$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: 51ebYSuo3CXhydb6kAmmrIugho5mZErPrc1R3nsDuM4= Subject key identifier: E3:06:2F:31:22:C1:7B:6C:CE:84:FC:D6:F8:96:C5:7E:D5:C7:25:00 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 07C2 Signing time: Sat 14 Nov 2026 21:17:18 +0000 Manifest this update: Sat 14 Nov 2026 21:17:17 +0000 Manifest next update: Sat 21 Nov 2026 21:17:17 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: gtCTAg9VzHrZOtE4itWvYqQp9HVhVBxblEFkYqRbmXE=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=) 3: 00619CFA3CB911F1BBDAFF7AB4833773.roa (hash: DsdENVieE2RhNlpGEqRk9at7+HY0bRNG3YOtTEhYRjw=) 4: FFD30A3A3CB811F1BBDAFF7AB4833773.roa (hash: SjUSWIZP5JehPI4S4JhlMJHXgjL5bWNza1x377Y4CkQ=) 5: 9B6CA5663CB711F1A53ED041B4833773.roa (hash: WVuzX5CFpIrusgLbPfWDtQsMG2ekbWED5/WtRt7osX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Nov 14 21:17:17 2026 GMT Not After : Nov 21 21:17:17 2026 GMT Subject: CN=6af8cfdd-7c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:0f:0e:ca:c2:a9:94:4e:c0:35:05:74:ee: ff:03:e1:1a:aa:d7:03:18:a3:e2:e5:38:e0:1f:9e: 20:4b:63:d0:a4:65:05:cd:e0:57:1d:88:35:a9:c9: 38:80:25:d2:ae:97:b3:36:88:c0:52:02:52:c9:b2: 1a:4a:3f:f5:41:4a:2d:8b:57:53:a4:53:b2:1d:65: 73:ce:e8:26:8b:55:87:ed:4d:f4:a3:d7:77:2d:59: 5b:50:3e:0a:49:43:7e:af:0e:18:60:a9:6e:d6:bc: 1e:00:de:e4:da:6c:1e:84:0c:12:75:95:29:ba:5b: b1:ea:48:21:bf:73:91:38:14:65:95:66:75:ac:da: 48:86:61:50:82:96:a3:14:ed:a1:d2:31:b5:3c:18: ba:ab:e3:88:da:2b:3f:7b:86:b1:ab:2c:11:d2:59: 01:0d:26:92:c8:4c:7a:5f:01:21:08:b0:10:d6:0a: 45:e5:2f:ce:29:66:bc:c5:c4:30:8b:eb:53:43:1a: b0:6c:a8:f8:f7:22:b4:12:cb:18:30:60:13:59:4d: cf:92:79:57:33:9b:f8:05:fb:b8:f6:90:7d:eb:62: 32:13:ac:14:9b:68:72:7f:e5:65:88:29:f6:ca:af: 6d:4e:50:ce:0b:b6:03:cb:01:16:72:0e:34:0c:1b: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:06:2F:31:22:C1:7B:6C:CE:84:FC:D6:F8:96:C5:7E:D5:C7:25:00 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bf:64:68:fd:96:3d:af:98:93:a5:64:6f:24:48:0a:99:b3: 8c:3c:3f:6c:a9:31:c7:e4:ae:ca:7a:83:2e:f6:51:28:a8:b5: c8:e0:66:99:ed:ec:b6:7e:96:67:7e:3c:ec:0c:31:b4:6a:f7: a1:aa:b1:1c:4f:45:9a:2b:c7:b3:ef:3f:49:82:1c:b8:ee:a8: f5:d6:64:82:a7:fc:c5:c0:5b:33:27:61:90:ec:df:4d:fc:d0: 7e:15:b3:11:e8:b6:da:c8:a9:ad:6e:10:97:a1:d5:64:50:2e: cd:72:f0:f1:86:b4:38:5e:eb:94:11:ab:cd:02:f7:7a:8f:56: 3b:a3:db:0d:99:7d:9a:b8:f3:4a:0d:b9:84:11:2a:2b:ee:76: 93:88:8f:8d:7b:8d:40:1f:92:c2:53:a9:b3:7f:28:d4:7e:cd: 2d:09:02:b1:5d:8a:74:f9:d2:ff:ab:56:69:c4:07:fc:79:5f: c3:0c:2b:6e:73:d6:7d:bb:cf:1f:1c:bc:44:5c:cb:ac:53:de: 08:c1:60:ef:33:ee:fb:e6:5a:c8:95:67:16:96:3a:d6:ec:e5: 0e:98:13:f4:f6:2b:81:c4:0f:92:8d:7e:64:86:64:7f:cf:f8: 38:87:2b:05:e7:db:62:9e:42:fe:cd:6f:42:97:92:d3:33:3b: db:47:3a:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjYxMTE0MjExNzE3WhcNMjYxMTIxMjExNzE3WjAYMRYwFAYD VQQDEw02YWY4Y2ZkZC03YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkU0PDsrCqZROwDUFdO7/A+EaqtcDGKPi5TjgH54gS2PQpGUFzeBXHYg1qck4 gCXSrpezNojAUgJSybIaSj/1QUoti1dTpFOyHWVzzugmi1WH7U30o9d3LVlbUD4K SUN+rw4YYKlu1rweAN7k2mwehAwSdZUpulux6kghv3OROBRllWZ1rNpIhmFQgpaj FO2h0jG1PBi6q+OI2is/e4axqywR0lkBDSaSyEx6XwEhCLAQ1gpF5S/OKWa8xcQw i+tTQxqwbKj49yK0EssYMGATWU3PknlXM5v4Bfu49pB962IyE6wUm2hyf+VliCn2 yq9tTlDOC7YDywEWcg40DBsXOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMGLzEi wXtszoT81viWxX7VxyUAMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASr9kaP2WPa+Yk6VkbyRICpmzjDw/bKkxx+SuynqDLvZRKKi1yOBmme3stn6W Z3487AwxtGr3oaqxHE9FmivHs+8/SYIcuO6o9dZkgqf8xcBbMydhkOzfTfzQfhWz Eei22siprW4Ql6HVZFAuzXLw8Ya0OF7rlBGrzQL3eo9WO6PbDZl9mrjzSg25hBEq K+52k4iPjXuNQB+SwlOps38o1H7NLQkCsV2KdPnS/6tWacQH/HlfwwwrbnPWfbvP Hxy8RFzLrFPeCMFg7zPu++ZayJVnFpY61uzlDpgT9PYrgcQPko1+ZIZkf8/4OIcr BefbYp5C/s1vQpeS0zM720c6SA== -----END CERTIFICATE-----Generated at Sun Nov 15 11:10:24 2026 by rpki-client