$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: Ku2XQkgZKt51bl9Uyw3t2y55EWo7IUsjBBUN53MvFH4= Subject key identifier: 56:68:20:8D:12:53:59:71:DD:C1:E4:3F:0F:D2:16:1D:89:8E:18:33 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 07DC Signing time: Sat 14 Nov 2026 21:16:32 +0000 Manifest this update: Sat 14 Nov 2026 21:16:31 +0000 Manifest next update: Sat 21 Nov 2026 21:16:31 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: U2LPpiDEqALipHjqjquJ3vTTwmIl6eACtKmz8viBAk0=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) 4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Nov 14 21:16:31 2026 GMT Not After : Nov 21 21:16:31 2026 GMT Subject: CN=6af8cfb0-4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:aa:59:fb:9e:65:dc:da:c9:ff:7d:aa:f5: 62:7c:6e:1c:c1:8c:81:ba:f2:a8:d8:c4:f2:ea:23: 6b:9e:30:4b:31:be:7d:46:85:16:9b:02:f4:01:cf: 31:dd:9c:78:8d:a2:18:52:c1:bd:7c:cb:39:ff:66: fb:43:22:4a:d2:72:37:62:65:c5:1c:e0:ad:13:45: 5b:cf:ed:b1:ce:7e:84:76:8a:8a:b8:14:67:94:da: 5e:ae:7c:95:08:35:d7:30:44:d6:0a:ee:d1:6b:e4: 38:74:56:fe:33:cf:ff:55:bf:da:a7:ab:67:93:88: e8:35:02:01:51:ab:cb:57:33:3b:47:f7:b7:20:e5: 5f:bd:1e:3e:6f:8a:29:90:ff:4f:77:a3:32:3b:7e: 16:13:39:5d:42:70:5d:d0:2d:64:90:07:01:58:8c: a7:98:f1:f4:4d:58:ac:f6:3f:2a:a8:48:c6:0d:97: 25:2f:58:fc:b6:03:f2:b2:57:40:50:e7:6a:98:2c: bf:d0:51:9b:d0:ce:01:6d:b9:d1:72:f1:8c:b8:c3: fc:c7:fb:02:f3:1b:a2:73:61:8a:ec:ed:45:a7:7f: b6:91:71:fe:b7:75:5e:3e:aa:db:b7:a5:98:86:2d: 54:79:3c:d6:dd:49:a6:c9:d1:f1:c1:e1:69:58:e2: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:20:8D:12:53:59:71:DD:C1:E4:3F:0F:D2:16:1D:89:8E:18:33 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:27:4f:a1:85:43:b9:8a:23:9c:44:98:50:eb:35:f6:19: fd:18:8a:c3:d6:33:c2:6e:5b:09:37:7a:45:27:0f:a5:bf:cc: a7:35:97:9c:4c:57:54:d9:2b:8c:cb:7d:40:1d:13:02:7a:61: 4e:85:23:54:7b:91:2b:bd:44:b3:34:0a:2c:8a:f3:f6:d1:2f: f9:dd:2d:40:8f:84:ab:1c:c0:f9:a9:1a:32:3b:43:aa:ed:49: de:b7:04:75:ec:a4:2b:21:12:d5:8a:95:3a:76:95:f0:31:23: 07:86:9c:88:40:df:6c:8b:7d:7c:71:a7:a2:3f:11:2c:16:49: 64:77:1e:1a:34:22:e8:05:b4:4a:97:1b:b6:18:01:4b:0b:56: 1c:19:7e:c1:5b:00:04:1f:95:6f:bc:84:bc:1f:dc:e9:46:70: f4:80:4e:2f:b6:6f:4c:6e:02:cf:4c:98:7b:ac:c9:09:cb:33: 86:8a:e7:d7:64:e5:48:e8:8a:ff:d5:18:4d:ce:1d:91:ac:a8: 8b:d5:c9:38:00:6a:9a:36:8a:84:d3:94:6a:54:85:c7:82:9e: 24:27:cc:94:1d:59:81:68:e9:c2:52:4e:62:da:d6:90:98:9a: 7b:3e:7d:dc:c7:8e:65:c7:7b:79:cc:67:4c:31:b6:a9:5b:ab: 06:00:7d:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYxMTE0MjExNjMxWhcNMjYxMTIxMjExNjMxWjAYMRYwFAYD VQQDEw02YWY4Y2ZiMC00MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1GqWfueZdzayf99qvVifG4cwYyBuvKo2MTy6iNrnjBLMb59RoUWmwL0Ac8x 3Zx4jaIYUsG9fMs5/2b7QyJK0nI3YmXFHOCtE0Vbz+2xzn6EdoqKuBRnlNpernyV CDXXMETWCu7Ra+Q4dFb+M8//Vb/ap6tnk4joNQIBUavLVzM7R/e3IOVfvR4+b4op kP9Pd6MyO34WEzldQnBd0C1kkAcBWIynmPH0TVis9j8qqEjGDZclL1j8tgPysldA UOdqmCy/0FGb0M4BbbnRcvGMuMP8x/sC8xuic2GK7O1Fp3+2kXH+t3VePqrbt6WY hi1UeTzW3UmmydHxweFpWOIoJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZoII0S U1lx3cHkPw/SFh2JjhgzMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJWwnT6GFQ7mKI5xEmFDrNfYZ/RiKw9Yzwm5bCTd6RScPpb/MpzWXnExXVNkr jMt9QB0TAnphToUjVHuRK71EszQKLIrz9tEv+d0tQI+EqxzA+akaMjtDqu1J3rcE deykKyES1YqVOnaV8DEjB4aciEDfbIt9fHGnoj8RLBZJZHceGjQi6AW0SpcbthgB SwtWHBl+wVsABB+Vb7yEvB/c6UZw9IBOL7ZvTG4Cz0yYe6zJCcszhorn12TlSOiK /9UYTc4dkayoi9XJOABqmjaKhNOUalSFx4KeJCfMlB1ZgWjpwlJOYtrWkJiaez59 3MeOZcd7ecxnTDG2qVurBgB9BQ== -----END CERTIFICATE-----Generated at Sun Nov 15 00:56:27 2026 by rpki-client