$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: L1spL0qwCXB3Bs3zlD85PC/czIqVHsDgKL8Mj8w83JQ= Subject key identifier: 2F:52:4A:D2:86:B1:A6:59:FD:9B:B9:B5:8E:DA:7D:34:90:73:80:82 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 0444 Signing time: Sat 14 Nov 2026 23:58:26 +0000 Manifest this update: Sat 14 Nov 2026 23:58:26 +0000 Manifest next update: Sat 21 Nov 2026 23:58:26 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: TXBHpFkSKCLe5u9Ihb0TJpjsNTyMVxeucYmeM1iXB3s=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: wsJdECc/OtCwDQU28nmXN87GasCfDkw3SzIHKp9PJ8A=) 3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: O//1/dnt6OgAnJRkW/BPT1PDA56bdB9HC+ER8FMec+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Nov 14 23:58:26 2026 GMT Not After : Nov 21 23:58:26 2026 GMT Subject: CN=6af8f5a2-f606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:03:46:44:b4:6f:e0:db:c8:38:f7:60:3b: 73:0b:eb:99:18:fd:bd:4f:3d:99:20:6c:d8:23:7c: 0e:b9:6d:9d:72:45:6c:cc:dd:c6:8c:65:ce:75:08: a5:cd:f0:ed:99:f9:27:11:fb:e8:45:3e:f9:c2:2c: 98:ee:23:8c:85:c9:e2:bc:15:64:a0:86:8d:c8:63: 44:fe:a8:a5:1c:af:db:37:e5:6b:45:22:fd:30:76: f8:d0:18:42:93:59:c4:3c:da:16:51:1b:c3:c3:ea: cd:63:19:3d:f6:ea:78:47:4c:f4:b9:c5:5c:9b:12: 19:33:6d:36:34:3f:71:96:b8:9f:ff:be:f9:b2:73: 83:52:38:33:f9:de:8f:ef:d2:dc:ac:d9:50:18:b6: 7a:0a:81:f1:b1:4f:a1:37:f5:b6:17:e8:82:39:59: 8f:3e:0f:da:8a:0d:0b:ac:75:05:77:26:dd:90:10: 67:60:73:8d:7c:b8:0d:98:20:ce:16:a5:f5:17:f2: 97:e4:b0:1a:f0:32:8f:e2:62:b2:94:c8:86:13:8b: b5:13:bc:ad:66:c3:c4:50:1b:a3:d7:f8:b8:03:b2: 1c:9f:74:86:f4:bf:59:c3:2a:21:a1:5b:94:3f:86: 01:e9:44:b1:38:a8:ce:a6:b9:3c:d9:e5:7a:ec:93: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:4A:D2:86:B1:A6:59:FD:9B:B9:B5:8E:DA:7D:34:90:73:80:82 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5a:44:cc:f9:64:54:16:fe:54:d8:76:ef:0d:3a:2a:3d:c1: 4a:b2:a0:99:2f:d3:1c:3d:86:03:c0:2d:ed:4e:3a:59:66:98: b6:ae:1d:d8:c4:b6:8d:c2:49:d2:67:5f:73:ad:ed:be:03:6e: d7:bc:26:03:fa:54:e1:b1:b8:9e:6e:fe:01:3d:c0:29:70:03: 40:f0:ed:87:d8:cc:cb:0e:ab:2f:c4:b5:b0:36:7e:91:69:0e: 79:61:5f:17:39:05:e5:59:ae:6d:04:cb:d5:ec:ca:27:f5:8f: 8f:b8:99:7c:d1:4f:01:70:cd:6e:6a:49:04:c5:96:7e:4f:43: 22:a4:b3:d8:70:f5:fa:7a:4f:79:e0:70:4c:36:16:03:69:76: bd:06:b5:f7:9a:58:e0:58:f3:3c:dd:84:ad:e8:0b:bb:fe:ee: 94:ab:c0:47:20:96:11:96:28:84:14:a3:72:9a:d6:0e:af:f1: c5:fd:66:eb:7e:09:15:ce:1e:03:02:6c:f1:47:7b:49:c1:42: 11:30:dc:1b:7c:cb:4a:df:c9:07:b0:e2:39:cc:b5:d4:45:1b: 48:f8:d6:b0:7c:f2:7c:e1:7f:7b:dc:2b:4f:e0:fb:0a:31:f3: db:02:a8:ff:39:09:fc:e5:3b:ca:b1:17:0a:fd:29:2e:55:7a: 1f:e2:e7:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYxMTE0MjM1ODI2WhcNMjYxMTIxMjM1ODI2WjAYMRYwFAYD VQQDEw02YWY4ZjVhMi1mNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx78DRkS0b+DbyDj3YDtzC+uZGP29Tz2ZIGzYI3wOuW2dckVszN3GjGXOdQil zfDtmfknEfvoRT75wiyY7iOMhcnivBVkoIaNyGNE/qilHK/bN+VrRSL9MHb40BhC k1nEPNoWURvDw+rNYxk99up4R0z0ucVcmxIZM202ND9xlrif/775snODUjgz+d6P 79LcrNlQGLZ6CoHxsU+hN/W2F+iCOVmPPg/aig0LrHUFdybdkBBnYHONfLgNmCDO FqX1F/KX5LAa8DKP4mKylMiGE4u1E7ytZsPEUBuj1/i4A7Icn3SG9L9ZwyohoVuU P4YB6USxOKjOprk82eV67JNMfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9SStKG saZZ/Zu5tY7afTSQc4CCMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXVpEzPlkVBb+VNh27w06Kj3BSrKgmS/THD2GA8At7U46WWaYtq4d2MS2jcJJ 0mdfc63tvgNu17wmA/pU4bG4nm7+AT3AKXADQPDth9jMyw6rL8S1sDZ+kWkOeWFf FzkF5VmubQTL1ezKJ/WPj7iZfNFPAXDNbmpJBMWWfk9DIqSz2HD1+npPeeBwTDYW A2l2vQa195pY4FjzPN2EregLu/7ulKvARyCWEZYohBSjcprWDq/xxf1m634JFc4e AwJs8Ud7ScFCETDcG3zLSt/JB7DiOcy11EUbSPjWsHzyfOF/e9wrT+D7CjHz2wKo /zkJ/OU7yrEXCv0pLlV6H+LnDQ== -----END CERTIFICATE-----Generated at Sun Nov 15 22:40:44 2026 by rpki-client