$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: 6HBGDIqGOmO2Mkv+z1c/gl6rs8xRrCRucbQT92cwigo= Subject key identifier: 4E:36:79:16:3B:4F:69:EE:46:DF:56:45:64:7B:B2:3E:37:A1:C1:CA Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 35E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 35BF Signing time: Sat 14 Nov 2026 14:19:10 +0000 Manifest this update: Sat 14 Nov 2026 14:19:09 +0000 Manifest next update: Sat 21 Nov 2026 14:19:09 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: DqqLeFlHWSvZu959AX4n/k7YnAegiWYN6mlT5YBnf5k=) 2: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: XQiiRoZi6pRqCcdlCvd3IdGsHWdpm/jnCGN7DrFAwWE=) 3: Hc9HIXtMSG_5N_vBQ1tiTJyx4Uc.asa (hash: Hn+LrBWls+8N6/ROjuDSjCe4xS9yFFqp8inB56Ippe4=) 4: E404430CB0F811E595E0F761C4F9AE02.roa (hash: dh5lUduMwHSl3wThPTXL9P/yi+GXIfLIHScJbSj8Rp0=) 5: 77WwVdlWOllQ_9nqw0OJxL5S230.asa (hash: 4G+8eHZ/yV9ZB1VW22OiyhYdNPjveNdtUIFCgVDff7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13797 (0x35e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Validity Not Before: Nov 14 14:19:09 2026 GMT Not After : Nov 21 14:19:09 2026 GMT Subject: CN=6af86dde-a0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:ca:19:59:76:0a:f5:3e:46:c8:f2:c9:dd: 50:c7:7f:5f:8e:e5:8e:56:1f:40:54:4c:45:9b:ef: 17:78:51:f4:0f:31:bf:66:c2:f2:f2:33:8d:18:c2: 03:5d:25:7f:4f:7f:71:f8:c6:64:26:87:09:9f:95: 68:0a:27:88:2d:ba:ee:57:47:32:4c:30:cc:cc:03: f0:bf:a7:4c:80:34:02:c7:4b:b8:68:92:00:cb:29: 55:f7:08:2a:dc:64:89:e8:68:e1:32:85:a7:91:7f: 07:d0:88:f1:21:ab:2f:05:08:ba:4d:2f:fd:bc:9f: c8:1b:c0:b5:44:ba:91:3b:2e:5a:f9:43:76:27:41: 41:e7:4f:bf:4f:02:79:e6:0b:aa:97:70:e4:be:dd: 4f:25:2c:cb:29:da:33:2e:8b:38:47:c0:9f:91:d1: b0:0c:77:2b:f5:b2:a2:d0:05:ba:ed:f7:7b:aa:34: c3:14:4e:80:72:41:98:13:3e:03:7a:1b:9b:45:38: 7b:12:ef:d3:1e:31:0e:8d:45:64:89:59:d3:1a:e9: 36:a7:bf:44:28:df:63:fa:c2:0f:7d:46:b4:27:a6: 5a:93:2c:24:25:e8:8f:41:a7:89:87:84:dc:e6:d6: ce:34:8a:eb:6f:d1:d0:b4:84:f7:ee:86:e7:bc:2c: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:79:16:3B:4F:69:EE:46:DF:56:45:64:7B:B2:3E:37:A1:C1:CA X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:00:ac:5b:58:7a:c8:38:d1:a8:c2:e4:b4:62:82:14:2c:36: 1b:e9:31:60:6f:7d:08:d6:1f:65:e9:fc:17:f8:8f:2b:f2:0b: a8:9d:92:75:1f:9a:0f:cf:65:24:a9:17:64:35:b7:70:3c:ab: 3a:d1:01:fd:ec:f7:45:82:76:27:5c:3d:13:5b:26:fe:bb:8a: dc:b9:19:d9:ad:4c:19:cf:f4:f2:ea:5e:1a:4b:67:0c:0b:26: 60:3c:c0:11:5a:9c:0f:d8:7b:01:49:2f:84:2e:97:34:cd:62: 0d:f4:0b:fa:5d:ab:59:c3:f1:4b:19:6d:0d:79:8b:0f:8e:8b: 4d:b9:0b:5e:01:ea:07:03:03:1c:fc:c5:ef:0e:e2:8f:45:49: a2:ba:f7:47:83:d3:f7:3b:45:9a:49:38:07:a7:37:3f:e3:49: 0d:71:35:47:2c:c4:64:48:d6:1c:95:d7:f2:a7:a5:a7:20:38: 5a:15:23:85:10:5b:8e:c6:81:0e:d7:ac:79:61:4d:63:34:fa: 58:b5:c2:a9:f2:db:7a:f2:ea:96:e4:5d:94:65:eb:cf:d4:81: 47:4d:60:ef:3a:23:28:6f:56:60:35:e9:68:8d:3b:1d:98:fd: 25:39:4f:eb:b0:71:37:7d:08:ad:a5:6a:96:b6:d3:61:ae:b5: 7a:ac:01:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjYxMTE0MTQxOTA5WhcNMjYxMTIxMTQxOTA5WjAYMRYwFAYD VQQDEw02YWY4NmRkZS1hMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7fKGVl2CvU+Rsjyyd1Qx39fjuWOVh9AVExFm+8XeFH0DzG/ZsLy8jONGMID XSV/T39x+MZkJocJn5VoCieILbruV0cyTDDMzAPwv6dMgDQCx0u4aJIAyylV9wgq 3GSJ6GjhMoWnkX8H0IjxIasvBQi6TS/9vJ/IG8C1RLqROy5a+UN2J0FB50+/TwJ5 5guql3Dkvt1PJSzLKdozLos4R8CfkdGwDHcr9bKi0AW67fd7qjTDFE6AckGYEz4D ehubRTh7Eu/THjEOjUVkiVnTGuk2p79EKN9j+sIPfUa0J6ZakywkJeiPQaeJh4Tc 5tbONIrrb9HQtIT37obnvCzATwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE42eRY7 T2nuRt9WRWR7sj43ocHKMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHwCsW1h6yDjRqMLktGKCFCw2G+kxYG99CNYfZen8F/iPK/ILqJ2SdR+aD89l JKkXZDW3cDyrOtEB/ez3RYJ2J1w9E1sm/ruK3LkZ2a1MGc/08upeGktnDAsmYDzA EVqcD9h7AUkvhC6XNM1iDfQL+l2rWcPxSxltDXmLD46LTbkLXgHqBwMDHPzF7w7i j0VJorr3R4PT9ztFmkk4B6c3P+NJDXE1RyzEZEjWHJXX8qelpyA4WhUjhRBbjsaB DteseWFNYzT6WLXCqfLbevLqluRdlGXrz9SBR01g7zojKG9WYDXpaI07HZj9JTlP 67BxN30IraVqlrbTYa61eqwBCg== -----END CERTIFICATE-----Generated at Sun Nov 15 15:59:56 2026 by rpki-client