$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json) Hash identifier: zLbJ1gGQQv2A+cGuhxiJb5jODEn5dtJqm1u1GOBcmzI= Subject key identifier: 28:37:36:91:DC:AD:BA:CB:58:F3:F3:A0:40:F4:95:1B:3F:1D:42:A1 Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft Manifest number: 84 Signing time: Sun 15 Nov 2026 03:36:08 +0000 Manifest this update: Sun 15 Nov 2026 03:36:08 +0000 Manifest next update: Sun 22 Nov 2026 03:36:08 +0000 Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: zpdxfFGHdHnHmEnUBIiRSNivwj5Y281uBlkWim/cJPg=) 2: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=) 3: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Nov 15 03:36:08 2026 GMT Not After : Nov 22 03:36:08 2026 GMT Subject: CN=6af928a8-fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:e1:73:68:19:0b:26:b8:59:5b:2d:53:b0: fc:27:77:54:06:22:c3:1b:4f:5a:bd:52:9a:c5:9c: 0c:5f:1b:98:e9:9f:cc:6c:f9:64:71:2c:ae:18:5d: a8:70:bd:50:1d:99:86:b6:17:40:70:4d:d6:7a:98: 25:94:7a:5f:87:76:30:de:ba:59:53:e3:58:38:4d: e3:9a:a3:d0:ed:bb:46:1a:cc:00:98:18:06:b6:7f: ed:66:3b:5c:ae:86:ee:81:97:7f:ff:f6:33:db:30: 51:59:13:66:5d:cf:a1:de:61:09:96:15:fb:ea:2b: 76:85:7c:38:5e:e7:52:94:56:1d:1c:de:93:80:82: 30:3c:a5:33:ce:ef:3e:f7:51:b6:14:a3:e8:ba:25: 74:ef:8e:34:67:61:8e:56:46:96:8e:20:00:dc:a0: 36:a5:53:44:c5:3a:f1:2e:8a:16:73:40:38:99:67: 3a:ea:8b:bc:94:b3:b1:e5:3d:1b:77:d2:c1:e5:b0: bf:a1:3f:1c:a1:0d:fe:5e:7e:e0:7e:00:c2:b4:3f: ab:45:e7:a4:92:c4:14:de:00:7c:e4:24:45:c0:73: 9b:e1:a3:75:34:b5:b0:42:ab:08:c4:c1:95:0b:1e: b7:6e:bf:a0:12:62:1b:82:0c:7f:6a:f5:1c:4e:46: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:36:91:DC:AD:BA:CB:58:F3:F3:A0:40:F4:95:1B:3F:1D:42:A1 X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:6c:b1:ec:79:d6:7d:df:ee:65:2d:75:b5:79:0b:ff:f8: 0b:01:a0:ed:d7:3b:51:93:35:95:4a:cf:23:39:02:f1:a9:8a: d1:48:cb:ae:22:cf:67:43:ab:d6:a2:78:6c:f9:7e:8f:19:6e: 3c:64:a2:14:87:02:7f:5a:be:28:00:97:f5:61:ba:83:b8:0a: 3b:b4:ce:b1:91:ca:53:95:43:71:7a:50:2f:1e:81:71:9d:4a: 8b:82:2d:6d:ae:a5:8c:36:f0:32:15:74:6a:7d:c8:c0:d4:33: cc:f4:d1:98:52:c7:f3:50:73:e3:05:2c:c2:3b:ab:93:b4:c8: a5:ce:a0:7f:11:f9:5f:09:be:8a:02:06:6d:2b:77:34:3e:a6: 5c:c1:6f:b6:b8:a6:48:56:e9:f7:6a:a1:c8:00:a0:5c:ce:cf: 32:f6:19:50:6d:28:5d:2c:12:6b:f7:76:a3:af:4e:3d:a7:89: 18:52:94:c3:25:31:e3:96:cf:b6:9b:16:7f:d1:d5:46:b3:1d: 02:4a:21:8b:cf:70:87:d1:d0:f0:36:c8:86:8c:b7:39:43:fd: d2:be:55:94:38:aa:85:d9:ee:50:74:4a:7f:3e:b7:db:26:d4: 10:cb:30:2d:be:b1:e4:3a:27:52:14:4e:72:56:e7:3f:0c:df: 6a:1b:27:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKERBNkRFQjNGNjVDQzIzNjc4NDgzQTc2QkI3OEUzOTFG MkY5QzY0MjEwHhcNMjYxMTE1MDMzNjA4WhcNMjYxMTIyMDMzNjA4WjAYMRYwFAYD VQQDEw02YWY5MjhhOC1mY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo17hc2gZCya4WVstU7D8J3dUBiLDG09avVKaxZwMXxuY6Z/MbPlkcSyuGF2o cL1QHZmGthdAcE3WepgllHpfh3Yw3rpZU+NYOE3jmqPQ7btGGswAmBgGtn/tZjtc robugZd///Yz2zBRWRNmXc+h3mEJlhX76it2hXw4XudSlFYdHN6TgIIwPKUzzu8+ 91G2FKPouiV07440Z2GOVkaWjiAA3KA2pVNExTrxLooWc0A4mWc66ou8lLOx5T0b d9LB5bC/oT8coQ3+Xn7gfgDCtD+rReekksQU3gB85CRFwHOb4aN1NLWwQqsIxMGV Cx63br+gEmIbggx/avUcTkbxxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg3NpHc rbrLWPPzoED0lRs/HUKhMB8GA1UdIwQYMBaAFNpt6z9lzCNnhIOna7eOOR8vnGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9GNDc3NTVCODIx QjIxMUYxOTU5REY5NzdBQUVFNTI4RS8ybTNyUDJYTUkyZUVnNmRydDQ0NUh5LWNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9GNDc3NTVCODIxQjIxMUYxOTU5REY5NzdBQUVFNTI4RS8ybTNyUDJYTUky ZUVnNmRydDQ0NUh5LWNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfNlssex51n3f7mUtdbV5C//4CwGg7dc7UZM1lUrPIzkC8amK0UjLriLPZ0Or 1qJ4bPl+jxluPGSiFIcCf1q+KACX9WG6g7gKO7TOsZHKU5VDcXpQLx6BcZ1Ki4It ba6ljDbwMhV0an3IwNQzzPTRmFLH81Bz4wUswjurk7TIpc6gfxH5Xwm+igIGbSt3 ND6mXMFvtrimSFbp92qhyACgXM7PMvYZUG0oXSwSa/d2o69OPaeJGFKUwyUx45bP tpsWf9HVRrMdAkohi89wh9HQ8DbIhoy3OUP90r5VlDiqhdnuUHRKfz632ybUEMsw Lb6x5DonUhROclbnPwzfahsn7Q== -----END CERTIFICATE-----Generated at Sun Nov 15 21:53:12 2026 by rpki-client