$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft File: lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft (raw, json) Hash identifier: OAMDX90N7v8lzSZCFavKmfEibOB+Dq42T5fJObNVG9I= Subject key identifier: 4C:13:50:35:81:C7:8A:45:07:BB:0A:0E:A8:B3:8D:02:16:8A:0F:CA Authority key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2 Certificate issuer: /CN=A91CDF78/serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft Manifest number: 64 Signing time: Sun 15 Nov 2026 08:14:34 +0000 Manifest this update: Sun 15 Nov 2026 08:14:33 +0000 Manifest next update: Sun 22 Nov 2026 08:14:33 +0000 Files and hashes: 1: lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl (hash: OIt8KYjMGQqSzWYysbvmmvNSDJBmqp/xvQKHpAyhUfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2 Validity Not Before: Nov 15 08:14:33 2026 GMT Not After : Nov 22 08:14:33 2026 GMT Subject: CN=6af969ea-f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:ae:36:7a:20:8c:df:1b:7a:dd:c9:de:2e: 90:32:f0:18:95:3a:3a:3f:55:7c:54:85:2b:f8:40: 05:4d:06:5a:0c:79:3f:83:29:5f:4e:91:35:c1:a8: 28:8c:90:71:92:36:56:9a:5b:dc:cf:0a:0d:a3:7b: 86:de:28:b3:2b:ee:b1:4a:0a:17:ab:af:1a:62:ac: d0:5a:a9:a8:2d:fc:95:40:72:85:0e:f3:4e:73:b8: cc:e1:c1:5b:f0:1a:6d:4b:a7:78:7f:c4:78:78:ed: fa:b6:87:12:0c:f7:66:5f:02:59:f2:e9:d5:30:67: 4d:61:91:78:dc:6b:4f:62:88:7a:ef:fc:df:6c:ff: 53:e9:b6:df:3a:73:7a:b9:35:f6:4f:04:3c:8d:55: 4f:ff:31:e3:68:23:2d:74:c2:a9:05:a5:78:ea:1e: fa:e1:96:83:75:07:aa:b3:bd:06:df:cc:25:50:1c: 37:55:7d:18:91:e8:80:66:9d:dc:12:ca:70:01:8c: 82:de:08:3c:6f:22:4e:55:a1:2c:78:94:a7:f1:31: 83:52:c5:00:6c:b3:37:1e:94:af:b8:12:86:86:1a: 71:a9:14:ba:88:08:32:a5:48:c8:3f:9e:d0:33:79: 7e:53:06:d2:4b:93:b6:fb:87:43:7b:81:7d:0c:19: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:13:50:35:81:C7:8A:45:07:BB:0A:0E:A8:B3:8D:02:16:8A:0F:CA X509v3 Authority Key Identifier: keyid:94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:66:ea:61:54:56:4c:87:11:84:4a:43:44:ca:15:d5:09:8b: 8d:fd:1c:4b:ca:2c:7f:b9:98:f0:89:45:ad:6c:ee:b2:77:b4: 3f:60:e8:12:e1:bb:2e:cc:e2:a4:79:06:43:60:80:f1:17:5e: 33:1f:b1:f8:e5:3e:7a:ed:17:d0:73:c5:38:f7:e0:88:d4:1a: e0:a5:9a:3a:1e:b4:14:45:ba:8a:9b:23:9b:b4:8c:75:5c:13: 93:36:4d:cf:46:f0:10:f9:e3:5c:10:f2:70:28:08:37:e8:c4: ec:6f:b0:11:ac:45:f0:ec:fe:47:a9:7b:3c:d4:16:79:2f:df: c0:f4:86:05:9a:b8:46:d1:8e:c1:94:a3:7c:fe:28:77:12:af: 95:d6:7a:59:0f:df:9d:1f:7a:d7:23:27:fc:70:a0:46:f7:65: 04:f5:d8:83:57:8c:51:fd:28:05:7e:19:ed:cd:52:e8:a9:ac: 24:23:10:15:f4:fb:d8:e4:ae:66:31:ef:93:95:a2:8d:8b:7e: 47:ff:63:de:7b:3c:00:cf:a0:c2:54:30:11:10:f7:b5:64:66: 65:10:99:57:97:e0:30:2c:5f:7d:0f:68:5f:5c:0a:02:54:e2: a9:30:c3:0a:32:e4:69:66:8e:8f:e7:fa:78:f5:86:cf:7c:52: 07:df:51:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoOTQ4RThDMTFENzRCQUNGMTZDQkY4MkNENDAzNjk0RTBE QjdFOTRGMjAeFw0yNjExMTUwODE0MzNaFw0yNjExMjIwODE0MzNaMBgxFjAUBgNV BAMTDTZhZjk2OWVhLWYyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBma42eiCM3xt63cneLpAy8BiVOjo/VXxUhSv4QAVNBloMeT+DKV9OkTXBqCiM kHGSNlaaW9zPCg2je4beKLMr7rFKCherrxpirNBaqagt/JVAcoUO805zuMzhwVvw Gm1Lp3h/xHh47fq2hxIM92ZfAlny6dUwZ01hkXjca09iiHrv/N9s/1Pptt86c3q5 NfZPBDyNVU//MeNoIy10wqkFpXjqHvrhloN1B6qzvQbfzCVQHDdVfRiR6IBmndwS ynABjILeCDxvIk5VoSx4lKfxMYNSxQBsszcelK+4EoaGGnGpFLqICDKlSMg/ntAz eX5TBtJLk7b7h0N7gX0MGfTHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTBNQNYHH ikUHuwoOqLONAhaKD8owHwYDVR0jBBgwFoAUlI6MEddLrPFsv4LNQDaU4Nt+lPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0ZBQkRGMjlFNDdD NjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBGc3Y0TE5RRGFVNE50LWxQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEk2TUVkZExyUEZzdjRMTlFEYVU0TnQtbFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0ZBQkRGMjlFNDdDNjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBG c3Y0TE5RRGFVNE50LWxQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDZuphVFZMhxGESkNEyhXVCYuN/RxLyix/uZjwiUWtbO6yd7Q/YOgS4bsuzOKk eQZDYIDxF14zH7H45T567RfQc8U49+CI1BrgpZo6HrQURbqKmyObtIx1XBOTNk3P RvAQ+eNcEPJwKAg36MTsb7ARrEXw7P5HqXs81BZ5L9/A9IYFmrhG0Y7BlKN8/ih3 Eq+V1npZD9+dH3rXIyf8cKBG92UE9diDV4xR/SgFfhntzVLoqawkIxAV9PvY5K5m Me+TlaKNi35H/2PeezwAz6DCVDAREPe1ZGZlEJlXl+AwLF99D2hfXAoCVOKpMMMK MuRpZo6P5/p49YbPfFIH31G/ -----END CERTIFICATE-----Generated at Sun Nov 15 15:42:13 2026 by rpki-client