$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: aIQrmwinXF0mHzyGFu0TeIoyv8EYCjmC/jlOd5bZ0AU= Subject key identifier: C1:AF:36:63:A2:32:AD:6B:1A:95:0E:15:67:E0:A0:F2:01:B2:2E:8C Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 17B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 1767 Signing time: Sat 14 Nov 2026 16:32:54 +0000 Manifest this update: Sat 14 Nov 2026 16:32:54 +0000 Manifest next update: Sat 21 Nov 2026 16:32:54 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: VomhalIg1T75igZhi0EJO1WZCO2myUC7sclH15ozaQw=) 2: BD2B0858B27A11F19095CEA23511F970.roa (hash: JN2Oh4NAb4qZWkyTkJ8HdWLvLh4qFlBcfnXv4X0jbyQ=) 3: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: OdqgeiSOjeBAmIPLoFgaP/a6OQ13sSbWpiRXsmgLMhc=) 4: 52574F8CB27A11F19678C2773511F970.roa (hash: qhFcjN+ZaFSnR2upISnDozu4NN35tYfPc/0WdcH7emg=) 5: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: qv8edl3PP2lUfLEX63XMIljMaIJhob91NbUv2EBIJxI=) 6: 539AC1C6B27A11F19678C2773511F970.roa (hash: kjhI0eeZ4Kl7oEROg4YfSikLSMN/fVN+2AESo76PF0k=) 7: EECE3EC83CAC11F191D82B64AE833773.roa (hash: w9oUAma24okW8iq8Kb6jjeHqtZAlY2V722gRG14VEBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6067 (0x17b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Nov 14 16:32:54 2026 GMT Not After : Nov 21 16:32:54 2026 GMT Subject: CN=6af88d36-8df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:f2:22:a5:20:8a:84:ba:0f:94:e9:c8:c3: 5e:8c:3e:76:b9:87:17:c8:40:be:01:89:2d:90:10: 94:5d:61:81:03:40:f6:5f:55:09:7f:ea:75:13:dd: e2:a8:ef:dc:06:13:ef:a2:92:47:7c:84:04:59:de: 05:40:a8:f0:78:35:82:0f:3a:7e:59:8a:65:01:99: 06:26:f7:d2:34:18:f8:a2:b3:dc:2e:e3:c0:82:f5: dd:99:a5:fd:7c:05:5c:c5:93:bc:53:39:9c:7e:11: cb:0f:9f:b4:8e:4d:f3:86:bb:f9:52:55:57:a5:f9: b9:86:8f:56:91:c6:83:cc:2f:6b:53:62:7c:66:45: c8:39:a0:29:49:a0:3b:20:bf:0b:da:90:b6:e9:d4: 6a:9c:a6:33:0a:b9:2a:79:0b:d4:96:d2:d6:ee:03: 3b:9e:ef:fc:a7:ec:1a:3d:bd:54:65:f2:2b:ff:5d: cf:96:38:bf:9a:b4:cb:e3:65:da:19:bb:9d:4f:96: b4:a1:35:ab:3a:55:79:9f:da:8c:d8:dd:a3:5c:5d: ac:5c:63:ac:08:3c:36:f2:c1:eb:11:36:2d:91:7d: d9:10:de:a4:60:93:da:69:85:18:fe:06:ba:34:b3: fb:0c:f9:87:a4:13:3b:7e:d6:f7:63:08:56:4e:ca: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:36:63:A2:32:AD:6B:1A:95:0E:15:67:E0:A0:F2:01:B2:2E:8C X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:77:4b:37:20:d5:74:d3:18:f7:1d:bc:47:16:67:e7:af: 9a:8f:69:4b:f2:4f:9c:ac:ba:39:f2:45:fd:84:dc:5d:b1:2c: f0:af:29:87:35:3d:9f:3c:d7:34:34:4c:f5:69:c5:b3:1e:59: 75:ca:78:0b:18:d7:c5:b9:eb:7d:c7:b0:f9:e9:8f:1b:e0:53: 80:eb:c0:cf:57:ff:8d:12:37:b5:33:78:63:9f:9b:76:86:bc: 66:1d:bc:1e:35:1e:a9:92:de:9d:d7:79:e7:fd:a9:11:94:e3: 0e:6f:d7:8b:69:93:b8:aa:66:ac:42:9d:3a:5e:9b:3c:80:de: 72:9e:1b:52:88:f5:71:be:43:4f:b7:9d:ae:7b:d4:99:e0:a3: 52:1e:14:b6:1a:12:49:71:11:33:ed:24:71:93:da:ea:78:b0: 88:9e:39:81:76:db:82:e6:9d:d0:db:7a:8f:52:de:3a:af:a7: 4a:22:34:bd:8b:fc:5b:9c:8f:53:a0:c0:c3:a7:31:80:16:0f: e8:3a:ff:19:4e:e2:de:01:a3:10:55:dd:07:d6:37:20:2c:2e: 57:84:43:bb:41:6a:7f:2d:51:bb:f6:0f:da:27:7e:af:2d:0a: 6d:c3:16:84:4c:f6:51:98:b0:c8:48:55:cd:c6:c5:4f:e2:9d: e6:d1:31:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjYxMTE0MTYzMjU0WhcNMjYxMTIxMTYzMjU0WjAYMRYwFAYD VQQDEw02YWY4OGQzNi04ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq43yIqUgioS6D5TpyMNejD52uYcXyEC+AYktkBCUXWGBA0D2X1UJf+p1E93i qO/cBhPvopJHfIQEWd4FQKjweDWCDzp+WYplAZkGJvfSNBj4orPcLuPAgvXdmaX9 fAVcxZO8UzmcfhHLD5+0jk3zhrv5UlVXpfm5ho9WkcaDzC9rU2J8ZkXIOaApSaA7 IL8L2pC26dRqnKYzCrkqeQvUltLW7gM7nu/8p+waPb1UZfIr/13Plji/mrTL42Xa GbudT5a0oTWrOlV5n9qM2N2jXF2sXGOsCDw28sHrETYtkX3ZEN6kYJPaaYUY/ga6 NLP7DPmHpBM7ftb3YwhWTsqimQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGvNmOi Mq1rGpUOFWfgoPIBsi6MMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKFB3Szcg1XTTGPcdvEcWZ+evmo9pS/JPnKy6OfJF/YTcXbEs8K8phzU9nzzX NDRM9WnFsx5Zdcp4CxjXxbnrfcew+emPG+BTgOvAz1f/jRI3tTN4Y5+bdoa8Zh28 HjUeqZLendd55/2pEZTjDm/Xi2mTuKpmrEKdOl6bPIDecp4bUoj1cb5DT7edrnvU meCjUh4UthoSSXERM+0kcZPa6niwiJ45gXbbguad0Nt6j1LeOq+nSiI0vYv8W5yP U6DAw6cxgBYP6Dr/GU7i3gGjEFXdB9Y3ICwuV4RDu0Fqfy1Ru/YP2id+ry0KbcMW hEz2UZiwyEhVzcbFT+Kd5tEx/w== -----END CERTIFICATE-----Generated at Sun Nov 15 15:24:17 2026 by rpki-client