$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: YsX3aK1iH7oAMd8BK3qqMOXCsqGBasY+07DfPz4RpWE= Subject key identifier: D2:65:06:56:08:05:2A:44:6E:24:CC:93:DF:1F:25:6F:06:52:52:EF Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0400 Signing time: Sun 15 Nov 2026 00:10:59 +0000 Manifest this update: Sun 15 Nov 2026 00:10:58 +0000 Manifest next update: Sun 22 Nov 2026 00:10:58 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: S1zlcJkOtJOtJoq2s7ZTc6988phdgZZcpZCpB6CvqXc=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: cduqgA+zcJPsXKGFgp0PZtzwmtzbUO7Jgg9Jg1V6cLM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: SWNOrvn46oDLTg74T4Hbq7v10iWBDBnWv7LSwdGRRPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Nov 15 00:10:58 2026 GMT Not After : Nov 22 00:10:58 2026 GMT Subject: CN=6af8f893-4810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:48:7b:94:84:29:8a:c4:6d:48:6f:9c:18: 00:e2:3a:27:75:03:85:db:33:7a:dd:7b:35:01:cf: 47:e5:c3:27:26:b8:a6:e2:f4:60:c3:91:3a:33:db: 16:e9:fc:3c:9f:be:c2:09:e1:63:be:b7:07:24:1b: 35:af:bc:ae:8c:0c:a0:38:a4:b4:4b:a0:6c:08:a3: 9f:ea:bc:8d:3a:96:4f:b2:c7:2b:c6:8c:6c:5b:aa: 81:dd:a3:dc:b0:25:7a:d6:ce:a9:fb:75:c9:b8:fb: e5:90:66:99:bf:c6:4f:c0:8a:ae:4f:31:3f:43:3f: d6:04:2e:8f:71:15:96:0d:25:5f:f3:49:42:bd:33: e2:6d:2b:1c:cf:97:90:61:9e:6d:d6:2a:d9:83:51: 6f:26:1b:3b:98:13:9a:4d:c7:c4:9c:06:62:6f:d2: 2b:5f:c4:ce:65:28:eb:e1:f1:f0:2b:ad:2d:d9:98: 9a:32:fb:a9:85:c9:62:07:61:ca:de:f1:40:56:ae: e9:68:52:0e:cb:aa:02:92:45:ca:71:49:31:5f:91: c9:ea:8e:fa:60:08:a4:aa:7e:fc:bc:c0:f7:be:ee: a9:31:f5:a9:90:bc:fd:ff:b2:f9:30:f3:32:f4:a7: c3:ac:7a:d1:a7:35:d0:25:9b:96:db:7c:40:53:eb: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:06:56:08:05:2A:44:6E:24:CC:93:DF:1F:25:6F:06:52:52:EF X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:85:c5:e0:3a:ac:f5:2d:e6:10:d1:3b:78:ce:4e:4d:44: b8:bc:fe:b3:92:48:63:63:1e:fd:05:36:79:df:56:73:ce:d8: fc:1e:0a:5d:3f:f0:b7:ff:b8:1a:4f:73:0e:99:97:1c:a8:89: b7:69:a9:cd:ff:da:d7:4c:7c:bd:1f:8c:c0:25:96:e5:b7:9d: 6c:1e:62:d6:0c:0c:20:d3:a8:c7:3d:40:31:7a:47:63:6d:61: 07:91:fb:f2:49:2b:39:b2:10:5d:96:38:c7:4e:78:2b:6e:1c: f4:a7:e4:ab:b8:9b:18:16:80:a8:3d:ce:02:de:39:b0:46:b0: cd:7d:23:8f:53:c0:ef:00:3d:98:7f:d9:25:0f:e9:64:65:9f: c9:b9:3d:a3:2e:9f:11:a3:5d:97:05:5d:74:67:fa:19:54:55: d8:5e:38:9a:da:cd:41:90:bb:11:be:6b:9a:26:1d:56:2f:b3: 06:66:54:4e:78:d6:42:82:de:23:d9:28:74:18:f2:73:e1:22: a4:a3:6e:aa:1a:f3:e0:3d:12:e6:eb:7f:52:f0:33:ff:8e:0c: fd:e0:40:00:fe:be:b9:4e:01:2c:24:69:dc:5d:24:58:46:f1: 6e:66:27:11:de:09:38:13:f7:b3:9e:ab:e0:59:8c:06:d2:61: 58:a7:bb:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYxMTE1MDAxMDU4WhcNMjYxMTIyMDAxMDU4WjAYMRYwFAYD VQQDEw02YWY4Zjg5My00ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreNIe5SEKYrEbUhvnBgA4jondQOF2zN63Xs1Ac9H5cMnJrim4vRgw5E6M9sW 6fw8n77CCeFjvrcHJBs1r7yujAygOKS0S6BsCKOf6ryNOpZPsscrxoxsW6qB3aPc sCV61s6p+3XJuPvlkGaZv8ZPwIquTzE/Qz/WBC6PcRWWDSVf80lCvTPibSscz5eQ YZ5t1irZg1FvJhs7mBOaTcfEnAZib9IrX8TOZSjr4fHwK60t2ZiaMvuphcliB2HK 3vFAVq7paFIOy6oCkkXKcUkxX5HJ6o76YAikqn78vMD3vu6pMfWpkLz9/7L5MPMy 9KfDrHrRpzXQJZuW23xAU+vumQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJlBlYI BSpEbiTMk98fJW8GUlLvMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQWFxeA6rPUt5hDRO3jOTk1EuLz+s5JIY2Me/QU2ed9Wc87Y/B4KXT/wt/+4 Gk9zDpmXHKiJt2mpzf/a10x8vR+MwCWW5bedbB5i1gwMINOoxz1AMXpHY21hB5H7 8kkrObIQXZY4x054K24c9Kfkq7ibGBaAqD3OAt45sEawzX0jj1PA7wA9mH/ZJQ/p ZGWfybk9oy6fEaNdlwVddGf6GVRV2F44mtrNQZC7Eb5rmiYdVi+zBmZUTnjWQoLe I9kodBjyc+EipKNuqhrz4D0S5ut/UvAz/44M/eBAAP6+uU4BLCRp3F0kWEbxbmYn Ed4JOBP3s56r4FmMBtJhWKe7oQ== -----END CERTIFICATE-----Generated at Sun Nov 15 21:55:16 2026 by rpki-client