$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: XPh2gx3VMv/Pa8ndkfRFpTz6bO93EFWCPunzNl2gbus= Subject key identifier: 21:D1:80:CE:19:D9:C2:61:2F:DD:E0:7D:3F:EF:20:06:87:48:AE:1B Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01F6 Signing time: Sun 15 Nov 2026 03:36:41 +0000 Manifest this update: Sun 15 Nov 2026 03:36:40 +0000 Manifest next update: Sun 22 Nov 2026 03:36:40 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: BHUVAAjvpInwhduYxPUnFAYHwtjzRNjQPqgCKlmfnkw=) 2: C6DFFAD8906B11F1A67C05D95E11F970.roa (hash: MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=) 3: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Nov 15 03:36:40 2026 GMT Not After : Nov 22 03:36:40 2026 GMT Subject: CN=6af928c8-5af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:a8:34:50:ce:59:02:ee:76:4e:57:6f:ee: c1:02:0e:f6:6f:b2:e7:03:20:33:8a:e4:3f:19:2f: 4e:fb:d4:23:b7:2a:13:f6:9c:83:2b:78:6d:45:b3: ff:51:bc:c2:ad:c6:b7:ba:2a:79:c9:36:4e:34:79: 74:d7:5e:f3:83:ce:2d:08:e1:b2:66:9d:1f:3c:cc: 31:03:e1:a3:70:33:99:ed:c3:2e:eb:fc:91:ce:13: 4b:11:d7:00:8b:6b:56:48:71:ce:8f:87:9c:5f:0c: e9:d9:55:02:b9:d4:ba:96:d8:6d:53:a4:53:1f:72: 8c:9c:63:4c:1f:9c:a7:09:83:e6:0b:5e:5f:a7:cd: 54:c7:fc:0b:12:ad:65:7c:73:3c:7b:eb:7d:75:23: 6b:11:3f:dc:ed:5a:f0:28:1f:e3:4b:35:b1:8d:32: e7:01:a5:28:f6:b1:3f:29:34:62:7e:fa:aa:a4:cb: 54:4a:ab:ec:b5:75:8e:53:68:8e:8c:8f:90:3a:ec: d8:74:14:65:9a:f5:4a:ef:f8:1d:a7:94:b1:8c:28: 6b:c4:be:7d:71:aa:4f:a1:16:3d:c0:b1:e6:d9:1b: 99:44:14:de:06:99:7d:6a:c3:55:dc:cd:4a:9f:e4: 4c:bf:b2:43:da:f1:f1:02:c6:5a:30:3e:be:e5:6f: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D1:80:CE:19:D9:C2:61:2F:DD:E0:7D:3F:EF:20:06:87:48:AE:1B X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2d:6b:08:ab:b7:a1:f0:86:a4:ec:d1:e9:f9:c2:13:1a:74: cb:84:74:69:a7:f8:13:5d:14:f1:ee:d1:dd:d0:b4:8a:4d:e7: 54:a5:e2:01:c6:63:1c:21:1a:88:a7:4c:52:63:f8:7d:0d:12: 98:16:85:b3:d6:61:f3:97:42:3b:97:b9:54:45:0b:18:85:cf: f9:33:19:cc:e3:b5:d1:27:19:1b:cb:6b:f5:2d:8c:b1:29:46: 3e:b1:76:f7:ad:b3:67:8a:15:1b:55:28:21:5e:64:80:8b:60: 9b:a6:85:44:c8:52:1a:4a:48:31:db:ea:cc:47:87:e0:09:51: 56:a1:a0:d9:3d:0c:ce:33:d0:9a:ce:8e:dd:07:ce:34:a3:82: 7d:f1:a4:51:e9:6a:a6:9a:b2:e3:ba:85:83:53:d2:91:58:c6: 6c:90:f0:dc:dc:37:99:c0:59:0c:2c:38:d5:fe:68:17:30:75: e7:9c:50:1f:ed:ea:ed:8f:db:32:04:ae:ac:2e:20:b6:d0:f1: df:64:24:67:40:1f:21:8f:70:53:73:d4:43:c6:1d:3f:83:72: 00:8d:4d:93:60:5f:b3:95:f7:22:c5:0d:fb:f7:ad:82:be:42: 10:60:e3:33:eb:5e:fa:d5:b6:c5:41:72:d7:29:79:dc:29:13: b7:9a:e3:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYxMTE1MDMzNjQwWhcNMjYxMTIyMDMzNjQwWjAYMRYwFAYD VQQDEw02YWY5MjhjOC01YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5CoNFDOWQLudk5Xb+7BAg72b7LnAyAziuQ/GS9O+9QjtyoT9pyDK3htRbP/ UbzCrca3uip5yTZONHl0117zg84tCOGyZp0fPMwxA+GjcDOZ7cMu6/yRzhNLEdcA i2tWSHHOj4ecXwzp2VUCudS6lthtU6RTH3KMnGNMH5ynCYPmC15fp81Ux/wLEq1l fHM8e+t9dSNrET/c7VrwKB/jSzWxjTLnAaUo9rE/KTRifvqqpMtUSqvstXWOU2iO jI+QOuzYdBRlmvVK7/gdp5SxjChrxL59capPoRY9wLHm2RuZRBTeBpl9asNV3M1K n+RMv7JD2vHxAsZaMD6+5W9EawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHRgM4Z 2cJhL93gfT/vIAaHSK4bMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEy1rCKu3ofCGpOzR6fnCExp0y4R0aaf4E10U8e7R3dC0ik3nVKXiAcZjHCEa iKdMUmP4fQ0SmBaFs9Zh85dCO5e5VEULGIXP+TMZzOO10ScZG8tr9S2MsSlGPrF2 962zZ4oVG1UoIV5kgItgm6aFRMhSGkpIMdvqzEeH4AlRVqGg2T0MzjPQms6O3QfO NKOCffGkUelqppqy47qFg1PSkVjGbJDw3Nw3mcBZDCw41f5oFzB155xQH+3q7Y/b MgSurC4gttDx32QkZ0AfIY9wU3PUQ8YdP4NyAI1Nk2Bfs5X3IsUN+/etgr5CEGDj M+te+tW2xUFy1yl53CkTt5rjBw== -----END CERTIFICATE-----Generated at Sun Nov 15 08:33:44 2026 by rpki-client