$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: rYp0wztaZiufWqWIyTdGV9wePlkT0Is2i9FOrzOL5ec= Subject key identifier: 95:A4:38:39:16:7F:B6:23:C7:70:56:F1:C5:0A:70:BE:AC:08:4D:B1 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 149D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 1466 Signing time: Sat 14 Nov 2026 16:50:15 +0000 Manifest this update: Sat 14 Nov 2026 16:50:14 +0000 Manifest next update: Sat 21 Nov 2026 16:50:14 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: WBvASAaZkGWZfjpDmwUT/otD7NO3EMdKO+CUkpV36Yg=) 2: 40567CA8F25A11F09752333B5F6F56BC.roa (hash: U0GNCfpy1dgEgbpczlcezpy3ewPFlHp4o8M0zeM91oI=) 3: 999C6728F7FF11F08B2BFA086C6F56BC.roa (hash: 5jwoaJRF05ynypppsournA2NpxdgiK2g9i/wb3qUNp4=) 4: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WqMqFVIMW/WczjTWRvzLRKr2fBm6q4MFQ+IAb2s3IrY=) 5: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: lwkWaq6p0L37tuMHM356+eKrIkOsIPecy57fgsnLnhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5277 (0x149d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Nov 14 16:50:14 2026 GMT Not After : Nov 21 16:50:14 2026 GMT Subject: CN=6af89147-526e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:13:5d:cc:1f:b2:5e:d7:f8:77:fc:53:a7: c7:35:1f:0b:ec:9a:28:d9:b0:7e:7c:55:63:8a:38: cb:7d:6e:1a:b7:c9:c5:c8:33:1d:e1:d5:78:dd:10: f3:ca:73:ae:54:f9:e2:74:bf:91:d5:40:90:83:73: c2:67:ef:9b:89:07:ff:aa:45:60:1e:75:f2:20:03: c0:1e:f6:01:8f:61:ff:62:89:ee:03:2b:ae:6e:14: 2e:5f:2f:08:a1:cf:e6:70:24:8e:22:0b:ac:31:b1: 12:3f:b9:9c:f1:7b:8d:4d:e2:4d:cf:50:37:52:e3: ef:6d:63:4d:28:26:35:d6:5c:3e:d4:77:29:e7:4a: 7a:13:dc:e9:db:95:8b:72:bb:b2:7b:24:3a:e8:fc: 40:ff:2b:53:a6:d6:99:1a:c6:b6:96:5a:43:cc:1d: 19:6f:f4:d6:0d:ef:a4:26:01:92:91:cd:1e:77:5b: 6b:f4:b0:33:7f:d3:54:4a:ef:59:4d:e1:c9:6d:24: 58:98:f5:cc:20:0e:04:dc:10:53:71:c1:36:28:79: d9:c6:a4:9e:e6:be:96:e3:23:ff:64:f1:c1:a6:85: 64:79:bd:61:57:42:04:e3:5a:f6:d5:71:dc:a2:ac: 5d:36:18:05:df:3c:28:5f:48:12:76:74:1a:d8:2f: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:38:39:16:7F:B6:23:C7:70:56:F1:C5:0A:70:BE:AC:08:4D:B1 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:17:44:cf:be:76:c9:6f:fd:c2:89:99:9c:9a:ac:56:40:f4: 17:17:3e:47:7f:f3:b9:3b:1b:6b:7c:5c:c2:51:07:a1:0f:a0: 59:b0:f4:78:57:e9:51:77:87:15:b6:1d:dd:e1:48:12:11:8d: 5d:a4:9a:4a:e1:0c:a7:92:a6:54:75:35:58:5f:8d:78:ee:0d: 07:b9:7e:e7:72:08:cc:e9:4c:9d:25:80:a3:61:df:18:b3:a1: af:7b:75:0e:c5:a2:c7:68:0c:34:89:ae:8e:b8:c3:dd:da:ad: a0:04:5b:06:21:b2:88:01:3f:0c:4f:5e:4c:ee:76:5d:5b:e9: fb:5b:e6:c7:b6:b4:10:34:6f:ca:db:41:b0:5b:4c:18:5d:3b: 43:aa:a6:54:32:05:0a:6b:7e:48:4b:68:7a:7c:90:7d:97:cc: 4f:ea:69:76:4b:c5:c8:9b:90:a1:32:32:92:85:49:4a:b8:3e: 22:00:d6:31:71:98:b2:c1:a8:7b:c0:6c:cc:eb:be:f9:49:5d: bb:c9:70:ab:8a:03:65:34:cf:61:54:aa:6a:c2:6b:11:32:32: 92:3d:60:44:04:6e:07:c8:3d:15:0c:a0:a0:f8:fd:82:4b:52: 51:4a:b4:ce:79:2a:54:d8:91:e2:a3:d9:2b:e1:43:22:c7:4f: 28:71:d9:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjYxMTE0MTY1MDE0WhcNMjYxMTIxMTY1MDE0WjAYMRYwFAYD VQQDEw02YWY4OTE0Ny01MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8ITXcwfsl7X+Hf8U6fHNR8L7Joo2bB+fFVjijjLfW4at8nFyDMd4dV43RDz ynOuVPnidL+R1UCQg3PCZ++biQf/qkVgHnXyIAPAHvYBj2H/YonuAyuubhQuXy8I oc/mcCSOIgusMbESP7mc8XuNTeJNz1A3UuPvbWNNKCY11lw+1Hcp50p6E9zp25WL cruyeyQ66PxA/ytTptaZGsa2llpDzB0Zb/TWDe+kJgGSkc0ed1tr9LAzf9NUSu9Z TeHJbSRYmPXMIA4E3BBTccE2KHnZxqSe5r6W4yP/ZPHBpoVkeb1hV0IE41r21XHc oqxdNhgF3zwoX0gSdnQa2C8O9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWkODkW f7Yjx3BW8cUKcL6sCE2xMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhdEz752yW/9womZnJqsVkD0Fxc+R3/zuTsba3xcwlEHoQ+gWbD0eFfpUXeH FbYd3eFIEhGNXaSaSuEMp5KmVHU1WF+NeO4NB7l+53IIzOlMnSWAo2HfGLOhr3t1 DsWix2gMNImujrjD3dqtoARbBiGyiAE/DE9eTO52XVvp+1vmx7a0EDRvyttBsFtM GF07Q6qmVDIFCmt+SEtoenyQfZfMT+ppdkvFyJuQoTIykoVJSrg+IgDWMXGYssGo e8BszOu++Uldu8lwq4oDZTTPYVSqasJrETIykj1gRARuB8g9FQygoPj9gktSUUq0 znkqVNiR4qPZK+FDIsdPKHHZfw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:34 2026 by rpki-client