$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: HqxWoRNr+QgFwC0KF3JURvFMlPnhug5PetGTRPzeqXo= Subject key identifier: F9:C9:8B:E6:6D:EF:26:9E:D2:0A:C5:63:EB:BA:89:C4:01:BD:B4:3F Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 0122 Signing time: Sun 15 Nov 2026 06:26:50 +0000 Manifest this update: Sun 15 Nov 2026 06:26:49 +0000 Manifest next update: Sun 22 Nov 2026 06:26:49 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: 0IB//6e0Qmu4gGvZlpAroecD1B2fmYMw1ChZUUxzaiU=) 2: D0EFCFE4CFB311F1AB5B34BD1266CEF9.roa (hash: Xv4A2UHbkPKc0Tu8lLIROPKzU1pVUfhJIBd858ONNJM=) 3: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: 2bIHfNgf3SYxeEBRZLT2l0XeWicAsKTg167W+KCEKQc=) 4: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 5: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 6: E12AF83A718411F19EC4F12F8DA30FBC.roa (hash: /06lVIawu5ZFpT6lyrtNFRn6XgMDzR3BtSSDKpiMdlw=) 7: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 8: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 9: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Nov 15 06:26:49 2026 GMT Not After : Nov 22 06:26:49 2026 GMT Subject: CN=6af950a9-e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:8d:94:f2:3f:f6:2c:a9:5c:be:32:8b:75: c5:80:fd:b4:dd:9c:5b:34:5b:e0:da:77:32:54:53: d1:08:66:f8:1f:56:c6:23:77:eb:58:4e:53:10:9e: f0:87:9e:ef:ff:8a:cf:58:5e:30:43:ec:b9:3c:68: cf:60:97:ba:c1:da:64:06:1a:13:5d:c7:47:91:44: 16:6c:87:50:64:45:7e:ba:77:99:2d:3e:b9:1d:dd: 90:63:78:0f:44:ea:0d:b7:d1:6e:49:02:4d:2e:19: 40:80:65:73:7e:59:34:9a:df:1b:3b:d7:07:a9:38: d3:cc:72:93:c9:06:0a:b7:8a:5f:be:dc:af:2d:ab: 14:9e:9b:c4:57:d5:65:d8:45:6b:90:15:f3:9f:a0: 83:eb:ec:df:c1:6a:1a:a8:7e:e4:e5:2f:92:ec:91: 25:15:3f:73:6b:e3:69:d5:b9:e8:4c:e7:db:e0:e5: 82:bc:ce:fa:54:89:77:3b:01:d4:db:5b:f8:f7:98: 08:70:e6:a6:00:2a:b0:0c:20:c0:e9:56:39:2b:50: 0f:44:3b:9c:b2:3c:08:b2:d7:8a:83:0b:1f:bd:d4: 06:d1:4d:6b:2d:3b:20:d0:52:4a:cf:6c:45:c5:86: df:08:d7:3d:61:69:91:a5:53:38:9a:a5:b1:7b:9e: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C9:8B:E6:6D:EF:26:9E:D2:0A:C5:63:EB:BA:89:C4:01:BD:B4:3F X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:96:23:15:f1:95:fd:ba:db:3c:09:a3:c5:e9:b2:ce:ae:2f: 39:61:8a:c8:e1:4e:03:2b:70:55:91:a0:b8:56:23:46:fc:40: f8:64:fa:ac:c4:b9:fa:df:fa:4b:c4:45:19:97:24:b6:b2:e9: a6:8b:d4:48:03:1e:d5:0b:cc:c9:24:4d:bd:50:32:1a:63:18: 1c:e5:f4:cd:e5:54:96:65:5b:00:9d:a0:c4:d3:5b:01:dd:81: 01:c5:89:ec:b4:df:a5:5f:b9:4b:69:50:f3:43:48:b1:01:49: 42:21:91:f0:d4:ba:2b:3c:be:85:4f:03:58:55:f9:54:28:40: 15:3f:70:65:2d:12:35:6d:f1:a6:d7:5f:9c:c3:97:5f:1a:47: 26:18:0f:29:4c:e3:16:ba:0e:d3:0f:d1:65:cc:b6:2c:bb:1b: fd:28:d4:4e:b7:f7:35:cf:b3:7b:b0:a5:b1:f1:7a:12:87:b3: f2:2f:fb:22:fd:cc:2d:c6:a3:0f:e4:6a:33:78:24:3a:22:90: b2:3a:85:d3:2a:22:92:ea:cf:b2:e3:73:f4:df:44:08:7d:57: e7:ef:7a:01:53:87:ef:e4:ba:d1:3b:ba:f6:0c:b0:11:b8:c8: 7a:5b:f4:51:43:b1:e6:c5:14:e8:92:81:e4:80:44:2b:05:20: b4:f8:f7:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYxMTE1MDYyNjQ5WhcNMjYxMTIyMDYyNjQ5WjAYMRYwFAYD VQQDEw02YWY5NTBhOS1lMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ViNlPI/9iypXL4yi3XFgP203ZxbNFvg2ncyVFPRCGb4H1bGI3frWE5TEJ7w h57v/4rPWF4wQ+y5PGjPYJe6wdpkBhoTXcdHkUQWbIdQZEV+uneZLT65Hd2QY3gP ROoNt9FuSQJNLhlAgGVzflk0mt8bO9cHqTjTzHKTyQYKt4pfvtyvLasUnpvEV9Vl 2EVrkBXzn6CD6+zfwWoaqH7k5S+S7JElFT9za+Np1bnoTOfb4OWCvM76VIl3OwHU 21v495gIcOamACqwDCDA6VY5K1APRDucsjwIsteKgwsfvdQG0U1rLTsg0FJKz2xF xYbfCNc9YWmRpVM4mqWxe55anQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnJi+Zt 7yae0grFY+u6icQBvbQ/MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZYjFfGV/brbPAmjxemyzq4vOWGKyOFOAytwVZGguFYjRvxA+GT6rMS5+t/6 S8RFGZcktrLppovUSAMe1QvMySRNvVAyGmMYHOX0zeVUlmVbAJ2gxNNbAd2BAcWJ 7LTfpV+5S2lQ80NIsQFJQiGR8NS6Kzy+hU8DWFX5VChAFT9wZS0SNW3xptdfnMOX XxpHJhgPKUzjFroO0w/RZcy2LLsb/SjUTrf3Nc+ze7ClsfF6Eoez8i/7Iv3MLcaj D+RqM3gkOiKQsjqF0yoikurPsuNz9N9ECH1X5+96AVOH7+S60Tu69gywEbjIelv0 UUOx5sUU6JKB5IBEKwUgtPj3cA== -----END CERTIFICATE-----Generated at Sun Nov 15 14:33:18 2026 by rpki-client