$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: j6FPcRDUKvUoR0w1hDq4P9tUPKMgoIyNzzekwBVNvbg= Subject key identifier: 04:80:3D:2F:BD:A4:F4:F5:55:4C:64:7F:31:42:BA:64:17:8A:86:81 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C5C Signing time: Sat 14 Nov 2026 18:38:28 +0000 Manifest this update: Sat 14 Nov 2026 18:38:27 +0000 Manifest next update: Sat 21 Nov 2026 18:38:27 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: E2mXeBaHBFiHqvDNyy6EGsta7QTmUc92y+o5r3qOdaE=) 2: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: j2CWh2M1Zubhu80nB8Ke1i2o0Pn0OuTxS4mQsSIpork=) 3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: Mz6TVl8d97rl0T5Sgcb40knK3DLPqLH5f8e3CzLuT7A=) 4: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: EtWPVe46Z6YD/Gko0Vzg+XYe7+MF4xJzoOYHJ+2jqX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Nov 14 18:38:27 2026 GMT Not After : Nov 21 18:38:27 2026 GMT Subject: CN=6af8aaa4-78f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:22:3b:a2:ca:ed:d6:a5:f4:a3:e7:31:8d: 2d:ae:b2:87:0e:7d:33:25:26:11:22:2c:26:4a:79: 26:27:6c:29:0f:f5:40:29:64:83:bc:5a:ad:47:38: 45:9a:d9:59:63:5f:3e:21:35:5b:e7:29:c4:70:a1: e7:25:9c:bc:e9:84:d4:cf:31:22:84:87:93:ce:c6: de:3c:6d:95:e0:37:4e:d6:23:22:70:1c:d1:e2:1c: e9:e9:7c:ea:e8:2a:92:36:e3:92:2c:e0:62:86:b2: 6f:50:84:60:fb:a8:36:44:15:ed:62:a3:01:e8:ca: 2b:66:27:5c:1a:91:3d:fd:56:46:28:8d:43:78:aa: c3:fb:90:e9:73:f3:8e:16:80:5e:87:1a:7a:da:eb: d0:d9:93:3e:89:d5:42:2d:f0:b4:a4:75:9d:a3:0c: 88:91:4d:44:de:fc:e0:5a:43:48:7f:3f:fd:99:24: b5:7c:74:6a:a5:48:60:d8:57:45:e9:7a:02:c9:85: 1e:c0:fa:63:7a:78:5d:97:4a:a8:8a:06:78:bd:5c: 08:38:19:d0:a9:c4:4c:7a:9b:35:0b:0c:ac:b7:64: 03:09:1d:e2:d1:bf:e9:0c:7b:ca:4d:f2:d2:f6:2d: 13:03:94:50:b9:00:b8:a3:9b:6a:ff:fd:19:8d:77: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:3D:2F:BD:A4:F4:F5:55:4C:64:7F:31:42:BA:64:17:8A:86:81 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:45:b2:d9:3c:07:23:f4:a3:f5:60:e1:05:63:c3:a3:a1:bc: a2:d4:ee:f2:99:e4:8b:f5:8f:87:00:6f:1e:50:b0:58:71:65: 00:d5:a6:48:14:28:03:ec:f4:e6:5b:3b:bb:8e:47:76:04:e0: 8f:58:98:07:5c:bd:93:37:88:fa:30:31:8c:62:2a:0d:b9:47: 46:ba:e8:29:e9:13:45:be:be:3b:57:c0:27:8d:35:48:87:46: 36:e7:f8:6b:41:e2:c0:5c:7c:73:86:b0:0e:7c:f6:9f:ca:40: 00:3e:48:a0:62:30:c8:66:58:67:60:6b:19:1f:da:a2:c7:7f: e4:4c:b4:af:cc:5c:8c:f1:80:96:38:b2:14:60:29:c1:91:bf: d7:4a:9a:fc:d7:83:85:af:a9:91:d5:74:6d:d1:e3:f8:9f:80: 32:22:78:ca:73:3d:3b:85:60:92:da:6c:11:09:19:6d:8f:db: 2e:44:a0:b6:9d:a0:9e:17:fe:32:ad:92:63:37:56:eb:d4:78: 4f:72:c9:b9:1f:43:6d:0a:8c:50:78:dd:e3:97:2c:65:6f:43: fe:01:60:6e:ba:89:c5:27:5e:dc:23:2a:33:de:f6:d7:10:2c: f4:67:7c:d5:c5:21:e2:5b:f7:c0:94:71:74:8c:4a:6f:c7:98: eb:58:32:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYxMTE0MTgzODI3WhcNMjYxMTIxMTgzODI3WjAYMRYwFAYD VQQDEw02YWY4YWFhNC03OGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJEiO6LK7dal9KPnMY0trrKHDn0zJSYRIiwmSnkmJ2wpD/VAKWSDvFqtRzhF mtlZY18+ITVb5ynEcKHnJZy86YTUzzEihIeTzsbePG2V4DdO1iMicBzR4hzp6Xzq 6CqSNuOSLOBihrJvUIRg+6g2RBXtYqMB6MorZidcGpE9/VZGKI1DeKrD+5Dpc/OO FoBehxp62uvQ2ZM+idVCLfC0pHWdowyIkU1E3vzgWkNIfz/9mSS1fHRqpUhg2FdF 6XoCyYUewPpjenhdl0qoigZ4vVwIOBnQqcRMeps1Cwyst2QDCR3i0b/pDHvKTfLS 9i0TA5RQuQC4o5tq//0ZjXekewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASAPS+9 pPT1VUxkfzFCumQXioaBMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAEWy2TwHI/Sj9WDhBWPDo6G8otTu8pnki/WPhwBvHlCwWHFlANWmSBQoA+z0 5ls7u45HdgTgj1iYB1y9kzeI+jAxjGIqDblHRrroKekTRb6+O1fAJ401SIdGNuf4 a0HiwFx8c4awDnz2n8pAAD5IoGIwyGZYZ2BrGR/aosd/5Ey0r8xcjPGAljiyFGAp wZG/10qa/NeDha+pkdV0bdHj+J+AMiJ4ynM9O4VgktpsEQkZbY/bLkSgtp2gnhf+ Mq2SYzdW69R4T3LJuR9DbQqMUHjd45csZW9D/gFgbrqJxSde3CMqM9721xAs9Gd8 1cUh4lv3wJRxdIxKb8eY61gyHg== -----END CERTIFICATE-----Generated at Sat Nov 14 21:44:52 2026 by rpki-client