$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json) Hash identifier: KEyWSwx5/8w7A5Hikk63lUCuN3Cft+RhnMGRrBL54Ag= Subject key identifier: 82:60:F5:35:0D:37:72:35:72:F3:49:24:6F:95:7E:30:F7:77:79:6B Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft Manifest number: C9 Signing time: Sun 15 Nov 2026 06:58:11 +0000 Manifest this update: Sun 15 Nov 2026 06:58:10 +0000 Manifest next update: Sun 22 Nov 2026 06:58:10 +0000 Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: vmVgATDitWW8A0x86OtIV8V1eR4dfjbCRIhK1urEN6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Validity Not Before: Nov 15 06:58:10 2026 GMT Not After : Nov 22 06:58:10 2026 GMT Subject: CN=6af95802-ea8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:eb:85:55:0b:f3:b7:22:f6:20:52:7e:4d: 7c:88:a2:b9:b5:31:34:08:f2:fe:1e:e9:2b:a5:86: fc:89:bf:4f:df:71:df:0b:61:70:fd:f3:15:05:83: af:02:2c:39:b4:ac:b6:25:b1:54:e6:76:da:6d:42: b7:7f:7e:56:6e:ff:fd:6d:60:d1:ad:48:af:9a:5b: 06:50:53:3d:30:f7:72:d6:76:86:2a:a0:7b:91:47: 35:99:fd:32:05:3f:a9:d2:71:d9:28:09:a8:af:36: b3:d6:ea:c8:24:96:4a:43:bc:d5:56:58:b3:1b:0b: af:d1:f7:a7:1a:7f:8c:05:1f:8e:d7:f1:bc:8c:a2: 2b:ac:e5:11:c2:3c:de:e0:69:26:24:99:0e:ab:68: 4f:ce:36:a8:13:31:99:98:c6:22:e1:43:a4:e7:93: af:d6:12:15:28:15:6d:b0:f1:bb:9a:f1:38:90:1f: 68:28:31:03:15:87:b4:18:76:be:5c:6e:38:ac:60: 75:18:df:2d:83:f1:6c:19:a4:c7:e2:3f:78:90:6f: b5:92:7b:e8:8b:e9:6d:77:9e:c7:a7:25:1a:f2:4f: b7:c7:e6:61:a4:dc:84:26:f0:62:0d:01:14:a8:47: e9:dc:ce:19:46:25:92:a3:31:53:53:24:2d:03:32: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:F5:35:0D:37:72:35:72:F3:49:24:6F:95:7E:30:F7:77:79:6B X509v3 Authority Key Identifier: keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f8:ee:17:f0:c2:47:75:f4:c9:de:cd:1d:cc:d3:ae:af:3d: d7:14:b2:f9:64:4d:dc:78:2c:e7:67:85:2c:a6:5b:32:d7:94: 9d:8a:5f:89:a5:79:03:17:22:c0:63:94:58:c0:fa:80:d8:32: 2e:8b:f9:d6:21:b2:9f:cc:4c:c6:46:eb:6a:f1:5f:77:b1:12: cc:35:f2:2d:9d:13:18:49:3a:55:3b:12:7a:3d:e1:21:26:fb: 71:97:de:e4:54:50:58:57:65:d6:c9:f3:e8:d6:0d:fd:1a:99: 85:bb:7f:65:d8:ac:34:51:1f:89:01:58:b0:08:71:dd:d0:de: 6b:e4:cb:42:06:41:72:ba:d1:a0:cc:7e:35:03:a7:5a:b6:21: a5:85:85:17:d5:16:14:51:b3:7e:97:3e:34:9e:90:17:7d:de: f4:ab:30:f8:08:3f:4f:55:57:44:e3:3f:dd:6a:74:ed:b7:0c: df:92:66:07:ac:18:13:0e:94:1a:1b:77:bb:4d:4c:6b:e8:72: 12:4c:ea:e7:77:00:d8:f8:59:8c:0e:7d:06:23:d8:d8:50:d8: a1:7a:8a:ac:96:ee:db:b7:72:f5:b4:29:ee:fd:34:9f:02:97: ab:9d:63:f0:82:ac:ab:68:0e:94:5c:fe:33:88:59:a7:d0:f5: e3:4d:80:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0RTIxMTAvBgNVBAUTKDM2RDVBRDZFMTI2Q0Q1QjE4RUMxNDVCQzc3MkY0OTAw Rjk0Q0E2QkMwHhcNMjYxMTE1MDY1ODEwWhcNMjYxMTIyMDY1ODEwWjAYMRYwFAYD VQQDEw02YWY5NTgwMi1lYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLrrhVUL87ci9iBSfk18iKK5tTE0CPL+HukrpYb8ib9P33HfC2Fw/fMVBYOv Aiw5tKy2JbFU5nbabUK3f35Wbv/9bWDRrUivmlsGUFM9MPdy1naGKqB7kUc1mf0y BT+p0nHZKAmorzaz1urIJJZKQ7zVVlizGwuv0fenGn+MBR+O1/G8jKIrrOURwjze 4GkmJJkOq2hPzjaoEzGZmMYi4UOk55Ov1hIVKBVtsPG7mvE4kB9oKDEDFYe0GHa+ XG44rGB1GN8tg/FsGaTH4j94kG+1knvoi+ltd57HpyUa8k+3x+ZhpNyEJvBiDQEU qEfp3M4ZRiWSozFTUyQtAzIzpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJg9TUN N3I1cvNJJG+VfjD3d3lrMB8GA1UdIwQYMBaAFDbVrW4SbNWxjsFFvHcvSQD5TKa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRFMi8xRkRCMEYzRUFF REExMUYwOUQ0M0UyMkVDNEY5QUUwMi9OdFd0YmhKczFiR093VVc4ZHk5SkFQbE1w cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRFMi8xRkRCMEYzRUFFREExMUYwOUQ0M0UyMkVDNEY5QUUwMi9OdFd0YmhKczFi R093VVc4ZHk5SkFQbE1wcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfjuF/DCR3X0yd7NHczTrq891xSy+WRN3Hgs52eFLKZbMteUnYpfiaV5Axci wGOUWMD6gNgyLov51iGyn8xMxkbravFfd7ESzDXyLZ0TGEk6VTsSej3hISb7cZfe 5FRQWFdl1snz6NYN/RqZhbt/ZdisNFEfiQFYsAhx3dDea+TLQgZBcrrRoMx+NQOn WrYhpYWFF9UWFFGzfpc+NJ6QF33e9Ksw+Ag/T1VXROM/3Wp07bcM35JmB6wYEw6U Ght3u01Ma+hyEkzq53cA2PhZjA59BiPY2FDYoXqKrJbu27dy9bQp7v00nwKXq51j 8IKsq2gOlFz+M4hZp9D1402Aiw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:49:39 2026 by rpki-client