$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json) Hash identifier: JFY4wkIa7cr+0YAblsuZup7b4jWivVaD45B3696pALU= Subject key identifier: 0F:66:B6:D1:49:1F:70:22:8F:B5:62:EB:59:6C:78:07:45:75:F4:0D Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft Manifest number: CD Signing time: Sun 15 Nov 2026 06:58:08 +0000 Manifest this update: Sun 15 Nov 2026 06:58:07 +0000 Manifest next update: Sun 22 Nov 2026 06:58:07 +0000 Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: 2M+FNN1nTNhCHiqISQsgASFS/ThJi4dHQ1PVbI0saPI=) 2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: wqLpcKHrfI2BsLIwUexp8InQ6/8sgjO0g9gMMs8I8rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Validity Not Before: Nov 15 06:58:07 2026 GMT Not After : Nov 22 06:58:07 2026 GMT Subject: CN=6af95800-1423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:44:37:ad:a9:68:14:da:95:ff:83:f8:83: 07:3e:83:a6:8e:b0:a7:9c:96:fc:e7:dc:db:65:4c: 3b:e0:5c:7b:8b:56:55:26:e7:2a:1b:16:6c:e0:00: c8:45:2a:cd:fb:f4:7c:5d:d6:5b:03:fa:43:79:31: 9a:b5:48:9c:51:4b:8f:e5:0f:b3:80:b8:24:88:34: 5a:b5:41:6b:2b:21:0f:68:48:6c:61:45:61:35:48: 41:63:e4:2d:53:f6:2c:b6:c3:ba:c3:e9:f7:2c:d0: e1:f8:60:f0:ea:5b:26:3a:a8:b8:5b:14:e8:80:f6: 33:6b:8b:6a:81:92:6d:96:7c:cb:43:9b:5e:ec:8f: d7:15:d0:3c:1c:eb:50:00:1e:7d:19:87:4e:3d:78: 1e:b6:a3:f6:1b:00:52:e5:13:d6:6b:1a:7d:c3:c4: 64:38:02:a5:92:47:5f:d0:67:f7:d9:4a:b9:df:98: 20:27:6b:ed:20:21:3e:2b:a8:0f:71:da:f1:96:f8: cc:ca:1a:b2:6c:e3:80:75:3b:db:b0:ad:58:68:1a: 56:a5:70:7b:ea:54:e9:09:8d:0b:66:bb:24:57:b4: 89:3b:41:be:c3:b2:e3:8b:5f:11:b3:a9:78:9c:69: 0f:ec:71:5b:0b:68:18:bb:a4:57:ca:84:b2:c5:cd: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:66:B6:D1:49:1F:70:22:8F:B5:62:EB:59:6C:78:07:45:75:F4:0D X509v3 Authority Key Identifier: keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:9b:97:56:d3:0c:73:c9:ec:3a:fe:fd:e6:d9:a2:55:e9: d5:5a:e1:4d:4e:29:a0:82:37:0e:5b:02:6d:6e:cb:ea:ac:91: 1f:ff:1b:26:c8:d1:52:7f:f2:90:20:88:f6:ea:8d:51:74:02: 8f:57:06:a0:bb:cd:51:58:bb:94:a9:b2:d9:43:0f:3e:5d:52: a8:75:92:8a:0c:0f:98:28:57:7a:c1:43:8f:f3:74:18:b3:31: df:59:40:7b:3b:51:5d:cb:6b:11:98:18:dd:48:92:97:24:1a: 5d:f5:8e:9b:7a:35:e4:ea:9d:b4:c3:ce:1e:0f:8e:bd:0f:93: ce:f7:e1:ec:f1:75:2c:a7:a4:dd:e1:20:93:8e:42:9d:1e:42: 0d:00:01:1c:78:23:4f:57:f6:55:4e:27:b3:2b:03:87:cc:83: 00:b2:7f:15:94:d3:73:e2:f9:a9:e0:c8:f8:fb:33:48:9b:de: a2:c1:4e:cd:db:82:77:c8:f2:0a:24:a7:fe:ac:4b:42:b8:22: 65:b1:36:00:55:1b:ad:30:fd:70:64:c7:8e:d4:03:7e:ed:11: 91:1b:16:77:11:68:61:d3:72:52:16:30:f7:da:43:6b:66:1b: 13:7d:d0:54:95:44:99:a1:03:d8:9e:51:dd:f2:82:1e:08:bf: ae:86:c5:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0RTIxMTAvBgNVBAUTKEE3Rjc3RjIwNDdEMzU2OEMwNDNBMzM4Qzc5MzJCMEEy M0M4RjY4NzEwHhcNMjYxMTE1MDY1ODA3WhcNMjYxMTIyMDY1ODA3WjAYMRYwFAYD VQQDEw02YWY5NTgwMC0xNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6tEN62paBTalf+D+IMHPoOmjrCnnJb859zbZUw74Fx7i1ZVJucqGxZs4ADI RSrN+/R8XdZbA/pDeTGatUicUUuP5Q+zgLgkiDRatUFrKyEPaEhsYUVhNUhBY+Qt U/YstsO6w+n3LNDh+GDw6lsmOqi4WxTogPYza4tqgZJtlnzLQ5te7I/XFdA8HOtQ AB59GYdOPXgetqP2GwBS5RPWaxp9w8RkOAKlkkdf0Gf32Uq535ggJ2vtICE+K6gP cdrxlvjMyhqybOOAdTvbsK1YaBpWpXB76lTpCY0LZrskV7SJO0G+w7Lji18Rs6l4 nGkP7HFbC2gYu6RXyoSyxc3YTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9mttFJ H3Aij7Vi61lseAdFdfQNMB8GA1UdIwQYMBaAFKf3fyBH01aMBDozjHkysKI8j2hx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRFMi8xNEQyRTdCQUFF REExMUYwOUQ0M0UyMkVDNEY5QUUwMi9wX2RfSUVmVFZvd0VPak9NZVRLd29qeVBh SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRFMi8xNEQyRTdCQUFFREExMUYwOUQ0M0UyMkVDNEY5QUUwMi9wX2RfSUVmVFZv d0VPak9NZVRLd29qeVBhSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbo+bl1bTDHPJ7Dr+/ebZolXp1VrhTU4poII3DlsCbW7L6qyRH/8bJsjRUn/y kCCI9uqNUXQCj1cGoLvNUVi7lKmy2UMPPl1SqHWSigwPmChXesFDj/N0GLMx31lA eztRXctrEZgY3UiSlyQaXfWOm3o15OqdtMPOHg+OvQ+Tzvfh7PF1LKek3eEgk45C nR5CDQABHHgjT1f2VU4nsysDh8yDALJ/FZTTc+L5qeDI+PszSJveosFOzduCd8jy CiSn/qxLQrgiZbE2AFUbrTD9cGTHjtQDfu0RkRsWdxFoYdNyUhYw99pDa2YbE33Q VJVEmaED2J5R3fKCHgi/robFyg== -----END CERTIFICATE-----Generated at Sun Nov 15 13:16:39 2026 by rpki-client