$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json) Hash identifier: /O7O2Pcxuj87xAsXB7OfA9slOgVNQt+UihpsPlE/Ino= Subject key identifier: D1:88:09:1B:68:09:B9:28:14:8A:D6:20:71:70:72:E4:1E:1B:5E:67 Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft Manifest number: 085D Signing time: Sat 14 Nov 2026 20:50:25 +0000 Manifest this update: Sat 14 Nov 2026 20:50:24 +0000 Manifest next update: Sat 21 Nov 2026 20:50:24 +0000 Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: rGQ0jUItW1k5psSr6UhvC25pNzhgfUxvp30GckQlCGc=) 2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Validity Not Before: Nov 14 20:50:24 2026 GMT Not After : Nov 21 20:50:24 2026 GMT Subject: CN=6af8c990-2a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:01:61:ad:73:28:15:31:5d:a0:ac:c0:1e: d0:13:3f:b1:1a:45:b5:ba:05:eb:ab:db:33:26:4a: 23:0d:78:67:e7:6c:2b:57:c3:83:6d:97:c1:c4:96: 96:29:b9:bb:b0:18:96:6c:ea:71:ea:c5:a3:d9:f0: 9d:54:39:b5:67:8b:e4:bb:17:ea:fd:b3:be:9b:fd: 05:d3:b6:82:1d:9c:2e:81:e1:97:4c:f0:72:81:5b: 6c:2c:14:8d:63:1f:00:a3:a2:17:a1:f4:19:a3:85: 64:ce:03:5a:6b:2c:ad:c2:08:13:da:05:51:d2:46: 95:e5:1d:8c:4d:9e:72:98:d0:0f:08:13:3a:13:ab: b1:ad:1d:e4:60:c7:ea:46:c0:c0:8e:a9:b9:de:a6: 8e:0c:d8:f0:a4:4c:df:11:c9:7f:98:dc:57:cc:9d: 2e:93:c7:22:b4:de:57:e9:0e:3a:b8:11:7c:09:5d: 16:c9:53:dc:21:cd:9d:e2:5d:64:e2:0e:62:71:32: 5f:11:a6:6d:be:81:db:5e:33:7d:1f:6e:a4:79:31: f0:e3:92:1c:af:75:96:d1:20:c8:62:96:76:45:fc: e7:b9:c6:25:39:92:6f:ad:ed:6e:79:91:6a:90:35: 7c:75:1b:14:45:86:a3:e6:ca:b0:26:c4:7f:01:f8: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:88:09:1B:68:09:B9:28:14:8A:D6:20:71:70:72:E4:1E:1B:5E:67 X509v3 Authority Key Identifier: keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:d2:7f:73:dc:58:c1:82:de:0c:83:8e:84:2e:cb:7f:5e: 79:a5:18:f7:0d:0f:9f:26:6d:4a:76:9e:0a:0c:eb:cc:09:7e: 87:df:fa:48:79:79:9e:d7:d6:90:ee:89:67:92:52:de:17:a9: 0f:fc:72:3c:d4:ae:86:dd:89:85:82:25:92:13:4c:9d:de:1d: 98:72:65:de:c9:49:15:84:76:91:a8:62:ae:52:28:7f:4f:47: df:5d:b6:a8:38:cc:15:dd:5c:f6:92:00:a2:e6:19:14:e1:93: 8e:30:df:04:cf:fc:16:10:23:eb:53:40:32:ca:3a:3a:ef:a5: ca:88:79:c0:08:a4:f5:6c:ec:1e:bc:8a:ca:54:49:7b:21:35: 3b:72:24:23:ba:8a:02:c7:e7:e7:f3:a8:27:5b:8b:53:fc:3b: 78:9a:80:67:15:f6:4f:49:81:71:f3:a6:a6:d3:5b:ff:d8:39: 03:4b:2f:8a:bf:c7:2f:43:b8:e9:99:d4:48:64:2a:35:13:8a: 14:6a:a3:08:b4:dc:ea:9d:36:b0:fa:60:94:18:e1:83:c4:c3: 03:1e:17:2b:5e:d3:57:a7:e8:37:2c:04:c6:ed:7d:f6:8a:c6: 9a:a2:76:3b:5d:75:85:ed:07:e5:fd:53:23:7b:4d:7d:6a:95: 09:1b:3a:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2 OUUxRkFDRkQwHhcNMjYxMTE0MjA1MDI0WhcNMjYxMTIxMjA1MDI0WjAYMRYwFAYD VQQDEw02YWY4Yzk5MC0yYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumQBYa1zKBUxXaCswB7QEz+xGkW1ugXrq9szJkojDXhn52wrV8ODbZfBxJaW Kbm7sBiWbOpx6sWj2fCdVDm1Z4vkuxfq/bO+m/0F07aCHZwugeGXTPBygVtsLBSN Yx8Ao6IXofQZo4VkzgNaayytwggT2gVR0kaV5R2MTZ5ymNAPCBM6E6uxrR3kYMfq RsDAjqm53qaODNjwpEzfEcl/mNxXzJ0uk8citN5X6Q46uBF8CV0WyVPcIc2d4l1k 4g5icTJfEaZtvoHbXjN9H26keTHw45Icr3WW0SDIYpZ2RfznucYlOZJvre1ueZFq kDV8dRsURYaj5sqwJsR/AfjutQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGICRto CbkoFIrWIHFwcuQeG15nMB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5 MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi9CMDE4QUQ5NjI5MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZK S2Z5LVIwR2Z4ZXhwNGZyUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo8vSf3PcWMGC3gyDjoQuy39eeaUY9w0PnyZtSnaeCgzrzAl+h9/6SHl5ntfW kO6JZ5JS3hepD/xyPNSuht2JhYIlkhNMnd4dmHJl3slJFYR2kahirlIof09H3122 qDjMFd1c9pIAouYZFOGTjjDfBM/8FhAj61NAMso6Ou+lyoh5wAik9WzsHryKylRJ eyE1O3IkI7qKAsfn5/OoJ1uLU/w7eJqAZxX2T0mBcfOmptNb/9g5A0svir/HL0O4 6ZnUSGQqNROKFGqjCLTc6p02sPpglBjhg8TDAx4XK17TV6foNywExu199orGmqJ2 O111he0H5f1TI3tNfWqVCRs65w== -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:33 2026 by rpki-client