$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: bjAW9vy4RIunouLH2tBmAfWGE5+0prxpclaimLZQFiU= Subject key identifier: 7B:41:DC:6E:A7:1E:3D:28:32:02:4A:C1:A5:70:B8:9B:D5:4A:CC:EC Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 013F Signing time: Sun 15 Nov 2026 05:51:37 +0000 Manifest this update: Sun 15 Nov 2026 05:51:37 +0000 Manifest next update: Sun 22 Nov 2026 05:51:37 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: 1VIqy8fIGuEebuIO52CGvL7LjV6LNiltrd/5W2emY98=) 2: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) 3: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) 4: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 5: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 6: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 7: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 05:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Nov 15 05:51:37 2026 GMT Not After : Nov 22 05:51:37 2026 GMT Subject: CN=6af94869-f48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:f1:0f:d1:6b:80:fe:e8:5b:be:af:2c:1b: b9:b5:52:79:e5:e7:99:50:54:24:5d:f0:16:62:fd: 50:18:45:62:43:e6:3b:97:6a:8e:5c:7d:8d:8e:82: e5:e6:03:9e:75:eb:68:51:a0:e6:01:7a:b3:25:ab: 7f:02:64:89:60:56:6e:dd:74:b0:15:fa:72:38:99: 3c:80:2b:ca:3f:a8:84:5b:6d:e6:54:d8:87:d5:3f: fd:45:08:48:91:ce:65:eb:94:f5:d8:25:a0:b5:df: 0c:0e:50:ac:8f:c7:30:bf:b7:9e:ea:cc:6a:ba:96: 1b:78:1c:71:a5:b2:0c:27:95:fc:9f:c6:a2:6b:1a: d5:bc:d2:d9:f7:b0:af:bb:26:3a:3b:ac:ce:d3:5e: b7:26:23:ff:55:2f:a5:17:f3:91:b8:2a:2f:2a:50: bf:e8:60:a3:f7:ac:09:fd:90:33:77:18:d9:52:2c: 54:9a:76:81:23:e1:95:b4:65:4a:92:3d:96:17:4b: de:ca:56:3c:fc:05:21:4f:62:e4:57:8e:5c:c4:c0: 5e:de:c5:64:7b:98:e2:07:71:9b:d2:b9:ed:dc:aa: 13:08:69:28:25:ad:48:cb:df:29:07:31:7c:4b:2a: b8:fe:b5:cd:cb:03:c0:0f:2b:e3:a5:5b:4c:82:24: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:41:DC:6E:A7:1E:3D:28:32:02:4A:C1:A5:70:B8:9B:D5:4A:CC:EC X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:27:e3:3e:40:b6:e2:eb:8d:cb:ce:43:e6:3b:2b:47:ef:a6: 0a:3a:8f:14:e5:98:5c:2f:da:3e:34:b3:81:3d:2c:6d:8e:ef: 7d:8d:5f:c5:fb:d9:24:f1:f0:78:fa:29:7d:8f:b4:bb:df:db: 1e:df:c2:c3:f8:91:9b:75:7a:15:ef:74:e1:78:c6:11:3b:34: b7:11:b4:63:c7:e6:e9:f6:69:37:21:fd:45:bc:9b:e2:6c:74: 8b:1e:a4:9e:2f:39:4d:7d:ad:9a:27:50:f2:ba:40:e4:ed:a9: 3e:04:c0:5d:6e:e8:7c:c7:71:7d:b0:cc:6f:39:e7:65:ca:3a: 61:7e:3b:51:46:e7:79:ed:68:db:88:f6:b4:dc:46:b9:3e:58: 5c:ba:d5:a6:ed:5e:82:de:42:6e:90:48:06:2c:65:d7:ca:14: 8a:13:bc:5f:d8:46:73:08:ea:1e:ab:79:05:55:1d:52:f3:af: e2:98:a9:d4:4d:de:20:d4:8a:1d:b7:f4:97:d9:a9:23:bd:22: 10:51:1e:f8:6f:dc:aa:2b:16:be:10:03:6b:ca:33:ca:54:e8: e3:fc:18:e2:58:bb:90:22:ac:6b:8e:c7:5d:7d:a7:f5:66:65: 05:6f:30:7e:97:3c:6a:e4:10:03:c6:31:72:1b:0f:92:9c:3a: d7:e7:eb:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYxMTE1MDU1MTM3WhcNMjYxMTIyMDU1MTM3WjAYMRYwFAYD VQQDEw02YWY5NDg2OS1mNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHvxD9FrgP7oW76vLBu5tVJ55eeZUFQkXfAWYv1QGEViQ+Y7l2qOXH2NjoLl 5gOedetoUaDmAXqzJat/AmSJYFZu3XSwFfpyOJk8gCvKP6iEW23mVNiH1T/9RQhI kc5l65T12CWgtd8MDlCsj8cwv7ee6sxqupYbeBxxpbIMJ5X8n8aiaxrVvNLZ97Cv uyY6O6zO0163JiP/VS+lF/ORuCovKlC/6GCj96wJ/ZAzdxjZUixUmnaBI+GVtGVK kj2WF0veylY8/AUhT2LkV45cxMBe3sVke5jiB3Gb0rnt3KoTCGkoJa1Iy98pBzF8 Syq4/rXNywPADyvjpVtMgiSl5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtB3G6n Hj0oMgJKwaVwuJvVSszsMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxSfjPkC24uuNy85D5jsrR++mCjqPFOWYXC/aPjSzgT0sbY7vfY1fxfvZJPHw ePopfY+0u9/bHt/Cw/iRm3V6Fe904XjGETs0txG0Y8fm6fZpNyH9Rbyb4mx0ix6k ni85TX2tmidQ8rpA5O2pPgTAXW7ofMdxfbDMbznnZco6YX47UUbnee1o24j2tNxG uT5YXLrVpu1egt5CbpBIBixl18oUihO8X9hGcwjqHqt5BVUdUvOv4pip1E3eINSK Hbf0l9mpI70iEFEe+G/cqisWvhADa8ozylTo4/wY4li7kCKsa47HXX2n9WZlBW8w fpc8auQQA8YxchsPkpw61+frew== -----END CERTIFICATE-----Generated at Sun Nov 15 15:24:19 2026 by rpki-client