$ rpki-client -vvvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: vi1eqypParDWwKum9X0Ci6mF6c4vgiX0d8ZFco7l53c= Subject key identifier: 9B:EC:42:6E:14:93:10:C7:3C:C5:2F:89:69:EB:41:90:BC:E0:84:D9 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01FA Signing time: Sun 15 Nov 2026 03:40:58 +0000 Manifest this update: Sun 15 Nov 2026 03:40:57 +0000 Manifest next update: Sun 22 Nov 2026 03:40:57 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 8C5DotOT/o+NtlsbHlQS0CXbkpVrNPD38WIaB7LYZMQ=) 2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) 3: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) 4: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Nov 15 03:40:57 2026 GMT Not After : Nov 22 03:40:57 2026 GMT Subject: CN=6af929ca-e96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:97:91:ac:8b:0a:b4:4b:94:61:fb:16:1a: d1:25:ef:aa:55:d5:ef:3c:48:64:5e:48:14:ea:98: 4a:55:73:ec:59:12:92:a3:ab:9c:82:af:32:e5:63: 3a:a3:3c:43:12:f7:6f:22:35:63:e3:12:63:25:f5: 14:d5:f2:ba:68:82:cc:4b:f2:bd:f5:10:a6:f4:c5: 53:f3:7a:05:33:cc:b6:62:d0:f2:eb:b8:13:42:ce: 99:cf:46:dc:ef:41:c0:ac:ab:27:b9:28:39:f7:2f: 15:dc:1c:5a:c9:f5:b8:a8:ed:e5:71:a5:76:fe:2e: 6c:aa:7b:62:8d:5a:40:41:7d:3c:65:51:7d:80:ed: cc:41:c3:03:e2:7f:90:73:5c:53:f4:92:98:39:ff: 46:9e:5f:4e:11:b2:01:ba:5a:df:fc:90:cd:b0:1b: 3f:20:8c:c4:40:84:a1:76:7e:e1:df:ad:27:b0:34: df:26:72:fa:1d:60:5b:5e:96:83:ce:c6:35:6c:b0: 68:24:c3:dd:d1:43:1e:9a:31:7c:83:e1:89:c4:44: 62:d2:76:24:67:aa:d5:d5:0e:c9:a2:f3:8c:c7:da: de:bb:f1:6a:89:c2:ba:b4:d3:10:d3:20:82:08:cc: e3:dc:68:0d:df:35:5e:75:c4:6b:5c:7f:63:04:c6: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EC:42:6E:14:93:10:C7:3C:C5:2F:89:69:EB:41:90:BC:E0:84:D9 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b0:7f:8a:1a:9e:65:b2:fe:c0:dd:ae:ef:90:23:bc:67:ad: 27:92:08:78:85:02:80:6a:ab:87:dc:32:42:d5:92:8b:23:70: 93:72:e5:cc:0a:fc:3d:de:dd:94:59:d6:30:1d:92:8c:d2:a2: 10:31:b8:3b:f2:65:eb:7e:ea:71:43:55:99:aa:fe:69:56:c7: 21:d9:34:6a:8e:20:06:e3:b3:25:b7:38:b5:d5:46:45:6f:ab: 63:f4:ac:9e:be:b9:11:2c:05:25:d1:57:2a:fe:cf:dc:f2:6e: 3f:c0:55:15:13:8d:11:ea:fd:46:a1:3e:5c:61:1d:68:d3:57: eb:f2:33:7c:6a:8b:4c:a9:40:25:2a:67:8f:0d:17:61:ec:15: 68:67:d0:2a:73:81:4b:13:f3:0c:fa:4b:e6:14:b0:6f:d0:e0: d5:27:21:32:e2:71:90:7f:29:95:38:55:b8:de:52:bc:a0:0b: 56:b2:f4:65:fe:36:a8:71:e2:a7:39:32:24:db:7d:5d:4b:3a: 61:92:5f:88:0e:82:48:a2:ef:b2:0e:34:8d:41:e4:66:c8:3d: 36:36:cd:a9:e6:5a:f1:88:b8:0f:40:5e:06:5c:8d:21:37:b3: de:9c:dd:6a:f6:ed:14:30:6d:06:76:b3:5c:57:b1:6d:95:57: f4:0c:db:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYxMTE1MDM0MDU3WhcNMjYxMTIyMDM0MDU3WjAYMRYwFAYD VQQDEw02YWY5MjljYS1lOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oqXkayLCrRLlGH7FhrRJe+qVdXvPEhkXkgU6phKVXPsWRKSo6ucgq8y5WM6 ozxDEvdvIjVj4xJjJfUU1fK6aILMS/K99RCm9MVT83oFM8y2YtDy67gTQs6Zz0bc 70HArKsnuSg59y8V3BxayfW4qO3lcaV2/i5sqntijVpAQX08ZVF9gO3MQcMD4n+Q c1xT9JKYOf9Gnl9OEbIBulrf/JDNsBs/IIzEQIShdn7h360nsDTfJnL6HWBbXpaD zsY1bLBoJMPd0UMemjF8g+GJxERi0nYkZ6rV1Q7JovOMx9reu/FqicK6tNMQ0yCC CMzj3GgN3zVedcRrXH9jBMacLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvsQm4U kxDHPMUviWnrQZC84ITZMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANLB/ihqeZbL+wN2u75AjvGetJ5IIeIUCgGqrh9wyQtWSiyNwk3LlzAr8Pd7d lFnWMB2SjNKiEDG4O/Jl637qcUNVmar+aVbHIdk0ao4gBuOzJbc4tdVGRW+rY/Ss nr65ESwFJdFXKv7P3PJuP8BVFRONEer9RqE+XGEdaNNX6/IzfGqLTKlAJSpnjw0X YewVaGfQKnOBSxPzDPpL5hSwb9Dg1SchMuJxkH8plThVuN5SvKALVrL0Zf42qHHi pzkyJNt9XUs6YZJfiA6CSKLvsg40jUHkZsg9NjbNqeZa8Yi4D0BeBlyNITez3pzd avbtFDBtBnazXFexbZVX9Azbmg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:28:22 2026 by rpki-client