$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: S65EmfV8zJaAsbutJGSkV6rFwIiopJvjsVY19OWfRV8= Subject key identifier: 35:DF:F2:29:02:8E:D2:1D:79:F5:E9:10:CE:AE:E1:8C:AE:95:E5:FB Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: F5 Signing time: Sun 15 Nov 2026 06:33:45 +0000 Manifest this update: Sun 15 Nov 2026 06:33:44 +0000 Manifest next update: Sun 22 Nov 2026 06:33:44 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: Se5tBbro3YNWvwFblVqRRprVlgCeE3wxZt0Ek3hrYO8=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: q6w/n00PdZjJkqVXecEqO9H7uXsW/x2wJfIgbUL2NNk=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: 7SJ1ORslsA+v/W3McAZxGP+GfP6rTmlULhaLVUpn64U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Nov 15 06:33:44 2026 GMT Not After : Nov 22 06:33:44 2026 GMT Subject: CN=6af95249-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:45:bd:1f:ab:ef:ff:c6:2c:d8:b0:38:28: b3:62:3b:1e:99:e7:d3:b1:30:9d:75:a2:8c:72:be: 47:31:0b:ec:37:35:02:2f:96:fe:ee:9c:93:40:91: 13:8a:03:8c:a3:c0:84:ab:3e:89:08:1c:82:dd:13: 99:e4:d8:db:77:00:4d:bf:b9:f5:60:93:4a:1a:e4: a5:78:f9:ab:9e:4b:e2:ff:41:4c:d5:94:51:15:49: ac:20:33:22:ea:fb:88:fa:a2:d1:21:02:bb:66:ea: 38:e8:77:d2:6a:9e:be:83:ed:c8:0d:69:14:91:05: e7:7d:8c:e2:51:a1:41:9f:7c:06:d4:84:50:6c:d7: 10:a3:16:ac:9e:bc:ae:12:83:f1:3f:d1:52:33:84: 3f:a6:56:fd:53:b6:3c:9b:82:b7:62:58:e9:a3:5a: 5f:8b:48:ee:0a:8f:b9:5b:71:37:22:e9:13:a6:bf: 48:e6:20:1b:de:2c:2e:9a:38:1d:ee:92:bf:54:af: ff:81:5b:1b:d3:56:db:5c:7e:91:6b:25:69:8e:04: 83:59:81:09:d3:c4:3d:3e:f0:09:f3:20:39:ad:91: ad:c3:2d:fe:e6:4f:b5:68:58:74:19:ba:b5:db:61: 23:da:73:c3:9d:f6:42:c2:38:5d:b1:0d:02:5c:83: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:F2:29:02:8E:D2:1D:79:F5:E9:10:CE:AE:E1:8C:AE:95:E5:FB X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:29:64:fd:fd:98:c5:d4:aa:ec:b5:b0:4e:49:37:17:e8:53: 7b:93:3a:3f:ad:20:f6:e4:d3:e4:6b:bd:2c:98:06:3d:bc:07: 20:eb:97:8d:a4:4c:65:4c:02:b3:a4:d9:ab:d2:25:d4:91:5b: 63:7e:2a:0d:2e:00:bc:02:0c:4e:5d:79:2e:67:90:56:73:bd: 42:b0:25:57:ad:81:03:91:61:ca:80:c6:d9:4e:b3:3d:04:04: 83:5d:fd:0d:d7:07:fb:1c:4a:35:4e:80:96:c0:6c:c0:3e:83: 00:6f:43:23:71:91:54:80:ea:a6:c5:ce:27:e9:62:8a:18:d5: fe:24:81:f1:90:3e:24:8b:0a:9b:f7:cf:17:2f:a8:b7:2b:80: 95:90:93:b4:2e:2f:cf:55:88:21:ec:35:cc:47:e4:05:56:8f: 35:f9:64:16:e6:2f:1e:b9:61:5e:a3:2e:6e:77:40:8e:13:4a: 1c:04:21:b5:49:1f:0b:5a:fc:5b:16:11:71:e9:65:31:13:a8: 9a:f6:11:65:25:24:10:7a:63:d1:74:ef:2d:fe:fc:b1:70:62: 0d:e1:e9:1f:7a:d9:95:07:4d:11:12:5e:ab:7b:1c:b5:fa:a5: 5c:eb:02:e1:d1:28:4b:d6:f0:aa:6c:c5:7a:21:62:5e:72:0f: ca:7d:09:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2QTAxMTAvBgNVBAUTKEQxOEQ0NDVEMjY1N0VBRkRENEE2NkU3NUIwRkJENjAz MDNGMDI1RkMwHhcNMjYxMTE1MDYzMzQ0WhcNMjYxMTIyMDYzMzQ0WjAYMRYwFAYD VQQDEw02YWY5NTI0OS01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjetFvR+r7//GLNiwOCizYjsemefTsTCddaKMcr5HMQvsNzUCL5b+7pyTQJET igOMo8CEqz6JCByC3ROZ5NjbdwBNv7n1YJNKGuSlePmrnkvi/0FM1ZRRFUmsIDMi 6vuI+qLRIQK7Zuo46HfSap6+g+3IDWkUkQXnfYziUaFBn3wG1IRQbNcQoxasnryu EoPxP9FSM4Q/plb9U7Y8m4K3Yljpo1pfi0juCo+5W3E3IukTpr9I5iAb3iwumjgd 7pK/VK//gVsb01bbXH6RayVpjgSDWYEJ08Q9PvAJ8yA5rZGtwy3+5k+1aFh0Gbq1 22Ej2nPDnfZCwjhdsQ0CXIPzYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXf8ikC jtIdefXpEM6u4YyuleX7MB8GA1UdIwQYMBaAFNGNRF0mV+r91KZudbD71gMD8CX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZBMC83OERGNjA3QzZE QjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2M1VwbTUxc1B2V0F3UHdK ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZBMC83OERGNjA3QzZEQjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2 M1VwbTUxc1B2V0F3UHdKZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGylk/f2YxdSq7LWwTkk3F+hTe5M6P60g9uTT5Gu9LJgGPbwHIOuXjaRMZUwC s6TZq9Il1JFbY34qDS4AvAIMTl15LmeQVnO9QrAlV62BA5FhyoDG2U6zPQQEg139 DdcH+xxKNU6AlsBswD6DAG9DI3GRVIDqpsXOJ+liihjV/iSB8ZA+JIsKm/fPFy+o tyuAlZCTtC4vz1WIIew1zEfkBVaPNflkFuYvHrlhXqMubndAjhNKHAQhtUkfC1r8 WxYRcellMROomvYRZSUkEHpj0XTvLf78sXBiDeHpH3rZlQdNERJeq3sctfqlXOsC 4dEoS9bwqmzFeiFiXnIPyn0JZg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:23:35 2026 by rpki-client