFjULFj6DpDkHL76cu7VVIDXTnAZ1UQGdYT ay2cgyyDG5RNmXeBUQ1h6GHSgDhaLcmpWkWYQ+uSmh8nYj3Tr+GqtbMUbhf+xxu/ BppKGN57f1443DWe0Kyt+CqaE5OZNEANZbygDFiyfWdW/A/ENzaHdRPoafgtPe6D vTH3XEVfoTg+42LMGzZf9Jn/CP/HTiZi2x7NjFhFLJi9qkA509S5HMD6ar23paRK BkiAEUOiGeEZR2dlahWG69H4Kg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:14:20 2026 by rpki-client