$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: LkcyRGXJuZxvQgDqyJidEeLeVpX0J4J+p+rrdIqnVRs= Subject key identifier: 64:2A:75:DC:E9:DC:95:09:BB:DA:F7:57:96:12:4D:4A:BC:33:43:8D Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02F1 Signing time: Fri 13 Nov 2026 01:00:32 +0000 Manifest this update: Fri 13 Nov 2026 01:00:31 +0000 Manifest next update: Fri 20 Nov 2026 01:00:31 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: vTnKI/boMmLvIOLeKQlb5M2kKzzor6G5P6MCv/4eQ+4=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Nov 13 01:00:31 2026 GMT Not After : Nov 20 01:00:31 2026 GMT Subject: CN=6af66130-524d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:e4:4e:aa:a2:69:05:41:0f:4e:1f:a9:40: b4:cb:48:ff:4b:1f:99:f4:1a:a9:91:de:c7:d7:b8: 0c:bc:90:e9:9b:79:5e:a7:1f:5b:2c:62:d1:cd:d2: 4b:ce:70:56:0a:04:ca:c7:7e:2f:07:35:ea:92:15: b8:d1:0d:6c:d2:66:93:ae:4c:bf:43:57:07:ec:08: 5b:bf:2f:d1:a9:e4:ac:db:00:17:be:bc:1d:e5:9d: 1f:8e:09:bd:28:86:cc:e5:b4:24:f5:b9:67:e7:c5: ae:19:2b:99:b1:ca:81:5d:60:20:9a:f1:06:22:6c: 69:42:41:29:ae:18:cc:d9:9f:02:70:57:15:8b:ab: da:f4:2f:8f:a5:65:a2:9e:55:54:b7:ee:f5:95:80: 97:02:94:eb:4f:77:7b:62:ea:21:ca:ec:57:e3:77: df:3e:04:c8:b4:8b:ea:97:56:28:fd:cb:28:81:91: f1:fb:26:49:dd:5b:ac:5e:42:2e:6c:a1:32:6f:bd: d4:8a:46:59:5c:13:23:8d:ac:04:52:fd:a8:8d:3a: df:a9:3e:97:12:a0:55:82:42:03:1a:35:b5:86:10: 3f:c2:be:4c:eb:c2:57:88:0a:3c:c8:0a:cf:3c:0e: 8e:7a:6d:b6:1d:c6:fb:dd:d7:4c:c1:64:d8:23:a7: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2A:75:DC:E9:DC:95:09:BB:DA:F7:57:96:12:4D:4A:BC:33:43:8D X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:87:0c:48:4e:5d:79:2c:e3:a4:78:e9:1c:62:cb:f6:ef:55: dd:ef:9a:8a:c7:31:49:76:63:63:0b:54:1c:25:99:91:41:62: 62:4b:c7:1d:90:db:e9:f9:99:4d:87:22:2a:b0:83:69:00:23: 25:cd:8b:2c:22:d9:fc:10:ea:35:2f:13:c8:3d:1b:b2:cb:30: 14:22:24:47:70:6b:24:dd:7b:0f:7c:41:4d:f3:89:7d:cd:8f: 8e:2a:87:6f:3e:60:a3:a6:61:cd:da:d9:14:0f:55:40:87:be: 72:ad:7c:fc:66:3d:ff:f3:33:21:7f:b7:db:f7:47:34:19:7e: c1:3b:e7:82:68:83:ae:6c:82:c4:d7:e8:97:24:f7:9a:49:96: 83:9b:47:4f:41:2e:93:68:c0:c3:88:25:a2:51:fa:54:c9:ce: 28:42:27:55:f8:f3:b2:99:ac:a4:05:94:ec:ce:fe:18:9d:f3: 64:89:8a:68:c3:b7:c1:62:fa:e5:21:ff:ab:48:d4:39:7f:cc: 3c:4b:e5:26:2f:75:1d:22:d6:23:45:27:45:f4:ea:9c:e3:7b: e5:cd:05:f7:5b:76:7b:bb:1d:9b:c9:74:5a:df:dc:57:ea:31: 8b:6e:57:ef:9d:9f:73:13:84:6a:28:b1:36:ad:46:52:a0:c0: 43:de:03:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYxMTEzMDEwMDMxWhcNMjYxMTIwMDEwMDMxWjAYMRYwFAYD VQQDEw02YWY2NjEzMC01MjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02TkTqqiaQVBD04fqUC0y0j/Sx+Z9Bqpkd7H17gMvJDpm3lepx9bLGLRzdJL znBWCgTKx34vBzXqkhW40Q1s0maTrky/Q1cH7Ahbvy/RqeSs2wAXvrwd5Z0fjgm9 KIbM5bQk9bln58WuGSuZscqBXWAgmvEGImxpQkEprhjM2Z8CcFcVi6va9C+PpWWi nlVUt+71lYCXApTrT3d7YuohyuxX43ffPgTItIvql1Yo/csogZHx+yZJ3VusXkIu bKEyb73UikZZXBMjjawEUv2ojTrfqT6XEqBVgkIDGjW1hhA/wr5M68JXiAo8yArP PA6Oem22Hcb73ddMwWTYI6eftwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQqddzp 3JUJu9r3V5YSTUq8M0ONMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmIcMSE5deSzjpHjpHGLL9u9V3e+aiscxSXZjYwtUHCWZkUFiYkvHHZDb6fmZ TYciKrCDaQAjJc2LLCLZ/BDqNS8TyD0bssswFCIkR3BrJN17D3xBTfOJfc2PjiqH bz5go6ZhzdrZFA9VQIe+cq18/GY9//MzIX+32/dHNBl+wTvngmiDrmyCxNfolyT3 mkmWg5tHT0Euk2jAw4glolH6VMnOKEInVfjzspmspAWU7M7+GJ3zZImKaMO3wWL6 5SH/q0jUOX/MPEvlJi91HSLWI0UnRfTqnON75c0F91t2e7sdm8l0Wt/cV+oxi25X 752fcxOEaiixNq1GUqDAQ94Diw== -----END CERTIFICATE-----Generated at Sat Nov 14 21:38:15 2026 by rpki-client