$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: f2PFnmE0l3bwjswzzcRfLjU/cyOugleErJbDbBeCYMA= Subject key identifier: 36:51:F8:87:93:F4:55:51:85:B2:3B:D9:46:72:86:0C:09:81:6F:A4 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12DA Signing time: Sat 14 Nov 2026 16:58:21 +0000 Manifest this update: Sat 14 Nov 2026 16:58:20 +0000 Manifest next update: Sat 21 Nov 2026 16:58:20 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: 5Mmtpxt1+rbwDOTofDuy8uZy29oZ5W7uF+Y9ZDI7R0M=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: wH/YBuSIvwTFmyy31k9N28U8ny+6AQtP4uVAhBFpStc=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: yEHcdIRxGvcvL3LH1FATyxWaJjcbOvRWhMW0n20VfHo=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: wClZOasA7CYFIrgh0jHCNkh1TB6Atr6EuIVvJgOfZHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4863 (0x12ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Nov 14 16:58:20 2026 GMT Not After : Nov 21 16:58:20 2026 GMT Subject: CN=6af8932c-27c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:9a:ec:0b:0f:84:93:3c:a2:a1:87:8e:3b: 3a:b5:f6:7f:4e:ca:59:03:a4:d3:9d:ff:1e:01:80: a2:a1:a2:37:74:04:e0:6d:9a:c9:10:81:a2:70:3f: 10:04:81:8d:9d:69:6d:26:7b:a4:6b:09:cd:06:87: a5:bd:d7:5a:d3:1d:79:ac:2c:f3:14:de:58:1c:fb: d7:6a:0d:dd:c6:e0:16:c2:73:1c:f2:51:ea:5d:c6: 2a:54:20:e7:b9:f6:4d:3a:9a:50:1e:37:6a:98:ed: 5d:de:76:ac:00:cd:ed:d5:b7:b5:46:3c:c8:b7:07: ed:1c:03:4a:eb:b4:c0:4e:aa:dc:24:75:cf:4e:b4: b3:ca:00:62:ae:d4:76:b1:21:80:47:fc:16:9d:89: 50:b0:4b:58:dc:5d:2f:06:8f:89:f0:70:77:bc:06: b9:de:64:5f:02:4f:cf:4f:32:b3:8a:95:7b:c0:7b: 1a:ca:82:af:dc:eb:b3:be:53:d8:02:2e:b0:9b:87: 50:23:32:8b:fd:0b:dd:33:35:2c:85:f3:62:06:d6: bc:05:dc:29:09:bc:5a:34:f8:ea:da:39:59:f3:a2: 0e:5f:a6:0f:16:7c:95:d8:90:87:e4:00:49:01:26: a3:88:ea:11:11:5d:7d:fd:46:da:f1:1a:32:f2:53: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:F8:87:93:F4:55:51:85:B2:3B:D9:46:72:86:0C:09:81:6F:A4 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ef:df:52:4d:e1:60:bc:76:61:c1:cb:1b:e2:7e:32:fa:88: 41:4b:e1:ab:74:a6:f0:90:3a:e9:f1:ea:18:ee:6a:c7:64:d0: 1e:fc:ad:46:4d:eb:48:17:9b:b7:b7:06:04:1a:bf:61:09:e0: b4:45:80:9a:88:53:5b:df:1a:08:7e:72:69:22:06:a2:11:59: e0:31:2b:75:5e:1e:86:f2:f8:be:f3:34:1f:28:15:a8:94:03: 14:ba:ae:2e:e1:ba:b5:48:af:33:1d:e7:d1:3a:86:ee:d2:e0: 00:f5:d7:3c:cc:1c:55:ae:a2:97:a3:57:b3:3c:15:e9:a0:82: 1e:6f:8d:27:93:b1:cb:2d:82:1e:c7:df:2a:bf:8e:8c:44:a7: 2a:de:85:c3:a7:09:b5:ce:00:e4:f2:4b:61:6c:6a:67:4e:0d: c5:c7:a0:f2:0c:60:50:07:f8:e2:72:af:f4:af:eb:72:61:e1: 03:a6:14:43:61:ea:ef:63:2f:9b:4e:c3:49:b0:aa:ae:47:03: a1:c5:cb:93:16:2e:bb:d9:bb:63:6d:2d:90:7a:09:b9:a0:1a: 57:f4:3d:6c:25:7a:52:32:60:25:bc:5c:aa:45:02:63:85:5c: 64:97:91:89:a7:4a:89:96:43:08:f6:8b:ce:c6:7a:76:75:cb: 8f:f2:8a:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYxMTE0MTY1ODIwWhcNMjYxMTIxMTY1ODIwWjAYMRYwFAYD VQQDEw02YWY4OTMyYy0yN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBaa7AsPhJM8oqGHjjs6tfZ/TspZA6TTnf8eAYCioaI3dATgbZrJEIGicD8Q BIGNnWltJnukawnNBoelvdda0x15rCzzFN5YHPvXag3dxuAWwnMc8lHqXcYqVCDn ufZNOppQHjdqmO1d3nasAM3t1be1RjzItwftHANK67TATqrcJHXPTrSzygBirtR2 sSGAR/wWnYlQsEtY3F0vBo+J8HB3vAa53mRfAk/PTzKzipV7wHsayoKv3OuzvlPY Ai6wm4dQIzKL/QvdMzUshfNiBta8BdwpCbxaNPjq2jlZ86IOX6YPFnyV2JCH5ABJ ASajiOoREV19/Uba8Roy8lP/nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZR+IeT 9FVRhbI72UZyhgwJgW+kMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbO/fUk3hYLx2YcHLG+J+MvqIQUvhq3Sm8JA66fHqGO5qx2TQHvytRk3rSBeb t7cGBBq/YQngtEWAmohTW98aCH5yaSIGohFZ4DErdV4ehvL4vvM0HygVqJQDFLqu LuG6tUivMx3n0TqG7tLgAPXXPMwcVa6il6NXszwV6aCCHm+NJ5Oxyy2CHsffKr+O jESnKt6Fw6cJtc4A5PJLYWxqZ04Nxceg8gxgUAf44nKv9K/rcmHhA6YUQ2Hq72Mv m07DSbCqrkcDocXLkxYuu9m7Y20tkHoJuaAaV/Q9bCV6UjJgJbxcqkUCY4VcZJeR iadKiZZDCPaLzsZ6dnXLj/KKCQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:32 2026 by rpki-client