$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: 6s8sefRMJRtaDYko+Aje0m0c7hwEoWquwnj57c5tX8I= Subject key identifier: 91:0A:E4:C1:2B:54:6F:CD:1E:B9:1A:24:50:7B:8E:25:6E:AB:D2:B1 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 086A Signing time: Sat 14 Nov 2026 20:47:46 +0000 Manifest this update: Sat 14 Nov 2026 20:47:45 +0000 Manifest next update: Sat 21 Nov 2026 20:47:45 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: ao68esy3teQ6tqw2ccg2hgL49i/GzSYlMnc2LvNPt70=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=) 3: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: EoKuYumOB06CPMGY3MST022RtHbswAdFcoVeBMF2lCI=) 4: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=) 5: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Nov 14 20:47:45 2026 GMT Not After : Nov 21 20:47:45 2026 GMT Subject: CN=6af8c8f1-7970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:b1:39:15:9c:3a:77:4d:77:cb:79:e3:ea: c0:05:7a:42:f7:61:db:4c:33:64:0c:36:d2:b8:00: 32:01:a2:5f:14:47:60:58:d7:a7:a0:7a:5c:10:b9: ff:95:73:d3:4f:c0:5a:0e:b3:55:ea:34:95:4e:8c: 96:7d:b2:4b:75:2d:6a:83:f2:b6:3b:ac:d9:ba:f4: 13:3b:64:bb:5d:11:73:a2:16:61:f3:2f:c4:b8:5c: fe:c4:d9:ff:12:45:98:68:c6:77:a0:8f:2c:02:f8: 28:e7:ce:e3:37:90:f4:d3:eb:46:54:83:92:e3:97: 31:4b:ec:ca:24:7c:54:2b:09:f2:0d:9e:c5:e4:2f: 85:89:2b:53:1b:6b:58:94:60:2d:70:2b:f0:93:36: a1:00:9c:ac:0c:7b:38:2b:b5:79:35:8c:2b:30:c5: e3:1b:8e:fd:45:59:40:55:76:a2:a0:d3:81:14:05: fa:27:1b:f2:f9:d5:32:47:08:32:1b:85:6f:7a:51: d3:56:85:43:4a:26:46:70:8c:8e:2a:44:fd:a2:da: 76:23:41:35:e2:10:eb:25:e6:9a:bc:47:2b:ff:ca: b7:ff:b3:39:62:fc:35:c5:8c:f2:8d:8d:15:3d:1c: 38:50:cf:57:b0:ef:f2:84:80:86:79:51:27:82:5b: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:E4:C1:2B:54:6F:CD:1E:B9:1A:24:50:7B:8E:25:6E:AB:D2:B1 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:77:40:eb:c8:de:a5:13:dc:8f:10:d5:43:fd:aa:44:63:e9: eb:77:98:ad:13:fd:0e:9a:a0:95:5a:dc:9e:44:b4:bb:02:89: 09:f7:66:db:48:a0:57:75:79:11:d8:ca:dc:be:dd:c4:a7:19: 09:44:59:2e:9a:eb:8e:58:10:ba:fc:ad:69:ce:7f:e3:17:1f: 1e:65:04:3f:04:cd:94:df:ed:ee:7d:94:13:57:85:06:d2:a0: 68:09:21:d9:b3:17:17:af:d4:17:a5:be:2d:54:59:37:c3:65: b2:2e:ed:c3:3e:c4:e0:a3:5e:2f:fc:ad:95:ab:0a:93:81:be: 08:de:98:10:2d:c3:a2:63:c6:96:5c:b7:65:00:df:b0:5a:24: 24:01:26:83:8f:78:1d:c0:48:78:b2:ca:1d:ac:29:bb:3c:0d: da:73:3e:b3:bb:45:c6:77:f7:3b:2b:7b:df:73:d8:7a:f2:ce: 9d:a2:76:e5:be:1f:f7:34:5e:27:f8:0c:a4:d7:e8:2c:ff:85: 5c:5c:1e:8c:9a:df:3b:c9:82:d9:d2:78:8f:9c:30:2e:76:79: b6:2b:37:3d:9f:5e:15:b3:c8:52:ac:13:c6:be:57:58:95:f3: 3d:cd:2b:bc:71:a8:0c:c7:57:66:eb:ed:b1:91:ae:9b:87:8b: 09:dd:66:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjYxMTE0MjA0NzQ1WhcNMjYxMTIxMjA0NzQ1WjAYMRYwFAYD VQQDEw02YWY4YzhmMS03OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruGxORWcOndNd8t54+rABXpC92HbTDNkDDbSuAAyAaJfFEdgWNenoHpcELn/ lXPTT8BaDrNV6jSVToyWfbJLdS1qg/K2O6zZuvQTO2S7XRFzohZh8y/EuFz+xNn/ EkWYaMZ3oI8sAvgo587jN5D00+tGVIOS45cxS+zKJHxUKwnyDZ7F5C+FiStTG2tY lGAtcCvwkzahAJysDHs4K7V5NYwrMMXjG479RVlAVXaioNOBFAX6Jxvy+dUyRwgy G4VvelHTVoVDSiZGcIyOKkT9otp2I0E14hDrJeaavEcr/8q3/7M5Yvw1xYzyjY0V PRw4UM9XsO/yhICGeVEnglseXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEK5MEr VG/NHrkaJFB7jiVuq9KxMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS3dA68jepRPcjxDVQ/2qRGPp63eYrRP9DpqglVrcnkS0uwKJCfdm20igV3V5 EdjK3L7dxKcZCURZLprrjlgQuvytac5/4xcfHmUEPwTNlN/t7n2UE1eFBtKgaAkh 2bMXF6/UF6W+LVRZN8Nlsi7twz7E4KNeL/ytlasKk4G+CN6YEC3DomPGlly3ZQDf sFokJAEmg494HcBIeLLKHawpuzwN2nM+s7tFxnf3Oyt733PYevLOnaJ25b4f9zRe J/gMpNfoLP+FXFwejJrfO8mC2dJ4j5wwLnZ5tis3PZ9eFbPIUqwTxr5XWJXzPc0r vHGoDMdXZuvtsZGum4eLCd1m3w== -----END CERTIFICATE-----Generated at Sun Nov 15 13:35:59 2026 by rpki-client