$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft File: -WJTlSWdVbnjutm2QuFbY5vAe8c.mft (raw, json) Hash identifier: lrIeFa13xVrlpLu2MbfQKKlELeyfyCM+tsZfKi3zxfA= Subject key identifier: 4B:58:C3:63:CF:6D:3D:58:8C:1D:2A:F6:32:71:2E:D2:CD:0B:AD:3E Authority key identifier: F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 Certificate issuer: /CN=A91FFE2A/serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft Manifest number: 3A Signing time: Sun 15 Nov 2026 08:45:48 +0000 Manifest this update: Sun 15 Nov 2026 08:45:48 +0000 Manifest next update: Sun 22 Nov 2026 08:45:48 +0000 Files and hashes: 1: -WJTlSWdVbnjutm2QuFbY5vAe8c.crl (hash: BIT7Mt8j2MZpWDm2lrP9GI3r4hbxlRVdm/6X2AcuvGc=) 2: 1E1845C88D5E11F18A7850066B11F970.roa (hash: hm1LeJzMvNJnJ0qU8ZDYrWN+bMQ1p67o2pDficVOHz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE2A, serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Validity Not Before: Nov 15 08:45:48 2026 GMT Not After : Nov 22 08:45:48 2026 GMT Subject: CN=6af9713c-34c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ce:94:a7:98:fa:2f:95:22:db:e7:a7:fb:3e: 2f:7b:6e:32:52:ff:36:ca:f4:0a:e2:99:15:2c:08: d0:9f:7d:b9:41:95:11:53:6a:32:8a:8d:09:7b:6f: bc:07:3f:d7:07:a2:d5:f1:99:f1:96:33:93:ba:08: 11:dd:34:6a:f4:fb:9c:51:61:b1:c9:be:5b:70:cb: f8:d4:c9:5f:4e:a6:01:b0:54:96:23:46:88:4a:eb: c9:29:e3:a8:0a:d1:3d:ef:a0:25:b5:d9:5b:a0:52: 19:de:83:3c:76:6b:8d:fb:1e:5b:2a:b2:fd:6a:66: 99:94:1c:da:a5:42:b1:81:3c:fd:db:e8:94:cf:ae: f1:49:be:11:f1:d6:52:80:e2:e0:98:d7:d6:71:2f: d6:1a:a3:e3:53:48:b7:f7:c0:d9:65:93:cc:e4:56: 03:a1:c7:f3:fd:4c:71:a7:fc:c7:d9:5d:33:d2:be: 15:f1:40:95:2e:3e:8f:c2:45:2c:f9:75:c7:cd:e5: ae:6c:ee:b0:4a:9e:4a:db:e3:d4:e7:ca:c4:3e:c6: 1e:06:b5:71:a9:1f:8e:2c:fc:d2:36:bb:bd:b6:80: ca:4a:d0:e4:8d:b2:ec:13:a5:0f:e5:3d:c3:84:0b: 30:98:e9:2e:4a:e9:eb:16:20:52:dd:06:2a:94:81: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:C3:63:CF:6D:3D:58:8C:1D:2A:F6:32:71:2E:D2:CD:0B:AD:3E X509v3 Authority Key Identifier: keyid:F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:63:15:24:45:98:9d:bc:42:09:5d:74:23:a5:98:d7:7b:ba: 5d:56:c5:9a:b0:5e:52:a0:f5:20:7d:38:de:5a:9e:2f:c0:b7: ed:cc:9a:4d:5a:ba:0b:10:a9:c6:8e:31:e1:90:c8:68:4f:56: c9:6e:a9:26:b7:b3:dd:37:e2:e6:89:1b:62:39:52:4c:aa:5e: 1a:43:93:2c:27:f8:4f:e3:cd:be:b2:ea:33:bc:cb:50:0d:52: bd:ed:db:ff:76:e9:00:c7:60:f1:26:8c:93:99:97:43:90:6b: ed:b7:15:85:06:9a:c5:2f:84:b0:4d:cd:93:21:66:23:28:81: c2:20:2f:0e:d4:6b:fa:d6:9a:76:7e:10:a0:3b:4b:1d:b7:04: 73:94:67:6e:f6:e6:0c:ba:38:c9:86:bd:bd:16:20:09:57:91: eb:d3:9c:99:42:bc:4b:4f:13:70:56:2b:3f:ba:66:0e:48:5b: 35:d0:11:94:fb:8f:63:ce:2e:72:4f:40:b3:4c:26:39:91:60: e2:e2:6f:15:f4:2b:44:25:52:87:f3:dd:f8:3f:7f:60:67:8c: 1d:a5:7c:31:1a:6e:1d:fb:76:93:de:ec:22:b6:77:3c:27:b2: 97:08:5b:40:53:09:69:93:5c:3e:5a:c7:dc:2c:05:35:86:e8: 7b:be:6e:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkUyQTExMC8GA1UEBRMoRjk2MjUzOTUyNTlENTVCOUUzQkFEOUI2NDJFMTVCNjM5 QkMwN0JDNzAeFw0yNjExMTUwODQ1NDhaFw0yNjExMjIwODQ1NDhaMBgxFjAUBgNV BAMTDTZhZjk3MTNjLTM0YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVzpSnmPovlSLb56f7Pi97bjJS/zbK9ArimRUsCNCffblBlRFTajKKjQl7b7wH P9cHotXxmfGWM5O6CBHdNGr0+5xRYbHJvltwy/jUyV9OpgGwVJYjRohK68kp46gK 0T3voCW12VugUhnegzx2a437Hlsqsv1qZpmUHNqlQrGBPP3b6JTPrvFJvhHx1lKA 4uCY19ZxL9Yao+NTSLf3wNllk8zkVgOhx/P9THGn/MfZXTPSvhXxQJUuPo/CRSz5 dcfN5a5s7rBKnkrb49TnysQ+xh4GtXGpH44s/NI2u722gMpK0OSNsuwTpQ/lPcOE CzCY6S5K6esWIFLdBiqUgdK7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS1jDY89t PViMHSr2MnEu0s0LrT4wHwYDVR0jBBgwFoAU+WJTlSWdVbnjutm2QuFbY5vAe8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGRTJBLzZDODc3MzEyOEQ1 QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJuanV0bTJRdUZiWTV2QWU4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVdKVGxTV2RWYm5qdXRtMlF1RmJZNXZBZThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG RTJBLzZDODc3MzEyOEQ1QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJu anV0bTJRdUZiWTV2QWU4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAYxUkRZidvEIJXXQjpZjXe7pdVsWasF5SoPUgfTjeWp4vwLftzJpNWroLEKnG jjHhkMhoT1bJbqkmt7PdN+LmiRtiOVJMql4aQ5MsJ/hP482+suozvMtQDVK97dv/ dukAx2DxJoyTmZdDkGvttxWFBprFL4SwTc2TIWYjKIHCIC8O1Gv61pp2fhCgO0sd twRzlGdu9uYMujjJhr29FiAJV5Hr05yZQrxLTxNwVis/umYOSFs10BGU+49jzi5y T0CzTCY5kWDi4m8V9CtEJVKH8934P39gZ4wdpXwxGm4d+3aT3uwitnc8J7KXCFtA Uwlpk1w+WsfcLAU1huh7vm5V -----END CERTIFICATE-----Generated at Sun Nov 15 15:25:16 2026 by rpki-client