$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: zF7P6QdfvYz1kQoONKUH0TQ9NjkKmRLuBDxDCgMEv58= Subject key identifier: 8D:9F:3E:04:34:49:A8:56:90:9C:3F:A6:2D:EA:13:BB:3C:68:96:F2 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02E1 Signing time: Sun 15 Nov 2026 01:20:24 +0000 Manifest this update: Sun 15 Nov 2026 01:20:24 +0000 Manifest next update: Sun 22 Nov 2026 01:20:24 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: 7kAwn2p7+e17hcf4h+c64mhCpiAxgz47sHq4I7k/9lg=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Nov 15 01:20:24 2026 GMT Not After : Nov 22 01:20:24 2026 GMT Subject: CN=6af908d8-94a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:39:f1:ac:ea:6e:85:ae:f2:21:62:0a:c2: 53:c0:65:80:84:83:e9:d1:aa:7b:95:4f:75:97:a1: 6b:ed:93:68:94:9b:27:ce:53:f6:0a:71:79:2d:ae: 6f:89:9e:5f:77:86:25:8e:94:51:62:36:f4:de:82: 2d:d6:12:70:66:c0:c1:73:f4:6f:15:21:8e:f1:66: 89:a9:55:84:56:0e:d0:49:27:8a:b1:8c:8c:a4:a2: 39:a7:bd:aa:a4:03:9d:dd:74:74:30:05:2b:6b:7f: 85:37:93:79:98:b4:8b:f4:de:1d:d3:b4:05:0b:93: 3b:37:04:dd:b6:da:51:f8:0e:e3:27:fb:76:09:69: 2f:ff:0f:ec:9d:d5:bc:43:57:05:43:11:b9:45:95: 92:67:2d:a0:0d:ca:6e:4e:34:50:0c:53:5a:6f:04: 0e:91:11:66:44:01:68:93:0a:40:27:8e:67:33:b7: 90:1f:f1:83:ca:2b:d5:6f:48:9d:01:50:26:42:56: 1e:8f:c8:e1:cd:05:df:cc:21:06:a4:10:08:10:57: 01:47:fb:51:c8:3c:a5:a2:5b:da:e6:b6:09:98:2d: 33:f9:b0:dc:1e:17:15:e9:7a:fd:9a:f6:bb:32:08: fe:1f:c6:d1:c7:56:44:7e:51:9b:54:1b:57:61:06: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:3E:04:34:49:A8:56:90:9C:3F:A6:2D:EA:13:BB:3C:68:96:F2 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:20:99:9c:79:db:42:0d:00:f7:6a:37:01:80:84:31:32:40: ac:2b:6b:e1:15:aa:22:77:3b:f6:83:c9:29:02:47:cd:2a:b7: 12:52:05:bd:0f:02:f1:af:14:87:06:be:29:85:4a:61:a3:28: 2e:03:9a:66:6d:a3:85:f1:1e:7a:3e:0d:b2:3b:e0:c2:3a:cd: ff:2a:54:16:d9:37:08:23:47:1d:63:47:38:3c:6d:0f:70:67: 9d:ae:b6:5e:65:e1:d8:6d:ac:64:53:14:01:ca:d9:97:f9:92: 11:8d:60:33:a9:6d:76:d5:7f:d8:a7:27:5e:4e:de:e0:29:6e: 65:84:06:19:db:7b:34:dc:0a:84:b0:f9:ef:ce:9e:7e:fe:45: 0c:1e:9a:e1:5e:24:72:53:6b:e3:49:4b:ec:05:e0:4f:90:6c: 0f:e0:08:8e:70:b2:04:c0:75:79:e4:bf:74:f9:cc:f3:ec:ae: 24:68:d5:a3:55:4e:3a:c3:21:35:68:19:a1:73:da:cb:83:1b: cc:37:7e:7a:cf:2e:32:0b:df:57:15:06:38:db:23:b0:3f:79: 76:a6:bb:bd:57:2e:8d:20:89:bb:55:08:54:1d:b6:c6:a9:b8: da:56:74:1f:3c:d2:46:79:de:36:67:58:77:b9:34:54:53:11: 8b:12:11:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYxMTE1MDEyMDI0WhcNMjYxMTIyMDEyMDI0WjAYMRYwFAYD VQQDEw02YWY5MDhkOC05NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGs58azqboWu8iFiCsJTwGWAhIPp0ap7lU91l6Fr7ZNolJsnzlP2CnF5La5v iZ5fd4YljpRRYjb03oIt1hJwZsDBc/RvFSGO8WaJqVWEVg7QSSeKsYyMpKI5p72q pAOd3XR0MAUra3+FN5N5mLSL9N4d07QFC5M7NwTdttpR+A7jJ/t2CWkv/w/sndW8 Q1cFQxG5RZWSZy2gDcpuTjRQDFNabwQOkRFmRAFokwpAJ45nM7eQH/GDyivVb0id AVAmQlYej8jhzQXfzCEGpBAIEFcBR/tRyDylolva5rYJmC0z+bDcHhcV6Xr9mva7 Mgj+H8bRx1ZEflGbVBtXYQY3TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2fPgQ0 SahWkJw/pi3qE7s8aJbyMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0SCZnHnbQg0A92o3AYCEMTJArCtr4RWqInc79oPJKQJHzSq3ElIFvQ8C8a8U hwa+KYVKYaMoLgOaZm2jhfEeej4NsjvgwjrN/ypUFtk3CCNHHWNHODxtD3Bnna62 XmXh2G2sZFMUAcrZl/mSEY1gM6ltdtV/2KcnXk7e4CluZYQGGdt7NNwKhLD5786e fv5FDB6a4V4kclNr40lL7AXgT5BsD+AIjnCyBMB1eeS/dPnM8+yuJGjVo1VOOsMh NWgZoXPay4MbzDd+es8uMgvfVxUGONsjsD95dqa7vVcujSCJu1UIVB22xqm42lZ0 HzzSRnneNmdYd7k0VFMRixIRjA== -----END CERTIFICATE-----Generated at Sun Nov 15 12:19:41 2026 by rpki-client