$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft File: aOkXw1nR1G-x79ULcydnbeApSt8.mft (raw, json) Hash identifier: 6jaYes3Ot5h0q8YYEKLMf18ubERcLJzNFXzsc/T+13U= Subject key identifier: 4C:74:3A:CA:7B:0F:D7:3D:2C:44:89:86:3F:02:29:47:7A:CF:18:F0 Authority key identifier: 68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF Certificate issuer: /CN=A91A2F6C/serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft Manifest number: 0ACB Signing time: Thu 12 Nov 2026 19:23:49 +0000 Manifest this update: Thu 12 Nov 2026 19:23:49 +0000 Manifest next update: Thu 19 Nov 2026 19:23:49 +0000 Files and hashes: 1: aOkXw1nR1G-x79ULcydnbeApSt8.crl (hash: uwqO45B+R/7zro3YNE2DDQYzNQOWOdDC4ocWdIz6n6Y=) 2: 8746F506B54C11F1AB2B07BF9DEE528E.roa (hash: xqQ8RcJ+KeY8he+b6ly8ijnBrNknvFeLnsjxPvuvK6c=) 3: oqJx-jvqVcsqpHYrmBQJRm0qYx0.asa (hash: RUMqslC7bug77qj14G+7Ah5OwG26LsWHGYxirdhoh20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 19:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C, serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Validity Not Before: Nov 12 19:23:49 2026 GMT Not After : Nov 19 19:23:49 2026 GMT Subject: CN=6af61245-7c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:f7:cb:a8:df:16:e5:ae:a1:89:a7:4f:ed: 49:22:ee:b6:6d:fa:7b:99:03:5d:2b:30:92:5b:6b: 07:23:ae:55:1f:bc:35:e5:0b:c3:d7:b0:28:b2:9d: 8a:e2:c4:24:8d:12:62:ee:3a:50:eb:52:f3:8e:f7: dc:19:9a:73:1d:db:f5:9b:23:af:8a:41:93:77:86: 31:94:ec:e8:39:6c:da:2d:c0:d7:21:cb:1e:a5:b9: ec:54:21:e9:06:d6:c1:18:48:2d:68:8f:79:08:4b: 7b:a4:fc:11:e4:44:74:ae:e6:a9:f9:dd:93:d0:c0: 59:ff:b1:14:14:cb:a6:c2:d7:33:08:99:e2:69:6b: 9f:8d:a5:7e:89:60:af:d5:f2:26:ed:f4:a2:c5:cc: bc:d0:be:dd:c4:66:a0:2a:c9:22:11:66:2d:d0:88: db:00:cf:95:42:14:a7:cb:b7:3b:18:16:c5:62:4c: 78:8b:e1:aa:89:84:74:ce:df:e1:5d:86:57:da:00: be:c9:97:d9:f3:f9:c5:1a:a6:a2:f7:28:aa:d2:4b: 39:64:03:21:fc:07:9c:22:f0:0d:04:a2:6b:cb:82: 8d:7c:4e:2b:1a:10:e5:32:38:af:cd:9a:22:a8:df: 27:32:17:8b:89:ee:3d:b9:67:1b:a2:ab:c9:0f:de: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:74:3A:CA:7B:0F:D7:3D:2C:44:89:86:3F:02:29:47:7A:CF:18:F0 X509v3 Authority Key Identifier: keyid:68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:94:15:7d:de:88:1a:33:c5:96:d2:45:b5:52:0d:36:cf: 25:fe:ff:11:33:45:57:ef:4a:40:cf:a3:23:94:91:5e:53:23: b9:0f:1a:90:b7:73:e6:a5:20:d9:b6:1a:0e:1d:44:5d:a6:b9: 5d:f6:73:b0:bb:02:b4:74:01:d0:2a:93:23:bd:ba:3b:9d:a5: 87:ff:02:49:3d:2c:76:a1:e1:1b:33:9f:87:47:a0:fa:26:87: 01:b3:c3:78:ed:bc:0f:38:dd:07:a9:e7:23:f3:00:78:83:f9: 7c:2b:69:52:cc:53:5e:c9:97:78:32:53:c8:f0:9a:8b:d1:35: 86:83:db:b7:4d:54:1a:2d:90:73:50:94:18:ad:7a:53:db:b2: 33:93:21:68:49:db:1c:31:e1:c8:a3:4a:cf:93:3a:91:94:ab: 25:88:be:d9:7e:ca:3e:bd:6a:f6:3f:a1:7a:15:0c:43:56:d2: 58:86:b6:69:2f:72:42:31:02:bb:c1:4b:3d:36:44:6b:ac:80: 07:66:ab:13:7f:80:bd:6e:f1:af:84:7a:7e:56:1f:1a:11:4a: 6a:0d:54:81:bb:83:68:98:63:70:81:e8:5f:8a:9f:6d:ce:c9: d3:df:7e:1e:49:38:e3:91:2d:0b:e9:5c:36:d8:23:d8:ce:06: 73:4f:29:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkY2QzExMC8GA1UEBRMoNjhFOTE3QzM1OUQxRDQ2RkIxRUZENTBCNzMyNzY3NkRF MDI5NEFERjAeFw0yNjExMTIxOTIzNDlaFw0yNjExMTkxOTIzNDlaMBgxFjAUBgNV BAMTDTZhZjYxMjQ1LTdjMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpNvfLqN8W5a6hiadP7Uki7rZt+nuZA10rMJJbawcjrlUfvDXlC8PXsCiynYri xCSNEmLuOlDrUvOO99wZmnMd2/WbI6+KQZN3hjGU7Og5bNotwNchyx6luexUIekG 1sEYSC1oj3kIS3uk/BHkRHSu5qn53ZPQwFn/sRQUy6bC1zMImeJpa5+NpX6JYK/V 8ibt9KLFzLzQvt3EZqAqySIRZi3QiNsAz5VCFKfLtzsYFsViTHiL4aqJhHTO3+Fd hlfaAL7Jl9nz+cUapqL3KKrSSzlkAyH8B5wi8A0EomvLgo18TisaEOUyOK/NmiKo 3ycyF4uJ7j25Zxuiq8kP3o+/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTHQ6ynsP 1z0sRImGPwIpR3rPGPAwHwYDVR0jBBgwFoAUaOkXw1nR1G+x79ULcydnbeApSt8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRjZDLzlFMzFGM0IyOEFC MzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUcteDc5VUxjeWRuYmVBcFN0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU9rWHcxblIxRy14NzlVTGN5ZG5iZUFwU3Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RjZDLzlFMzFGM0IyOEFCMzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUct eDc5VUxjeWRuYmVBcFN0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKRpQVfd6IGjPFltJFtVINNs8l/v8RM0VX70pAz6MjlJFeUyO5DxqQt3PmpSDZ thoOHURdprld9nOwuwK0dAHQKpMjvbo7naWH/wJJPSx2oeEbM5+HR6D6JocBs8N4 7bwPON0Hqecj8wB4g/l8K2lSzFNeyZd4MlPI8JqL0TWGg9u3TVQaLZBzUJQYrXpT 27IzkyFoSdscMeHIo0rPkzqRlKsliL7Zfso+vWr2P6F6FQxDVtJYhrZpL3JCMQK7 wUs9NkRrrIAHZqsTf4C9bvGvhHp+Vh8aEUpqDVSBu4NomGNwgehfip9tzsnT334e STjjkS0L6Vw22CPYzgZzTym6 -----END CERTIFICATE-----Generated at Sat Nov 14 20:53:19 2026 by rpki-client