$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: bSA2SfVTHui92BQHnq/TLHq2eoTH5kyUUDJpV8bfwqU= Subject key identifier: 1D:E8:14:A2:5A:E7:7D:07:CE:68:D4:F2:F0:03:AB:02:0B:89:D8:A2 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 09AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 0998 Signing time: Sat 14 Nov 2026 19:53:40 +0000 Manifest this update: Sat 14 Nov 2026 19:53:39 +0000 Manifest next update: Sat 21 Nov 2026 19:53:39 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: C8BL60MLe8V32h7iN0EGUbNVlY98ZLI2kTO2R0Ec+HU=) 2: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=) 3: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2474 (0x9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Nov 14 19:53:39 2026 GMT Not After : Nov 21 19:53:39 2026 GMT Subject: CN=6af8bc43-7ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9d:52:aa:38:95:3e:5d:51:71:c4:11:43:2b: 7b:a1:70:cc:99:a1:f1:8b:2a:2c:72:8d:43:36:24: 3c:ab:3a:0e:64:82:3e:c8:01:84:8e:59:e6:d2:b0: 75:e6:44:72:d0:ef:6c:6d:6c:cc:1f:1c:27:48:f2: b8:79:75:8b:18:85:ba:19:fb:9e:0b:62:cb:f8:9c: 0e:79:5e:14:54:73:25:3f:1d:a4:2a:cc:d0:a5:43: 8b:2e:c6:fd:7d:d1:b3:61:f8:c6:ce:62:0a:79:77: 97:3d:fc:86:60:25:a3:ec:20:5a:6f:ab:eb:cb:12: 61:91:83:8c:d2:ce:d9:37:90:b3:12:cd:c8:60:67: eb:80:52:2a:b9:55:94:1d:46:63:60:bd:b9:bb:cd: 37:84:a7:7b:2a:1a:6e:a3:7d:09:41:28:00:1c:cb: 96:84:6e:6d:5c:70:fd:2d:7b:9e:53:cc:27:71:6e: 3b:4a:b9:13:31:43:dd:33:c7:07:f7:c0:b2:3e:ba: e9:79:85:5f:63:e6:c4:36:fb:e4:72:5f:b2:da:2a: 45:45:57:6d:d1:49:9b:f7:4e:0d:c1:6a:d9:b6:e5: e8:66:3f:fb:01:c1:a3:49:e2:b3:5d:20:4c:08:c5: 8d:84:18:c2:3c:d3:ef:87:97:86:dd:5f:90:8f:b3: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E8:14:A2:5A:E7:7D:07:CE:68:D4:F2:F0:03:AB:02:0B:89:D8:A2 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a8:f5:a5:85:bb:b8:89:12:c5:9d:48:9d:8c:1d:51:3a:01: 27:13:01:9f:80:99:d0:d4:82:1e:80:e3:de:52:bd:66:0a:2f: 36:2d:66:8b:7d:d0:27:97:9a:95:e7:8d:9a:0d:c9:26:01:58: e6:da:eb:2f:9d:b7:46:7e:95:11:42:dc:45:f8:ae:39:92:4e: ac:ea:9e:ff:dd:1e:f6:72:20:71:ce:16:5f:98:ed:5a:6f:be: b5:53:fc:82:cd:61:07:d9:f8:eb:ac:ca:c5:44:aa:96:ce:d3: e3:40:81:29:5a:88:6a:98:8c:e0:71:be:04:93:82:1e:d6:22: f5:d6:ae:0e:7a:fe:a8:31:c2:69:9e:de:c4:c2:ee:62:8f:ae: 1a:42:ae:27:ec:d0:2d:c3:14:cb:b9:5d:49:ae:10:20:11:25: 80:90:4f:84:34:3d:49:e9:1a:35:dd:3e:01:8a:6d:e9:f7:71: 37:64:bd:29:77:38:22:fa:e7:be:7d:f4:75:47:f1:95:57:b0: bc:b7:b5:85:5e:d2:92:74:36:53:30:eb:06:09:82:e6:3a:35: 08:7b:46:82:13:6d:64:00:bf:8b:12:dd:c3:0b:75:ee:9e:30: cd:e4:6a:4f:03:93:a2:7c:ce:ef:1a:4a:76:64:67:c4:32:0c: 55:e3:bf:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjYxMTE0MTk1MzM5WhcNMjYxMTIxMTk1MzM5WjAYMRYwFAYD VQQDEw02YWY4YmM0My03YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8J1SqjiVPl1RccQRQyt7oXDMmaHxiyosco1DNiQ8qzoOZII+yAGEjlnm0rB1 5kRy0O9sbWzMHxwnSPK4eXWLGIW6GfueC2LL+JwOeV4UVHMlPx2kKszQpUOLLsb9 fdGzYfjGzmIKeXeXPfyGYCWj7CBab6vryxJhkYOM0s7ZN5CzEs3IYGfrgFIquVWU HUZjYL25u803hKd7Khpuo30JQSgAHMuWhG5tXHD9LXueU8wncW47SrkTMUPdM8cH 98CyPrrpeYVfY+bENvvkcl+y2ipFRVdt0Umb904NwWrZtuXoZj/7AcGjSeKzXSBM CMWNhBjCPNPvh5eG3V+Qj7Mp+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3oFKJa 530HzmjU8vADqwILidiiMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKj1pYW7uIkSxZ1InYwdUToBJxMBn4CZ0NSCHoDj3lK9ZgovNi1mi33QJ5ea leeNmg3JJgFY5trrL523Rn6VEULcRfiuOZJOrOqe/90e9nIgcc4WX5jtWm++tVP8 gs1hB9n466zKxUSqls7T40CBKVqIapiM4HG+BJOCHtYi9dauDnr+qDHCaZ7exMLu Yo+uGkKuJ+zQLcMUy7ldSa4QIBElgJBPhDQ9SekaNd0+AYpt6fdxN2S9KXc4Ivrn vn30dUfxlVewvLe1hV7SknQ2UzDrBgmC5jo1CHtGghNtZAC/ixLdwwt17p4wzeRq TwOTonzO7xpKdmRnxDIMVeO/Tw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:32:04 2026 by rpki-client