$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: b1BH/MpZO/m5JH6Ot5BD28TOT0CxaLnmOjE4A2IBDLw= Subject key identifier: 55:87:E6:EA:BF:3D:F1:EA:9B:46:1D:D6:62:28:93:CA:C9:31:50:D9 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0AF8 Signing time: Sat 14 Nov 2026 19:17:05 +0000 Manifest this update: Sat 14 Nov 2026 19:17:05 +0000 Manifest next update: Sat 21 Nov 2026 19:17:05 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: Ru3hzWzoaQFDFn/dyUzWwssMjnmD42+bfIXErrH/zl4=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Nov 14 19:17:05 2026 GMT Not After : Nov 21 19:17:05 2026 GMT Subject: CN=6af8b3b1-0970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:58:5f:36:4b:48:4c:07:de:42:79:60:d9: f7:37:b1:b7:1f:28:70:0a:6e:da:e8:f9:24:0f:d9: b7:90:8d:28:cd:44:a9:9d:4f:f3:f8:0d:eb:2d:c0: 65:9d:49:c9:18:c9:d2:cb:4d:cc:ee:7b:4b:79:b2: 53:af:94:fb:38:9f:eb:ba:e3:b7:15:29:06:ba:87: e2:84:f9:e6:70:9c:cf:40:af:48:64:05:6f:df:04: 78:5c:29:c2:69:08:ec:e8:95:eb:8d:f6:1e:99:ea: 0d:d4:86:b1:e3:f7:53:a3:36:2a:a0:a5:1c:05:7d: 30:4a:ff:ee:78:78:a3:9b:30:1f:9b:5b:22:fc:f0: 6e:da:93:55:e9:f8:9d:69:11:e0:96:ec:5f:07:a3: 7a:4c:96:8c:80:a7:6d:12:81:ea:9e:25:54:d4:97: dc:80:68:fe:ca:de:64:9b:42:3a:5c:1b:4f:b7:e4: ea:7a:84:1b:73:35:7a:d1:77:7a:95:8b:f1:86:d7: 76:c9:87:5b:05:70:25:ec:df:23:72:ed:b7:23:f9: ae:d2:36:50:13:ca:5d:39:1d:da:04:9c:cb:bc:fe: a5:74:41:54:4c:f7:06:49:ea:6a:ef:07:c7:b5:a2: cd:e8:d0:8f:cc:f5:c3:67:1c:f8:d9:b9:72:d1:e8: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:87:E6:EA:BF:3D:F1:EA:9B:46:1D:D6:62:28:93:CA:C9:31:50:D9 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:8a:ff:7f:d1:b6:64:8e:fd:35:51:dd:8e:7f:f1:d8:55:0a: e5:33:e9:ea:fa:29:6c:73:ee:64:a0:14:8f:2d:6c:b2:f0:eb: 13:f2:78:fc:18:ac:8f:50:b5:dc:12:68:01:91:5d:6a:61:2d: e9:62:61:7a:77:ad:52:38:18:aa:1a:08:d0:0f:15:d9:5d:5e: 4c:40:2e:ac:c4:9b:06:e7:97:1d:a2:db:a1:cf:1b:d6:a5:ae: a4:6e:f8:f7:30:52:d9:e6:2e:3b:70:a2:fd:18:2a:d4:da:91: ae:4c:7b:44:2a:c3:30:77:87:db:d1:7c:10:68:dd:5f:62:ea: 56:d0:01:ec:c9:bf:d2:d5:a3:19:f3:f9:a5:d3:9a:85:3b:1b: 70:49:6f:06:32:61:84:2a:fe:93:18:d6:30:31:d9:36:73:c8: 16:66:59:b6:6e:58:49:27:b0:10:56:bf:c3:07:63:cd:eb:25: 96:4a:7b:a1:55:50:60:fe:cd:ae:0c:92:ad:ea:32:c3:d2:1e: 49:96:50:e6:fe:1f:3e:4a:fb:ab:82:97:3f:c5:95:2e:9f:b4: a1:bb:6d:cc:2b:38:a0:6d:61:cd:8f:ef:c6:07:1e:86:10:d2: d8:46:d6:0f:fa:06:1f:7c:15:4f:ca:23:dc:da:cb:0f:a8:f6: 9e:5b:f0:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjYxMTE0MTkxNzA1WhcNMjYxMTIxMTkxNzA1WjAYMRYwFAYD VQQDEw02YWY4YjNiMS0wOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys1YXzZLSEwH3kJ5YNn3N7G3HyhwCm7a6PkkD9m3kI0ozUSpnU/z+A3rLcBl nUnJGMnSy03M7ntLebJTr5T7OJ/ruuO3FSkGuofihPnmcJzPQK9IZAVv3wR4XCnC aQjs6JXrjfYemeoN1Iax4/dTozYqoKUcBX0wSv/ueHijmzAfm1si/PBu2pNV6fid aRHgluxfB6N6TJaMgKdtEoHqniVU1JfcgGj+yt5km0I6XBtPt+TqeoQbczV60Xd6 lYvxhtd2yYdbBXAl7N8jcu23I/mu0jZQE8pdOR3aBJzLvP6ldEFUTPcGSepq7wfH taLN6NCPzPXDZxz42bly0ejifQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWH5uq/ PfHqm0Yd1mIok8rJMVDZMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAor/f9G2ZI79NVHdjn/x2FUK5TPp6vopbHPuZKAUjy1ssvDrE/J4/Bisj1C1 3BJoAZFdamEt6WJhenetUjgYqhoI0A8V2V1eTEAurMSbBueXHaLboc8b1qWupG74 9zBS2eYuO3Ci/Rgq1NqRrkx7RCrDMHeH29F8EGjdX2LqVtAB7Mm/0tWjGfP5pdOa hTsbcElvBjJhhCr+kxjWMDHZNnPIFmZZtm5YSSewEFa/wwdjzesllkp7oVVQYP7N rgySreoyw9IeSZZQ5v4fPkr7q4KXP8WVLp+0obttzCs4oG1hzY/vxgcehhDS2EbW D/oGH3wVT8oj3NrLD6j2nlvwZw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:10:04 2026 by rpki-client