$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: WH2ebyiVeNsLRpiS8EsfAPJgvp4B/DIuSBbfF+XhxFc= Subject key identifier: 22:F8:D2:C8:75:42:71:23:54:CD:97:85:2C:6E:68:0C:18:CC:F1:55 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 95 Signing time: Fri 13 Nov 2026 07:41:31 +0000 Manifest this update: Fri 13 Nov 2026 07:41:31 +0000 Manifest next update: Fri 20 Nov 2026 07:41:31 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: qbLhfBn4uKUzAaFxCN90SohA1Mjo7Q2takTdWfQbUt8=) 2: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) 3: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 07:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Nov 13 07:41:31 2026 GMT Not After : Nov 20 07:41:31 2026 GMT Subject: CN=6af6bf2b-121f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:cc:7d:a0:89:a9:92:86:43:62:2b:f3:3a: 7f:7a:96:76:62:2d:27:d8:00:05:5c:3b:b4:52:00: ac:c0:f4:db:4d:c1:c8:e8:83:b9:40:df:71:46:c4: 15:4b:87:e6:64:5e:ef:37:21:ca:30:e3:ae:98:e9: ee:ee:d2:ae:57:7f:15:bb:36:b2:0e:47:7c:60:85: 3e:2e:62:dc:85:8c:8c:e4:d4:94:5f:18:f3:1d:70: 79:38:1d:bd:fa:c7:07:1b:16:93:af:d7:47:98:0f: 11:38:66:d1:2f:d7:e8:ab:83:61:95:09:0e:b8:3a: 01:b3:97:e5:a0:05:f2:91:d0:db:d0:67:73:5f:5a: f8:c2:ba:a2:2e:70:89:ba:f1:a4:63:c8:7b:71:8f: 29:6d:a6:1e:9d:4a:89:0a:69:e7:4f:f0:4a:ef:d3: 11:c1:fe:13:20:67:08:68:b8:9b:50:7d:22:d9:8b: 31:e2:77:58:d8:97:d1:0f:a6:13:ad:ea:bc:aa:43: c4:4f:48:5c:b0:ad:d3:b7:c2:20:a9:15:fe:be:94: 5f:43:5d:27:2b:38:ac:31:b3:49:39:4d:bf:8e:c0: 93:c2:61:84:02:77:e2:66:f9:e4:d5:b8:a7:77:7b: d5:27:41:d1:58:22:76:c6:45:62:05:91:af:9f:dc: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F8:D2:C8:75:42:71:23:54:CD:97:85:2C:6E:68:0C:18:CC:F1:55 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5e:1a:f0:cb:41:ce:bf:bf:64:f0:91:ad:69:8a:e1:ef:be: 0f:3a:9b:67:20:48:e7:fe:01:9a:7a:58:e1:67:fa:2a:ff:fc: 2e:61:d1:8a:55:c9:b2:9b:f3:fc:98:09:5c:7a:2b:13:b7:d0: 04:22:87:29:df:f6:f7:d8:c0:6b:39:86:92:04:5c:88:2c:25: 57:fb:8d:48:6b:dc:4e:37:53:fa:fb:13:50:81:ea:ec:d7:36: 02:d4:9a:2b:23:a1:04:87:d8:3f:dc:4b:90:15:6b:83:ad:f6: f8:a1:7b:3a:c2:89:0e:73:bb:61:36:1a:d0:c4:9c:d2:8f:74: 76:33:ad:eb:de:c9:f5:16:34:b7:98:a8:92:88:b1:72:35:c7: 4e:48:ad:ea:17:78:b2:c0:ce:74:4c:3e:39:8f:98:b2:30:5f: 0f:fe:ca:30:a7:58:7a:f8:a0:f5:5f:b9:7e:5c:38:e2:0c:a3: 43:49:85:c7:a3:fb:65:e5:6f:8d:fb:77:7c:d0:08:14:4f:d0: 5b:0f:95:9c:a8:37:7b:86:16:60:4b:d6:6b:aa:7d:e9:8a:87: 95:fa:2b:1d:1e:ea:78:76:d3:15:2a:7c:f3:93:87:50:41:19: e4:59:48:f8:e0:e7:e9:17:bb:f8:56:52:8b:95:c4:9b:4b:b1: 55:f2:29:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4OTcxMTAvBgNVBAUTKDZGQkQwNUY2MzBCRTQ0MTBBOTUxMkNEQjY5QTg1Q0Ez N0NFOEM3MzkwHhcNMjYxMTEzMDc0MTMxWhcNMjYxMTIwMDc0MTMxWjAYMRYwFAYD VQQDEw02YWY2YmYyYi0xMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa7MfaCJqZKGQ2Ir8zp/epZ2Yi0n2AAFXDu0UgCswPTbTcHI6IO5QN9xRsQV S4fmZF7vNyHKMOOumOnu7tKuV38VuzayDkd8YIU+LmLchYyM5NSUXxjzHXB5OB29 +scHGxaTr9dHmA8ROGbRL9foq4NhlQkOuDoBs5floAXykdDb0GdzX1r4wrqiLnCJ uvGkY8h7cY8pbaYenUqJCmnnT/BK79MRwf4TIGcIaLibUH0i2Ysx4ndY2JfRD6YT req8qkPET0hcsK3Tt8IgqRX+vpRfQ10nKzisMbNJOU2/jsCTwmGEAnfiZvnk1bin d3vVJ0HRWCJ2xkViBZGvn9z6CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCL40sh1 QnEjVM2XhSxuaAwYzPFVMB8GA1UdIwQYMBaAFG+9BfYwvkQQqVEs22moXKN86Mc5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg5Ny83RjRFNjNFQzAw MzAxMUYxOTRBMjU3QUI0NzZGNTZCQy9iNzBGOWpDLVJCQ3BVU3piYWFoY28zem94 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg5Ny83RjRFNjNFQzAwMzAxMUYxOTRBMjU3QUI0NzZGNTZCQy9iNzBGOWpDLVJC Q3BVU3piYWFoY28zem94emsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwF4a8MtBzr+/ZPCRrWmK4e++DzqbZyBI5/4BmnpY4Wf6Kv/8LmHRilXJspvz /JgJXHorE7fQBCKHKd/299jAazmGkgRciCwlV/uNSGvcTjdT+vsTUIHq7Nc2AtSa KyOhBIfYP9xLkBVrg632+KF7OsKJDnO7YTYa0MSc0o90djOt697J9RY0t5iokoix cjXHTkit6hd4ssDOdEw+OY+YsjBfD/7KMKdYevig9V+5flw44gyjQ0mFx6P7ZeVv jft3fNAIFE/QWw+VnKg3e4YWYEvWa6p96YqHlforHR7qeHbTFSp885OHUEEZ5FlI +ODn6Re7+FZSi5XEm0uxVfIp+w== -----END CERTIFICATE-----Generated at Sat Nov 14 22:27:17 2026 by rpki-client