$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: eSPmyZWxiuigzkSEm7ZOZjnP/ILKNg669kINapW19c8= Subject key identifier: 15:16:92:E5:AB:AC:88:38:78:17:A3:F2:4D:CB:26:0F:8D:3A:4F:41 Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0B23 Signing time: Sat 14 Nov 2026 19:37:36 +0000 Manifest this update: Sat 14 Nov 2026 19:37:36 +0000 Manifest next update: Sat 21 Nov 2026 19:37:36 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: gJGdzWkMBUd80ZhV+bd9Zf8oJBysx78KQyeEYCtwJDE=) 2: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: UYsgqox2fzflsFIBDLVHp1rByaNLlDesY1QVLH7+qnA=) 3: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: RR4rdf2taLYmcQbOkPT7zfr9pRXmz4C8omvX7wvgBPk=) 4: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: 2u2CoWA4mvCzzwwQckJ2Ewq8Pbbfnxj6tsHwplkzisk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Nov 14 19:37:36 2026 GMT Not After : Nov 21 19:37:36 2026 GMT Subject: CN=6af8b880-8253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:20:d4:ef:2c:58:88:3b:9a:2f:74:51:9a: 54:d5:a4:6d:a0:c5:6d:35:d9:40:7a:8c:b1:36:a1: 21:58:87:41:e9:3b:f0:8c:66:24:fb:16:83:0e:23: 13:bc:d2:b3:6e:6c:35:9e:fc:dd:78:f3:42:7e:0e: 54:c1:d1:5f:71:b3:d2:e7:22:9e:ea:f2:fa:98:d8: 8a:9b:9e:d6:00:61:85:58:c1:14:ec:31:4c:30:2a: a7:dc:b7:dd:2c:7e:ff:c6:ae:7c:fa:cd:e7:60:92: 3f:7b:68:54:91:54:38:17:76:60:41:9b:8f:4e:43: 04:8f:d7:74:60:97:95:97:cd:ae:a3:e5:3a:df:0f: 1a:6a:21:8b:bf:36:76:44:20:ad:a2:7b:eb:5b:bb: bd:3a:60:5d:07:9a:40:d9:3e:38:4d:c5:c6:db:45: 30:73:f4:64:f9:5b:93:ea:ab:76:a1:79:d3:d8:e9: a4:51:50:d4:61:5c:21:c0:95:17:82:fa:1f:cd:4f: 5d:2f:10:97:01:ce:c6:b0:1d:78:3a:e1:63:f0:6c: a7:c0:78:13:e1:f3:58:a6:3b:dc:57:1a:f0:ad:63: e9:70:2f:13:2d:81:e8:71:1f:81:bf:3d:60:49:6f: 89:a3:81:74:d8:85:65:fb:78:86:1a:dc:36:d1:a7: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:16:92:E5:AB:AC:88:38:78:17:A3:F2:4D:CB:26:0F:8D:3A:4F:41 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e3:b5:7e:9e:ec:b9:ed:1e:d2:19:72:b4:69:c7:72:9c:58: dc:41:a5:67:bf:81:4f:f2:73:81:a3:52:27:dd:8e:32:1d:eb: 94:8e:7b:c4:4b:31:01:86:a0:4c:56:fe:f2:9a:32:9b:1b:56: a5:0e:1b:95:38:1e:34:28:7f:ec:99:63:f2:83:c1:47:0a:33: 4c:3c:17:ef:27:94:8c:09:f1:51:9e:7b:dc:39:b1:3e:d2:e4: a7:b5:12:e1:fd:84:d2:04:d7:48:58:80:7c:08:b9:ba:f9:e8: a7:b2:b0:4b:b0:ef:7a:cb:35:35:6f:ef:80:d0:8c:ff:89:bb: 7f:d4:05:00:d6:07:12:e3:b8:5c:d0:0a:06:06:df:ed:57:f1: 09:0b:de:1d:45:44:8c:30:62:42:4f:ad:57:0e:08:c3:82:70: 32:d5:50:a3:b9:73:0e:51:93:65:06:e6:19:89:01:d2:3d:69: e2:42:4e:a5:59:34:c0:e0:40:00:64:a7:71:f8:cd:fb:37:30: 45:3d:51:e8:48:fd:88:0c:74:3f:80:7a:5d:d8:c9:a3:f9:b3: 9a:97:a6:06:4e:7b:a5:23:32:48:17:f8:41:5b:9a:db:be:fb: 83:c8:e7:d1:9a:5f:07:8b:ca:e6:be:22:8b:44:ca:66:71:f9: 2a:7e:d1:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYxMTE0MTkzNzM2WhcNMjYxMTIxMTkzNzM2WjAYMRYwFAYD VQQDEw02YWY4Yjg4MC04MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Qg1O8sWIg7mi90UZpU1aRtoMVtNdlAeoyxNqEhWIdB6TvwjGYk+xaDDiMT vNKzbmw1nvzdePNCfg5UwdFfcbPS5yKe6vL6mNiKm57WAGGFWMEU7DFMMCqn3Lfd LH7/xq58+s3nYJI/e2hUkVQ4F3ZgQZuPTkMEj9d0YJeVl82uo+U63w8aaiGLvzZ2 RCCtonvrW7u9OmBdB5pA2T44TcXG20Uwc/Rk+VuT6qt2oXnT2OmkUVDUYVwhwJUX gvofzU9dLxCXAc7GsB14OuFj8GynwHgT4fNYpjvcVxrwrWPpcC8TLYHocR+Bvz1g SW+Jo4F02IVl+3iGGtw20aeV8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUWkuWr rIg4eBej8k3LJg+NOk9BMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAguO1fp7sue0e0hlytGnHcpxY3EGlZ7+BT/JzgaNSJ92OMh3rlI57xEsxAYag TFb+8poymxtWpQ4blTgeNCh/7Jlj8oPBRwozTDwX7yeUjAnxUZ573DmxPtLkp7US 4f2E0gTXSFiAfAi5uvnop7KwS7Dvess1NW/vgNCM/4m7f9QFANYHEuO4XNAKBgbf 7VfxCQveHUVEjDBiQk+tVw4Iw4JwMtVQo7lzDlGTZQbmGYkB0j1p4kJOpVk0wOBA AGSncfjN+zcwRT1R6Ej9iAx0P4B6XdjJo/mzmpemBk57pSMySBf4QVua2777g8jn 0ZpfB4vK5r4ii0TKZnH5Kn7RMA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:30:13 2026 by rpki-client