$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft File: D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json) Hash identifier: icKmF/FQo3KHvxCeHpKzgKBHrW12U7JipjYwhxOBHYA= Subject key identifier: 1F:E0:33:D2:F1:93:87:34:6A:B5:91:BB:16:E0:16:87:E7:60:7D:5E Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E Certificate issuer: /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft Manifest number: 01A6 Signing time: Sun 15 Nov 2026 04:29:25 +0000 Manifest this update: Sun 15 Nov 2026 04:29:25 +0000 Manifest next update: Sun 22 Nov 2026 04:29:25 +0000 Files and hashes: 1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: QJYPvcgPjT/LYI6CsoUNHN5kKWnchTiaoEVMsdWefyw=) 2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: sMWGchxra7/DWgw1YIgXD0LPRRRgNyFgeG8FrV0UKbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Validity Not Before: Nov 15 04:29:25 2026 GMT Not After : Nov 22 04:29:25 2026 GMT Subject: CN=6af93525-a96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:a2:5e:17:ad:0c:af:20:1c:9a:7e:6c:9e: 24:fa:b1:48:98:1f:02:03:42:fd:87:60:21:2e:55: 0e:71:37:82:15:7a:9b:9c:23:d3:50:a1:52:27:1e: 58:08:b4:df:74:95:01:38:4d:d7:46:9b:42:b6:7c: bb:15:ef:5a:0c:ab:a5:ef:74:3b:63:d0:0c:47:e8: c1:b0:ec:27:e2:a1:1b:a2:eb:a0:fb:b4:24:4d:45: 21:17:75:03:6e:66:8c:ea:eb:9e:8e:d2:fa:ed:20: 83:f6:13:ad:70:e6:63:c3:4d:ff:08:85:97:de:84: b6:bb:ac:7f:ad:64:11:01:84:29:80:95:47:b1:80: 73:29:d3:1c:d4:12:8b:83:1c:6e:b9:68:29:37:c1: 2b:17:e0:91:af:a9:14:89:4c:58:ce:77:d9:3d:fd: 58:e6:f7:08:31:c8:9c:0d:3f:f8:9f:06:12:12:41: ed:ad:87:29:bb:72:92:e0:00:ba:6c:89:ff:d2:a2: 2a:79:a5:a3:ee:21:9d:3e:21:78:bb:47:20:1b:f8: d6:af:3f:b7:13:8e:c0:7c:ee:db:28:cb:58:2b:cf: c5:54:d8:07:80:19:01:bd:be:9c:b1:76:a8:25:7c: 81:7a:7c:b9:5b:38:44:ac:0b:58:ba:33:a6:28:17: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E0:33:D2:F1:93:87:34:6A:B5:91:BB:16:E0:16:87:E7:60:7D:5E X509v3 Authority Key Identifier: keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f3:e6:38:8f:c8:cf:e3:40:c5:42:d7:3e:35:7c:50:67:63: 38:97:e7:19:41:ef:fc:23:4a:70:41:8c:79:83:77:b7:0f:4f: 63:e1:3d:56:18:20:ef:e6:26:4b:53:ec:09:d0:c1:60:57:66: 22:a7:8d:c6:35:9c:6c:ee:20:72:5f:61:a5:0b:62:a8:77:b9: a9:62:27:56:54:db:0c:33:c6:a4:6b:f4:e0:5b:be:81:b7:80: cd:27:18:e9:7f:5b:cd:34:95:60:69:52:ef:50:1b:e7:92:87: e8:69:f6:ba:bc:af:d4:40:da:e8:48:c5:85:16:a9:fc:38:5a: 63:fd:0d:13:b0:af:4c:2f:ac:a3:36:db:af:a5:cc:28:da:ac: 7d:76:a7:5c:58:c4:3e:d4:37:4a:0e:c7:26:2c:35:a6:7c:c5: 8c:b5:c9:88:32:86:ea:76:b7:ac:31:b0:b4:4f:d4:51:cb:2f: 26:11:a0:fb:4f:5b:47:e2:60:44:ed:ee:34:ed:df:e0:5b:fe: 1e:32:0c:88:75:48:3c:39:8e:d9:02:3b:d1:a8:bd:a3:81:45: b7:e1:20:4e:51:48:56:eb:92:78:fe:e5:13:5e:5e:ac:ec:b4: 8f:f1:dc:40:1f:97:54:c1:00:dc:e0:7e:a9:c9:88:b5:f1:43: 92:eb:41:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC RDM0MTgzNEUwHhcNMjYxMTE1MDQyOTI1WhcNMjYxMTIyMDQyOTI1WjAYMRYwFAYD VQQDEw02YWY5MzUyNS1hOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1aiXhetDK8gHJp+bJ4k+rFImB8CA0L9h2AhLlUOcTeCFXqbnCPTUKFSJx5Y CLTfdJUBOE3XRptCtny7Fe9aDKul73Q7Y9AMR+jBsOwn4qEbouug+7QkTUUhF3UD bmaM6uuejtL67SCD9hOtcOZjw03/CIWX3oS2u6x/rWQRAYQpgJVHsYBzKdMc1BKL gxxuuWgpN8ErF+CRr6kUiUxYznfZPf1Y5vcIMcicDT/4nwYSEkHtrYcpu3KS4AC6 bIn/0qIqeaWj7iGdPiF4u0cgG/jWrz+3E47AfO7bKMtYK8/FVNgHgBkBvb6csXao JXyBeny5WzhErAtYujOmKBfv1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/gM9Lx k4c0arWRuxbgFofnYH1eMB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82MEVCRTFBQzY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5 TFlYelJHNzlSMEM5TkJnMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjfPmOI/Iz+NAxULXPjV8UGdjOJfnGUHv/CNKcEGMeYN3tw9PY+E9Vhgg7+Ym S1PsCdDBYFdmIqeNxjWcbO4gcl9hpQtiqHe5qWInVlTbDDPGpGv04Fu+gbeAzScY 6X9bzTSVYGlS71Ab55KH6Gn2uryv1EDa6EjFhRap/DhaY/0NE7CvTC+sozbbr6XM KNqsfXanXFjEPtQ3Sg7HJiw1pnzFjLXJiDKG6na3rDGwtE/UUcsvJhGg+09bR+Jg RO3uNO3f4Fv+HjIMiHVIPDmO2QI70ai9o4FFt+EgTlFIVuuSeP7lE15erOy0j/Hc QB+XVMEA3OB+qcmItfFDkutBNw== -----END CERTIFICATE-----Generated at Sun Nov 15 21:24:46 2026 by rpki-client