$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: +qnVMe0Yyi8n1ABdKbrpZT4dB8xV6nOdNEXULkBMtJU= Subject key identifier: 37:F8:F3:8D:66:D3:84:60:21:33:19:59:89:7E:87:40:46:B2:47:D0 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 01BE Signing time: Sun 15 Nov 2026 04:08:38 +0000 Manifest this update: Sun 15 Nov 2026 04:08:37 +0000 Manifest next update: Sun 22 Nov 2026 04:08:37 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: 0FOCVwNwf56CaeaDwM+RcBbYxR97wWTyRlwh841I7Jg=) 2: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: qVzuwc8GJJLc1M+VCPFsl93UzK3diqKkMLNcNf9VMmc=) 3: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: 7D2o9V8B+THFZdf2H4zmO2ZxT2tryY6dqnAujMyrW8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Nov 15 04:08:37 2026 GMT Not After : Nov 22 04:08:37 2026 GMT Subject: CN=6af93046-62b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:c4:53:54:55:6b:5e:84:42:e8:ae:56:f9: 46:4d:61:cf:e1:44:1f:44:7e:e3:a6:9a:44:7b:c6: ae:62:95:08:f2:d1:77:54:d9:fe:69:02:c3:7e:fd: 50:a2:f5:9b:8e:83:e0:d9:a4:6f:39:66:f8:81:b1: be:af:b6:b5:b7:55:97:5e:2c:46:8b:77:36:c6:12: e4:be:2c:03:e1:e0:91:0a:55:5c:68:d2:09:13:47: 1c:0e:29:fc:27:f1:12:0f:70:21:1b:4f:b9:13:3c: 59:ec:61:0f:f2:4f:11:ee:bc:d4:56:a7:6d:d0:22: 10:62:e8:c6:df:ee:e0:ae:3a:cf:cf:64:6e:32:57: 9f:b5:29:8e:09:2e:68:dc:f0:3a:00:f6:31:8e:ca: 58:6c:cf:03:4b:86:2e:3f:2a:af:91:40:ff:1d:98: 85:45:bc:a5:54:17:20:55:3f:a0:4c:5a:d4:e8:aa: a2:37:49:21:78:f7:f2:0c:bf:02:89:6a:23:84:29: 5e:9c:52:79:bf:58:d7:7a:48:89:53:d1:17:97:f2: d5:64:c5:72:08:02:eb:6a:b4:0a:97:32:65:8b:ae: 22:7d:bd:49:71:ba:1e:3f:31:dd:fc:ce:fa:41:cf: 2f:ff:a7:12:0e:b4:e7:ab:9b:fd:ab:eb:ab:dc:87: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:F3:8D:66:D3:84:60:21:33:19:59:89:7E:87:40:46:B2:47:D0 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:65:bd:91:29:03:2f:59:e6:60:96:8f:a0:f5:bf:28:c6: 8f:df:57:76:75:12:38:72:42:10:3b:df:63:df:85:10:df:54: 8f:91:d9:ca:38:8c:c5:3c:a6:c6:13:f4:d9:98:d7:01:63:90: 6a:0d:53:74:8a:ea:17:c6:a9:92:90:0f:d5:71:65:a2:25:e7: df:86:b6:52:24:68:51:4c:2a:38:4c:fe:be:b4:5d:ed:38:3b: 21:8e:6c:36:ce:60:99:e5:bc:cd:bc:2d:5b:bd:6b:3a:d9:b1: 87:a9:11:69:90:61:96:ed:d1:cb:02:ae:89:b6:16:22:53:91: 62:06:f2:1b:a2:e0:0a:8c:d2:22:d8:3f:a4:55:c9:df:b2:cf: 2b:dc:c1:48:7d:2e:94:00:82:c8:ce:56:59:5a:83:f4:c7:5e: 73:d1:59:8f:df:34:4e:2d:e9:49:d9:67:02:87:12:40:98:81: 5a:df:21:e4:01:72:bc:03:80:41:20:88:da:33:e8:de:a6:f6: 28:b7:0e:2c:38:9d:3e:d0:98:23:5a:b1:4c:83:af:ee:53:53: b4:32:94:d3:06:38:fe:4d:74:6e:05:b6:7d:0b:4a:63:51:b4: 31:0f:3a:87:5f:03:49:0b:9d:39:40:21:7d:d2:18:78:a8:34: ce:7d:0c:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYxMTE1MDQwODM3WhcNMjYxMTIyMDQwODM3WjAYMRYwFAYD VQQDEw02YWY5MzA0Ni02MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApI/EU1RVa16EQuiuVvlGTWHP4UQfRH7jpppEe8auYpUI8tF3VNn+aQLDfv1Q ovWbjoPg2aRvOWb4gbG+r7a1t1WXXixGi3c2xhLkviwD4eCRClVcaNIJE0ccDin8 J/ESD3AhG0+5EzxZ7GEP8k8R7rzUVqdt0CIQYujG3+7grjrPz2RuMleftSmOCS5o 3PA6APYxjspYbM8DS4YuPyqvkUD/HZiFRbylVBcgVT+gTFrU6KqiN0khePfyDL8C iWojhClenFJ5v1jXekiJU9EXl/LVZMVyCALrarQKlzJli64ifb1JcboePzHd/M76 Qc8v/6cSDrTnq5v9q+ur3IfL2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDf4841m 04RgITMZWYl+h0BGskfQMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdxlvZEpAy9Z5mCWj6D1vyjGj99XdnUSOHJCEDvfY9+FEN9Uj5HZyjiMxTym xhP02ZjXAWOQag1TdIrqF8apkpAP1XFloiXn34a2UiRoUUwqOEz+vrRd7Tg7IY5s Ns5gmeW8zbwtW71rOtmxh6kRaZBhlu3RywKuibYWIlORYgbyG6LgCozSItg/pFXJ 37LPK9zBSH0ulACCyM5WWVqD9Mdec9FZj980Ti3pSdlnAocSQJiBWt8h5AFyvAOA QSCI2jPo3qb2KLcOLDidPtCYI1qxTIOv7lNTtDKU0wY4/k10bgW2fQtKY1G0MQ86 h18DSQudOUAhfdIYeKg0zn0MEQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:49:56 2026 by rpki-client