$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json) Hash identifier: bCKZw6bsoRtxAnc8c0bGixaMOxDage5+ljZ0I3RAleg= Subject key identifier: A7:51:14:9F:BB:A9:EC:01:60:96:D4:B4:3C:5A:74:87:99:EB:47:58 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft Manifest number: 0B77 Signing time: Sat 14 Nov 2026 19:06:16 +0000 Manifest this update: Sat 14 Nov 2026 19:06:16 +0000 Manifest next update: Sat 21 Nov 2026 19:06:16 +0000 Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: UUqwktQE5FPOFiXrsHryT4tjU6BHCJIwmFRpCVHXt54=) 2: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=) 3: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=) 4: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=) 5: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=) 6: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=) 7: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=) 8: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=) 9: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=) 10: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=) 11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=) 12: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Nov 14 19:06:16 2026 GMT Not After : Nov 21 19:06:16 2026 GMT Subject: CN=6af8b128-9664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:60:6e:01:46:04:8c:20:3e:7e:c8:f3:b9: 6f:21:dc:01:8f:b0:4c:00:28:ae:b8:19:b9:62:13: ce:fe:3d:55:f9:81:ba:ef:94:4a:45:2c:7b:e5:1e: e6:a6:ba:0a:10:6f:70:f4:40:b8:ac:d2:7e:b8:f7: c1:00:69:e3:c8:27:54:b5:71:3a:ca:03:26:ee:fa: ea:5c:f4:8b:65:b5:06:3f:7d:c2:98:d5:90:62:f0: 65:18:53:80:68:5d:b3:2d:39:b9:a7:45:55:3d:52: 67:25:11:30:9a:c3:f3:06:b1:84:e4:45:a9:3e:f2: 47:01:61:32:f9:38:b8:a0:57:d4:c3:6b:c6:2c:f8: de:8c:fd:4e:e3:99:23:7b:1f:0e:03:6f:f3:66:40: 18:1e:f3:6e:49:51:81:f1:f9:8e:94:b6:c4:63:56: ee:00:42:7e:39:94:2e:72:a4:3b:f5:50:0f:c3:38: 17:08:44:01:c8:b3:4d:5a:c9:8a:89:ea:a3:54:33: e0:79:cf:05:96:15:94:8b:3c:e8:31:2f:36:4f:6f: 1d:3a:3e:f5:43:f6:34:27:3f:24:2a:2c:42:df:3b: ff:af:f7:bb:66:53:39:93:19:13:61:28:b8:3f:78: 32:fb:ad:7d:78:6e:fc:d3:c2:7d:33:d1:5c:f3:16: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:51:14:9F:BB:A9:EC:01:60:96:D4:B4:3C:5A:74:87:99:EB:47:58 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:de:e9:61:0e:5e:d2:c1:90:d6:65:af:c9:a1:93:c5:3a: 7d:fb:9f:88:bd:f5:ea:b6:ff:5b:91:3e:7b:e5:ad:73:3b:a7: 60:33:6d:e0:51:d8:7a:c1:2f:d4:df:05:15:3b:4d:c9:69:f1: b0:56:01:50:c7:50:2b:35:dc:69:bd:32:76:44:dd:23:f4:aa: b6:29:5d:49:96:f5:5d:a6:67:23:7c:5c:40:ff:70:9b:8a:36: 07:7d:93:27:dc:f8:bf:f1:96:bf:6d:6b:25:29:e1:76:ad:eb: df:2e:03:40:3f:c5:00:6b:4d:77:64:40:70:00:83:00:cf:50: 2e:f7:5a:f4:3c:7b:a4:e4:3c:2c:2d:41:1d:97:dc:10:ab:ad: cb:b8:bc:43:93:6d:e5:59:24:c3:23:3b:ca:fc:0f:d3:8c:4d: ee:87:bd:c2:4e:27:18:58:f7:95:6b:b0:fe:3b:0f:63:37:0e: e2:04:b7:b7:8e:39:49:eb:2e:af:36:67:b3:1b:19:0b:e4:61: 55:b8:30:05:a0:33:ce:62:b0:06:0c:a3:07:7b:d3:9b:da:78: f3:30:20:e7:d2:95:2f:6e:ba:b5:32:80:ed:8d:08:80:5d:1e: 74:97:70:de:b6:1d:a8:c6:84:21:60:a2:1a:c2:fd:2b:36:da: 75:32:45:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjYxMTE0MTkwNjE2WhcNMjYxMTIxMTkwNjE2WjAYMRYwFAYD VQQDEw02YWY4YjEyOC05NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWlgbgFGBIwgPn7I87lvIdwBj7BMACiuuBm5YhPO/j1V+YG675RKRSx75R7m proKEG9w9EC4rNJ+uPfBAGnjyCdUtXE6ygMm7vrqXPSLZbUGP33CmNWQYvBlGFOA aF2zLTm5p0VVPVJnJREwmsPzBrGE5EWpPvJHAWEy+Ti4oFfUw2vGLPjejP1O45kj ex8OA2/zZkAYHvNuSVGB8fmOlLbEY1buAEJ+OZQucqQ79VAPwzgXCEQByLNNWsmK ieqjVDPgec8FlhWUizzoMS82T28dOj71Q/Y0Jz8kKixC3zv/r/e7ZlM5kxkTYSi4 P3gy+619eG7808J9M9Fc8xYX/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdRFJ+7 qewBYJbUtDxadIeZ60dYMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX MC0zWWdHRHRUWkdEeS1HR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTLe6WEOXtLBkNZlr8mhk8U6ffufiL316rb/W5E+e+WtczunYDNt4FHYesEv 1N8FFTtNyWnxsFYBUMdQKzXcab0ydkTdI/SqtildSZb1XaZnI3xcQP9wm4o2B32T J9z4v/GWv21rJSnhdq3r3y4DQD/FAGtNd2RAcACDAM9QLvda9Dx7pOQ8LC1BHZfc EKuty7i8Q5Nt5VkkwyM7yvwP04xN7oe9wk4nGFj3lWuw/jsPYzcO4gS3t445Sesu rzZnsxsZC+RhVbgwBaAzzmKwBgyjB3vTm9p48zAg59KVL266tTKA7Y0IgF0edJdw 3rYdqMaEIWCiGsL9KzbadTJF4Q== -----END CERTIFICATE-----Generated at Sun Nov 15 11:24:59 2026 by rpki-client