$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: wNkQPC1Wc7ECjlJkh/kQqbDQvCKeYPEHLzM3LRYo+so= Subject key identifier: 38:F2:AB:57:3F:65:5A:3C:50:3A:7A:E6:33:1E:00:5C:27:B6:36:48 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 0387 Signing time: Sun 15 Nov 2026 00:37:36 +0000 Manifest this update: Sun 15 Nov 2026 00:37:35 +0000 Manifest next update: Sun 22 Nov 2026 00:37:35 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: PTe/alMkhzNv9ujLhkCHSq2ziol7h9fmBXMKJAyyzYM=) 2: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=) 3: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=) 4: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Nov 15 00:37:35 2026 GMT Not After : Nov 22 00:37:35 2026 GMT Subject: CN=6af8fecf-c79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:e8:f4:c6:67:93:62:4b:34:a3:b3:fb:22: 14:d4:26:70:2a:28:1d:88:cb:20:6e:65:ff:87:2f: 70:68:35:54:15:52:44:b7:06:76:ba:d7:5a:34:d2: 5a:16:7f:35:e8:ae:6d:b4:fd:fa:38:8d:88:f1:5d: 84:0c:28:33:1f:87:d8:d3:9a:1c:60:43:91:3f:a3: 64:e9:2f:ee:65:eb:7a:3d:ff:97:a1:67:b8:34:ef: 13:bf:6d:fd:37:74:79:50:46:a9:c6:e6:bb:51:89: a3:88:d4:ea:9a:4c:65:95:29:1c:d4:a8:33:8e:c8: 5c:dd:f6:7e:3d:78:42:ae:19:ad:05:9c:a7:6a:21: d4:86:d5:ed:68:b8:12:51:8c:e0:55:4a:0c:66:6c: a9:dd:80:7e:b4:d9:3c:00:df:7a:40:c5:c8:e5:4d: 6e:a7:2d:b7:be:15:13:3a:ad:d3:85:2d:8f:75:bb: d0:66:25:74:37:d9:b5:ab:fe:f2:94:43:3c:a8:88: 0b:d4:6a:d9:7c:20:9a:b0:08:28:0e:b8:ec:00:85: 20:15:35:ae:35:f2:28:fa:c5:c3:7d:a2:f4:1e:8e: 96:1f:22:5f:7e:f2:d5:34:44:13:68:34:23:33:3c: 62:26:65:76:b6:e3:99:b4:64:97:96:57:f4:11:34: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:AB:57:3F:65:5A:3C:50:3A:7A:E6:33:1E:00:5C:27:B6:36:48 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:df:4f:3f:dd:79:ef:8e:d8:8c:28:6c:cd:b9:20:55:54:f0: 41:53:8a:24:ec:e2:c9:ce:31:de:19:57:27:3f:77:fd:a0:26: 94:4f:45:f5:7a:a4:45:49:2b:c6:94:74:4c:16:9e:c6:fe:f3: 08:65:13:52:21:cb:ae:3a:7b:70:4d:df:0b:39:fe:33:92:f2: a5:a1:a0:57:e3:b8:89:c7:bb:0f:3a:91:da:c4:67:ad:77:ea: 94:64:4a:76:de:c3:36:af:e3:c0:92:98:62:ba:6f:ca:03:ae: 12:89:00:38:67:4a:21:0c:af:c5:0b:4d:89:82:1f:bd:b0:52: 03:a5:31:58:81:b3:fe:64:02:fb:fe:40:68:d7:bf:f4:0c:49: 37:56:09:24:8f:e1:4b:26:75:74:d3:c4:1c:66:e5:13:4d:5a: 56:4a:01:82:f4:af:4e:54:45:6f:df:fc:15:eb:80:38:b3:36: 8a:d1:90:30:0f:ad:ef:80:d9:22:8d:21:c7:c4:38:ce:cb:e1: 40:e5:f8:97:e3:54:91:d1:0e:a5:44:e5:ef:ca:76:d1:70:b5: 73:c6:77:d1:5e:f8:81:56:89:5d:ad:47:ff:89:b6:4f:35:e9: 57:a1:6e:13:62:8a:21:62:de:b7:b0:b7:03:e9:76:6b:90:c5: 24:f4:5b:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjYxMTE1MDAzNzM1WhcNMjYxMTIyMDAzNzM1WjAYMRYwFAYD VQQDEw02YWY4ZmVjZi1jNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+Xo9MZnk2JLNKOz+yIU1CZwKigdiMsgbmX/hy9waDVUFVJEtwZ2utdaNNJa Fn816K5ttP36OI2I8V2EDCgzH4fY05ocYEORP6Nk6S/uZet6Pf+XoWe4NO8Tv239 N3R5UEapxua7UYmjiNTqmkxllSkc1Kgzjshc3fZ+PXhCrhmtBZynaiHUhtXtaLgS UYzgVUoMZmyp3YB+tNk8AN96QMXI5U1upy23vhUTOq3ThS2PdbvQZiV0N9m1q/7y lEM8qIgL1GrZfCCasAgoDrjsAIUgFTWuNfIo+sXDfaL0Ho6WHyJffvLVNEQTaDQj MzxiJmV2tuOZtGSXllf0ETQCjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjyq1c/ ZVo8UDp65jMeAFwntjZIMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGN9PP915747YjChszbkgVVTwQVOKJOziyc4x3hlXJz93/aAmlE9F9XqkRUkr xpR0TBaexv7zCGUTUiHLrjp7cE3fCzn+M5LypaGgV+O4ice7DzqR2sRnrXfqlGRK dt7DNq/jwJKYYrpvygOuEokAOGdKIQyvxQtNiYIfvbBSA6UxWIGz/mQC+/5AaNe/ 9AxJN1YJJI/hSyZ1dNPEHGblE01aVkoBgvSvTlRFb9/8FeuAOLM2itGQMA+t74DZ Io0hx8Q4zsvhQOX4l+NUkdEOpUTl78p20XC1c8Z30V74gVaJXa1H/4m2TzXpV6Fu E2KKIWLet7C3A+l2a5DFJPRbeg== -----END CERTIFICATE-----Generated at Sun Nov 15 16:41:03 2026 by rpki-client