$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: 04lrbg0fC2FhisYNEcMpBIp5QFaU74vf5fb9uAUVpfQ= Subject key identifier: E7:6D:6D:1A:62:BF:F9:63:51:E9:0E:41:80:53:8E:7B:82:9B:02:C7 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 044B Signing time: Sat 14 Nov 2026 23:57:35 +0000 Manifest this update: Sat 14 Nov 2026 23:57:34 +0000 Manifest next update: Sat 21 Nov 2026 23:57:34 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: oH41jX1uibWFJNXOwMfv3h62EjlEBbF+pZTKZUAZLu0=) 2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: a0L97K5oOYbRf/gfq5FexV0tHizBUzEzBtElWfmY8ZU=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: e872lbJT0e01YppSh9x6aQp3dd6RWEpMoEL1vz6llWM=) 4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: blF9ljxGk0SSZ87INU+o+RPso+OfA6xAz0M9+p2Ct40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Nov 14 23:57:34 2026 GMT Not After : Nov 21 23:57:34 2026 GMT Subject: CN=6af8f56f-da96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:78:31:fa:c0:0a:7e:85:12:2c:58:55:41: 47:43:ce:64:0e:d0:30:60:06:27:9e:cc:82:12:36: 84:77:35:75:41:d1:01:e2:6f:c9:e0:4a:45:45:c0: 81:bf:0b:5e:88:9f:b5:4c:8b:b3:a4:ba:e8:71:32: 58:a5:20:36:05:5a:5d:e8:6b:b8:52:54:7f:0c:24: 85:e5:23:14:13:64:ce:12:9f:c0:10:e6:76:02:40: 1e:b0:3b:d2:13:82:97:45:09:31:e6:1e:35:cd:14: da:77:d0:d5:b5:67:74:37:f2:79:de:b8:24:2f:64: a9:e2:1a:4b:a8:f7:a3:85:38:a6:b0:3a:ed:eb:dd: 4f:52:e0:02:e5:94:b6:85:f1:ad:3c:f2:69:00:ad: bb:2f:d2:40:0e:af:4c:86:19:3a:a7:f4:82:fd:c6: cb:d6:c2:5f:5c:82:cb:a5:d7:dd:ec:84:dc:5f:83: b8:8c:cb:9a:63:d1:a1:43:d5:e4:4c:e0:f7:58:a9: 20:c9:6f:ca:cf:67:cc:70:ab:8c:6c:73:71:05:b1: 82:f4:3f:c9:e5:6d:10:41:43:c2:4d:55:34:6a:d3: 75:8e:3d:c3:9e:66:73:5b:74:a6:16:f0:8e:ff:3e: c4:07:6c:bc:c6:de:a5:5d:c4:73:55:53:f5:fd:25: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6D:6D:1A:62:BF:F9:63:51:E9:0E:41:80:53:8E:7B:82:9B:02:C7 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8e:13:65:42:14:dc:5f:52:73:20:80:c1:7b:2e:82:fd:ae: a8:99:59:70:c8:30:46:eb:0a:5d:68:b9:44:91:4b:a5:9f:54: 7d:5b:11:61:2a:81:33:97:cf:59:9f:f4:3c:c7:56:1c:87:2e: 54:30:fe:91:f5:d2:c6:da:42:8c:51:fb:92:d5:24:86:11:25: 07:65:01:85:ad:47:63:7b:e1:b8:cf:cb:fe:f5:7a:01:e8:65: ee:b6:4c:eb:61:18:50:73:7d:03:84:b9:23:52:d3:e6:6a:c1: 1a:81:91:52:2e:ee:6a:d6:89:8b:20:b9:a4:11:7b:da:27:36: 33:90:d8:83:d4:0c:a3:bf:41:f1:1d:ee:0a:82:ec:ae:cc:a8: 0d:a4:f4:bf:13:25:e3:df:69:22:db:d2:b3:39:39:40:be:95: 96:43:b3:05:97:08:fa:99:08:94:c5:b5:c5:46:e6:c2:b3:dd: 32:17:d8:ec:0d:80:e5:29:4a:2d:13:f6:26:7f:7b:f2:eb:f1: 94:34:eb:0e:3c:e2:3b:a5:38:43:4b:3c:15:31:58:a0:21:02: 79:b4:0a:a7:a9:51:9c:e5:0f:88:e0:31:00:01:e4:3d:b7:b5: 11:24:23:15:ed:22:28:e7:ad:a1:1d:09:fc:cc:2f:e8:95:f8: 6e:48:ca:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYxMTE0MjM1NzM0WhcNMjYxMTIxMjM1NzM0WjAYMRYwFAYD VQQDEw02YWY4ZjU2Zi1kYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Rd4MfrACn6FEixYVUFHQ85kDtAwYAYnnsyCEjaEdzV1QdEB4m/J4EpFRcCB vwteiJ+1TIuzpLrocTJYpSA2BVpd6Gu4UlR/DCSF5SMUE2TOEp/AEOZ2AkAesDvS E4KXRQkx5h41zRTad9DVtWd0N/J53rgkL2Sp4hpLqPejhTimsDrt691PUuAC5ZS2 hfGtPPJpAK27L9JADq9Mhhk6p/SC/cbL1sJfXILLpdfd7ITcX4O4jMuaY9GhQ9Xk TOD3WKkgyW/Kz2fMcKuMbHNxBbGC9D/J5W0QQUPCTVU0atN1jj3DnmZzW3SmFvCO /z7EB2y8xt6lXcRzVVP1/SWMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdtbRpi v/ljUekOQYBTjnuCmwLHMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAY4TZUIU3F9ScyCAwXsugv2uqJlZcMgwRusKXWi5RJFLpZ9UfVsRYSqBM5fP WZ/0PMdWHIcuVDD+kfXSxtpCjFH7ktUkhhElB2UBha1HY3vhuM/L/vV6Aehl7rZM 62EYUHN9A4S5I1LT5mrBGoGRUi7uataJiyC5pBF72ic2M5DYg9QMo79B8R3uCoLs rsyoDaT0vxMl499pItvSszk5QL6VlkOzBZcI+pkIlMW1xUbmwrPdMhfY7A2A5SlK LRP2Jn978uvxlDTrDjziO6U4Q0s8FTFYoCECebQKp6lRnOUPiOAxAAHkPbe1ESQj Fe0iKOetoR0J/Mwv6JX4bkjKgQ== -----END CERTIFICATE-----Generated at Sun Nov 15 23:52:36 2026 by rpki-client