$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: 7H2b8u7D3v2ygIz8H3klRwsn5QfNQ0hwWugzlJDGW0Y= Subject key identifier: EA:B7:4A:0B:23:E5:4E:0F:C9:25:51:D7:15:18:9D:59:D5:C3:D6:49 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0EE5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0ECE Signing time: Sat 14 Nov 2026 14:40:19 +0000 Manifest this update: Sat 14 Nov 2026 14:40:18 +0000 Manifest next update: Sat 21 Nov 2026 14:40:18 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: VfSJnievjHtxL5DSuLcaWkD4Y8H6ItvjFWVIskaU++k=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3813 (0xee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Nov 14 14:40:18 2026 GMT Not After : Nov 21 14:40:18 2026 GMT Subject: CN=6af872d3-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:c4:1a:df:d3:69:5f:2c:aa:af:6d:02:c7: 07:00:63:c5:29:06:aa:06:c3:ae:21:57:c7:35:0e: af:a1:2b:db:cf:74:d6:7d:37:6a:22:37:d2:6d:d0: 5f:68:10:b6:48:d1:51:c5:69:6d:ea:65:ca:21:91: 55:2c:3b:d7:5c:28:0d:17:39:89:77:7d:5c:81:39: cc:b1:da:6a:7b:c6:5f:f9:2a:68:47:43:1c:b9:af: d8:cd:d6:d5:40:3b:6a:21:c0:6c:73:97:48:ed:11: aa:0d:f5:c6:e8:f5:d5:e0:e5:f9:e9:9d:0f:77:f0: 5f:8e:89:e9:e2:20:94:a6:96:ea:a4:0c:d1:a8:1b: cd:65:4b:f5:33:a2:fb:6d:1a:71:00:a9:0d:a7:12: 21:db:a5:bf:de:54:98:bb:1c:0c:b3:f0:a8:16:98: ee:5d:03:5a:21:07:4d:91:12:59:7e:98:e3:37:f5: c4:68:5b:18:be:38:61:8a:22:31:4a:85:f0:6b:fe: e7:e4:bd:55:59:51:13:44:be:25:89:d1:20:81:fc: 13:c8:50:f7:63:85:94:f1:7c:e4:9a:24:6c:3c:c6: 00:8c:92:78:18:52:79:92:2a:d5:a3:76:98:02:0f: 28:4a:53:36:28:df:18:65:63:56:9f:2b:e6:2a:90: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:4A:0B:23:E5:4E:0F:C9:25:51:D7:15:18:9D:59:D5:C3:D6:49 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f7:74:33:99:cd:59:d4:f6:b4:96:94:36:8c:8c:f6:bc:e0: 51:39:47:2f:70:76:50:5e:5a:7d:13:3c:ee:16:59:c7:c8:b8: 18:49:11:c5:63:78:ac:73:74:20:59:a8:ee:74:14:59:61:04: f1:8f:50:76:94:c5:e3:90:33:4e:82:28:c6:25:a0:1d:06:a8: 59:02:bb:8c:72:55:27:c3:6c:5e:f6:0e:4d:b3:97:92:1c:31: 59:6b:a3:03:0f:37:0b:6e:9d:8d:26:aa:25:ae:da:94:68:02: 2c:49:9f:37:2e:bf:49:c1:f8:da:2a:d5:7b:62:0d:c4:70:4d: 3a:44:59:b1:a5:47:ff:18:f1:d8:06:16:57:ba:fe:1b:03:3f: 8e:bf:73:0d:79:58:3a:c1:a5:ec:0e:69:88:41:54:79:ea:9e: 19:17:2f:c6:02:fa:0e:1e:a3:6e:e2:6a:49:d4:85:9b:04:b3: 43:01:ff:f8:f3:29:19:be:65:0b:d5:f0:22:9e:26:62:e6:6a: bc:0b:66:7e:6e:2c:68:af:19:6f:11:43:cd:20:32:ea:27:97: da:a3:fe:3f:d7:86:fc:de:e8:ce:d8:3e:42:8d:be:1c:e2:b3: 37:fc:12:43:8b:f4:68:46:0b:ae:de:a8:8f:6b:30:11:ac:29: 17:f8:66:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYxMTE0MTQ0MDE4WhcNMjYxMTIxMTQ0MDE4WjAYMRYwFAYD VQQDEw02YWY4NzJkMy1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK3EGt/TaV8sqq9tAscHAGPFKQaqBsOuIVfHNQ6voSvbz3TWfTdqIjfSbdBf aBC2SNFRxWlt6mXKIZFVLDvXXCgNFzmJd31cgTnMsdpqe8Zf+SpoR0Mcua/YzdbV QDtqIcBsc5dI7RGqDfXG6PXV4OX56Z0Pd/Bfjonp4iCUppbqpAzRqBvNZUv1M6L7 bRpxAKkNpxIh26W/3lSYuxwMs/CoFpjuXQNaIQdNkRJZfpjjN/XEaFsYvjhhiiIx SoXwa/7n5L1VWVETRL4lidEggfwTyFD3Y4WU8XzkmiRsPMYAjJJ4GFJ5kirVo3aY Ag8oSlM2KN8YZWNWnyvmKpAkyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOq3Sgsj 5U4PySVR1xUYnVnVw9ZJMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQvd0M5nNWdT2tJaUNoyM9rzgUTlHL3B2UF5afRM87hZZx8i4GEkRxWN4rHN0 IFmo7nQUWWEE8Y9QdpTF45AzToIoxiWgHQaoWQK7jHJVJ8NsXvYOTbOXkhwxWWuj Aw83C26djSaqJa7alGgCLEmfNy6/ScH42irVe2INxHBNOkRZsaVH/xjx2AYWV7r+ GwM/jr9zDXlYOsGl7A5piEFUeeqeGRcvxgL6Dh6jbuJqSdSFmwSzQwH/+PMpGb5l C9XwIp4mYuZqvAtmfm4saK8ZbxFDzSAy6ieX2qP+P9eG/N7oztg+Qo2+HOKzN/wS Q4v0aEYLrt6oj2swEawpF/hmKQ== -----END CERTIFICATE-----Generated at Sat Nov 14 22:11:15 2026 by rpki-client