$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: qyC8MQ86YPGmHirmWTYKiGIdmyG4MXKu0wjSKm2yQe4= Subject key identifier: 19:27:C9:6E:24:47:25:B6:B3:11:1D:FA:51:FA:0D:88:B9:CF:7A:B5 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 64 Signing time: Sun 15 Nov 2026 08:18:19 +0000 Manifest this update: Sun 15 Nov 2026 08:18:19 +0000 Manifest next update: Sun 22 Nov 2026 08:18:19 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: P0arng1bEex7FfTv+jhcBTzVGo6n8JtMeqocDDdWX/s=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Nov 15 08:18:19 2026 GMT Not After : Nov 22 08:18:19 2026 GMT Subject: CN=6af96acb-33a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:8a:fd:9f:fc:f9:8d:8a:73:94:02:d4:24: f6:49:0b:1e:58:d5:5e:b0:15:b6:e8:75:6a:bd:9f: c8:d1:08:9a:6d:4a:2d:e2:1a:17:80:d1:33:b4:32: f2:df:63:fc:cf:81:bb:1f:a4:e7:92:f6:48:2e:1d: 95:e6:ee:58:77:9d:8b:6e:50:2c:dc:c8:59:94:bb: be:07:5a:4a:2c:d4:f9:e9:47:19:c6:84:c2:e6:36: a7:1a:03:cb:1b:97:1e:76:e7:ca:0e:94:8b:ac:2e: 65:4a:4f:87:b8:51:a7:bb:5b:82:dd:01:09:f5:c3: 69:b4:c3:1f:c4:6f:01:a6:55:bf:47:88:fe:8b:2e: 4b:14:6c:0c:2e:4e:63:17:1d:da:9f:81:ae:7b:23: 54:ee:c2:c1:63:7b:61:c3:40:15:95:fa:4d:e0:9e: 90:f4:55:29:8d:37:7c:0c:44:e3:db:45:29:bd:62: dc:0f:83:11:d3:5a:d1:1d:48:d3:0a:d9:92:c5:12: 28:9e:19:e3:fa:8b:bf:0e:9d:5b:82:e2:f6:c1:1e: fd:e0:2e:4b:45:1c:cb:b6:17:f0:49:66:95:eb:6c: ab:fb:2c:80:c6:67:c8:24:c9:75:f2:36:52:ef:66: 13:3a:70:05:88:bf:55:2b:bf:34:2e:c1:a0:5a:39: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:27:C9:6E:24:47:25:B6:B3:11:1D:FA:51:FA:0D:88:B9:CF:7A:B5 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:91:3f:5c:3b:88:ba:55:6d:1b:84:b6:ea:cd:8b:d9:8c:fc: fc:3e:ea:18:45:28:27:44:ec:c4:96:74:3b:5c:be:a4:08:d7: 7b:6f:7d:4b:27:1b:52:04:57:d4:4d:72:92:93:39:eb:e5:71: f3:0a:9b:4a:eb:0c:52:61:29:36:0a:6d:54:23:3d:f2:6c:4d: ee:e8:87:ce:76:e9:33:7f:50:96:d6:ca:27:2e:44:10:9c:46: a2:aa:8f:a3:41:3b:e8:d6:db:c5:5d:55:c0:32:b9:d8:c7:eb: 84:3f:ea:56:c2:49:68:a3:3f:15:55:78:b4:cf:f4:17:45:f6: f0:0a:2f:24:48:05:ad:e7:3f:b5:da:f5:8c:76:c2:85:32:e3: d1:f4:c9:90:8b:01:11:8c:c4:c7:49:86:81:f2:4d:cc:bc:14: 3b:e2:1c:ef:29:38:9c:4e:ad:fa:f7:42:b5:09:fe:f0:1f:8a: d5:cd:f6:2e:72:5a:e9:c1:6e:40:aa:71:b2:37:44:2b:d9:9a: 22:85:be:3c:c9:ed:62:29:ec:ab:f1:af:40:04:6c:e3:d8:4b: 74:d6:e6:14:f9:17:0f:77:ee:7f:d4:1b:7f:ed:25:77:60:e0: 1a:6d:b1:a7:33:f9:f5:7c:5b:bd:e2:f0:f0:36:99:e3:74:18: cc:c7:4f:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjExMTUwODE4MTlaFw0yNjExMjIwODE4MTlaMBgxFjAUBgNV BAMTDTZhZjk2YWNiLTMzYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDKIr9n/z5jYpzlALUJPZJCx5Y1V6wFbbodWq9n8jRCJptSi3iGheA0TO0MvLf Y/zPgbsfpOeS9kguHZXm7lh3nYtuUCzcyFmUu74HWkos1PnpRxnGhMLmNqcaA8sb lx5258oOlIusLmVKT4e4Uae7W4LdAQn1w2m0wx/EbwGmVb9HiP6LLksUbAwuTmMX Hdqfga57I1TuwsFje2HDQBWV+k3gnpD0VSmNN3wMROPbRSm9YtwPgxHTWtEdSNMK 2ZLFEiieGeP6i78OnVuC4vbBHv3gLktFHMu2F/BJZpXrbKv7LIDGZ8gkyXXyNlLv ZhM6cAWIv1UrvzQuwaBaOTnfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGSfJbiRH JbazER36UfoNiLnPerUwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAskT9cO4i6VW0bhLbqzYvZjPz8PuoYRSgnROzElnQ7XL6kCNd7b31LJxtSBFfU TXKSkznr5XHzCptK6wxSYSk2Cm1UIz3ybE3u6IfOdukzf1CW1sonLkQQnEaiqo+j QTvo1tvFXVXAMrnYx+uEP+pWwklooz8VVXi0z/QXRfbwCi8kSAWt5z+12vWMdsKF MuPR9MmQiwERjMTHSYaB8k3MvBQ74hzvKTicTq3690K1Cf7wH4rVzfYuclrpwW5A qnGyN0Qr2Zoihb48ye1iKeyr8a9ABGzj2Et01uYU+RcPd+5/1Bt/7SV3YOAabbGn M/n1fFu94vDwNpnjdBjMx0+P -----END CERTIFICATE-----Generated at Sun Nov 15 11:58:12 2026 by rpki-client