$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: Lt60wJXWQUe4WBbVsTBlpbAINim07pQ0ZPtwJZ8RTKY= Subject key identifier: D3:1F:91:B5:C5:8A:80:E8:92:EE:D7:BC:70:B0:AD:04:4F:57:3F:AF Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0884 Signing time: Sat 14 Nov 2026 20:48:27 +0000 Manifest this update: Sat 14 Nov 2026 20:48:27 +0000 Manifest next update: Sat 21 Nov 2026 20:48:27 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: tj0wY4a4TVuWili30el+uWT/TKyNWYtX78FjrHjU2V4=) 2: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=) 3: 7C76080E08D611EE82522448C4F9AE02.roa (hash: R42a1XTZV+JT3ULvAq3AmV+IeV1nfk19HZc62DZHUKY=) 4: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=) 5: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Nov 14 20:48:27 2026 GMT Not After : Nov 21 20:48:27 2026 GMT Subject: CN=6af8c91b-3b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:c9:36:01:fc:52:3e:c4:89:44:f3:47:5b: 5c:2b:a2:7a:0e:8f:27:38:79:51:1a:69:b3:55:37: 92:d0:f3:62:bb:2b:08:86:af:7b:42:b7:9a:f5:a2: e5:d7:52:d5:42:33:50:8d:b0:db:44:14:d8:c3:cf: a8:32:4e:72:e4:26:5a:1f:ef:89:0f:bd:d2:7d:24: 2f:bd:21:0d:2a:86:29:66:1d:97:42:07:73:21:4e: cd:41:e8:96:67:8c:51:12:3f:9e:d2:c6:6c:f6:b9: fb:36:14:c2:29:fe:b2:af:77:e2:c1:e5:8d:e1:a1: 07:a6:ea:ef:28:05:12:bb:1c:f9:27:74:07:6b:70: ae:e7:09:14:2f:df:a1:e6:52:18:fd:b9:9e:68:dc: ad:53:65:dc:80:cf:cc:30:a9:fb:d8:af:aa:38:c3: e2:c2:34:6e:f4:1a:8a:71:10:41:da:0c:76:ec:47: 3d:55:36:bf:9d:69:a3:6e:d4:f9:9d:49:bc:4b:fa: b0:b7:ed:41:6d:b7:d8:54:17:43:d9:80:b9:66:b9: 7a:3f:f4:5b:5c:c6:35:b4:71:5b:08:57:6a:09:ad: 37:af:0b:eb:a9:d2:3b:4f:93:eb:a1:44:f4:a7:be: c0:29:58:46:46:03:2f:6b:ea:e1:3a:a4:ca:20:68: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1F:91:B5:C5:8A:80:E8:92:EE:D7:BC:70:B0:AD:04:4F:57:3F:AF X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:27:9e:d1:22:e9:b1:7e:0b:59:e1:90:60:08:e7:1e:e4: 33:48:9d:1f:aa:c0:e8:38:cd:79:95:39:cb:cb:4a:eb:5e:2d: 38:d4:c7:36:e6:eb:ad:80:15:3a:d4:f2:8f:37:f9:8b:ae:e7: f2:d9:7f:ad:6d:77:c6:b1:7b:37:93:67:80:75:07:cc:a7:dc: 77:dd:50:e5:11:b2:a4:be:40:9c:01:03:c1:de:30:b9:ef:46: f2:e7:68:8b:b4:51:48:7c:9c:80:1c:b4:0f:e3:6b:67:34:a3: 20:c3:f3:17:ce:ac:bd:59:c9:dc:58:98:f1:a1:54:5c:a3:24: fd:50:5c:00:da:dc:2c:68:64:f1:d5:5f:44:60:be:61:f1:d6: cd:fb:78:6e:3d:1b:76:4e:70:99:a1:2f:02:e7:88:45:e7:82: c9:24:fe:91:a4:f5:2d:d8:3d:a0:3b:8e:27:f6:f2:da:29:75: e1:37:02:2e:a1:2e:a7:89:71:8b:9b:ca:71:be:b2:97:a3:5f: eb:0b:fd:b4:ac:9f:26:aa:fb:ce:2f:f9:29:d5:28:2f:83:62: 76:10:3f:c0:f5:23:25:9a:a6:cd:ed:05:25:76:f4:13:38:34: 0b:ab:57:53:71:21:75:b0:ef:20:7d:2b:c1:43:b4:3e:cb:a9: 83:ec:71:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYxMTE0MjA0ODI3WhcNMjYxMTIxMjA0ODI3WjAYMRYwFAYD VQQDEw02YWY4YzkxYi0zYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58PJNgH8Uj7EiUTzR1tcK6J6Do8nOHlRGmmzVTeS0PNiuysIhq97Qrea9aLl 11LVQjNQjbDbRBTYw8+oMk5y5CZaH++JD73SfSQvvSENKoYpZh2XQgdzIU7NQeiW Z4xREj+e0sZs9rn7NhTCKf6yr3fiweWN4aEHpurvKAUSuxz5J3QHa3Cu5wkUL9+h 5lIY/bmeaNytU2XcgM/MMKn72K+qOMPiwjRu9BqKcRBB2gx27Ec9VTa/nWmjbtT5 nUm8S/qwt+1BbbfYVBdD2YC5Zrl6P/RbXMY1tHFbCFdqCa03rwvrqdI7T5ProUT0 p77AKVhGRgMva+rhOqTKIGiF5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMfkbXF ioDoku7XvHCwrQRPVz+vMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGjwnntEi6bF+C1nhkGAI5x7kM0idH6rA6DjNeZU5y8tK614tONTHNubrrYAV OtTyjzf5i67n8tl/rW13xrF7N5NngHUHzKfcd91Q5RGypL5AnAEDwd4wue9G8udo i7RRSHycgBy0D+NrZzSjIMPzF86svVnJ3FiY8aFUXKMk/VBcANrcLGhk8dVfRGC+ YfHWzft4bj0bdk5wmaEvAueIReeCyST+kaT1Ldg9oDuOJ/by2il14TcCLqEup4lx i5vKcb6yl6Nf6wv9tKyfJqr7zi/5KdUoL4NidhA/wPUjJZqmze0FJXb0Ezg0C6tX U3EhdbDvIH0rwUO0Psupg+xxnw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:45 2026 by rpki-client