$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: sOcOxDatNp6TskiFg14dIcdeoMUoKe1ILarba8ImyzQ= Subject key identifier: 4E:E8:2E:70:68:CA:87:E3:33:1B:C5:A8:0D:B3:98:9E:2B:CE:9D:A7 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0C1D Signing time: Sat 14 Nov 2026 18:56:09 +0000 Manifest this update: Sat 14 Nov 2026 18:56:09 +0000 Manifest next update: Sat 21 Nov 2026 18:56:09 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: m99Q65gxa0jV/ucGfbueO416Z3IuBN0vttnM8JyJ2/c=) 2: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: MsOEzeKC3wQWVNmqxzfHjUDeGAqxXFvTMRBM7uQm94k=) 3: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=) 4: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: rs5DeAiXJUjkmk87XhQXy9eavqmolXmi42NXBuxe1D8=) 5: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: Ds4m30JNX7VD0YAwlidc5p6ZJQmsCh5FAge2wZckos0=) 6: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: x0qoqY3+7NzxsMKW0qJM37L/2r2psmq486dVg8v0Nmc=) 7: B66F0C58817111EFB121970CC4F9AE02.roa (hash: ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Nov 14 18:56:09 2026 GMT Not After : Nov 21 18:56:09 2026 GMT Subject: CN=6af8aec9-66e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:99:a0:5d:64:43:7f:cf:f7:85:ac:94:24: 52:ca:c2:14:56:50:5c:10:8b:e7:4a:71:01:ef:b6: 3d:9a:b4:04:59:ab:37:ad:52:f5:89:70:82:23:ad: 31:15:47:ba:99:bf:06:00:9d:81:e8:7a:39:d4:fa: 97:16:bc:e6:4d:60:5e:8a:59:9f:bb:e9:c6:13:19: d4:98:fa:c0:fc:e8:56:06:89:4a:80:34:62:48:3e: 99:12:53:fd:4f:3c:68:f7:a2:76:03:98:e1:66:b4: 1e:38:59:8f:78:e8:d3:fe:b4:13:1c:88:20:ca:5b: 49:77:88:5f:77:ab:e3:2f:52:b0:be:d2:ff:b7:e7: 46:9e:dd:fa:1f:cd:ff:52:04:f2:47:bb:53:d0:56: f3:4e:bc:7f:cd:c8:8b:88:4b:fb:a3:a4:bf:bd:81: 17:bd:33:90:e3:b9:90:af:37:4f:f1:bb:48:e5:c8: 40:08:c3:53:e6:89:e3:58:3a:ce:4c:0d:0a:4f:86: 28:a1:2a:5b:3f:8c:ed:d1:05:73:6a:7b:e9:09:63: 8a:e0:28:b8:bc:9d:a1:6a:8a:62:bf:68:96:b1:25: 8b:4a:96:be:d5:4d:6a:40:9a:6b:c5:14:17:8d:03: e7:fc:2e:65:10:c8:7b:8a:bd:ea:eb:ff:18:8e:e7: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:2E:70:68:CA:87:E3:33:1B:C5:A8:0D:B3:98:9E:2B:CE:9D:A7 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:45:03:f9:1a:15:8b:2a:af:3c:bb:80:ba:cc:cb:82:95:8f: 73:e8:99:14:24:be:15:7f:9e:0a:08:f5:ae:3b:24:bf:69:fd: e7:95:ce:4d:aa:42:20:46:dd:aa:30:e0:d0:a8:87:cb:c3:19: 9a:06:19:4d:32:37:bc:31:16:74:69:68:fc:77:03:08:41:7c: f7:aa:66:a0:cc:37:7d:d3:2d:67:36:ad:37:85:c5:f3:08:4e: 5e:bd:73:ab:7b:90:8c:8c:5e:34:64:c9:35:6c:97:09:51:c1: 66:c4:65:cf:2d:e2:4b:9d:d7:bb:28:3b:8f:e4:1d:57:26:ac: 37:1a:df:f9:dd:a0:1c:f0:d8:bb:43:51:6c:c8:cc:7b:39:d1: 41:f4:c6:35:be:24:a5:d5:22:d7:c2:6e:da:5a:34:82:05:6b: 5e:81:b9:ef:0a:1f:5f:6c:a8:03:be:bb:97:c3:3b:77:35:cb: 10:a1:5e:08:28:db:c5:74:24:44:9f:a8:63:b8:49:21:19:43: 01:43:40:84:e5:ee:32:84:5e:8d:9c:86:62:6f:de:75:03:54: bb:79:e8:39:e3:4d:2a:ab:c6:8f:58:cf:14:23:85:43:25:0e: 8d:95:45:64:0b:0b:3f:c7:06:19:4e:de:40:5e:c0:32:ac:6f: f5:b6:c6:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYxMTE0MTg1NjA5WhcNMjYxMTIxMTg1NjA5WjAYMRYwFAYD VQQDEw02YWY4YWVjOS02NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPGZoF1kQ3/P94WslCRSysIUVlBcEIvnSnEB77Y9mrQEWas3rVL1iXCCI60x FUe6mb8GAJ2B6Ho51PqXFrzmTWBeilmfu+nGExnUmPrA/OhWBolKgDRiSD6ZElP9 Tzxo96J2A5jhZrQeOFmPeOjT/rQTHIggyltJd4hfd6vjL1KwvtL/t+dGnt36H83/ UgTyR7tT0FbzTrx/zciLiEv7o6S/vYEXvTOQ47mQrzdP8btI5chACMNT5onjWDrO TA0KT4YooSpbP4zt0QVzanvpCWOK4Ci4vJ2haopiv2iWsSWLSpa+1U1qQJprxRQX jQPn/C5lEMh7ir3q6/8YjucWgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7oLnBo yofjMxvFqA2zmJ4rzp2nMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkUD+RoViyqvPLuAuszLgpWPc+iZFCS+FX+eCgj1rjskv2n955XOTapCIEbd qjDg0KiHy8MZmgYZTTI3vDEWdGlo/HcDCEF896pmoMw3fdMtZzatN4XF8whOXr1z q3uQjIxeNGTJNWyXCVHBZsRlzy3iS53Xuyg7j+QdVyasNxrf+d2gHPDYu0NRbMjM eznRQfTGNb4kpdUi18Ju2lo0ggVrXoG57wofX2yoA767l8M7dzXLEKFeCCjbxXQk RJ+oY7hJIRlDAUNAhOXuMoRejZyGYm/edQNUu3noOeNNKqvGj1jPFCOFQyUOjZVF ZAsLP8cGGU7eQF7AMqxv9bbGDQ== -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:31 2026 by rpki-client