$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: zUswxz7qHz60HEuUOJzeKxCP83olldZOrMuvLVEGvgU= Subject key identifier: 5E:09:1B:E1:11:F0:DF:55:DC:DC:D6:B3:78:90:4E:51:6B:B7:36:83 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 01AC Signing time: Sun 15 Nov 2026 04:20:44 +0000 Manifest this update: Sun 15 Nov 2026 04:20:43 +0000 Manifest next update: Sun 22 Nov 2026 04:20:43 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: oYSBw23gzWG3mlfBF2yKym8crV9N0MrQAmNhWwnnMK0=) 2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=) 3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Nov 15 04:20:43 2026 GMT Not After : Nov 22 04:20:43 2026 GMT Subject: CN=6af9331c-1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:5b:e6:ec:84:08:26:b6:58:ea:b9:36:3c: b8:cf:81:a8:bc:70:81:91:77:27:60:b5:ab:a3:05: fa:9b:5c:23:fe:c2:1c:4d:86:e2:d2:0d:2e:03:0d: 93:c9:cd:fe:28:bb:f5:85:85:5e:de:15:f3:fb:8e: 8b:20:0d:d5:2c:68:48:63:c5:82:6d:dd:9f:15:a1: 22:71:de:fd:be:1e:0e:63:bb:86:70:b2:c2:45:f8: 54:70:ca:d9:09:2d:10:2f:32:4f:fc:9c:37:fb:3c: 9a:be:8c:67:2c:06:f1:7a:8d:e4:70:80:09:ca:5d: e0:e6:e3:29:b5:20:ca:94:8d:1e:25:79:a7:75:ba: 8d:eb:0b:c5:36:97:85:01:66:8b:c5:48:bb:ad:02: 04:ea:f8:fe:d3:06:15:25:ea:78:54:e8:bc:a6:8a: 29:6f:62:f4:47:17:88:de:29:26:55:92:70:65:0e: 14:c0:ef:dd:02:9d:b0:1f:fb:3b:45:4f:35:94:f5: 98:d8:4c:4d:dd:44:62:06:f3:86:93:fe:bf:93:30: 6c:9f:90:d5:e2:c4:48:0d:90:33:29:8b:77:db:cd: 4b:63:ee:99:6e:59:bb:2d:57:b8:92:ab:f2:48:c1: 2b:83:f8:e9:68:03:e9:a4:54:83:ec:c2:06:41:d5: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:1B:E1:11:F0:DF:55:DC:DC:D6:B3:78:90:4E:51:6B:B7:36:83 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:42:75:ba:aa:ad:ce:f8:46:20:35:a9:b4:6b:eb:9d:1f:7b: 94:d9:e3:11:d5:ed:55:1d:3e:4f:a2:47:eb:67:d7:39:d2:1f: 6a:79:c2:9e:7f:1c:54:af:3a:dc:99:fb:f3:0f:e8:cd:2c:a9: 07:7d:b0:19:dd:3b:fb:52:b9:19:81:00:09:ef:70:1c:fa:80: e2:e4:2c:0b:14:fe:24:6d:0e:8f:22:71:08:91:14:ea:d2:45: da:63:2c:1a:42:b5:16:d2:55:22:3f:b6:5e:fe:8f:e2:99:32: 2e:68:6b:94:02:4f:54:62:04:c9:1c:e2:ff:d4:37:47:b3:08: c9:96:1d:62:a1:aa:6a:f3:63:d2:da:14:9d:b7:f2:0b:bc:2a: 08:bb:ae:70:70:38:66:3d:37:f1:4e:8f:86:98:c4:1b:28:12: b0:29:6f:c7:8a:45:e2:cb:09:b9:e9:8d:d5:e4:7f:9b:11:69: f6:86:86:c1:f5:f6:49:8a:65:5e:c2:17:2a:5c:f1:ae:37:3f: 06:e4:d1:2a:3f:27:4e:17:bc:c3:14:96:9b:85:7b:e2:00:70: ba:ba:24:53:f0:20:fc:40:dd:36:07:cc:78:e4:1a:93:72:7c: 00:a9:7d:63:9e:8d:34:20:78:09:cb:fc:3e:1d:5c:5b:37:b6: bb:72:9c:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjYxMTE1MDQyMDQzWhcNMjYxMTIyMDQyMDQzWjAYMRYwFAYD VQQDEw02YWY5MzMxYy0xZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cJb5uyECCa2WOq5Njy4z4GovHCBkXcnYLWrowX6m1wj/sIcTYbi0g0uAw2T yc3+KLv1hYVe3hXz+46LIA3VLGhIY8WCbd2fFaEicd79vh4OY7uGcLLCRfhUcMrZ CS0QLzJP/Jw3+zyavoxnLAbxeo3kcIAJyl3g5uMptSDKlI0eJXmndbqN6wvFNpeF AWaLxUi7rQIE6vj+0wYVJep4VOi8poopb2L0RxeI3ikmVZJwZQ4UwO/dAp2wH/s7 RU81lPWY2ExN3URiBvOGk/6/kzBsn5DV4sRIDZAzKYt3281LY+6Zblm7LVe4kqvy SMErg/jpaAPppFSD7MIGQdXk5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4JG+ER 8N9V3NzWs3iQTlFrtzaDMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABUJ1uqqtzvhGIDWptGvrnR97lNnjEdXtVR0+T6JH62fXOdIfannCnn8cVK86 3Jn78w/ozSypB32wGd07+1K5GYEACe9wHPqA4uQsCxT+JG0OjyJxCJEU6tJF2mMs GkK1FtJVIj+2Xv6P4pkyLmhrlAJPVGIEyRzi/9Q3R7MIyZYdYqGqavNj0toUnbfy C7wqCLuucHA4Zj038U6PhpjEGygSsClvx4pF4ssJuemN1eR/mxFp9oaGwfX2SYpl XsIXKlzxrjc/BuTRKj8nThe8wxSWm4V74gBwurokU/Ag/EDdNgfMeOQak3J8AKl9 Y56NNCB4Ccv8Ph1cWze2u3KcEw== -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:59 2026 by rpki-client