$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: JdgLemE5/J7qHi9yZXS8h/Ih9ZeHt8sPAwMF0fAPi4c= Subject key identifier: 35:66:C4:F8:C4:8E:E3:3B:13:84:47:95:58:97:5B:C8:ED:7C:8C:3C Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 06C2 Signing time: Sat 14 Nov 2026 22:12:04 +0000 Manifest this update: Sat 14 Nov 2026 22:12:04 +0000 Manifest next update: Sat 21 Nov 2026 22:12:04 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: /pkreXOzgu1Uq3HE10lePtjJko6bTgDcMWnxUapYPTE=) 2: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 4: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Nov 14 22:12:04 2026 GMT Not After : Nov 21 22:12:04 2026 GMT Subject: CN=6af8dcb4-6741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:d1:76:45:d9:d1:4f:47:9d:df:7e:9b:97: dd:28:bc:11:19:15:02:0d:8e:ee:42:7d:82:b4:5a: 68:2e:4e:8b:b3:e0:03:66:71:98:80:10:33:6e:01: a9:23:9e:f6:0b:51:ba:81:d9:06:65:a2:cf:ed:94: a5:c5:b6:2c:ec:7c:6d:2d:45:96:ae:fb:93:92:85: 49:d1:84:d0:07:4b:41:7d:2b:67:03:03:cc:c9:7a: f0:ff:14:44:90:f3:27:42:b7:1f:77:d1:aa:6e:26: a2:f4:a4:b9:3b:d5:f3:82:71:8c:87:13:01:b1:5e: ff:8e:c3:81:79:a9:a7:5e:cf:1b:82:99:07:31:9c: 35:d4:3d:de:68:f3:93:97:af:b4:af:e2:6b:4d:aa: 7c:f9:90:c7:56:64:14:fa:7c:b8:d6:ec:b2:33:80: 61:7d:a0:82:e4:69:5c:27:c3:43:e2:54:7b:84:a1: 7e:36:32:82:6e:17:72:50:56:56:35:ce:b1:bf:5d: d2:54:8b:39:74:f2:0a:a8:24:ca:c5:81:56:bd:21: 72:9f:0f:50:c4:a2:b6:ca:92:86:7b:1e:ea:e0:a0: cb:4f:aa:bd:1c:94:bd:f4:c4:96:4f:a3:17:ed:94: 80:39:08:fd:0a:66:27:40:74:db:ff:ac:50:72:dd: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:66:C4:F8:C4:8E:E3:3B:13:84:47:95:58:97:5B:C8:ED:7C:8C:3C X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ce:c4:c5:e5:56:25:94:97:dd:fa:5e:dd:30:0c:b3:d4:6c: c4:3e:41:7a:af:c5:89:c7:fe:93:f9:1a:b5:2e:a0:97:8b:68: 02:9b:3a:3c:39:29:ad:7d:f4:60:e0:ab:16:5c:37:8a:c1:d4: aa:e8:5b:a5:7f:07:71:92:16:03:6a:97:d1:6b:d4:0b:00:51: e4:0b:df:f7:db:b5:d2:80:7f:a3:dc:8c:92:ff:8c:bf:96:84: 03:1a:31:b9:25:8d:ec:bb:37:0b:01:f2:37:5f:7c:37:4b:e3: a2:10:c7:e3:7d:7c:7c:9e:06:82:d8:d3:0e:53:5a:8f:db:85: 67:48:7c:07:20:b2:37:57:a1:db:5b:06:1e:28:5f:68:7d:f3: c7:20:61:7c:68:8b:c8:7e:ff:93:53:27:ae:5b:a0:7b:a1:8e: 7e:b8:ee:98:46:a3:93:c3:35:b7:98:63:1b:82:a7:77:7f:37: 8c:77:6d:2a:8f:84:dc:a6:bb:f7:8e:d4:5a:26:d2:89:5f:8e: f6:2b:a1:57:9e:6a:2e:9e:14:02:aa:e0:e8:62:46:7a:d7:ca: d3:6e:7d:81:89:26:25:6d:a8:c3:f6:6a:e3:ab:35:77:ae:60: 0d:6b:0c:19:97:fd:6a:29:49:53:55:44:b9:09:33:11:1d:b5: e2:98:ea:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYxMTE0MjIxMjA0WhcNMjYxMTIxMjIxMjA0WjAYMRYwFAYD VQQDEw02YWY4ZGNiNC02NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmHRdkXZ0U9Hnd9+m5fdKLwRGRUCDY7uQn2CtFpoLk6Ls+ADZnGYgBAzbgGp I572C1G6gdkGZaLP7ZSlxbYs7HxtLUWWrvuTkoVJ0YTQB0tBfStnAwPMyXrw/xRE kPMnQrcfd9Gqbiai9KS5O9XzgnGMhxMBsV7/jsOBeamnXs8bgpkHMZw11D3eaPOT l6+0r+JrTap8+ZDHVmQU+ny41uyyM4BhfaCC5GlcJ8ND4lR7hKF+NjKCbhdyUFZW Nc6xv13SVIs5dPIKqCTKxYFWvSFynw9QxKK2ypKGex7q4KDLT6q9HJS99MSWT6MX 7ZSAOQj9CmYnQHTb/6xQct0mrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVmxPjE juM7E4RHlViXW8jtfIw8MB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAos7ExeVWJZSX3fpe3TAMs9RsxD5Beq/Ficf+k/katS6gl4toAps6PDkprX30 YOCrFlw3isHUquhbpX8HcZIWA2qX0WvUCwBR5Avf99u10oB/o9yMkv+Mv5aEAxox uSWN7Ls3CwHyN198N0vjohDH4318fJ4GgtjTDlNaj9uFZ0h8ByCyN1eh21sGHihf aH3zxyBhfGiLyH7/k1Mnrluge6GOfrjumEajk8M1t5hjG4Knd383jHdtKo+E3Ka7 947UWibSiV+O9iuhV55qLp4UAqrg6GJGetfK0259gYkmJW2ow/Zq46s1d65gDWsM GZf9ailJU1VEuQkzER214pjqsQ== -----END CERTIFICATE-----Generated at Sun Nov 15 12:09:50 2026 by rpki-client