$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: DdDnKWAV2j9CXjpYWDVrpnmSutQgEDKL27Rx3mbToZQ= Subject key identifier: B8:68:EA:80:AC:5E:4B:BD:BC:9D:AB:4E:B4:FF:59:61:71:2B:85:9D Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 0124 Signing time: Sun 15 Nov 2026 05:59:35 +0000 Manifest this update: Sun 15 Nov 2026 05:59:34 +0000 Manifest next update: Sun 22 Nov 2026 05:59:34 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: GQ6BgzdrqJUWZ3Cvp41Ul87dqc0prfTJFs1AHlqKUbw=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 05:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Nov 15 05:59:34 2026 GMT Not After : Nov 22 05:59:34 2026 GMT Subject: CN=6af94a46-a6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:75:7f:90:c8:5e:55:e8:d2:c6:d4:5e:f2: 09:d9:88:99:97:9c:0d:8f:40:47:a1:b0:de:bc:2e: e7:1a:e4:65:c4:ad:68:48:fc:95:b7:48:8a:02:4d: 06:fe:52:75:e2:f7:8c:db:2b:cd:46:ac:52:10:14: 75:51:3f:68:b5:88:d4:5f:f2:5b:be:5e:27:3f:58: 85:b1:bc:b5:cc:a0:40:4b:64:db:a1:81:21:59:02: 93:33:e0:4f:f5:46:b2:1c:60:3f:56:40:09:a2:85: 7a:f7:56:9b:65:ba:45:3d:5f:37:81:04:26:f0:6e: 83:5d:0a:76:5e:04:4f:62:f4:d1:3a:a3:45:3b:c2: bf:36:38:15:92:b0:cf:15:0c:29:6b:91:4c:d0:2f: 7b:9d:67:bc:2e:1b:fb:0e:dd:58:55:60:eb:c3:82: e7:42:84:26:6c:cb:e2:f2:51:ba:6c:58:4d:7d:f6: 1c:60:60:74:ee:4c:ba:ce:cd:b1:d0:5b:15:5f:3c: 72:97:01:c7:51:79:01:15:eb:69:a6:48:2c:dd:16: ca:c9:f6:41:c0:79:a8:35:8a:3b:be:fa:78:2e:29: ca:d0:b9:96:0c:60:1e:09:a5:60:e6:78:db:06:33: ab:90:a8:0f:0f:4d:33:68:51:fe:b9:bd:88:23:aa: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:68:EA:80:AC:5E:4B:BD:BC:9D:AB:4E:B4:FF:59:61:71:2B:85:9D X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7b:6d:b6:b8:68:64:15:4b:77:51:8b:75:3a:e6:35:cb:dc: f9:ae:65:6c:29:29:6f:ef:f2:72:b3:92:4c:0d:b7:9c:59:b5: ad:21:1e:8d:37:79:df:7a:29:5d:4c:43:f5:33:82:77:29:46: 43:b1:83:4f:89:9e:83:36:d9:39:c2:c8:fe:46:94:b6:6d:e9: 1b:db:b4:1f:43:6f:4a:82:de:e5:5e:c6:6f:8f:b0:8a:fc:f6: b6:29:6e:e6:64:b0:d5:94:e7:90:7b:f0:3b:9c:5d:da:4e:7b: 9e:e4:56:0b:b4:e0:da:65:f3:6a:8b:e5:6f:9c:87:25:87:de: e4:99:c4:f3:c2:68:99:4b:81:61:d7:aa:27:1d:2d:f4:5a:a5: 6e:4a:88:4a:9a:14:50:29:e1:15:e7:8a:9d:c8:3b:e7:03:1a: 66:20:47:61:0a:66:05:53:69:cf:16:bf:6b:60:cf:a4:5d:69: f3:41:8c:8f:66:7f:93:27:de:cb:6d:e4:c2:59:ef:5b:95:57: d4:6e:f4:4d:f1:a6:5f:75:48:98:fa:a8:5f:4d:6d:35:a3:29: cb:8b:fd:aa:df:e5:9a:9f:d6:2e:25:47:92:6f:02:c0:b5:f0: 3e:5b:53:72:e6:93:f3:02:42:28:20:41:da:ae:20:b2:9c:f2: 8f:53:ee:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEzREExMTAvBgNVBAUTKDBBNDZBRTJGQUZDQ0M3QURERUYyNzJDNzAyQUI1RkZB QkRDQ0FBNEYwHhcNMjYxMTE1MDU1OTM0WhcNMjYxMTIyMDU1OTM0WjAYMRYwFAYD VQQDEw02YWY5NGE0Ni1hNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssd1f5DIXlXo0sbUXvIJ2YiZl5wNj0BHobDevC7nGuRlxK1oSPyVt0iKAk0G /lJ14veM2yvNRqxSEBR1UT9otYjUX/Jbvl4nP1iFsby1zKBAS2TboYEhWQKTM+BP 9UayHGA/VkAJooV691abZbpFPV83gQQm8G6DXQp2XgRPYvTROqNFO8K/NjgVkrDP FQwpa5FM0C97nWe8Lhv7Dt1YVWDrw4LnQoQmbMvi8lG6bFhNffYcYGB07ky6zs2x 0FsVXzxylwHHUXkBFetppkgs3RbKyfZBwHmoNYo7vvp4LinK0LmWDGAeCaVg5njb BjOrkKgPD00zaFH+ub2II6pIvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLho6oCs Xku9vJ2rTrT/WWFxK4WdMB8GA1UdIwQYMBaAFApGri+vzMet3vJyxwKrX/q9zKpP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNEQS8yRUFDQUUyODIw RjUxMUYwOTVCNjUxODJDNEY5QUUwMi9Da2F1TDZfTXg2M2U4bkxIQXF0Zi1yM01x azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNEQS8yRUFDQUUyODIwRjUxMUYwOTVCNjUxODJDNEY5QUUwMi9Da2F1TDZfTXg2 M2U4bkxIQXF0Zi1yM01xazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJXtttrhoZBVLd1GLdTrmNcvc+a5lbCkpb+/ycrOSTA23nFm1rSEejTd533op XUxD9TOCdylGQ7GDT4megzbZOcLI/kaUtm3pG9u0H0NvSoLe5V7Gb4+wivz2tilu 5mSw1ZTnkHvwO5xd2k57nuRWC7Tg2mXzaovlb5yHJYfe5JnE88JomUuBYdeqJx0t 9FqlbkqISpoUUCnhFeeKncg75wMaZiBHYQpmBVNpzxa/a2DPpF1p80GMj2Z/kyfe y23kwlnvW5VX1G70TfGmX3VImPqoX01tNaMpy4v9qt/lmp/WLiVHkm8CwLXwPltT cuaT8wJCKCBB2q4gspzyj1Pugw== -----END CERTIFICATE-----Generated at Sun Nov 15 20:53:28 2026 by rpki-client