$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: gRvwkip0ccqxw9JfmtIU80+qKY3+myEZXq/lw3iFUQE= Subject key identifier: 29:09:CF:28:99:B9:EF:68:79:5E:4E:57:38:0D:73:7C:94:A0:41:4E Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 2035 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 202A Signing time: Sat 14 Nov 2026 15:53:57 +0000 Manifest this update: Sat 14 Nov 2026 15:53:57 +0000 Manifest next update: Sat 21 Nov 2026 15:53:57 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: 6ooBFeJ1hkeIw5TDeI7u2UP2Rm+qvgJvuwGQQwxm33k=) 2: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: Hj4Ur9kRjHIcFsq73QnGpa+VM4j4t9Sz6VEkRhW5xU0=) 3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: fWbU5wUcRVqBD2W/21N8EXJc5ZUPBV1B+c7N8ZjZtoI=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: qcG0+weF7/DZys8DSh56CWznRhHyYKo0E8ugjAi6OXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 15:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8245 (0x2035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Nov 14 15:53:57 2026 GMT Not After : Nov 21 15:53:57 2026 GMT Subject: CN=6af88415-9cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:09:1e:b9:58:9a:d6:09:eb:2d:b8:bc:e6: 81:64:9f:c6:4a:96:0a:3d:00:82:33:b3:9b:7d:84: 63:81:89:64:6d:fc:d4:f6:b7:9d:2a:3d:4b:41:19: 62:87:b8:40:72:72:36:42:06:d6:15:31:2b:67:5a: 6e:66:45:a8:67:6f:8a:ff:a5:09:a9:4b:4b:fb:56: 68:c5:d9:a8:b3:c0:95:52:43:eb:7b:a4:e9:54:d5: 5f:67:fd:93:e9:b2:25:05:f0:6b:2b:54:b3:f5:9a: a3:53:a1:e3:7c:fe:dc:a7:b0:b5:60:ce:ff:20:2d: f9:31:91:f1:f6:17:3d:30:28:48:05:1f:c0:5a:aa: a2:bf:78:40:8d:20:44:ca:c3:e6:ee:2d:49:98:b0: 3f:9b:26:cd:48:9b:2e:05:1d:52:02:50:ba:bc:6f: aa:75:02:b1:4d:43:18:44:53:08:8b:2a:54:93:0c: f1:4c:46:a8:3d:d8:5b:f3:30:6b:8a:33:56:50:a5: 1d:75:3d:23:c7:cc:97:cf:8d:fa:8f:05:a9:94:db: d3:98:a1:ea:81:27:65:20:2c:0f:09:0b:cb:65:19: 01:55:ae:e4:21:19:fc:40:38:83:07:d8:3e:04:0c: 6b:7a:29:c9:cd:f1:fa:c8:f6:08:c2:2e:c3:60:02: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:CF:28:99:B9:EF:68:79:5E:4E:57:38:0D:73:7C:94:A0:41:4E X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8c:39:8a:3f:11:d9:83:95:30:1c:cd:c1:55:b1:da:9a:5e: 91:30:e3:e7:5a:b1:bd:b9:e1:89:7a:79:29:9a:30:e3:6a:7a: 6d:fc:7d:ae:6d:d6:68:b7:57:8f:02:30:22:9c:42:e5:98:89: fe:1a:92:62:df:c4:d4:e3:c8:73:36:43:59:ef:7e:37:e4:f0: d3:2c:f4:58:ac:a6:0d:5b:82:ab:06:18:97:d0:0f:b6:fc:77: 84:c3:0f:fb:6e:ef:be:22:61:da:d1:3a:9f:fb:83:57:69:47: 36:ef:d5:1e:f9:1e:db:c5:60:c7:1a:61:1c:ed:21:e0:63:ec: 1a:5a:d0:ea:4d:ec:91:f4:73:23:b8:4a:08:4c:79:bc:72:49: 04:44:53:2d:00:30:a5:ba:6a:dd:1f:cb:16:05:39:ce:21:c3: c4:e7:9f:de:76:78:97:64:22:b7:05:b5:e9:64:2e:48:1a:f8: d9:97:dd:82:73:48:db:ec:fa:66:60:48:ea:69:96:c2:6f:5d: f7:3d:d1:1c:40:a3:2d:da:70:83:a2:6c:cb:4b:61:88:4d:2d: 70:de:ae:79:3e:80:20:61:88:d1:b5:6c:29:8c:e5:d9:0c:f6: de:ed:ca:ab:77:97:4a:bf:eb:41:84:93:80:ef:12:e6:69:28: 7d:11:8b:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYxMTE0MTU1MzU3WhcNMjYxMTIxMTU1MzU3WjAYMRYwFAYD VQQDEw02YWY4ODQxNS05Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVEJHrlYmtYJ6y24vOaBZJ/GSpYKPQCCM7ObfYRjgYlkbfzU9redKj1LQRli h7hAcnI2QgbWFTErZ1puZkWoZ2+K/6UJqUtL+1Zoxdmos8CVUkPre6TpVNVfZ/2T 6bIlBfBrK1Sz9ZqjU6HjfP7cp7C1YM7/IC35MZHx9hc9MChIBR/AWqqiv3hAjSBE ysPm7i1JmLA/mybNSJsuBR1SAlC6vG+qdQKxTUMYRFMIiypUkwzxTEaoPdhb8zBr ijNWUKUddT0jx8yXz436jwWplNvTmKHqgSdlICwPCQvLZRkBVa7kIRn8QDiDB9g+ BAxreinJzfH6yPYIwi7DYALOrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkJzyiZ ue9oeV5OVzgNc3yUoEFOMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArYw5ij8R2YOVMBzNwVWx2ppekTDj51qxvbnhiXp5KZow42p6bfx9rm3WaLdX jwIwIpxC5ZiJ/hqSYt/E1OPIczZDWe9+N+Tw0yz0WKymDVuCqwYYl9APtvx3hMMP +27vviJh2tE6n/uDV2lHNu/VHvke28VgxxphHO0h4GPsGlrQ6k3skfRzI7hKCEx5 vHJJBERTLQAwpbpq3R/LFgU5ziHDxOef3nZ4l2QitwW16WQuSBr42ZfdgnNI2+z6 ZmBI6mmWwm9d9z3RHECjLdpwg6Jsy0thiE0tcN6ueT6AIGGI0bVsKYzl2Qz23u3K q3eXSr/rQYSTgO8S5mkofRGL3g== -----END CERTIFICATE-----Generated at Sun Nov 15 21:26:46 2026 by rpki-client