$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: 7sjhum3crFsLt9g+rGyvI0RqUCG1YYJbSf/O2KMs8nI= Subject key identifier: 07:54:3C:7A:61:E6:10:DD:B9:E9:2B:4D:0C:65:4C:5E:44:2C:FF:55 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0DAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D92 Signing time: Sat 14 Nov 2026 17:53:33 +0000 Manifest this update: Sat 14 Nov 2026 17:53:32 +0000 Manifest next update: Sat 21 Nov 2026 17:53:32 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: EmTmwqKqYjkuLIYW+fthG3EGSh3SqA9trd+2Pk24bUU=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3498 (0xdaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Nov 14 17:53:32 2026 GMT Not After : Nov 21 17:53:32 2026 GMT Subject: CN=6af8a01d-679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:bc:e8:58:c1:dc:23:aa:d6:90:f0:3c:80: ac:f0:87:11:31:48:f8:1c:4c:6d:1d:67:32:a7:c0: ad:52:bf:93:5c:33:c0:31:20:4f:ca:b9:b5:93:97: b5:58:d0:76:e8:37:54:7c:f2:5b:c9:b6:d0:21:4b: 41:36:9c:24:44:c0:5f:ca:cd:04:35:88:90:69:ed: 93:1e:14:a8:5c:36:8a:48:01:9e:6b:85:41:dd:a2: ad:56:14:57:a4:ce:b4:e0:1b:15:b0:15:ac:e5:94: b6:f4:a0:14:64:20:04:a4:e1:39:16:67:52:1c:06: 8f:93:48:6f:45:a1:ee:52:ff:e0:55:e5:22:18:a0: 0d:7a:46:47:1d:fe:fc:b5:cc:21:32:71:2d:9c:fa: d1:c3:17:03:3c:40:31:33:b0:9e:72:92:bb:95:e6: bb:cf:e5:b3:20:1c:dc:b4:df:39:53:08:5d:19:ba: 0d:25:79:64:e6:ad:88:c1:29:a5:81:b8:a6:5b:76: 67:c3:54:d1:15:3c:4d:b8:f5:6b:86:99:6e:5d:eb: b8:43:44:d4:69:8f:bd:6e:0e:42:82:0b:fb:09:91: 46:10:b7:4d:74:06:fd:dd:2b:9a:3b:05:e3:25:99: b0:7d:6c:fa:27:eb:e3:e3:e7:1a:3f:86:69:fc:f8: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:3C:7A:61:E6:10:DD:B9:E9:2B:4D:0C:65:4C:5E:44:2C:FF:55 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:6a:cc:0f:7c:e3:ea:a4:f8:62:b9:31:01:9c:24:d0:30: 35:b6:16:31:fa:e0:d4:1f:ed:17:2e:97:ac:be:9b:9a:f4:1e: 11:54:e9:90:34:b6:06:1b:ac:a7:95:aa:01:8c:2f:ed:9f:9d: cb:80:08:f6:6b:73:25:bb:44:9f:c3:12:65:44:22:ff:cd:89: 1f:68:94:5c:04:d8:d7:98:2d:24:a0:6d:96:dc:e9:c9:19:4e: a2:5b:0d:93:09:00:c1:bf:ab:33:8d:77:ed:ca:7c:f1:d8:2b: 18:8c:d1:4c:16:eb:b4:f5:07:36:d6:54:48:7c:3e:ec:f4:0c: a7:f4:86:a9:6d:a3:72:b5:5a:3f:52:33:1f:b3:f1:46:6a:83: 21:d2:9e:99:b6:d3:ca:62:59:2e:df:88:2a:9e:0a:0e:74:5d: 51:07:25:80:24:67:84:88:20:82:6a:d3:2e:72:47:d7:e3:e0: 75:76:bb:35:5a:7b:45:d2:31:2c:39:12:f0:ae:ac:28:0b:ad: 9b:0b:40:92:98:7f:dd:94:74:fb:60:85:07:bb:fc:da:44:d8: 2f:6a:d5:f1:d9:fe:81:a9:d4:6c:16:da:5d:1d:8d:c0:b8:ee: 5d:f8:a1:2e:29:f7:90:9a:cf:c5:67:ae:d9:4b:f4:0b:41:27: e1:53:ba:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYxMTE0MTc1MzMyWhcNMjYxMTIxMTc1MzMyWjAYMRYwFAYD VQQDEw02YWY4YTAxZC02NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bW86FjB3COq1pDwPICs8IcRMUj4HExtHWcyp8CtUr+TXDPAMSBPyrm1k5e1 WNB26DdUfPJbybbQIUtBNpwkRMBfys0ENYiQae2THhSoXDaKSAGea4VB3aKtVhRX pM604BsVsBWs5ZS29KAUZCAEpOE5FmdSHAaPk0hvRaHuUv/gVeUiGKANekZHHf78 tcwhMnEtnPrRwxcDPEAxM7CecpK7lea7z+WzIBzctN85UwhdGboNJXlk5q2IwSml gbimW3Znw1TRFTxNuPVrhpluXeu4Q0TUaY+9bg5Cggv7CZFGELdNdAb93SuaOwXj JZmwfWz6J+vj4+caP4Zp/Pi8XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdUPHph 5hDduekrTQxlTF5ELP9VMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlLZqzA984+qk+GK5MQGcJNAwNbYWMfrg1B/tFy6XrL6bmvQeEVTpkDS2Bhus p5WqAYwv7Z+dy4AI9mtzJbtEn8MSZUQi/82JH2iUXATY15gtJKBtltzpyRlOolsN kwkAwb+rM4137cp88dgrGIzRTBbrtPUHNtZUSHw+7PQMp/SGqW2jcrVaP1IzH7Px RmqDIdKembbTymJZLt+IKp4KDnRdUQclgCRnhIgggmrTLnJH1+PgdXa7NVp7RdIx LDkS8K6sKAutmwtAkph/3ZR0+2CFB7v82kTYL2rV8dn+ganUbBbaXR2NwLjuXfih Lin3kJrPxWeu2Uv0C0En4VO6/g== -----END CERTIFICATE-----Generated at Sun Nov 15 04:28:14 2026 by rpki-client