$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json) Hash identifier: osmO37NuChAfHBcGWtryQDUaI9jr6Wd5nhDkOhT1XlM= Subject key identifier: 35:4B:99:5C:AE:C4:5B:C6:9D:8C:8A:D7:F3:1A:9D:A8:12:09:85:C4 Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft Manifest number: 039B Signing time: Sun 15 Nov 2026 00:28:35 +0000 Manifest this update: Sun 15 Nov 2026 00:28:35 +0000 Manifest next update: Sun 22 Nov 2026 00:28:35 +0000 Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: W1r1MvCn/HVM+76pT5J8TTR1/ILSvJLqYzWxXPicUxo=) 2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: u53J9g3LWBwbE+O/MQz1kfSyecBSZsgL9Pb+QNj8MgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Validity Not Before: Nov 15 00:28:35 2026 GMT Not After : Nov 22 00:28:35 2026 GMT Subject: CN=6af8fcb3-7704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:42:f0:e8:e8:64:b6:ff:8a:b3:0a:7a:ed: 1a:13:bd:ba:be:eb:3c:b1:aa:f0:53:6f:10:6a:9a: e7:68:7a:d7:3c:e9:09:c3:78:20:a9:cf:cc:2f:25: 66:bd:9d:1e:6c:24:8d:06:f0:e2:39:ea:f9:0f:ba: 1e:7b:82:1f:d5:f1:9e:32:f2:1b:c2:c9:70:70:b9: 17:8f:f2:a4:90:59:85:57:52:69:5f:66:9b:b6:9e: 0d:df:a2:71:82:0c:27:a3:44:eb:62:16:a0:05:62: 5b:0d:e9:7a:03:61:06:97:03:5b:0d:2f:7e:df:2c: f9:84:04:82:99:66:78:b6:45:7c:1d:1f:45:1c:3a: 7e:c6:2a:eb:45:b3:53:2f:3b:b2:a4:63:40:74:bc: 0f:66:a0:97:cb:82:49:2e:0c:26:70:b3:e0:2b:75: 8a:10:42:c2:6d:c7:75:18:d3:82:bd:e3:84:ee:a2: 80:da:30:09:bd:67:c5:d1:8e:bd:c5:5c:19:98:f9: ef:9c:32:0b:c0:2a:de:c6:ac:ae:ea:58:35:e8:bc: 0b:05:48:6f:a7:8d:9c:de:7d:22:e2:12:8d:ba:2e: 2e:43:51:f5:ce:43:2f:81:11:03:9e:60:bd:95:7c: b9:ea:8b:31:1c:34:e2:81:c2:f7:c7:45:68:de:be: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:99:5C:AE:C4:5B:C6:9D:8C:8A:D7:F3:1A:9D:A8:12:09:85:C4 X509v3 Authority Key Identifier: keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:64:6c:b7:4f:29:ef:20:cb:31:c1:1f:f2:3c:17:f6:51:3e: ad:3d:d4:1d:c5:5b:b3:6f:5d:af:da:81:95:f4:d7:e9:ab:24: 98:d9:bd:ff:91:5a:7e:5a:19:ac:97:f0:be:5a:92:8d:fb:af: ac:bd:59:cb:bd:10:9b:ed:9e:79:cf:c1:61:55:27:5f:fd:32: 6b:ba:f2:f2:a5:9f:5c:1f:74:53:27:48:31:57:07:85:74:ab: 28:94:49:cf:76:41:7d:fb:94:b9:69:54:1e:1f:64:4a:49:76: 8d:34:3b:17:e9:86:9a:68:88:2a:53:9d:57:3e:2f:7f:68:bf: 05:9b:47:83:16:32:2b:f1:75:00:d3:cf:16:f8:ad:f7:a3:f7: 3e:f9:6c:5f:eb:65:f6:8c:d3:26:48:42:51:0f:27:88:85:92: 88:b6:b9:0d:48:de:62:fd:ad:f1:c7:c1:38:16:0e:ab:be:af: 90:0b:5d:c6:9f:a4:48:31:71:01:ca:1f:98:92:1c:1a:bd:e9: a0:47:38:25:a8:8d:6f:3d:ed:08:a5:7e:cd:c1:f3:32:22:b8: 44:9e:f3:04:0e:b0:5a:cf:29:16:bf:37:a1:48:14:cc:b8:fe: 03:b6:1e:25:26:b7:41:c5:94:a7:4d:8f:9c:e2:07:b5:78:8a: 2a:25:b8:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxQTUxMTAvBgNVBAUTKDNGMjkwOUMzRjUzMkMwMEIwMjU3QjkyNTZDNzZFQkEz MTREQ0QwMEYwHhcNMjYxMTE1MDAyODM1WhcNMjYxMTIyMDAyODM1WjAYMRYwFAYD VQQDEw02YWY4ZmNiMy03NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug1C8OjoZLb/irMKeu0aE726vus8sarwU28QaprnaHrXPOkJw3ggqc/MLyVm vZ0ebCSNBvDiOer5D7oee4If1fGeMvIbwslwcLkXj/KkkFmFV1JpX2abtp4N36Jx ggwno0TrYhagBWJbDel6A2EGlwNbDS9+3yz5hASCmWZ4tkV8HR9FHDp+xirrRbNT LzuypGNAdLwPZqCXy4JJLgwmcLPgK3WKEELCbcd1GNOCveOE7qKA2jAJvWfF0Y69 xVwZmPnvnDILwCrexqyu6lg16LwLBUhvp42c3n0i4hKNui4uQ1H1zkMvgREDnmC9 lXy56osxHDTigcL3x0Vo3r7xuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVLmVyu xFvGnYyK1/ManagSCYXEMB8GA1UdIwQYMBaAFD8pCcP1MsALAle5JWx266MU3NAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzFBNS8zQkZBMjgzNDBB ODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdBc0NWN2tsYkhicm94VGMw QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5a0p3X1V5d0FzQ1Y3a2xiSGJyb3hUYzBBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzFBNS8zQkZBMjgzNDBBODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdB c0NWN2tsYkhicm94VGMwQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2Rst08p7yDLMcEf8jwX9lE+rT3UHcVbs29dr9qBlfTX6askmNm9/5FafloZ rJfwvlqSjfuvrL1Zy70Qm+2eec/BYVUnX/0ya7ry8qWfXB90UydIMVcHhXSrKJRJ z3ZBffuUuWlUHh9kSkl2jTQ7F+mGmmiIKlOdVz4vf2i/BZtHgxYyK/F1ANPPFvit 96P3PvlsX+tl9ozTJkhCUQ8niIWSiLa5DUjeYv2t8cfBOBYOq76vkAtdxp+kSDFx AcofmJIcGr3poEc4JaiNbz3tCKV+zcHzMiK4RJ7zBA6wWs8pFr83oUgUzLj+A7Ye JSa3QcWUp02PnOIHtXiKKiW4dg== -----END CERTIFICATE-----Generated at Sun Nov 15 22:08:53 2026 by rpki-client