$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.mft File: KdFwOvU6UKZjmvKIc8tTRwcBLpY.mft (raw, json) Hash identifier: iXqBIVM/mRjG2/aEOUWu+O3IA8hCWDtP0S2jB8gak1k= Subject key identifier: 9E:CE:70:E4:E4:71:98:10:D3:00:E2:06:F0:16:A0:8C:D3:8A:3E:76 Authority key identifier: 29:D1:70:3A:F5:3A:50:A6:63:9A:F2:88:73:CB:53:47:07:01:2E:96 Certificate issuer: /CN=A91DE294/serialNumber=29D1703AF53A50A6639AF28873CB534707012E96 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KdFwOvU6UKZjmvKIc8tTRwcBLpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.mft Manifest number: 05 Signing time: Sun 15 Nov 2026 09:24:00 +0000 Manifest this update: Sun 15 Nov 2026 09:23:59 +0000 Manifest next update: Sun 22 Nov 2026 09:23:59 +0000 Files and hashes: 1: KdFwOvU6UKZjmvKIc8tTRwcBLpY.crl (hash: Vuh1mJw+hh2fLQ9bfBEm+aLBRdGmnvVvA6BxO2UiYfw=) 2: D1D34C0CDCF511F1BB6873AC1B66CEF9.roa (hash: TYlZfCx3fv0FwAqMdUY0acjJ+E163ylwHGvybW/vwgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.crl rsync://rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KdFwOvU6UKZjmvKIc8tTRwcBLpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE294, serialNumber=29D1703AF53A50A6639AF28873CB534707012E96 Validity Not Before: Nov 15 09:23:59 2026 GMT Not After : Nov 22 09:23:59 2026 GMT Subject: CN=6af97a30-96ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:94:f2:26:09:1d:ce:40:f8:2e:42:b1:c4: ce:ba:60:31:2b:81:6d:17:0d:f6:50:9f:53:b3:d7: 45:17:43:e8:5c:77:b5:ab:28:29:f6:95:02:ae:ea: 05:38:ac:96:d0:20:c1:3d:2e:d0:f5:54:30:07:b5: 54:48:1e:74:8f:5b:76:6d:38:9e:5e:d7:ee:00:39: ef:e9:1b:75:79:1b:1c:fe:0c:9b:f0:49:fc:be:15: ed:7e:01:78:68:1c:cb:b7:69:c4:36:45:4e:c5:e7: 7b:b9:62:3e:28:92:7c:22:aa:0f:c4:27:05:fc:da: 77:b2:4c:5b:c5:91:a5:f2:b6:d9:b9:21:08:2d:44: 82:18:04:fb:71:68:ed:32:6d:36:43:51:03:67:1d: c9:48:55:52:d5:d1:19:25:48:50:b5:dd:8d:4f:a6: 9e:fe:e4:f1:68:7b:33:f7:6e:1a:d0:22:48:98:97: 04:b9:14:90:8d:6a:eb:e6:f6:c8:c4:cc:51:bb:71: 32:0a:3d:7e:48:b3:31:1d:6b:3a:2d:a9:9c:8b:f6: cd:40:2c:ba:0b:6e:d8:7e:35:5e:8d:38:06:dd:74: 45:be:45:31:78:3a:88:bb:61:2c:23:ec:e5:09:17: 06:83:be:41:79:2a:1b:65:58:5c:68:74:08:24:52: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:70:E4:E4:71:98:10:D3:00:E2:06:F0:16:A0:8C:D3:8A:3E:76 X509v3 Authority Key Identifier: keyid:29:D1:70:3A:F5:3A:50:A6:63:9A:F2:88:73:CB:53:47:07:01:2E:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KdFwOvU6UKZjmvKIc8tTRwcBLpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE294/795180D0DCF511F1900F0BA51B66CEF9/KdFwOvU6UKZjmvKIc8tTRwcBLpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:3e:f4:7e:94:e6:a4:75:b3:1d:cd:2d:8c:97:45:df:f3: 99:20:22:69:f4:92:31:6f:be:71:ee:1a:c1:f0:d7:db:d1:c1: 24:de:eb:36:55:fb:23:e6:bc:42:36:83:b9:65:fa:a6:40:f4: 9e:91:28:fe:74:ba:3d:e5:dd:99:c0:59:e5:42:d0:ec:66:0b: b6:57:05:e8:90:3c:91:0e:a8:5f:80:67:10:5e:fa:13:03:01: d1:48:ef:3b:5f:24:29:15:5d:fe:69:c9:c0:3f:f8:ca:3f:32: 24:21:c9:7b:cd:7b:97:0e:b2:80:16:9f:44:a0:7c:aa:70:62: a9:6c:d1:ee:ba:34:46:fb:d6:93:a5:d7:9d:28:cc:92:fb:c5: 7a:e1:51:e5:17:a4:9a:b3:16:a9:0e:5c:c7:b6:30:99:bd:45: 16:4d:64:68:19:78:da:19:9b:21:c7:99:80:d7:40:c9:59:c5: 21:88:16:4a:85:f1:4b:c0:9f:10:84:62:f0:bc:c2:d6:08:89: ed:c2:1b:f5:ab:ba:ec:5c:22:e7:a3:81:98:2a:ac:ad:35:46: 23:02:96:bc:28:de:24:54:72:07:15:5a:61:b0:a4:6c:4a:95: 73:a4:bf:96:51:4b:2e:5c:9e:2a:af:38:cd:05:37:6a:20:24: d6:38:cd:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTI5NDExMC8GA1UEBRMoMjlEMTcwM0FGNTNBNTBBNjYzOUFGMjg4NzNDQjUzNDcw NzAxMkU5NjAeFw0yNjExMTUwOTIzNTlaFw0yNjExMjIwOTIzNTlaMBgxFjAUBgNV BAMTDTZhZjk3YTMwLTk2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIcJTyJgkdzkD4LkKxxM66YDErgW0XDfZQn1Oz10UXQ+hcd7WrKCn2lQKu6gU4 rJbQIME9LtD1VDAHtVRIHnSPW3ZtOJ5e1+4AOe/pG3V5Gxz+DJvwSfy+Fe1+AXho HMu3acQ2RU7F53u5Yj4oknwiqg/EJwX82neyTFvFkaXyttm5IQgtRIIYBPtxaO0y bTZDUQNnHclIVVLV0RklSFC13Y1Ppp7+5PFoezP3bhrQIkiYlwS5FJCNauvm9sjE zFG7cTIKPX5IszEdazotqZyL9s1ALLoLbth+NV6NOAbddEW+RTF4Ooi7YSwj7OUJ FwaDvkF5KhtlWFxodAgkUvJnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUns5w5ORx mBDTAOIG8BagjNOKPnYwHwYDVR0jBBgwFoAUKdFwOvU6UKZjmvKIc8tTRwcBLpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMjk0Lzc5NTE4MEQwRENG NTExRjE5MDBGMEJBNTFCNjZDRUY5L0tkRndPdlU2VUtaam12S0ljOHRUUndjQkxw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2RGd092VTZVS1pqbXZLSWM4dFRSd2NCTHBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF Mjk0Lzc5NTE4MEQwRENGNTExRjE5MDBGMEJBNTFCNjZDRUY5L0tkRndPdlU2VUta am12S0ljOHRUUndjQkxwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApbj70fpTmpHWzHc0tjJdF3/OZICJp9JIxb75x7hrB8Nfb0cEk3us2Vfsj5rxC NoO5ZfqmQPSekSj+dLo95d2ZwFnlQtDsZgu2VwXokDyRDqhfgGcQXvoTAwHRSO87 XyQpFV3+acnAP/jKPzIkIcl7zXuXDrKAFp9EoHyqcGKpbNHuujRG+9aTpdedKMyS +8V64VHlF6SasxapDlzHtjCZvUUWTWRoGXjaGZshx5mA10DJWcUhiBZKhfFLwJ8Q hGLwvMLWCIntwhv1q7rsXCLno4GYKqytNUYjApa8KN4kVHIHFVphsKRsSpVzpL+W UUsuXJ4qrzjNBTdqICTWOM3M -----END CERTIFICATE-----Generated at Sun Nov 15 12:21:07 2026 by rpki-client