$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json) Hash identifier: we0r4jULUJxtriT9/fzQrIVHU7QSyyQKpY3Z8KGPCFM= Subject key identifier: 7D:B0:30:0A:86:07:B2:3C:E4:2B:3A:37:F7:8E:E2:43:33:0C:12:E9 Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft Manifest number: 01AC Signing time: Sun 15 Nov 2026 04:20:30 +0000 Manifest this update: Sun 15 Nov 2026 04:20:30 +0000 Manifest next update: Sun 22 Nov 2026 04:20:30 +0000 Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: VaOpVc9hlox2TxkeQbXPfuOx6ulFLMs0iyH0TFDYFo4=) 2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: qQN6uale8J4WjFyRmfbzyXjiaHGTOFF5IOq1ywQVuBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Validity Not Before: Nov 15 04:20:30 2026 GMT Not After : Nov 22 04:20:30 2026 GMT Subject: CN=6af9330e-c233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:c7:28:db:67:37:e3:60:d6:4b:33:d0:15: 9c:78:9b:a6:48:c1:6f:f2:69:7a:d8:f3:63:8a:7e: e7:a6:8f:8a:8e:17:8d:47:ad:25:40:55:d0:59:39: df:76:20:87:54:35:d9:6a:36:ab:e5:bb:3a:26:6f: 47:37:8e:3c:33:46:3b:42:03:0c:7a:fa:88:a4:c7: 96:da:4e:c3:bd:dd:3c:1f:4a:7a:e0:0c:3d:82:4a: e0:e9:54:8b:7f:ea:a1:74:03:4a:4e:3c:0f:3b:3e: 15:6d:aa:a8:59:aa:a8:9a:c1:e2:67:44:73:6b:c3: 2f:e6:fe:c8:80:c8:bd:75:6e:8b:58:16:5b:71:54: 3c:f2:4f:5a:8a:a6:7b:7d:0d:e0:8f:64:8b:8b:2e: a4:ad:ba:82:72:27:48:6c:1c:85:61:c5:93:61:bf: 73:bd:97:d7:b5:63:ba:91:30:67:f0:de:0f:63:f2: d2:33:ce:d9:8f:d8:a8:30:1d:af:d1:a7:49:91:3b: d7:03:db:5f:cd:f3:ab:e0:bb:04:dc:cf:cc:57:4f: e1:35:90:7b:93:8b:c7:79:19:49:73:9a:5c:56:9f: 2c:6c:af:06:97:54:d1:78:08:a8:f9:bf:4b:ba:b6: 9a:2e:2c:12:9b:70:6e:69:35:06:ca:e7:24:00:da: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:30:0A:86:07:B2:3C:E4:2B:3A:37:F7:8E:E2:43:33:0C:12:E9 X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b3:0c:ab:37:91:f9:c4:14:53:d6:6c:54:35:c4:c1:85:55: 78:90:20:21:65:60:99:58:c0:7a:c4:0d:72:99:78:04:0f:50: eb:c2:0f:d0:69:05:5a:c1:52:16:83:fd:6f:7f:70:b6:09:c4: 66:6f:46:4b:1d:24:27:67:f3:24:f6:e3:8c:74:5f:db:b4:97: a1:9d:3a:f1:85:ce:07:29:1a:ff:55:a4:75:9a:84:f7:29:c7: 93:17:42:a6:ac:d3:82:af:24:5a:58:17:61:90:5c:f4:55:9c: 03:a0:12:6a:99:82:7f:f3:8b:34:3d:8c:50:ac:91:34:43:e2: 2d:dd:28:f3:82:74:a1:73:b0:3a:39:d3:e2:72:a7:43:14:4f: 49:05:f9:1c:88:c9:8d:06:57:cb:21:09:f1:f6:ec:97:c6:b5: 8a:ee:b5:d6:39:05:7b:3c:9b:69:a0:d7:5a:75:70:fc:60:0f: d5:4f:f4:a6:36:c8:c9:1a:35:7e:2e:6f:6f:6b:19:3c:08:e6: e6:73:fa:6b:ad:66:ca:ee:41:f3:69:53:58:c6:67:e4:e1:93: ad:63:ba:c9:c9:46:95:21:d6:8e:cb:91:79:70:75:d8:87:3a: 8f:3b:f7:6b:93:0c:f8:cf:0e:57:52:ea:bb:de:a1:ac:e6:3f: 97:e2:1d:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2NTJEOEU5RkVF N0VDNUFFMzMwHhcNMjYxMTE1MDQyMDMwWhcNMjYxMTIyMDQyMDMwWjAYMRYwFAYD VQQDEw02YWY5MzMwZS1jMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWDHKNtnN+Ng1ksz0BWceJumSMFv8ml62PNjin7npo+KjheNR60lQFXQWTnf diCHVDXZajar5bs6Jm9HN448M0Y7QgMMevqIpMeW2k7Dvd08H0p64Aw9gkrg6VSL f+qhdANKTjwPOz4VbaqoWaqomsHiZ0Rza8Mv5v7IgMi9dW6LWBZbcVQ88k9aiqZ7 fQ3gj2SLiy6krbqCcidIbByFYcWTYb9zvZfXtWO6kTBn8N4PY/LSM87Zj9ioMB2v 0adJkTvXA9tfzfOr4LsE3M/MV0/hNZB7k4vHeRlJc5pcVp8sbK8Gl1TReAio+b9L uraaLiwSm3BuaTUGyuckANq+fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2wMAqG B7I85Cs6N/eO4kMzDBLpMB8GA1UdIwQYMBaAFJAan56K5AYuUhm3ZS2On+5+xa4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNFNy83MkY3NUI5ODVB REQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0JpNVNHYmRsTFk2ZjduN0Zy ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0Jp NVNHYmRsTFk2ZjduN0Zyak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7MMqzeR+cQUU9ZsVDXEwYVVeJAgIWVgmVjAesQNcpl4BA9Q68IP0GkFWsFS FoP9b39wtgnEZm9GSx0kJ2fzJPbjjHRf27SXoZ068YXOByka/1WkdZqE9ynHkxdC pqzTgq8kWlgXYZBc9FWcA6ASapmCf/OLND2MUKyRNEPiLd0o84J0oXOwOjnT4nKn QxRPSQX5HIjJjQZXyyEJ8fbsl8a1iu611jkFezybaaDXWnVw/GAP1U/0pjbIyRo1 fi5vb2sZPAjm5nP6a61myu5B82lTWMZn5OGTrWO6yclGlSHWjsuReXB12Ic6jzv3 a5MM+M8OV1Lqu96hrOY/l+IdRQ== -----END CERTIFICATE-----Generated at Sun Nov 15 23:52:33 2026 by rpki-client