$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: 51EHOk/uVZtM46JG7TUoJi3WfyooJ2Wngt7B2o58opE= Subject key identifier: 0B:D0:C9:65:45:14:58:AC:9D:72:EE:9B:5F:52:32:17:42:2C:F2:34 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 0116 Signing time: Sun 15 Nov 2026 06:10:57 +0000 Manifest this update: Sun 15 Nov 2026 06:10:57 +0000 Manifest next update: Sun 22 Nov 2026 06:10:57 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: X23SDTA2YuaeO1mHfKieX03b95KKWMR3m63kY/c0xxI=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Nov 15 06:10:57 2026 GMT Not After : Nov 22 06:10:57 2026 GMT Subject: CN=6af94cf1-500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:57:f9:fd:8b:88:73:de:6f:1a:44:37:fb: cd:0b:a3:03:c0:da:28:b6:f6:12:47:67:83:bc:fc: 68:7c:1b:b4:3c:45:4e:db:5e:28:98:14:d9:f3:0a: 22:35:94:d7:ff:e5:3b:50:c4:d3:7a:b3:89:c4:c6: 2d:90:9e:45:46:a6:ed:39:32:5f:b6:c6:a2:02:64: a6:be:1c:78:9d:fc:1c:71:93:45:c3:2b:a0:d2:a5: 98:f6:ff:93:aa:e5:b8:f3:b9:2f:d6:ce:1c:57:ec: 87:ea:56:51:68:c8:f2:f5:b9:00:b8:c1:e4:aa:5e: 6f:b4:6e:80:15:a1:e5:f5:3b:13:a6:e5:fc:35:b2: 6d:d3:e4:c4:be:4c:72:2a:28:d8:e7:87:5e:26:77: 6e:72:4b:c6:94:3d:79:86:30:31:2a:b4:21:45:40: d8:8e:1b:0a:03:60:2a:d1:a5:2d:c4:69:ce:71:9e: 7f:9e:9b:ea:1c:d0:91:a5:da:8e:6a:38:54:1a:c0: 46:47:a5:20:1f:35:c9:22:74:c7:d6:b8:47:fc:5e: a9:bb:f4:bb:f7:bd:7c:99:df:f9:2a:9b:70:b4:3a: 73:35:a6:98:7f:5f:e0:d5:39:ac:cd:2c:43:91:94: 0d:f9:06:e8:bc:5b:4f:cd:75:39:bc:16:eb:e1:9d: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:C9:65:45:14:58:AC:9D:72:EE:9B:5F:52:32:17:42:2C:F2:34 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2e:3c:cb:84:71:91:83:31:b2:7e:02:53:f5:14:67:14:74: fc:11:1e:3a:54:83:59:86:8e:33:5c:fc:e5:bc:17:76:9c:c1: 6e:a2:19:3b:f5:0d:72:50:15:b6:9e:0a:34:5a:29:f4:f2:e1: 56:9b:e3:bf:09:55:56:17:d0:f8:61:52:43:f2:ab:08:78:98: 0f:0e:8f:80:a5:78:cc:78:6e:20:75:33:27:97:5e:2e:7c:ef: 1c:98:48:62:6f:ab:82:6c:20:f3:9f:27:87:36:01:c4:2a:43: 40:72:61:12:41:53:6f:29:22:d9:72:cf:dc:ab:aa:54:6a:bf: 2a:ce:0e:08:d5:3a:42:fe:b2:79:bc:0b:e9:27:9f:44:5d:94: 00:66:f7:03:3b:24:c3:d0:84:ea:44:e4:c1:c9:45:d9:a4:7f: ce:bd:01:27:9d:4a:0b:20:24:ee:54:43:e3:89:5f:bb:9e:c2: 44:2b:d0:40:b2:bc:e5:8a:a0:75:5b:2e:0b:b0:92:2b:15:55: fc:7f:2b:0f:4a:c0:cb:e7:9f:ee:26:2b:c7:25:93:82:fe:30: 71:44:ef:26:1b:d4:7d:42:47:23:ad:e1:71:f2:52:54:2e:09: 3a:f5:10:83:20:b9:7b:69:29:c5:05:9f:66:3e:85:6a:47:a6: e1:90:0b:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYxMTE1MDYxMDU3WhcNMjYxMTIyMDYxMDU3WjAYMRYwFAYD VQQDEw02YWY5NGNmMS01MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hlX+f2LiHPebxpEN/vNC6MDwNootvYSR2eDvPxofBu0PEVO214omBTZ8woi NZTX/+U7UMTTerOJxMYtkJ5FRqbtOTJftsaiAmSmvhx4nfwccZNFwyug0qWY9v+T quW487kv1s4cV+yH6lZRaMjy9bkAuMHkql5vtG6AFaHl9TsTpuX8NbJt0+TEvkxy KijY54deJnduckvGlD15hjAxKrQhRUDYjhsKA2Aq0aUtxGnOcZ5/npvqHNCRpdqO ajhUGsBGR6UgHzXJInTH1rhH/F6pu/S79718md/5KptwtDpzNaaYf1/g1TmszSxD kZQN+QbovFtPzXU5vBbr4Z2gwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvQyWVF FFisnXLum19SMhdCLPI0MB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMxMC8wRTk0MDVCQTNCOUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gt ckVOaloxYmtON2ZDWW05THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApS48y4RxkYMxsn4CU/UUZxR0/BEeOlSDWYaOM1z85bwXdpzBbqIZO/UNclAV tp4KNFop9PLhVpvjvwlVVhfQ+GFSQ/KrCHiYDw6PgKV4zHhuIHUzJ5deLnzvHJhI Ym+rgmwg858nhzYBxCpDQHJhEkFTbyki2XLP3KuqVGq/Ks4OCNU6Qv6yebwL6Sef RF2UAGb3Azskw9CE6kTkwclF2aR/zr0BJ51KCyAk7lRD44lfu57CRCvQQLK85Yqg dVsuC7CSKxVV/H8rD0rAy+ef7iYrxyWTgv4wcUTvJhvUfUJHI63hcfJSVC4JOvUQ gyC5e2kpxQWfZj6Fakem4ZALeQ== -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:37 2026 by rpki-client