$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: BTd1vDY4vXA/M6mrVrek2FcAmHDmGVV6bt2zA+rVjIU= Subject key identifier: 06:C5:AC:DB:37:B4:31:75:D9:E2:22:91:AE:27:73:B7:D6:EA:FC:8E Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1459 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 143E Signing time: Sat 14 Nov 2026 16:50:12 +0000 Manifest this update: Sat 14 Nov 2026 16:50:12 +0000 Manifest next update: Sat 21 Nov 2026 16:50:12 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: GlRbZL+/u0E3SZq7qjRTt/cD0164JC+uo21Ke1QRChw=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5209 (0x1459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Nov 14 16:50:12 2026 GMT Not After : Nov 21 16:50:12 2026 GMT Subject: CN=6af89144-32e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:e1:00:49:55:27:ed:f1:81:e5:73:a6:68: c6:ae:e7:d8:32:25:da:00:9a:a1:a7:6a:8f:d7:e6: 60:47:af:42:51:99:53:7a:3b:ef:05:d5:45:c1:cf: 29:00:c5:41:36:4a:2f:d6:0c:0b:3a:e3:d3:b3:6e: ce:68:c2:11:5e:ae:02:67:3f:91:6b:ee:93:98:20: 0e:ed:20:96:16:d7:09:ed:eb:1b:a0:ec:5c:47:3f: 62:b6:f9:aa:c2:a8:ca:68:cb:7a:90:15:d6:bd:8b: 90:6d:12:c6:82:ed:d1:b3:46:09:31:49:5e:3a:f6: b3:b1:4d:b3:54:b0:21:3f:22:f0:87:0b:66:5a:68: e1:ca:f5:6d:bd:60:6b:64:c9:8f:c1:7d:07:c1:23: ee:2e:b1:74:58:0d:c5:c7:c1:0c:a0:3b:d3:48:6f: b7:7f:c6:9d:73:88:0a:dc:9e:97:c9:73:ab:36:9b: 37:fd:54:72:4f:20:10:95:3c:b1:5e:18:17:ff:54: e7:02:84:9f:04:11:2b:79:f6:2f:89:cd:49:25:84: ae:9e:62:a5:f9:d1:05:8c:18:0a:f0:ea:e6:f5:e3: 64:bb:e7:09:15:ab:3b:7b:56:fd:6c:01:0d:12:eb: 23:80:08:ac:9c:88:d9:e2:63:4a:b3:8f:4d:a9:2d: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:AC:DB:37:B4:31:75:D9:E2:22:91:AE:27:73:B7:D6:EA:FC:8E X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:e6:9a:d4:2c:9d:85:ce:7c:56:85:58:b9:37:33:02:5e: 82:db:a4:4f:d2:5d:01:27:80:5c:36:1a:8e:0e:b3:b1:2d:d3: 64:6a:de:bc:09:a8:d0:66:99:a7:2a:13:e7:0c:6d:4b:1c:a5: b8:27:36:5c:06:79:01:f7:c8:4b:e2:a0:5f:e3:58:68:67:8d: f5:2d:bf:3a:d1:6a:f1:bb:66:91:34:24:8f:57:12:4c:e5:a3: 96:33:91:f9:24:0f:35:99:2f:31:f4:f3:8b:44:f6:c9:60:ae: 17:d8:51:b6:16:d4:f1:99:9c:15:d1:8f:b2:10:2f:b2:98:f6: 32:a4:e1:3e:76:6d:46:54:fb:ba:79:33:ff:4e:a7:c1:1f:b1: 8c:5b:9b:02:a0:07:b4:7b:ea:29:a8:fd:ad:7e:29:a7:2e:5d: 45:d7:af:5b:3d:ec:0a:f7:5c:10:76:eb:1c:b6:49:26:28:79: 57:57:f9:3a:fd:b6:5f:13:23:ad:e8:68:7e:11:c6:99:a7:90: 37:cb:5c:15:3a:fd:c3:b0:79:89:79:87:3d:e8:cc:2b:21:4c: 57:1e:99:ee:b2:a9:bc:32:c2:1c:bc:4b:4e:e6:4e:4b:02:d0: ef:2d:08:60:0e:f7:e9:2e:a9:36:ba:27:22:47:12:aa:15:cd: 07:28:e3:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYxMTE0MTY1MDEyWhcNMjYxMTIxMTY1MDEyWjAYMRYwFAYD VQQDEw02YWY4OTE0NC0zMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PDhAElVJ+3xgeVzpmjGrufYMiXaAJqhp2qP1+ZgR69CUZlTejvvBdVFwc8p AMVBNkov1gwLOuPTs27OaMIRXq4CZz+Ra+6TmCAO7SCWFtcJ7esboOxcRz9itvmq wqjKaMt6kBXWvYuQbRLGgu3Rs0YJMUleOvazsU2zVLAhPyLwhwtmWmjhyvVtvWBr ZMmPwX0HwSPuLrF0WA3Fx8EMoDvTSG+3f8adc4gK3J6XyXOrNps3/VRyTyAQlTyx XhgX/1TnAoSfBBErefYvic1JJYSunmKl+dEFjBgK8Orm9eNku+cJFas7e1b9bAEN EusjgAisnIjZ4mNKs49NqS3neQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbFrNs3 tDF12eIika4nc7fW6vyOMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7zmmtQsnYXOfFaFWLk3MwJegtukT9JdASeAXDYajg6zsS3TZGrevAmo0GaZ pyoT5wxtSxyluCc2XAZ5AffIS+KgX+NYaGeN9S2/OtFq8btmkTQkj1cSTOWjljOR +SQPNZkvMfTzi0T2yWCuF9hRthbU8ZmcFdGPshAvspj2MqThPnZtRlT7unkz/06n wR+xjFubAqAHtHvqKaj9rX4ppy5dRdevWz3sCvdcEHbrHLZJJih5V1f5Ov22XxMj rehofhHGmaeQN8tcFTr9w7B5iXmHPejMKyFMVx6Z7rKpvDLCHLxLTuZOSwLQ7y0I YA736S6pNronIkcSqhXNByjj6Q== -----END CERTIFICATE-----Generated at Sun Nov 15 00:08:39 2026 by rpki-client