$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json) Hash identifier: pusPDpLozJkDQ9AFzPTlZUr2vbYWXFNGXE9RM45KpAA= Subject key identifier: 35:A8:0B:6B:81:DD:96:40:0C:52:C2:FD:86:D8:16:B6:7E:3B:45:79 Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft Manifest number: 7F Signing time: Thu 05 Nov 2026 08:40:32 +0000 Manifest this update: Thu 05 Nov 2026 08:40:32 +0000 Manifest next update: Thu 12 Nov 2026 08:40:32 +0000 Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: aZ/tQL/wTviGyvR7yO6C20gbjOwrP4SBPWGaOKgSVWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 08:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Validity Not Before: Nov 5 08:40:32 2026 GMT Not After : Nov 12 08:40:32 2026 GMT Subject: CN=6aec4100-4c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:10:d7:4b:1d:e1:43:26:d2:b4:e5:91:5d: c4:f1:8d:e1:6c:1b:de:24:03:0e:bd:75:ba:0e:82: 34:77:cd:fb:99:ea:76:41:4d:8c:0f:96:be:37:7d: fe:92:c0:2b:0b:a7:07:d1:44:fa:7e:c1:32:ea:c3: 72:de:8d:ab:47:1f:4a:95:6e:1c:e2:f9:a7:83:0f: 32:9a:d4:6a:3b:ab:19:c8:e0:73:bf:16:0f:70:99: e8:bf:19:c0:81:5d:e5:de:b5:9a:f6:17:28:22:a0: 20:f3:d7:b0:2f:95:d2:c7:c5:15:9e:70:da:40:03: 63:af:42:91:12:9f:e5:e0:bd:01:4a:cf:a3:45:37: 68:89:cc:4e:6f:50:8c:27:e1:91:b2:3e:42:6c:bc: 67:dc:a8:a5:fe:db:18:92:76:00:67:9d:be:71:66: 03:09:04:cd:81:83:35:28:31:f7:f5:e3:55:19:29: 50:6b:77:e2:ef:9a:f0:a8:21:19:c0:cb:e9:4b:ee: 68:f9:ff:6c:90:36:da:11:eb:60:85:50:fd:6d:d1: 06:30:e7:c3:0a:5a:f2:d6:72:57:80:1a:9a:cc:91: 61:51:33:c1:e6:5e:bc:18:b3:1e:71:cf:b6:b3:6a: e5:dc:4a:96:61:b6:da:db:1f:0d:5b:d0:8f:75:50: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:0B:6B:81:DD:96:40:0C:52:C2:FD:86:D8:16:B6:7E:3B:45:79 X509v3 Authority Key Identifier: keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:81:2a:d9:11:24:dd:ff:24:e7:e0:84:73:cf:47:f9:91: 97:8b:67:13:88:23:02:98:d8:36:c5:5a:ff:4e:d7:4c:5d:4c: 7e:fc:8e:e1:46:e4:2a:71:ce:db:bb:01:b6:c9:78:d0:ab:8e: b7:5f:38:d7:df:a7:3a:9f:a5:57:8c:34:9a:41:70:b9:f2:ab: 22:5f:80:67:26:46:3f:12:69:a5:6a:1a:b8:7e:8b:48:26:83: 04:44:0f:97:ae:cd:2f:bf:01:a3:ba:7d:58:d4:98:5c:a7:70: 6f:c5:ea:e2:da:16:06:a1:fd:61:5b:25:66:90:54:e0:5c:60: db:dc:0f:8a:ed:c5:d7:29:59:3b:9d:12:2e:c7:1e:f6:1b:31: 03:9a:45:09:02:aa:8d:b3:79:28:c0:c5:9f:fc:0a:2c:72:d0: fd:82:ec:0f:4b:94:b5:d3:d7:1b:14:55:97:2f:01:b5:86:4b: 8e:ce:6f:02:ef:f3:fa:3b:ef:f4:f6:2c:42:de:18:3e:ef:08: ba:42:2e:7f:eb:74:05:e9:93:76:54:d1:82:ff:2d:fe:29:0d: cc:5d:09:3f:57:3d:7c:ac:32:4c:97:ea:07:b8:d4:b1:26:70: 35:45:4d:71:3a:8c:c0:31:c6:e0:9b:fc:b0:12:6c:84:b9:65: 65:5d:f0:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzJENjExMC8GA1UEBRMoMjlFQTlEODFBMkFGNUY4Mjg1QUMwNzFCMUU2RTc5QTMw OUM5RjQzODAeFw0yNjExMDUwODQwMzJaFw0yNjExMTIwODQwMzJaMBgxFjAUBgNV BAMTDTZhZWM0MTAwLTRjOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDETxDXSx3hQybStOWRXcTxjeFsG94kAw69dboOgjR3zfuZ6nZBTYwPlr43ff6S wCsLpwfRRPp+wTLqw3LejatHH0qVbhzi+aeDDzKa1Go7qxnI4HO/Fg9wmei/GcCB XeXetZr2FygioCDz17AvldLHxRWecNpAA2OvQpESn+XgvQFKz6NFN2iJzE5vUIwn 4ZGyPkJsvGfcqKX+2xiSdgBnnb5xZgMJBM2BgzUoMff141UZKVBrd+LvmvCoIRnA y+lL7mj5/2yQNtoR62CFUP1t0QYw58MKWvLWcleAGprMkWFRM8HmXrwYsx5xz7az auXcSpZhttrbHw1b0I91UH6ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNagLa4Hd lkAMUsL9htgWtn47RXkwHwYDVR0jBBgwFoAUKeqdgaKvX4KFrAcbHm55ownJ9Dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2Lzk3NDhDMDIyMTcx RjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRLRnJBY2JIbTU1b3duSjlE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2VxZGdhS3ZYNEtGckFjYkhtNTVvd25KOURnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MkQ2Lzk3NDhDMDIyMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRL RnJBY2JIbTU1b3duSjlEZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXnYEq2REk3f8k5+CEc89H+ZGXi2cTiCMCmNg2xVr/TtdMXUx+/I7hRuQqcc7b uwG2yXjQq463XzjX36c6n6VXjDSaQXC58qsiX4BnJkY/Emmlahq4fotIJoMERA+X rs0vvwGjun1Y1Jhcp3Bvxeri2hYGof1hWyVmkFTgXGDb3A+K7cXXKVk7nRIuxx72 GzEDmkUJAqqNs3kowMWf/AosctD9guwPS5S109cbFFWXLwG1hkuOzm8C7/P6O+/0 9ixC3hg+7wi6Qi5/63QF6ZN2VNGC/y3+KQ3MXQk/Vz18rDJMl+oHuNSxJnA1RU1x OozAMcbgm/ywEmyEuWVlXfBb -----END CERTIFICATE-----Generated at Thu Nov 5 20:00:04 2026 by rpki-client