$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json) Hash identifier: wDUNnRSwRIxvmj1/UrhbZLhFk87x8rtzssqr/EHIVWk= Subject key identifier: 1D:BD:DC:53:9E:8B:70:8F:4E:DE:1D:37:18:A2:54:53:39:4A:F1:0C Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft Manifest number: 0509 Signing time: Sat 14 Nov 2026 23:26:24 +0000 Manifest this update: Sat 14 Nov 2026 23:26:23 +0000 Manifest next update: Sat 21 Nov 2026 23:26:23 +0000 Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: IiOj/2Hkxeo3EJbQcSXJbElWnsiowFhzSc5xdwf6k/U=) 2: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: RYuGQRq/FbuSL/tGVPPk29bnF9tr3D+V3UoeMu9qj84=) 3: BDB2AB30567411F1AE3800E79D833773.roa (hash: /XCOcDKrUivP4xEZrgWFR7l9LUacEXHXREoQG8qPTbU=) 4: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: eaV/UGrF9aFYovMPgzh43fqlwfXnc/bh68H1+PCm0Fo=) 5: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: aR3bjzpkDnEdThgQWD3OGEKxjKyT+bYAYu7gSfFDnMM=) 6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: p8iD8cfenU/3pDjfOhpGVIznHLU9bOEeNzIUjUfKGsw=) 7: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: WYBCVEow0EGPklBf726NCkW5Rw768+uwmWrbsMCcmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Validity Not Before: Nov 14 23:26:23 2026 GMT Not After : Nov 21 23:26:23 2026 GMT Subject: CN=6af8ee20-8b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:db:06:b2:8f:bc:9a:50:d6:03:e9:92:6b: 4a:e0:c4:da:62:91:49:13:22:ca:7c:f5:86:02:2d: cc:02:27:7b:9a:db:b6:85:63:e6:7b:b1:98:48:3f: c6:bd:8e:56:1f:27:ae:bf:85:72:42:54:32:38:fc: 6f:64:47:21:bb:a4:f0:28:70:96:dc:9f:74:5c:75: 91:d9:75:b2:0e:cd:7c:59:68:f1:93:ad:0b:33:e7: f0:e0:20:cb:a0:f8:f1:24:27:47:47:6a:55:04:2e: 2d:23:a5:9c:65:aa:f3:59:b1:2c:83:56:a9:a0:5f: d1:b0:d4:16:cf:49:2a:ee:9b:a9:50:6d:4b:80:31: aa:04:cc:b8:63:03:b8:6f:7b:a7:42:6d:49:23:30: 11:8a:08:c5:0d:f3:e1:88:a4:3d:d5:c9:fc:86:19: 99:02:61:dd:12:d8:3f:a2:fe:3d:1d:32:24:61:3a: ac:15:ba:fc:26:1a:4f:8a:9d:74:45:ad:36:fd:9a: a7:9c:e5:3f:72:43:01:bc:30:50:05:38:eb:d8:60: e5:e3:2b:31:1a:84:35:f0:41:e7:c8:a6:52:a2:41: 37:4c:b6:e9:00:1f:62:41:b6:38:dc:d9:55:70:ee: e6:eb:09:18:27:e9:bf:a3:46:45:28:cc:4d:87:ea: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:DC:53:9E:8B:70:8F:4E:DE:1D:37:18:A2:54:53:39:4A:F1:0C X509v3 Authority Key Identifier: keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:fa:df:f2:b4:1e:9a:93:a6:67:b2:51:80:92:12:11:9f:61: e0:fa:f5:43:f9:60:2f:fc:a0:2a:b8:c4:ca:ca:b6:24:15:2f: 43:22:f1:0f:2e:68:e5:70:51:db:27:6d:cc:52:6b:07:a9:a3: c3:77:16:f4:ec:3b:00:04:22:e9:04:fc:f9:00:15:9f:a9:37: 00:47:20:aa:53:fc:13:90:7e:32:2a:ce:b1:50:54:9e:89:a8: a1:3f:92:6a:eb:19:ee:a2:54:93:a2:17:b9:6c:14:69:09:b5: 38:52:72:92:b5:64:66:0b:1d:61:ae:3b:a0:a1:14:65:78:4c: b3:3c:b9:ef:7d:8d:4c:da:53:aa:ce:5a:ba:3e:53:be:98:35: e0:87:72:af:2f:1b:28:b3:db:b0:ab:a1:34:60:f7:5a:4c:11: 09:34:5c:0f:e2:6d:1b:5d:98:fd:d9:f8:78:19:1b:09:08:77: 61:b6:3d:66:61:8f:e4:2b:04:6b:4c:02:e2:2c:cf:62:39:c3: 05:29:68:46:dd:07:7f:96:de:a4:81:3c:4d:ef:d8:7a:32:8b: 20:65:d1:13:88:16:c5:c5:a7:4a:56:a9:77:cb:01:f1:bf:ba: fa:e4:35:40:3b:35:51:17:44:61:93:93:70:cf:d6:39:a4:3c: af:80:f6:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCODAxMTAvBgNVBAUTKDZGMjNGMjdGMDkwQkVGNDUzMTgwMjA3MkUxREFDRjIx MEQ5RDQyM0MwHhcNMjYxMTE0MjMyNjIzWhcNMjYxMTIxMjMyNjIzWjAYMRYwFAYD VQQDEw02YWY4ZWUyMC04YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vnbBrKPvJpQ1gPpkmtK4MTaYpFJEyLKfPWGAi3MAid7mtu2hWPme7GYSD/G vY5WHyeuv4VyQlQyOPxvZEchu6TwKHCW3J90XHWR2XWyDs18WWjxk60LM+fw4CDL oPjxJCdHR2pVBC4tI6WcZarzWbEsg1apoF/RsNQWz0kq7pupUG1LgDGqBMy4YwO4 b3unQm1JIzARigjFDfPhiKQ91cn8hhmZAmHdEtg/ov49HTIkYTqsFbr8JhpPip10 Ra02/ZqnnOU/ckMBvDBQBTjr2GDl4ysxGoQ18EHnyKZSokE3TLbpAB9iQbY43NlV cO7m6wkYJ+m/o0ZFKMxNh+rXXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB293FOe i3CPTt4dNxiiVFM5SvEMMB8GA1UdIwQYMBaAFG8j8n8JC+9FMYAgcuHazyENnUI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI4MC83NzYyRkM1QTdF NkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcwVXhnQ0J5NGRyUElRMmRR ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcw VXhnQ0J5NGRyUElRMmRRancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuvrf8rQempOmZ7JRgJISEZ9h4Pr1Q/lgL/ygKrjEysq2JBUvQyLxDy5o5XBR 2ydtzFJrB6mjw3cW9Ow7AAQi6QT8+QAVn6k3AEcgqlP8E5B+MirOsVBUnomooT+S ausZ7qJUk6IXuWwUaQm1OFJykrVkZgsdYa47oKEUZXhMszy5732NTNpTqs5auj5T vpg14Idyry8bKLPbsKuhNGD3WkwRCTRcD+JtG12Y/dn4eBkbCQh3YbY9ZmGP5CsE a0wC4izPYjnDBSloRt0Hf5bepIE8Te/YejKLIGXRE4gWxcWnSlapd8sB8b+6+uQ1 QDs1URdEYZOTcM/WOaQ8r4D20Q== -----END CERTIFICATE-----Generated at Sun Nov 15 16:55:22 2026 by rpki-client