$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: sMUlLcdgBs3EsAFZmjpW3w8Xa/SJ2E3+PHH02EWFt5c= Subject key identifier: 0F:7E:7D:95:57:3F:83:7F:95:88:13:FA:D4:91:98:6B:1A:69:60:A1 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 05A2 Signing time: Sat 14 Nov 2026 23:08:34 +0000 Manifest this update: Sat 14 Nov 2026 23:08:34 +0000 Manifest next update: Sat 21 Nov 2026 23:08:34 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: WafbYlOB4K7VmOgXT17SSQXymBlQcsPiegMiFQaEq9E=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: UtLN9LK6PXWEEFxc1KoSs2w5t7H8ccMsoGEgQElh3YE=) 3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: 4s7irTp5YZt4t4JUuvpt1hajQ6RV33feyUo5ylQX8mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Nov 14 23:08:34 2026 GMT Not After : Nov 21 23:08:34 2026 GMT Subject: CN=6af8e9f2-def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:0d:84:11:13:23:5e:2e:56:86:cf:34:46: 45:37:2d:be:71:7c:02:75:fc:8b:6c:14:6e:5c:64: 6e:ab:9c:ae:f2:78:db:a8:a1:10:18:95:82:b1:22: a2:d9:85:b7:cc:ec:eb:15:eb:1a:4e:f7:69:2f:51: 67:de:9b:72:60:12:2a:5c:14:3d:e6:f5:49:c2:e5: c2:d0:06:7d:58:29:d5:a4:fc:ce:dd:9b:14:7a:64: 8e:83:b0:d5:6a:6c:87:bf:6a:68:83:c8:14:4e:23: 04:ec:60:77:3f:75:0d:1c:97:ac:df:71:76:62:ce: 27:ab:bd:df:60:6f:f2:66:6f:c0:94:05:03:5e:15: 8e:db:a7:ec:e4:9d:3a:6c:2e:b6:52:58:f1:3d:cd: 4f:73:65:c5:b3:1d:14:eb:c3:da:d6:53:ed:c2:e7: 89:0e:91:19:4b:89:86:2b:3a:ee:9b:01:d8:04:22: 19:8a:d2:e9:c5:02:7c:30:48:63:69:06:48:63:ea: 4a:62:93:35:b0:4f:1e:28:5a:93:e2:ff:36:b9:87: 51:66:1a:eb:bc:60:a2:07:03:72:15:a4:05:35:63: 66:4b:c4:70:9f:77:41:0d:9e:d6:09:7e:be:39:75: ad:47:9c:74:17:47:33:d7:da:d8:b0:cb:36:aa:fb: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:7D:95:57:3F:83:7F:95:88:13:FA:D4:91:98:6B:1A:69:60:A1 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a7:c5:34:38:63:76:68:bb:3b:c6:dc:af:70:0f:17:80:3a: 90:ac:b5:47:d1:04:d7:2d:e9:ba:bd:51:c0:e4:63:9a:be:70: 07:ad:4f:fc:6e:ee:8b:59:54:c9:04:09:21:d8:4c:d7:8b:5a: 9a:7c:6e:79:32:29:58:e8:5d:63:7d:0d:e8:6b:7a:e4:fe:29: 13:73:9d:42:b1:d4:a4:da:e5:db:10:4f:cf:3b:99:22:45:4e: 30:39:23:41:58:d8:76:d8:33:70:47:d2:df:e6:30:95:9e:cd: d1:40:73:a2:d1:55:f9:4d:d5:71:b0:95:a3:72:bc:59:4e:33: 14:b4:da:d9:43:bc:86:89:00:11:f5:11:f4:00:1d:fb:c5:66: 0e:f5:74:cc:7a:49:d4:d7:22:24:f4:ee:a7:d6:71:1d:0d:f2: ba:3b:78:d6:07:dd:aa:22:82:08:63:10:f7:f3:a7:5c:66:71: a1:27:52:3c:f1:b0:53:c2:3e:5a:0c:dd:ec:dc:ae:27:1e:39: e1:67:33:de:60:6e:7f:2d:63:e9:98:56:0b:0e:67:3b:0f:bf: 2b:65:ca:4a:13:b2:8e:8f:12:45:59:fd:d2:b9:47:d4:aa:59: fc:4e:4e:9d:a9:9e:70:af:7b:44:22:34:6e:70:f2:98:9a:a5: c1:b3:42:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjYxMTE0MjMwODM0WhcNMjYxMTIxMjMwODM0WjAYMRYwFAYD VQQDEw02YWY4ZTlmMi1kZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L0NhBETI14uVobPNEZFNy2+cXwCdfyLbBRuXGRuq5yu8njbqKEQGJWCsSKi 2YW3zOzrFesaTvdpL1Fn3ptyYBIqXBQ95vVJwuXC0AZ9WCnVpPzO3ZsUemSOg7DV amyHv2pog8gUTiME7GB3P3UNHJes33F2Ys4nq73fYG/yZm/AlAUDXhWO26fs5J06 bC62UljxPc1Pc2XFsx0U68Pa1lPtwueJDpEZS4mGKzrumwHYBCIZitLpxQJ8MEhj aQZIY+pKYpM1sE8eKFqT4v82uYdRZhrrvGCiBwNyFaQFNWNmS8Rwn3dBDZ7WCX6+ OXWtR5x0F0cz19rYsMs2qvv8ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9+fZVX P4N/lYgT+tSRmGsaaWChMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkKfFNDhjdmi7O8bcr3APF4A6kKy1R9EE1y3pur1RwORjmr5wB61P/G7ui1lU yQQJIdhM14tamnxueTIpWOhdY30N6Gt65P4pE3OdQrHUpNrl2xBPzzuZIkVOMDkj QVjYdtgzcEfS3+YwlZ7N0UBzotFV+U3VcbCVo3K8WU4zFLTa2UO8hokAEfUR9AAd +8VmDvV0zHpJ1NciJPTup9ZxHQ3yujt41gfdqiKCCGMQ9/OnXGZxoSdSPPGwU8I+ Wgzd7NyuJx454Wcz3mBufy1j6ZhWCw5nOw+/K2XKShOyjo8SRVn90rlH1KpZ/E5O namecK97RCI0bnDymJqlwbNC0Q== -----END CERTIFICATE-----Generated at Sun Nov 15 11:53:26 2026 by rpki-client