$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: bkFAE1lq+PNyZlQurmtx5kA0zIOhXMLc9fl/g5d/rag= Subject key identifier: 92:59:8F:5F:A8:52:69:6A:89:AA:E7:09:DF:D9:16:D7:3C:C2:E1:64 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 02FB Signing time: Sun 15 Nov 2026 00:58:01 +0000 Manifest this update: Sun 15 Nov 2026 00:58:00 +0000 Manifest next update: Sun 22 Nov 2026 00:58:00 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: 88eD00alMMOmY9YOntmzMs5M3YYp3qJUOQtS03/4deM=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Nov 15 00:58:00 2026 GMT Not After : Nov 22 00:58:00 2026 GMT Subject: CN=6af90399-1cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:52:b6:cf:bf:ad:80:a3:44:2b:f0:88:29: 07:60:09:a1:ad:0c:ab:70:b8:33:b5:dd:b1:ea:f6: 24:62:f6:7e:f1:04:91:3b:7e:d0:88:f3:eb:5f:2e: 7c:d8:16:20:cd:f1:42:24:4a:d5:8e:c9:66:59:aa: 65:f1:e8:dc:05:15:55:ba:67:ba:a9:19:c0:db:43: 2a:f0:cc:90:7d:6a:a2:3d:7f:0b:5d:df:3d:a8:d8: 39:73:a2:d3:b5:65:6e:10:12:f0:1a:e4:6a:5e:2c: 58:3b:73:32:69:d9:0b:1b:b7:0c:c7:d3:35:f0:ad: d1:6d:00:0f:7a:9a:d7:ab:9b:3c:00:21:e1:44:7e: 85:af:8b:6e:86:83:0a:b7:86:38:1a:ad:3e:bd:c0: 83:79:21:3c:89:06:ba:0a:80:9e:a8:82:2b:f1:0c: b6:4e:8d:10:74:bd:38:da:1f:0b:eb:6f:7e:df:94: 2e:f8:b1:25:d9:6f:6c:f6:f7:ff:f1:00:06:3f:c5: 5e:dc:85:3c:7b:dc:7b:9b:82:13:eb:c8:a9:94:a5: b2:cd:9e:28:12:a3:3a:9e:63:2d:f9:20:28:1a:75: 75:79:bd:34:b9:0e:c3:f3:2f:e6:2c:a2:84:f9:d2: ef:2d:38:76:da:74:8a:2f:a2:8c:1b:c1:32:fd:9a: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:59:8F:5F:A8:52:69:6A:89:AA:E7:09:DF:D9:16:D7:3C:C2:E1:64 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b0:1a:af:3c:74:86:90:83:9f:1c:28:9d:ce:3c:04:dc:40: 79:87:54:29:b8:c1:85:f7:7d:f5:f7:21:2a:a7:c7:8f:20:17: 4f:39:30:86:8d:69:87:26:bd:77:3c:63:be:41:ed:c1:d0:7b: 30:13:58:6a:36:56:cd:95:eb:22:a7:eb:06:b9:1e:c6:3d:1e: 0d:bc:3f:93:74:99:61:36:c6:72:9b:ed:27:80:4d:c4:2c:8e: ab:d9:06:e2:79:e2:61:2f:7b:30:b6:35:c9:91:03:66:22:1f: 00:46:cf:1e:dd:67:56:86:0d:67:f7:f0:02:06:55:af:3c:3b: 4f:75:3a:de:f2:06:5f:6f:e8:26:0e:e9:8b:73:b5:4c:57:df: 93:58:7c:40:82:c1:cf:c0:ab:f8:26:ea:fa:04:1c:1f:88:f0: 2a:e6:6b:b4:e1:8d:45:af:b7:39:c0:30:c8:38:8e:fc:7f:b3: ab:1d:01:b6:db:a7:b2:34:b0:c6:6e:70:03:2c:40:56:49:6f: 1c:ab:46:67:0b:c1:b7:a8:5e:ae:d9:08:33:01:35:03:65:b2: 61:1a:85:cd:0f:82:35:cc:2e:7e:a1:52:ad:2e:61:88:f6:aa: 2d:c1:ef:b7:c0:de:85:da:50:79:e5:9b:12:fe:81:61:1a:06: 17:59:2f:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjYxMTE1MDA1ODAwWhcNMjYxMTIyMDA1ODAwWjAYMRYwFAYD VQQDEw02YWY5MDM5OS0xY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYNSts+/rYCjRCvwiCkHYAmhrQyrcLgztd2x6vYkYvZ+8QSRO37QiPPrXy58 2BYgzfFCJErVjslmWapl8ejcBRVVume6qRnA20Mq8MyQfWqiPX8LXd89qNg5c6LT tWVuEBLwGuRqXixYO3MyadkLG7cMx9M18K3RbQAPeprXq5s8ACHhRH6Fr4tuhoMK t4Y4Gq0+vcCDeSE8iQa6CoCeqIIr8Qy2To0QdL042h8L629+35Qu+LEl2W9s9vf/ 8QAGP8Ve3IU8e9x7m4IT68iplKWyzZ4oEqM6nmMt+SAoGnV1eb00uQ7D8y/mLKKE +dLvLTh22nSKL6KMG8Ey/ZpI6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJZj1+o UmlqiarnCd/ZFtc8wuFkMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ7Aarzx0hpCDnxwonc48BNxAeYdUKbjBhfd99fchKqfHjyAXTzkwho1phya9 dzxjvkHtwdB7MBNYajZWzZXrIqfrBrkexj0eDbw/k3SZYTbGcpvtJ4BNxCyOq9kG 4nniYS97MLY1yZEDZiIfAEbPHt1nVoYNZ/fwAgZVrzw7T3U63vIGX2/oJg7pi3O1 TFffk1h8QILBz8Cr+Cbq+gQcH4jwKuZrtOGNRa+3OcAwyDiO/H+zqx0BttunsjSw xm5wAyxAVklvHKtGZwvBt6hertkIMwE1A2WyYRqFzQ+CNcwufqFSrS5hiPaqLcHv t8DehdpQeeWbEv6BYRoGF1kvsw== -----END CERTIFICATE-----Generated at Sun Nov 15 17:59:01 2026 by rpki-client