$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: /nzaU0mA66cwq/RZRYLoH0RkwHo2IOjpJg8x7Dy7PI8= Subject key identifier: B1:BF:AD:AF:C0:07:8F:00:78:50:7C:4D:D9:F6:01:EB:4D:B4:81:9F Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 09B5 Signing time: Sat 14 Nov 2026 19:49:04 +0000 Manifest this update: Sat 14 Nov 2026 19:49:04 +0000 Manifest next update: Sat 21 Nov 2026 19:49:04 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: fps5Km2PI/epyeUCVzlj61PTxkuzu1rh5BNeG/jWCpQ=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: UPFaKbnBvYV/oBLFHvioaYPGvQwOT3ArF5p1DrBDTCo=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: dE5V/45gyX90Z4QwRQHyRADxd1aO16dVTlUQkT6hivo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 14 19:49:04 2026 GMT Not After : Nov 21 19:49:04 2026 GMT Subject: CN=6af8bb30-1b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:10:c0:80:cb:77:98:1d:00:93:bd:94:7d: 1e:21:38:b5:ec:85:1c:f4:f4:0f:e3:97:17:c5:4d: b1:6b:7d:b2:37:ce:06:43:62:86:2b:d4:01:53:a0: 0f:e8:93:fa:62:da:d1:43:30:6e:97:14:e3:77:fd: fc:a5:88:91:04:5f:9d:68:a0:a5:8a:e5:c5:73:e9: 8d:72:9d:9a:0d:25:cd:e1:b6:5b:89:71:50:43:65: a2:14:65:4f:6a:de:a5:7f:07:94:1b:f7:42:d6:65: dc:f0:a3:28:95:8b:2e:2e:6a:fa:17:0f:bc:e8:9f: c9:12:05:b1:b3:85:4d:25:1c:6b:ce:b6:2c:bf:c9: 96:fe:fa:7a:c6:39:16:4a:c6:57:bb:2d:ac:9e:17: c4:60:1e:60:c5:99:fa:f3:85:2c:bf:0a:3a:af:8c: 06:d0:2e:e2:8f:47:62:3d:5b:de:40:f5:6e:75:5b: 04:f3:93:5a:eb:0c:93:d9:e2:8d:e9:ef:c8:3e:37: db:d3:f9:73:cd:60:b5:39:c6:52:8a:6f:e5:4b:f7: f5:ef:6f:ba:27:c9:c1:69:58:88:99:d0:15:c4:bc: 20:6d:b0:a0:77:3a:40:15:ee:91:d5:41:f5:c1:35: 04:25:0a:a6:89:3e:f3:58:73:c7:3a:f1:0a:b0:9b: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BF:AD:AF:C0:07:8F:00:78:50:7C:4D:D9:F6:01:EB:4D:B4:81:9F X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3d:e0:ff:38:14:61:e2:57:46:31:a8:72:1f:bd:f7:c1:21: 49:a4:3d:ad:69:d7:11:ae:6b:3b:a1:87:d1:b3:72:95:8f:4f: dd:ec:fd:be:63:09:7e:e7:b7:d3:19:ea:81:77:6f:d5:54:7d: 27:ee:6b:9e:ec:fd:b0:df:19:63:09:db:b9:4a:9f:c0:11:4a: ed:ab:c3:2d:41:ec:7b:b7:00:d4:f1:c4:54:bb:ee:61:7c:d3: e9:7e:ae:b6:fa:83:35:49:b5:c8:29:16:ea:ba:0b:10:53:90: 3a:68:ac:9a:4d:78:79:33:da:d6:d5:e5:bf:ce:97:d4:c0:37: bd:98:4f:23:a2:a6:7b:98:08:f0:89:60:ce:17:0f:9f:18:af: 65:f8:76:77:ff:d4:99:28:06:33:a0:25:42:40:ed:50:44:f0: 97:97:7b:1a:52:e6:61:bf:ee:bd:91:b7:a9:95:30:1f:cd:56: 2c:ef:15:18:22:d8:5b:a5:1d:d1:75:11:79:26:33:8e:9c:c5: 96:17:70:77:0b:79:3c:2c:42:ec:2d:40:ea:d2:ae:94:21:1a: e5:0c:20:4f:e1:61:48:cd:4c:bf:80:54:0c:e1:db:b5:b9:a4: 6e:14:87:5f:76:57:5a:17:e0:2c:52:14:cb:33:0f:92:7f:a6: 19:83:a9:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjYxMTE0MTk0OTA0WhcNMjYxMTIxMTk0OTA0WjAYMRYwFAYD VQQDEw02YWY4YmIzMC0xYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaIQwIDLd5gdAJO9lH0eITi17IUc9PQP45cXxU2xa32yN84GQ2KGK9QBU6AP 6JP6YtrRQzBulxTjd/38pYiRBF+daKCliuXFc+mNcp2aDSXN4bZbiXFQQ2WiFGVP at6lfweUG/dC1mXc8KMolYsuLmr6Fw+86J/JEgWxs4VNJRxrzrYsv8mW/vp6xjkW SsZXuy2snhfEYB5gxZn684Usvwo6r4wG0C7ij0diPVveQPVudVsE85Na6wyT2eKN 6e/IPjfb0/lzzWC1OcZSim/lS/f172+6J8nBaViImdAVxLwgbbCgdzpAFe6R1UH1 wTUEJQqmiT7zWHPHOvEKsJsBLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLG/ra/A B48AeFB8Tdn2AetNtIGfMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdj3g/zgUYeJXRjGoch+998EhSaQ9rWnXEa5rO6GH0bNylY9P3ez9vmMJfue3 0xnqgXdv1VR9J+5rnuz9sN8ZYwnbuUqfwBFK7avDLUHse7cA1PHEVLvuYXzT6X6u tvqDNUm1yCkW6roLEFOQOmismk14eTPa1tXlv86X1MA3vZhPI6Kme5gI8IlgzhcP nxivZfh2d//UmSgGM6AlQkDtUETwl5d7GlLmYb/uvZG3qZUwH81WLO8VGCLYW6Ud 0XUReSYzjpzFlhdwdwt5PCxC7C1A6tKulCEa5QwgT+FhSM1Mv4BUDOHbtbmkbhSH X3ZXWhfgLFIUyzMPkn+mGYOpXg== -----END CERTIFICATE-----Generated at Sun Nov 15 01:31:53 2026 by rpki-client