$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: 3gdh3H1gF6K4ueMDT8CPhtUYnFIWaiDV6wRgcRTmIUM= Subject key identifier: 98:A6:C3:2F:0E:70:78:25:93:54:6B:A8:DD:A4:52:4C:E0:28:05:FE Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 86 Signing time: Sun 15 Nov 2026 07:54:44 +0000 Manifest this update: Sun 15 Nov 2026 07:54:43 +0000 Manifest next update: Sun 22 Nov 2026 07:54:43 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: Aa+eN2I5rmrkfXlZRrYTLdVMLk+m8qSRxUYYfRGTB/k=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=) 3: 60C94672909911F189B737F66C11F970.roa (hash: MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=) 4: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Nov 15 07:54:43 2026 GMT Not After : Nov 22 07:54:43 2026 GMT Subject: CN=6af96544-a397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:60:ed:7d:79:71:80:6f:0c:0d:7e:89:94: 9f:08:c4:14:12:4d:c7:7b:c8:30:d7:95:fc:41:45: 35:f4:c4:1f:c7:0f:1f:5d:5d:98:d7:28:b3:3a:8f: 75:fa:b1:65:ae:e9:ee:89:97:13:3a:67:e8:21:8c: e7:6b:c7:9b:4b:45:13:db:e0:db:10:c4:ab:4f:87: 14:80:98:eb:4b:83:14:fc:cb:42:6f:62:24:96:12: 01:77:d0:1d:b3:f2:2e:f0:32:7b:a7:f6:c1:3f:b5: ac:bd:4f:a3:41:65:41:b4:a1:df:e9:f3:e4:46:f9: b3:4a:fa:0c:17:8f:00:ad:f7:3e:f6:af:b1:8c:45: f1:0d:de:93:40:8e:a9:16:bf:f0:31:99:42:4a:dd: b3:7b:6a:39:d4:e9:7e:b7:b7:11:78:32:d3:84:8e: 7e:27:01:73:8b:42:b9:e6:37:ef:b8:cc:80:54:96: 21:06:7f:f9:53:ff:3d:c1:57:e4:fa:10:b8:07:8a: 5a:02:f4:92:fa:ed:7a:11:fc:86:07:24:14:9d:05: 65:54:d9:82:4f:a3:4c:44:51:d0:d2:95:97:2e:fe: 1c:10:3f:90:53:ed:46:6d:6f:8f:fa:22:e0:14:e6: 66:48:f9:77:d1:d3:6f:20:cb:dd:92:fd:a3:a8:b5: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:C3:2F:0E:70:78:25:93:54:6B:A8:DD:A4:52:4C:E0:28:05:FE X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:13:45:e7:2d:c7:97:b8:6e:1e:2e:e3:89:13:ad:ec:dc:6c: 81:35:ab:66:b6:ac:63:4a:0f:41:12:d4:eb:5a:8b:b6:b6:57: 14:09:29:2e:da:84:44:4b:45:1f:d2:f7:1f:72:57:51:6b:e0: 15:53:cb:6c:5d:36:8c:d2:1c:a0:dc:59:ba:e9:d7:1e:9f:7c: 7d:da:11:86:f4:7a:af:c5:a1:21:3f:47:95:df:6e:4e:ba:69: ae:fb:ce:2f:6c:06:a7:e0:f6:2f:38:97:49:16:1c:19:77:4d: 23:26:f3:d3:21:19:49:e6:f1:42:31:3b:a2:3b:c8:b5:2d:26: 37:f9:0e:b6:aa:c3:38:1c:cb:d9:53:b9:5d:72:d6:70:c9:cc: 34:73:fc:13:32:89:56:6a:cf:68:36:f2:ad:89:0f:fb:72:e3: f6:dd:ac:18:32:f4:71:27:fc:48:28:c4:b3:d4:4e:ff:36:07: a3:46:3c:9f:3e:b3:9e:59:aa:c9:c3:35:38:21:e1:1d:ee:28: 50:da:e2:b4:15:8c:4b:1d:c4:11:1f:c3:67:1c:ef:a3:7c:d9: 16:12:e2:f5:55:32:14:1f:a6:cf:34:61:73:8a:f5:dd:c1:0c: aa:74:52:93:e3:4d:ac:9e:8b:a9:07:33:40:5d:46:4f:f6:bb: 87:0e:a9:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2NDIxMTAvBgNVBAUTKDk0MjRBMEI5Qzk4REI2MzIxQTUzOTIwQzZGNEUzNUQy MzE5Q0Y0NkUwHhcNMjYxMTE1MDc1NDQzWhcNMjYxMTIyMDc1NDQzWjAYMRYwFAYD VQQDEw02YWY5NjU0NC1hMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlFg7X15cYBvDA1+iZSfCMQUEk3He8gw15X8QUU19MQfxw8fXV2Y1yizOo91 +rFlrunuiZcTOmfoIYzna8ebS0UT2+DbEMSrT4cUgJjrS4MU/MtCb2IklhIBd9Ad s/Iu8DJ7p/bBP7WsvU+jQWVBtKHf6fPkRvmzSvoMF48Arfc+9q+xjEXxDd6TQI6p Fr/wMZlCSt2ze2o51Ol+t7cReDLThI5+JwFzi0K55jfvuMyAVJYhBn/5U/89wVfk +hC4B4paAvSS+u16EfyGByQUnQVlVNmCT6NMRFHQ0pWXLv4cED+QU+1GbW+P+iLg FOZmSPl30dNvIMvdkv2jqLULXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJimwy8O cHglk1RrqN2kUkzgKAX+MB8GA1UdIwQYMBaAFJQkoLnJjbYyGlOSDG9ONdIxnPRu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY0Mi83Q0Y4QTA4MjFE QjExMUYxQkMxQzZENTIzRTNEOEM2Ny9sQ1NndWNtTnRqSWFVNUlNYjA0MTBqR2M5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY0Mi83Q0Y4QTA4MjFEQjExMUYxQkMxQzZENTIzRTNEOEM2Ny9sQ1NndWNtTnRq SWFVNUlNYjA0MTBqR2M5RzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohNF5y3Hl7huHi7jiROt7NxsgTWrZrasY0oPQRLU61qLtrZXFAkpLtqEREtF H9L3H3JXUWvgFVPLbF02jNIcoNxZuunXHp98fdoRhvR6r8WhIT9Hld9uTrpprvvO L2wGp+D2LziXSRYcGXdNIybz0yEZSebxQjE7ojvItS0mN/kOtqrDOBzL2VO5XXLW cMnMNHP8EzKJVmrPaDbyrYkP+3Lj9t2sGDL0cSf8SCjEs9RO/zYHo0Y8nz6znlmq ycM1OCHhHe4oUNritBWMSx3EER/DZxzvo3zZFhLi9VUyFB+mzzRhc4r13cEMqnRS k+NNrJ6LqQczQF1GT/a7hw6plA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:29:08 2026 by rpki-client