$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: Cvi0fTedBcT4KZuIANlQzrBv/10LzgsitnOHmINr/ts= Subject key identifier: 91:0D:4B:F0:CD:0A:5A:DB:3C:EC:05:8B:72:0B:51:AE:F5:80:D5:03 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 09BB Signing time: Sat 14 Nov 2026 19:48:10 +0000 Manifest this update: Sat 14 Nov 2026 19:48:09 +0000 Manifest next update: Sat 21 Nov 2026 19:48:09 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: La5xchxKOl0D/sYRNiiqIT7BZojLKdtLqemTszWTHXw=) 2: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: ZBwiWWEpUFGcjnXgByvOw2xw6RsYvq4909rtKc6B0Yg=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: EUasz824UMnO9MbqeXwiSlVPuEsrQs/XfaxHe0QouAM=) 4: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: lQ/3nAQf4fzpG3flWZ1bQNZV2nX5+LaWRtwGSAAXvQo=) 5: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: YYMIfPwumcmcT+KqlaRMhjt2vH8N9klrHhnG1serhGs=) 6: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: nZ518Nz9fUSUGAttUGH5/qKoCq89W4AtGeuzfS/iSCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Nov 14 19:48:09 2026 GMT Not After : Nov 21 19:48:09 2026 GMT Subject: CN=6af8bafa-a4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:6d:4e:76:55:e7:a9:4d:0f:a9:a5:af:61: 15:08:a1:a2:a4:dc:3b:57:da:0a:ba:20:73:cf:3f: 5f:66:43:8e:b7:a7:3d:0c:a9:74:a4:f8:f9:45:48: 42:c4:6d:17:a5:b3:87:91:f7:21:ba:0d:d6:c1:a7: 51:6b:2d:e8:3f:83:72:ca:f6:f7:b2:c9:92:c4:c5: cb:d2:d0:8d:97:bb:0a:f1:fb:8e:4d:72:dc:b2:b6: e0:c8:ec:30:ca:44:7e:e4:2d:9e:68:ed:39:47:ea: 30:ec:4d:57:33:55:93:6d:1e:7a:ce:aa:7e:ca:99: f9:d2:1f:5d:1b:6f:ea:56:53:07:a0:97:58:23:2d: 6b:2c:3d:7d:0a:1d:b4:85:19:1d:b1:c1:2f:97:e2: 74:84:42:09:c3:f7:5c:e3:d0:73:da:3b:f0:9a:e7: 19:38:66:28:27:02:52:17:40:b2:72:ac:04:8e:a1: cc:56:bc:2e:f1:e2:64:43:94:ac:69:b9:bf:6c:9c: 03:cd:bb:c3:91:76:45:03:e6:ae:ee:95:a9:9b:2f: cb:8a:a7:78:6d:87:c9:44:0d:25:c3:5d:3e:dc:a5: be:7e:dc:e7:d2:5b:e7:8c:d8:70:e4:9d:b3:05:5b: 7b:d9:6a:11:fc:a9:46:d4:ff:76:3b:18:51:8e:ad: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0D:4B:F0:CD:0A:5A:DB:3C:EC:05:8B:72:0B:51:AE:F5:80:D5:03 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c6:18:c6:fc:ce:65:00:29:71:1c:8d:71:0e:3f:0e:ed:fa: 09:22:04:8d:ab:e4:6e:1b:2c:b0:b2:02:f2:ed:95:d4:1a:08: 9c:e2:2b:fb:72:46:f0:d9:81:3f:48:92:ec:59:09:b2:12:bf: 95:db:19:45:fc:95:80:be:68:89:2f:9b:98:41:20:58:2d:59: e5:d6:6a:a8:7f:64:aa:0f:b3:06:1c:b0:76:3c:1f:8d:18:61: 85:55:a0:99:97:60:ba:c0:50:91:03:83:8c:7f:4d:d7:0e:23: 3f:a1:e8:e5:65:f4:25:a2:27:62:87:1f:27:0e:4d:ba:a5:f9: 39:ab:c9:bd:be:46:2e:82:93:c8:d9:8d:4c:ef:8d:e9:29:bf: 21:7d:59:46:8e:79:be:9e:aa:25:b6:71:c4:9e:00:08:83:eb: 85:f8:d9:74:d1:91:b7:76:28:36:03:2e:8f:b3:75:20:e9:33: fb:69:dc:1e:78:7f:11:fb:c2:3f:f9:88:fd:8f:37:2c:7e:d9: e4:34:4a:b4:8a:da:6c:5c:e4:5c:ba:05:a2:10:82:51:39:c6: 4c:a7:02:6b:2d:b8:aa:bd:12:17:63:16:eb:88:83:bf:33:c3: da:3f:e6:e4:ac:03:1d:10:94:5a:25:57:cc:c2:3c:5a:7f:8f: 19:3e:5d:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjYxMTE0MTk0ODA5WhcNMjYxMTIxMTk0ODA5WjAYMRYwFAYD VQQDEw02YWY4YmFmYS1hNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz21tTnZV56lND6mlr2EVCKGipNw7V9oKuiBzzz9fZkOOt6c9DKl0pPj5RUhC xG0XpbOHkfchug3WwadRay3oP4Nyyvb3ssmSxMXL0tCNl7sK8fuOTXLcsrbgyOww ykR+5C2eaO05R+ow7E1XM1WTbR56zqp+ypn50h9dG2/qVlMHoJdYIy1rLD19Ch20 hRkdscEvl+J0hEIJw/dc49Bz2jvwmucZOGYoJwJSF0CycqwEjqHMVrwu8eJkQ5Ss abm/bJwDzbvDkXZFA+au7pWpmy/Liqd4bYfJRA0lw10+3KW+ftzn0lvnjNhw5J2z BVt72WoR/KlG1P92OxhRjq3JcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJENS/DN ClrbPOwFi3ILUa71gNUDMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQcYYxvzOZQApcRyNcQ4/Du36CSIEjavkbhsssLIC8u2V1BoInOIr+3JG8NmB P0iS7FkJshK/ldsZRfyVgL5oiS+bmEEgWC1Z5dZqqH9kqg+zBhywdjwfjRhhhVWg mZdgusBQkQODjH9N1w4jP6Ho5WX0JaInYocfJw5NuqX5OavJvb5GLoKTyNmNTO+N 6Sm/IX1ZRo55vp6qJbZxxJ4ACIPrhfjZdNGRt3YoNgMuj7N1IOkz+2ncHnh/EfvC P/mI/Y83LH7Z5DRKtIrabFzkXLoFohCCUTnGTKcCay24qr0SF2MW64iDvzPD2j/m 5KwDHRCUWiVXzMI8Wn+PGT5dew== -----END CERTIFICATE-----Generated at Sun Nov 15 10:28:34 2026 by rpki-client