$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: H7go0n1hAngVDL5s3gFT1Els4KB9Sa66/31fe+/16xg= Subject key identifier: C7:2A:4B:6C:2C:5E:7E:FC:BF:2D:56:1C:4A:FF:F2:4D:22:D1:1D:A0 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 011E Signing time: Sun 15 Nov 2026 06:04:46 +0000 Manifest this update: Sun 15 Nov 2026 06:04:45 +0000 Manifest next update: Sun 22 Nov 2026 06:04:45 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: YU9L2EDq89OGkpx/aI8CNUpPZNYapJHyd7NPfiqlTvQ=) 2: DoDVUOYbn17RhXJOVusNhDcVZZA.asa (hash: 9fRMjWn5zcLS6ITSHtsdgPuSk3k1zh47XF1gWEU6v/w=) 3: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: Ys229hErtCf/dq2pk7Irnd81k9zH6g6K93xye9WDEYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Nov 15 06:04:45 2026 GMT Not After : Nov 22 06:04:45 2026 GMT Subject: CN=6af94b7e-2cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:91:03:da:2a:40:a2:91:cb:88:b4:82:15: 43:40:c0:0f:b5:7f:5f:3a:78:7e:4a:92:ac:27:65: e3:2f:66:55:4b:86:8c:e4:11:bd:dc:cd:6b:71:a4: 9e:b3:c5:bb:c6:67:d2:5b:45:aa:38:e7:c6:1b:11: 2b:96:d2:13:e4:db:25:6d:60:21:c2:a5:f0:52:8f: ca:20:4d:fb:cc:97:e8:a6:77:e1:0b:89:ff:5e:72: 99:76:ec:6c:94:70:68:c0:20:c6:7c:e3:0e:f1:23: 40:d5:37:9a:35:7b:cb:88:1c:3f:a3:c0:21:8b:f4: 56:08:43:a3:aa:cb:3a:ab:d7:1c:13:bc:ec:e3:d9: 0e:6d:4e:2e:54:00:71:09:c3:c8:7d:31:18:65:db: 2e:88:2e:d9:51:06:32:0c:3b:39:49:9d:6e:4e:4e: 96:26:91:a2:7c:e8:2d:7e:0d:2c:0a:81:66:dc:c2: 51:b7:e6:4d:f6:ae:f7:e5:f1:4a:b9:af:bc:c5:f9: a1:89:b7:91:6e:76:fa:88:b6:c4:01:70:76:f4:65: 0a:a3:9a:5f:61:fb:8e:e0:23:04:32:f4:22:c1:ff: 75:49:ca:ad:10:1c:ed:e3:76:5c:5c:c4:5c:39:95: a1:23:c7:93:40:30:cc:26:ed:e6:f3:4a:fd:4a:2a: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:4B:6C:2C:5E:7E:FC:BF:2D:56:1C:4A:FF:F2:4D:22:D1:1D:A0 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:bf:51:2c:1b:e2:dd:af:17:6e:b0:a7:e9:f1:67:a2:3d:7d: 6b:5c:12:0b:37:51:87:28:d7:fb:a8:80:e5:12:04:7a:20:fb: 3f:b1:b0:cd:26:16:73:b5:9e:83:43:6d:60:98:11:cd:a1:85: c4:b4:c4:08:f3:2d:c9:7b:f8:37:5d:3e:f0:1b:55:7f:20:9f: 4a:c4:45:df:97:2b:8c:a7:e0:90:aa:52:86:12:95:1d:27:78: 85:09:f1:9b:41:8f:8c:d9:b4:1a:d1:1d:61:8d:79:37:ae:bc: 1a:90:67:d5:28:6c:9c:08:5a:fb:67:d9:39:dc:46:12:7c:94: 1d:ba:d6:a1:25:51:d5:77:09:85:79:ca:ad:1c:76:36:6f:31: ca:38:21:bb:5c:ef:6d:d7:a6:26:a8:c7:06:5f:75:60:e6:f4: a5:f9:e3:9d:f7:ba:93:be:7c:77:b1:4c:21:4a:cf:cd:0c:47: e5:de:0f:a9:10:38:7c:66:a0:71:0d:ea:7a:61:df:14:43:6b: f1:9c:84:24:34:d5:bf:95:c5:f8:6f:d8:ee:cf:52:8a:b4:3f: c4:8a:31:b7:23:ea:62:a1:74:58:4e:f3:77:9d:fc:be:0c:09: 44:dd:ee:6b:4c:cc:d0:a0:f5:6b:2b:1b:75:3d:00:c7:53:9f: 8e:f9:91:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhERDkxMTAvBgNVBAUTKDdGRkM4MDU2NTA3NDJDRUE1MDk4NkQxMUFCQ0I3M0Uw RjU1MDU4RjkwHhcNMjYxMTE1MDYwNDQ1WhcNMjYxMTIyMDYwNDQ1WjAYMRYwFAYD VQQDEw02YWY5NGI3ZS0yY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9ORA9oqQKKRy4i0ghVDQMAPtX9fOnh+SpKsJ2XjL2ZVS4aM5BG93M1rcaSe s8W7xmfSW0WqOOfGGxErltIT5NslbWAhwqXwUo/KIE37zJfopnfhC4n/XnKZduxs lHBowCDGfOMO8SNA1TeaNXvLiBw/o8Ahi/RWCEOjqss6q9ccE7zs49kObU4uVABx CcPIfTEYZdsuiC7ZUQYyDDs5SZ1uTk6WJpGifOgtfg0sCoFm3MJRt+ZN9q735fFK ua+8xfmhibeRbnb6iLbEAXB29GUKo5pfYfuO4CMEMvQiwf91ScqtEBzt43ZcXMRc OZWhI8eTQDDMJu3m80r9Siq1OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcqS2ws Xn78vy1WHEr/8k0i0R2gMB8GA1UdIwQYMBaAFH/8gFZQdCzqUJhtEavLc+D1UFj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEREOS9BMzg3Q0Y4RTJG RDIxMUYwQTlBQzVFMkZDNEY5QUUwMi9mX3lBVmxCMExPcFFtRzBScTh0ejRQVlFX UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEREOS9BMzg3Q0Y4RTJGRDIxMUYwQTlBQzVFMkZDNEY5QUUwMi9mX3lBVmxCMExP cFFtRzBScTh0ejRQVlFXUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq79RLBvi3a8XbrCn6fFnoj19a1wSCzdRhyjX+6iA5RIEeiD7P7GwzSYWc7We g0NtYJgRzaGFxLTECPMtyXv4N10+8BtVfyCfSsRF35crjKfgkKpShhKVHSd4hQnx m0GPjNm0GtEdYY15N668GpBn1ShsnAha+2fZOdxGEnyUHbrWoSVR1XcJhXnKrRx2 Nm8xyjghu1zvbdemJqjHBl91YOb0pfnjnfe6k758d7FMIUrPzQxH5d4PqRA4fGag cQ3qemHfFENr8ZyEJDTVv5XF+G/Y7s9SirQ/xIoxtyPqYqF0WE7zd538vgwJRN3u a0zM0KD1aysbdT0Ax1OfjvmRfA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:09:09 2026 by rpki-client