$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: RiKg/DaEVMztihz9lXziZUsf6cQkG18fBJ3xh6HrxU8= Subject key identifier: 55:2F:EE:29:FF:BE:99:F1:E5:56:CA:1E:B5:6E:BB:45:11:35:34:86 Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: 014F Signing time: Mon 09 Nov 2026 05:25:49 +0000 Manifest this update: Mon 09 Nov 2026 05:25:48 +0000 Manifest next update: Mon 16 Nov 2026 05:25:48 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: HJaXfa32jtvNZpMQy2Raxszx5SNPaVwZr6kpm5tszWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Nov 9 05:25:48 2026 GMT Not After : Nov 16 05:25:48 2026 GMT Subject: CN=6af1595d-b1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:1e:0b:e8:da:bc:45:25:40:9c:1d:88:9e: 76:8a:a4:c2:3e:9d:46:b4:f0:d8:29:f4:0c:7d:bc: d2:9f:34:41:29:ac:ff:2d:0c:2e:3c:4b:ba:05:b4: 6c:d3:4d:3f:e5:53:5b:75:50:8f:10:e0:d7:3f:05: 25:27:14:58:a4:99:51:03:90:4b:17:5d:3f:e3:9b: 08:be:0f:33:21:ec:c4:ce:9b:cc:1c:02:0d:b5:25: ac:96:3c:e1:c4:66:c4:df:21:25:85:c6:49:9b:f1: 32:cd:8e:6a:dd:ae:19:7c:f0:39:ac:9d:d3:d6:74: 6d:2b:14:93:54:de:60:7a:85:69:3a:d3:63:88:4a: d4:ab:90:55:40:5e:d9:3e:47:1b:5a:0b:94:07:35: be:64:68:c7:94:17:b8:11:5d:2e:49:69:8a:4f:12: 28:75:31:bf:d2:4e:13:d8:c1:e9:df:bf:50:93:d9: cc:31:f8:ec:af:36:5d:87:ee:59:3c:c0:ed:28:5e: 80:af:a8:88:99:df:80:65:36:0a:fc:ef:f7:19:0f: ef:a8:5f:74:bd:69:2c:9f:03:6d:da:1b:39:38:e5: 22:24:4c:74:e2:63:e0:52:89:15:74:48:1b:47:7c: df:ff:c2:b0:4f:3b:a8:c0:88:7d:99:33:ed:cb:0d: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:EE:29:FF:BE:99:F1:E5:56:CA:1E:B5:6E:BB:45:11:35:34:86 X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:75:5c:b5:f8:56:af:a3:b3:bf:0c:d7:0b:f2:3b:45:a2:38: d1:8c:fc:c0:a8:cc:8d:28:20:5d:9f:ce:85:a8:ae:30:ff:d0: 2f:bd:bd:5f:68:f7:cd:07:4e:f9:42:08:bc:13:7b:d3:ab:3c: 06:22:a0:9c:99:d7:6d:fa:9a:64:9d:af:50:ad:c4:a9:4f:6a: d9:e9:5a:86:61:a1:4d:e0:d6:e2:db:15:28:f0:6c:fd:ef:4c: 1c:b0:23:7f:ef:27:4f:02:a2:f9:5c:d7:c7:6d:93:be:8b:ab: 9d:17:6f:4b:73:35:7c:e2:c5:dd:38:eb:b6:42:40:e0:57:7c: 2c:4b:bf:4b:81:2c:de:4d:42:b0:72:51:43:af:55:dc:c1:64: 99:34:a9:b7:70:e4:91:f1:fe:d6:1e:53:6b:1b:d9:09:48:31: 5f:5f:0c:cf:ce:4a:6f:3c:f1:5a:e0:74:ee:64:b6:9d:09:5d: 14:43:dd:23:7f:e4:d4:18:67:1a:e9:f0:e8:e2:54:6d:da:0e: f9:c2:10:79:d2:22:2e:b1:ea:b4:09:cd:19:ab:17:6e:75:c0: f7:9f:ab:f4:c9:07:ef:c5:b5:0e:46:b3:8e:10:c3:89:59:c7: 5f:38:1c:d5:bf:99:b2:47:fb:31:58:bf:ec:51:db:f3:2b:46: 5d:2e:27:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjYxMTA5MDUyNTQ4WhcNMjYxMTE2MDUyNTQ4WjAYMRYwFAYD VQQDEw02YWYxNTk1ZC1iMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCUeC+javEUlQJwdiJ52iqTCPp1GtPDYKfQMfbzSnzRBKaz/LQwuPEu6BbRs 000/5VNbdVCPEODXPwUlJxRYpJlRA5BLF10/45sIvg8zIezEzpvMHAINtSWsljzh xGbE3yElhcZJm/EyzY5q3a4ZfPA5rJ3T1nRtKxSTVN5geoVpOtNjiErUq5BVQF7Z PkcbWguUBzW+ZGjHlBe4EV0uSWmKTxIodTG/0k4T2MHp379Qk9nMMfjsrzZdh+5Z PMDtKF6Ar6iImd+AZTYK/O/3GQ/vqF90vWksnwNt2hs5OOUiJEx04mPgUokVdEgb R3zf/8KwTzuowIh9mTPtyw3rLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUv7in/ vpnx5VbKHrVuu0URNTSGMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAznVctfhWr6OzvwzXC/I7RaI40Yz8wKjMjSggXZ/OhaiuMP/QL729X2j3zQdO +UIIvBN706s8BiKgnJnXbfqaZJ2vUK3EqU9q2elahmGhTeDW4tsVKPBs/e9MHLAj f+8nTwKi+VzXx22TvournRdvS3M1fOLF3TjrtkJA4Fd8LEu/S4Es3k1CsHJRQ69V 3MFkmTSpt3DkkfH+1h5TaxvZCUgxX18Mz85KbzzxWuB07mS2nQldFEPdI3/k1Bhn Gunw6OJUbdoO+cIQedIiLrHqtAnNGasXbnXA95+r9MkH78W1DkazjhDDiVnHXzgc 1b+Zskf7MVi/7FHb8ytGXS4nBQ== -----END CERTIFICATE-----Generated at Mon Nov 9 17:29:50 2026 by rpki-client