$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json) Hash identifier: 16n5SypVkU5ceOJtnQ1Ftkf6UUz0aq10jevy2cH6hVw= Subject key identifier: D9:A6:CB:8B:42:82:92:3F:ED:AF:D2:4B:EB:67:17:CD:15:B6:E3:34 Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft Manifest number: 074A Signing time: Thu 12 Nov 2026 21:52:06 +0000 Manifest this update: Thu 12 Nov 2026 21:52:06 +0000 Manifest next update: Thu 19 Nov 2026 21:52:06 +0000 Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: bmSBg4w7oj/yD/AhhDJPJFLGwZ9SBbb9+h9+juIF0wM=) 2: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=) 3: F5D2F46E9B8611F1B4386D6F4511F970.roa (hash: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=) 4: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=) 5: F32A5AEA9B8611F1B4386D6F4511F970.roa (hash: hC8DUUi3h7ApLUuU4cOKlMcdfzPUe8RieSnJ4Y0WyCc=) 6: F30D41529ABF11F1B22CABD14611F970.roa (hash: 85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=) 7: F4BAE41A9B8611F1B4386D6F4511F970.roa (hash: BWEvHpZlHk2lCPCqxiJZlaQoZxUmZjbC4KZmOcnu+w8=) 8: F28152A69B8611F1B4386D6F4511F970.roa (hash: ubTAyK2cMn31ieelGGRwezGPlj1FMuE8SjyOIKfT1/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 21:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73 Validity Not Before: Nov 12 21:52:06 2026 GMT Not After : Nov 19 21:52:06 2026 GMT Subject: CN=6af63506-082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:a9:24:3d:ee:09:20:9e:97:20:5e:35:78: 37:11:b3:9e:cc:b0:00:c3:b6:b7:f8:37:05:2a:95: 1d:e2:82:00:51:d0:75:c4:73:36:85:0a:47:86:d0: dd:7e:fd:72:4f:95:c9:c4:fd:5e:c0:f5:e1:3c:0a: 41:cd:fd:5c:82:72:69:76:67:7f:2a:d5:ac:bb:1b: bd:42:4c:40:34:a3:6a:f3:55:e9:99:7e:5c:d7:c0: fe:97:a3:3b:a0:89:c0:79:50:12:70:2f:5d:77:81: 9a:02:84:e7:db:3a:56:cb:56:3d:06:c0:9e:83:5f: 2c:b2:5f:85:1d:dd:a0:61:d7:ac:fd:12:72:11:b0: b7:b0:56:81:75:1c:80:15:32:b3:ea:00:4f:bf:27: c3:94:5b:31:86:11:af:f7:b2:d0:b6:62:be:80:81: 77:9a:36:b0:db:62:ef:cc:9e:95:42:e1:ce:a0:67: e0:31:12:69:ce:1e:15:75:41:22:1d:d6:cb:30:77: bb:3b:bc:d8:77:6a:16:3e:07:29:2c:73:8e:80:a5: aa:f3:db:20:3e:9f:a7:2a:96:11:a8:87:e7:4b:32: 43:cf:2c:ed:18:3c:40:69:41:28:fd:4a:4d:db:cf: 85:7f:f0:cc:51:55:07:b0:00:8b:44:da:22:c1:67: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A6:CB:8B:42:82:92:3F:ED:AF:D2:4B:EB:67:17:CD:15:B6:E3:34 X509v3 Authority Key Identifier: keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1e:06:9e:1e:89:4e:62:aa:24:aa:85:0f:96:5e:9c:d0:9b: 00:77:ea:22:5a:8e:20:d4:c2:45:2a:ee:5c:f7:b9:19:48:41: 7f:b5:a7:dc:44:06:54:52:6a:f8:14:87:bd:79:0b:a6:b2:93: 35:38:a2:40:35:23:b1:cc:30:5a:dd:8e:ca:64:ac:c0:ab:df: 4b:70:8b:2d:7f:89:c7:5b:88:08:c2:80:38:b8:12:18:bb:82: e0:1a:2b:c8:58:d5:5e:79:e3:18:6f:75:6d:2f:29:f0:91:1b: 17:b6:29:c3:44:25:8d:68:4b:a1:1f:a9:36:40:0d:41:42:95: bb:85:57:16:14:3b:69:9e:5a:77:25:e5:a9:7d:14:bd:49:a3: ae:9e:8a:86:d9:aa:48:5f:c7:b4:b7:cd:d4:cb:a3:e1:3e:6c: c9:12:86:da:a1:10:c0:15:86:54:e1:f0:18:b0:cf:8a:4d:eb: e3:7c:fb:51:11:11:1d:83:df:47:be:3e:aa:66:37:a7:71:10: 2c:0e:71:18:be:97:99:a4:ef:57:ea:70:64:e0:89:ee:52:f6: a2:a1:56:3d:d5:42:09:4e:9a:f1:be:2f:6d:16:84:33:f6:ae: f8:8e:48:2c:3c:cb:fd:8f:a4:33:a0:73:28:82:fc:8d:46:f7: 5b:39:71:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3 RTA5NDdENzMwHhcNMjYxMTEyMjE1MjA2WhcNMjYxMTE5MjE1MjA2WjAYMRYwFAYD VQQDEw02YWY2MzUwNi0wODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykGpJD3uCSCelyBeNXg3EbOezLAAw7a3+DcFKpUd4oIAUdB1xHM2hQpHhtDd fv1yT5XJxP1ewPXhPApBzf1cgnJpdmd/KtWsuxu9QkxANKNq81XpmX5c18D+l6M7 oInAeVAScC9dd4GaAoTn2zpWy1Y9BsCeg18ssl+FHd2gYdes/RJyEbC3sFaBdRyA FTKz6gBPvyfDlFsxhhGv97LQtmK+gIF3mjaw22LvzJ6VQuHOoGfgMRJpzh4VdUEi HdbLMHe7O7zYd2oWPgcpLHOOgKWq89sgPp+nKpYRqIfnSzJDzyztGDxAaUEo/UpN 28+Ff/DMUVUHsACLRNoiwWfQPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmmy4tC gpI/7a/SS+tnF80VtuM0MB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALR4Gnh6JTmKqJKqFD5ZenNCbAHfqIlqOINTCRSruXPe5GUhBf7Wn3EQGVFJq +BSHvXkLprKTNTiiQDUjscwwWt2OymSswKvfS3CLLX+Jx1uICMKAOLgSGLuC4Bor yFjVXnnjGG91bS8p8JEbF7Ypw0QljWhLoR+pNkANQUKVu4VXFhQ7aZ5adyXlqX0U vUmjrp6KhtmqSF/HtLfN1Muj4T5syRKG2qEQwBWGVOHwGLDPik3r43z7URERHYPf R74+qmY3p3EQLA5xGL6XmaTvV+pwZOCJ7lL2oqFWPdVCCU6a8b4vbRaEM/au+I5I LDzL/Y+kM6BzKIL8jUb3WzlxuA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:16 2026 by rpki-client