$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: ZqWJvuXu9Nh+oYMejMK+tAzmmr0HwWp/nuXOLUQZqzc= Subject key identifier: A4:20:64:C5:A7:60:8D:19:C8:71:BD:B0:C6:BE:15:D2:46:5E:91:C4 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 062C Signing time: Sat 14 Nov 2026 22:47:10 +0000 Manifest this update: Sat 14 Nov 2026 22:47:10 +0000 Manifest next update: Sat 21 Nov 2026 22:47:10 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: qcWc/YW4fMWaiZizT+/bnzqNznCc+2wt+1ViG0isSS8=) 2: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=) 3: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=) 4: FA5C84C0CD1611F1A136150E0566CEF9.roa (hash: v2Y/P7UngSt6J/sIlYrNo+fldvxWbugeEy6W3WchNCk=) 5: 5778FB08922911F1B1965EDD6A11F970.roa (hash: vkT0Co848XgmWcMvxPBj3JvFfA8woQU/yLqI+8Rvtxs=) 6: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=) 7: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Nov 14 22:47:10 2026 GMT Not After : Nov 21 22:47:10 2026 GMT Subject: CN=6af8e4ee-ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:bd:4f:54:4c:ab:af:17:7b:db:9a:9a:0a: b2:ad:c5:fa:35:a4:74:c2:c6:2e:cb:31:aa:9e:79: 17:0c:29:8c:7a:51:f6:4e:e4:aa:88:01:be:fe:d8: 92:fe:42:62:1c:8e:52:9b:ba:50:2b:eb:7d:8d:e4: 24:db:0c:2c:f4:e1:94:13:0c:90:7c:22:6a:55:76: 7e:2e:1f:d2:7b:44:a4:1a:92:d0:1e:25:0c:28:a4: 3b:54:da:08:dc:de:72:50:dd:ac:49:30:b8:c1:8e: 20:83:d2:1d:ae:e8:2d:5b:ce:e7:a1:d4:ae:5a:f9: 12:87:d8:37:cb:11:39:f7:aa:01:25:0a:f7:35:29: fe:da:4e:56:ea:57:49:cb:10:63:b0:70:18:c0:90: 95:c5:1b:c1:53:79:33:ce:f1:e0:d5:a7:74:66:62: 34:5e:53:81:73:24:e8:8c:5d:e0:8d:41:6c:36:07: d5:37:97:6c:fa:0f:71:a9:9a:db:de:2a:e6:8a:b3: 51:39:20:c9:de:35:a8:2c:b4:73:d0:07:16:63:e8: c0:ed:ec:76:7f:ed:98:4a:23:6f:91:a5:f8:bd:30: ef:92:ae:de:ab:38:21:d8:37:04:b5:47:07:12:e5: fa:89:3e:04:41:bc:2b:ba:d9:cc:9f:fd:b1:75:b0: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:64:C5:A7:60:8D:19:C8:71:BD:B0:C6:BE:15:D2:46:5E:91:C4 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:36:f0:78:aa:47:1d:ad:6f:3c:34:a8:86:79:c5:f9:d8:e9: 25:0c:6f:21:5d:98:98:58:df:be:f2:a2:63:fc:1a:bf:04:01: 9d:d1:a8:7b:be:1f:05:6f:0c:f0:8b:ce:11:fd:dd:46:49:08: 96:6d:76:6f:b9:d2:f8:27:c3:ea:c4:cd:50:8e:d1:14:e9:54: ce:af:93:6b:f0:c4:7a:aa:ee:c4:f2:f8:4d:a4:f9:dd:e8:16: 29:cb:8f:14:7e:73:37:e8:10:46:76:0e:db:ee:d2:07:55:82: 8b:7c:5d:6b:0d:ab:00:06:5a:05:74:e6:5a:9e:9a:ea:a7:db: d6:42:e9:0c:50:24:7e:a1:59:2f:f1:4a:c0:3a:22:ac:1b:4d: e0:96:87:96:ee:6c:44:e7:f3:e4:67:e3:77:de:dd:aa:a2:ad: 21:a4:2a:2e:e0:cb:dd:9d:34:32:59:57:95:5b:b8:78:57:c4: 0e:8c:f2:d0:ef:30:da:2f:4e:1a:5e:0d:b8:e5:c9:f9:34:83: 78:05:be:b0:bd:18:15:62:0a:bc:cf:44:52:e8:ae:c6:0c:42: f4:53:98:f1:05:f9:d9:57:08:d9:7e:8f:db:fe:72:42:e1:10: 15:f7:86:53:12:b1:71:3b:9e:58:7c:d3:8a:28:75:e8:ed:88: 43:a2:89:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjYxMTE0MjI0NzEwWhcNMjYxMTIxMjI0NzEwWjAYMRYwFAYD VQQDEw02YWY4ZTRlZS1lYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx29T1RMq68Xe9uamgqyrcX6NaR0wsYuyzGqnnkXDCmMelH2TuSqiAG+/tiS /kJiHI5Sm7pQK+t9jeQk2wws9OGUEwyQfCJqVXZ+Lh/Se0SkGpLQHiUMKKQ7VNoI 3N5yUN2sSTC4wY4gg9IdrugtW87nodSuWvkSh9g3yxE596oBJQr3NSn+2k5W6ldJ yxBjsHAYwJCVxRvBU3kzzvHg1ad0ZmI0XlOBcyTojF3gjUFsNgfVN5ds+g9xqZrb 3irmirNROSDJ3jWoLLRz0AcWY+jA7ex2f+2YSiNvkaX4vTDvkq7eqzgh2DcEtUcH EuX6iT4EQbwrutnMn/2xdbDNXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQgZMWn YI0ZyHG9sMa+FdJGXpHEMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKzbweKpHHa1vPDSohnnF+djpJQxvIV2YmFjfvvKiY/wavwQBndGoe74fBW8M 8IvOEf3dRkkIlm12b7nS+CfD6sTNUI7RFOlUzq+Ta/DEeqruxPL4TaT53egWKcuP FH5zN+gQRnYO2+7SB1WCi3xdaw2rAAZaBXTmWp6a6qfb1kLpDFAkfqFZL/FKwDoi rBtN4JaHlu5sROfz5Gfjd97dqqKtIaQqLuDL3Z00MllXlVu4eFfEDozy0O8w2i9O Gl4NuOXJ+TSDeAW+sL0YFWIKvM9EUuiuxgxC9FOY8QX52VcI2X6P2/5yQuEQFfeG UxKxcTueWHzTiih16O2IQ6KJxw== -----END CERTIFICATE-----Generated at Sun Nov 15 19:16:33 2026 by rpki-client