$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: DT/DE4oAXyWwpYdwEs2p2djxjux9GXzTfMENKUlyEsY= Subject key identifier: 1B:4E:E3:BE:77:96:0C:65:AF:80:2F:19:DB:EA:7E:F8:43:9B:5B:C7 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 096B Signing time: Sat 14 Nov 2026 19:59:53 +0000 Manifest this update: Sat 14 Nov 2026 19:59:53 +0000 Manifest next update: Sat 21 Nov 2026 19:59:53 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: RO1UNkRgpzAh3WLOcqYiXTDMhMdYYybelNVw/fyUsbU=) 2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: li3YRa9Yv25yotW6/EC7vLabn+M8e7uHM9RYoRoBug8=) 3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: LZ40P7jyeEqSl0L+sairDVVJ2sKXjxklHIoC8zej7gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Nov 14 19:59:53 2026 GMT Not After : Nov 21 19:59:53 2026 GMT Subject: CN=6af8bdb9-8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:d9:d4:29:3b:6f:5a:e3:c0:bd:9f:96:c7: 1d:e5:e1:6c:3b:6f:32:00:93:e5:2c:04:ca:50:47: b5:71:ae:34:5c:f8:fe:14:50:4d:6e:ba:37:e1:1b: 64:1a:c9:0e:74:78:c4:9d:22:34:2f:15:5f:83:11: 8c:4d:dc:e9:6e:4b:dc:e1:98:38:40:1c:ed:a4:ec: bd:5b:dc:2e:f1:6e:f0:36:6e:dd:0d:86:c2:4b:88: 99:a5:af:c0:dc:ed:30:3f:d9:ad:4b:3c:99:48:e7: 70:b0:cf:47:d3:2a:0c:b7:06:82:ab:5b:5c:2a:0e: 96:c5:47:1c:e4:c5:8c:8b:12:fa:18:b2:12:3a:bf: c3:f3:8e:85:b7:c0:e8:8d:06:e7:b6:2a:34:63:b1: 2f:6f:a6:70:38:c2:82:81:ab:b1:a9:23:e8:e5:88: e0:ae:a9:55:e8:b0:e9:00:60:a4:29:41:6c:aa:1d: 69:b8:3f:f9:9d:26:48:d9:56:77:3a:12:2d:4b:1f: a4:94:3e:db:77:06:a4:fc:b0:fe:f9:5f:44:ed:c7: 02:2e:9d:7f:1a:dc:52:db:12:65:cd:ba:ae:22:3f: 85:bd:dd:22:79:f4:e3:79:41:e5:cd:ce:1f:2f:6b: 1f:76:ff:ba:84:e6:62:7e:bd:cf:59:c1:6e:5d:65: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:E3:BE:77:96:0C:65:AF:80:2F:19:DB:EA:7E:F8:43:9B:5B:C7 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:b1:de:86:e4:cb:53:f3:a9:e9:a0:7b:66:4e:87:be:a2: 1b:1e:ea:eb:cd:72:22:c6:cc:0d:60:27:a9:3e:55:ed:b8:f2: 94:c1:d5:a2:80:73:71:3d:dd:90:b9:b4:c5:e1:c1:56:5d:5a: 6b:4d:15:2f:e0:48:53:59:e7:70:61:c7:15:be:f7:87:c3:c8: 8e:d8:a1:bb:9b:cd:d1:09:42:1e:30:6e:f3:8a:e0:0f:1e:51: 92:1b:30:44:ad:8e:ee:26:2f:b2:e2:97:e5:84:32:7e:11:5b: cc:33:ea:f0:c5:1f:00:db:cf:93:42:d3:92:3f:9d:f3:4c:fe: 15:d8:8f:86:31:02:89:36:b0:3b:44:6b:3f:eb:be:0e:58:b0: 27:aa:f2:44:ba:6f:32:1b:0f:e4:c4:8d:16:04:fb:53:5d:18: 7c:63:e0:dc:da:10:6e:6d:9c:04:a5:84:02:9f:c6:57:fd:8c: db:5d:10:74:0f:4d:ce:65:bc:b8:bd:d0:7a:10:39:a0:a9:85: f3:06:25:9e:e1:0f:92:9f:45:fd:e1:e0:d4:82:d8:37:37:80: 93:fd:d8:35:10:a4:f7:aa:55:0d:8f:3d:6f:b4:1a:d6:7f:dd: ee:4f:00:d7:d5:07:48:9b:fd:e2:74:05:6a:4f:74:90:a0:0d: 02:31:e6:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYxMTE0MTk1OTUzWhcNMjYxMTIxMTk1OTUzWjAYMRYwFAYD VQQDEw02YWY4YmRiOS04ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1PZ1Ck7b1rjwL2flscd5eFsO28yAJPlLATKUEe1ca40XPj+FFBNbro34Rtk GskOdHjEnSI0LxVfgxGMTdzpbkvc4Zg4QBztpOy9W9wu8W7wNm7dDYbCS4iZpa/A 3O0wP9mtSzyZSOdwsM9H0yoMtwaCq1tcKg6WxUcc5MWMixL6GLISOr/D846Ft8Do jQbntio0Y7Evb6ZwOMKCgauxqSPo5YjgrqlV6LDpAGCkKUFsqh1puD/5nSZI2VZ3 OhItSx+klD7bdwak/LD++V9E7ccCLp1/GtxS2xJlzbquIj+Fvd0iefTjeUHlzc4f L2sfdv+6hOZifr3PWcFuXWVkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtO4753 lgxlr4AvGdvqfvhDm1vHMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjtGx3obky1Pzqemge2ZOh76iGx7q681yIsbMDWAnqT5V7bjylMHVooBzcT3d kLm0xeHBVl1aa00VL+BIU1nncGHHFb73h8PIjtihu5vN0QlCHjBu84rgDx5Rkhsw RK2O7iYvsuKX5YQyfhFbzDPq8MUfANvPk0LTkj+d80z+FdiPhjECiTawO0RrP+u+ DliwJ6ryRLpvMhsP5MSNFgT7U10YfGPg3NoQbm2cBKWEAp/GV/2M210QdA9NzmW8 uL3QehA5oKmF8wYlnuEPkp9F/eHg1ILYNzeAk/3YNRCk96pVDY89b7Qa1n/d7k8A 19UHSJv94nQFak90kKANAjHmaQ== -----END CERTIFICATE-----Generated at Sun Nov 15 08:05:32 2026 by rpki-client