$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: F8egj2Q61+cLw6kKVRng8hmFAQpKkk256d/PO7QoCJE= Subject key identifier: 28:EB:65:FA:0C:BB:27:87:90:80:E1:64:14:49:21:75:56:5A:C1:74 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0948 Signing time: Sat 14 Nov 2026 20:01:58 +0000 Manifest this update: Sat 14 Nov 2026 20:01:58 +0000 Manifest next update: Sat 21 Nov 2026 20:01:58 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: UPySHvwGxMV+HPgFukQ45m9x8M1ncMLNt9HL25wtuio=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: x4kWnFqqajZTHQ2ljg81sWUMtKfZzm4EBKfFyEjnDQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Nov 14 20:01:58 2026 GMT Not After : Nov 21 20:01:58 2026 GMT Subject: CN=6af8be36-e7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e9:19:cc:d5:11:37:cc:57:25:0c:c8:b1:02: 80:6f:2d:6c:90:93:bc:b8:a0:24:d1:9e:31:ae:00: 83:67:a4:a2:c2:08:5b:5e:57:ce:70:d1:37:77:15: 5d:61:07:dc:1f:4c:7b:cb:2e:6e:b8:c2:23:49:04: de:f7:c9:02:c1:c9:8d:1d:b7:72:4d:97:a6:55:de: f6:09:60:7f:61:b2:9e:7f:fd:bd:9b:3d:4a:bc:63: 61:42:09:6a:80:9e:3f:ff:ee:a4:00:f2:48:66:38: 45:a3:5f:dc:c2:22:ad:d7:0a:6c:6b:f7:e3:f1:0d: 72:ca:a0:ee:d0:5a:7b:db:98:9e:f4:28:65:8d:50: 7c:0d:29:21:b8:1e:ed:80:5b:da:cf:8b:67:ac:9b: 0e:23:bb:88:89:00:3e:30:e6:c4:06:00:01:7a:b3: 70:ab:26:1c:c2:87:51:97:f4:8d:cf:c4:b3:3a:cb: 92:c2:75:22:ea:ef:d6:d0:0a:9d:f2:7e:37:29:4e: f7:6e:d7:df:10:00:74:44:ae:cb:29:3c:b9:b4:40: aa:cb:84:20:c1:1a:d1:f0:d3:83:30:03:6d:1c:20: 12:06:c5:d1:99:77:ab:69:bf:85:7f:1f:1f:02:2f: e9:38:91:f2:59:1e:10:e0:bb:0b:6a:5c:fc:9c:a6: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:65:FA:0C:BB:27:87:90:80:E1:64:14:49:21:75:56:5A:C1:74 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a8:de:d8:91:71:d5:32:d6:9e:8a:eb:9c:02:bd:49:58:c9: 10:6d:c8:e0:7a:76:c8:42:62:30:64:21:a1:a4:52:83:3d:23: 81:95:23:6f:22:8e:a3:38:9e:0a:c0:ac:7e:32:f2:50:71:f5: 01:28:1a:ca:cc:d8:ab:e5:35:9e:1b:2d:ac:e5:25:c8:89:f0: 7f:80:91:ba:04:33:13:5b:9f:26:10:f5:3f:50:b5:c0:2f:49: ba:d4:20:1b:62:bc:2f:27:3a:72:5b:1c:0f:79:88:1f:eb:b7: c5:09:c8:8f:3a:15:45:9b:9d:26:39:4a:89:e3:5d:5c:99:4d: 51:3b:f5:ba:21:02:ac:de:7f:e8:df:ce:ac:ae:75:33:b2:09: f7:ed:de:f1:9d:0a:b8:9c:dd:8e:3f:d8:1a:e7:32:58:e4:39: 8a:c2:de:6b:d7:ef:83:d5:86:a3:9e:b3:a9:d5:fb:33:d6:8f: bf:89:8e:ec:15:a3:65:ad:ce:e7:6e:5b:03:b7:ad:fa:83:36: b0:64:fb:56:61:13:7a:6b:06:ad:67:9d:bf:82:2b:1d:e2:b1: 9d:8e:f1:61:fd:13:2b:28:53:9b:1f:ec:71:97:ff:aa:66:c6: 8a:87:0a:ec:22:4a:7e:98:f1:a8:e7:f7:50:c7:cf:8d:9e:08: 5b:8c:4a:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjYxMTE0MjAwMTU4WhcNMjYxMTIxMjAwMTU4WjAYMRYwFAYD VQQDEw02YWY4YmUzNi1lN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ekZzNURN8xXJQzIsQKAby1skJO8uKAk0Z4xrgCDZ6SiwghbXlfOcNE3dxVd YQfcH0x7yy5uuMIjSQTe98kCwcmNHbdyTZemVd72CWB/YbKef/29mz1KvGNhQglq gJ4//+6kAPJIZjhFo1/cwiKt1wpsa/fj8Q1yyqDu0Fp725ie9ChljVB8DSkhuB7t gFvaz4tnrJsOI7uIiQA+MObEBgABerNwqyYcwodRl/SNz8SzOsuSwnUi6u/W0Aqd 8n43KU73btffEAB0RK7LKTy5tECqy4QgwRrR8NODMANtHCASBsXRmXerab+Ffx8f Ai/pOJHyWR4Q4LsLalz8nKZ/ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjrZfoM uyeHkIDhZBRJIXVWWsF0MB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqje2JFx1TLWnorrnAK9SVjJEG3I4Hp2yEJiMGQhoaRSgz0jgZUjbyKOozie CsCsfjLyUHH1ASgayszYq+U1nhstrOUlyInwf4CRugQzE1ufJhD1P1C1wC9JutQg G2K8Lyc6clscD3mIH+u3xQnIjzoVRZudJjlKieNdXJlNUTv1uiECrN5/6N/OrK51 M7IJ9+3e8Z0KuJzdjj/YGucyWOQ5isLea9fvg9WGo56zqdX7M9aPv4mO7BWjZa3O 525bA7et+oM2sGT7VmETemsGrWedv4IrHeKxnY7xYf0TKyhTmx/scZf/qmbGiocK 7CJKfpjxqOf3UMfPjZ4IW4xK9w== -----END CERTIFICATE-----Generated at Sun Nov 15 12:09:53 2026 by rpki-client