$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft File: ssnrQPywE1ScqjXmpYC9mNr_DvM.mft (raw, json) Hash identifier: U8jeVZ6+LR9y/X3f8NNcqV1YPvPfJiwnvg2n4gup3H8= Subject key identifier: FF:6A:AA:62:BC:26:C7:33:9D:AB:B2:26:C1:F3:79:40:2C:02:14:45 Authority key identifier: B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3 Certificate issuer: /CN=A91F29DD/serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft Manifest number: 1E Signing time: Sun 15 Nov 2026 09:07:37 +0000 Manifest this update: Sun 15 Nov 2026 09:07:37 +0000 Manifest next update: Sun 22 Nov 2026 09:07:37 +0000 Files and hashes: 1: ssnrQPywE1ScqjXmpYC9mNr_DvM.crl (hash: vjyNc2n+UcFQnHJbhRxESwinfAGjWn8R8tJhmvw5ttE=) 2: 562C4F32B58F11F1919EBCA56C11F970.roa (hash: s9/6Wu2v2FTT8R7Df/OuhcIg3vm5m0oyRj3n+CokLv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F29DD, serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3 Validity Not Before: Nov 15 09:07:37 2026 GMT Not After : Nov 22 09:07:37 2026 GMT Subject: CN=6af97659-f315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:68:5a:00:57:dd:de:0e:32:0a:94:83:82: 04:53:89:17:67:e5:15:fd:83:05:40:eb:7f:17:c4: c6:a1:49:ff:46:58:23:f9:2c:dc:82:8d:d4:2b:48: 83:95:0c:d5:ec:bc:da:1a:da:8b:a0:88:b3:be:49: fa:09:d7:01:4c:90:5d:45:5a:94:3c:48:00:b4:8d: ca:cc:ca:c0:2b:07:c9:b7:a6:e5:08:d6:1a:bd:f9: 1d:c8:8c:20:ea:b4:75:ee:22:b5:92:46:c3:30:27: 03:a1:1b:42:44:68:02:fe:e7:bf:ef:b2:7b:76:da: fb:f2:ff:3b:81:10:1b:8f:50:e7:77:e5:a7:68:f8: 75:a8:53:52:0e:d8:e0:2e:af:b3:c9:76:07:50:13: 60:d2:37:d0:46:0b:a6:91:c4:01:45:d4:32:9d:73: 2b:cf:68:81:38:c8:40:9a:f5:86:0c:a2:5a:5e:38: 41:9f:a7:6c:0b:ec:17:f9:51:4b:41:30:3c:0b:a4: 2e:b7:6a:33:94:c2:e5:3b:44:43:67:c7:cb:5b:1c: ec:a7:85:90:e3:36:0f:a5:d3:1e:63:f0:58:9c:64: 47:10:c0:4f:e4:1f:76:a6:09:bc:10:b6:b8:3a:b6: fb:ed:a9:a0:c8:c9:5a:d9:8a:d8:b7:29:14:06:37: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:AA:62:BC:26:C7:33:9D:AB:B2:26:C1:F3:79:40:2C:02:14:45 X509v3 Authority Key Identifier: keyid:B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:66:3a:5f:6f:3a:24:75:23:55:37:5b:cf:aa:5a:0d:e2:d1: 56:8e:45:0b:c8:13:5f:8f:2e:73:04:3c:49:1c:ea:d1:9b:d3: 01:8a:a3:83:6c:1c:b2:61:40:6c:ce:96:91:94:87:4f:08:36: 43:5e:20:31:d0:42:26:96:c8:a8:9b:0d:8f:5c:c6:f2:0b:b2: c0:cf:a9:39:5a:f2:03:b3:2c:f4:e2:7e:89:0c:aa:ff:6d:28: 93:ac:6f:e8:be:0b:2b:1f:03:65:ce:17:ca:ad:96:c0:f8:36: f8:cd:c6:8a:6c:1f:73:26:13:c2:e4:5e:60:38:a5:57:75:53: 41:c8:8d:84:ce:a8:d8:40:99:8e:71:a7:28:6f:af:7e:cb:70: da:59:f6:9c:bf:8a:e8:aa:a0:1b:39:4f:8f:2d:fb:ad:70:7b: a5:42:06:26:d4:23:6d:1d:5d:87:8a:a4:cc:63:5a:5d:f7:40: a1:a9:73:e3:24:ba:cb:2a:e5:0e:a4:55:31:1e:46:e7:f1:84: f0:1c:05:92:99:61:1e:23:aa:1f:8d:35:40:2e:76:f8:f3:b0: 04:89:27:af:18:f2:3c:ff:36:03:54:8f:76:4a:64:c7:14:89: 0e:ac:c0:ea:26:6c:3b:e4:10:d0:ca:58:7d:8b:cf:82:ac:0c: ec:d7:39:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjlERDExMC8GA1UEBRMoQjJDOUVCNDBGQ0IwMTM1NDlDQUEzNUU2QTU4MEJEOThE QUZGMEVGMzAeFw0yNjExMTUwOTA3MzdaFw0yNjExMjIwOTA3MzdaMBgxFjAUBgNV BAMTDTZhZjk3NjU5LWYzMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwY2haAFfd3g4yCpSDggRTiRdn5RX9gwVA638XxMahSf9GWCP5LNyCjdQrSIOV DNXsvNoa2ougiLO+SfoJ1wFMkF1FWpQ8SAC0jcrMysArB8m3puUI1hq9+R3IjCDq tHXuIrWSRsMwJwOhG0JEaAL+57/vsnt22vvy/zuBEBuPUOd35ado+HWoU1IO2OAu r7PJdgdQE2DSN9BGC6aRxAFF1DKdcyvPaIE4yECa9YYMolpeOEGfp2wL7Bf5UUtB MDwLpC63ajOUwuU7RENnx8tbHOynhZDjNg+l0x5j8FicZEcQwE/kH3amCbwQtrg6 tvvtqaDIyVrZiti3KRQGN64PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/2qqYrwm xzOdq7ImwfN5QCwCFEUwHwYDVR0jBBgwFoAUssnrQPywE1ScqjXmpYC9mNr/DvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyOURELzRCQzExMjhDQjU4 RDExRjE5NEQ4REQzRTZDMTFGOTcwL3NzbnJRUHl3RTFTY3FqWG1wWUM5bU5yX0R2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvc3NuclFQeXdFMVNjcWpYbXBZQzltTnJfRHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy OURELzRCQzExMjhDQjU4RDExRjE5NEQ4REQzRTZDMTFGOTcwL3NzbnJRUHl3RTFT Y3FqWG1wWUM5bU5yX0R2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDaZjpfbzokdSNVN1vPqloN4tFWjkULyBNfjy5zBDxJHOrRm9MBiqODbByyYUBs zpaRlIdPCDZDXiAx0EImlsiomw2PXMbyC7LAz6k5WvIDsyz04n6JDKr/bSiTrG/o vgsrHwNlzhfKrZbA+Db4zcaKbB9zJhPC5F5gOKVXdVNByI2EzqjYQJmOcacob69+ y3DaWfacv4roqqAbOU+PLfutcHulQgYm1CNtHV2HiqTMY1pd90ChqXPjJLrLKuUO pFUxHkbn8YTwHAWSmWEeI6ofjTVALnb487AEiSevGPI8/zYDVI92SmTHFIkOrMDq Jmw75BDQylh9i8+CrAzs1zmw -----END CERTIFICATE-----Generated at Sun Nov 15 11:53:44 2026 by rpki-client