$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: 7OvrI797FSbdM61CyBUMo4YYB7c3/d2McwBBlMT2BXU= Subject key identifier: 6B:34:0F:B6:AA:28:B3:B5:BA:CE:95:BD:2D:49:66:88:AA:FE:93:74 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 35A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 35A0 Signing time: Sat 14 Nov 2026 15:08:10 +0000 Manifest this update: Sat 14 Nov 2026 15:08:09 +0000 Manifest next update: Sat 21 Nov 2026 15:08:09 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: 9JvSbdYmHa64eXHydcxNQIKQnRBZC1AWoGl4JGMsybk=) 2: 06B229CEAE8A11F1BB0AA9593211F970.roa (hash: HI6/jHOeNqu475qw9sh+C03Fj9h8VwrQ1pUfPBiV+Y4=) 3: ZBhcITZVKzI_WNQHlZA6LdCp3Vk.asa (hash: M98VN22QhfmYWJsmyO07AWpiy6tz+fwulX0zkqeXk+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 15:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13732 (0x35a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Nov 14 15:08:09 2026 GMT Not After : Nov 21 15:08:09 2026 GMT Subject: CN=6af8795a-7930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:a2:0a:43:14:03:83:42:13:2b:1e:da:fa: 80:af:ba:2a:da:7e:00:93:e3:ee:a0:bf:15:de:c2: f8:9e:c2:c9:0d:68:4e:3d:11:ba:3a:24:25:1b:a9: 97:61:8e:9e:44:41:c6:d3:3d:b7:02:83:dd:c6:9b: 93:69:8a:77:71:46:91:45:de:99:00:34:e8:2d:fe: 4a:c3:fe:5d:95:ff:3e:1a:cb:6f:25:4f:80:72:0b: e4:1f:bd:22:14:da:9a:f5:47:51:e7:a0:64:7d:b6: 0d:72:35:43:e7:45:af:3c:12:db:27:de:45:67:e9: 18:4b:8b:5f:b6:ff:d6:18:67:9f:a0:6c:f7:08:68: 22:6d:6a:56:09:f0:58:58:b4:15:90:c9:a0:3a:81: 78:5f:85:cc:13:b6:81:50:90:c2:8c:47:97:25:96: bc:94:3a:07:f9:29:a0:8a:a1:84:6a:13:bf:72:ce: 31:89:39:dc:73:17:ce:35:28:ad:3c:7e:4a:e1:e8: 87:b9:c7:d3:ba:c1:24:22:b0:c1:5d:64:ec:b7:7f: 94:bd:fb:d1:eb:0d:a6:6d:4d:e3:a6:27:ae:ba:d7: 1c:d2:26:a5:66:dc:c9:84:71:9c:a8:40:b5:cf:40: 45:b1:8e:fb:88:72:cd:d6:f6:7a:03:99:7a:e6:1e: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:34:0F:B6:AA:28:B3:B5:BA:CE:95:BD:2D:49:66:88:AA:FE:93:74 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ad:9d:bf:c5:fa:1e:76:cd:91:c2:2d:fc:52:a5:b5:a0:5c: 04:fe:df:9b:9f:9a:8d:e6:2e:62:3c:34:a9:4d:c5:0a:64:b5: 45:30:e7:44:f5:a9:e8:20:ae:2d:1c:c9:6b:41:2b:8b:b1:ac: e5:f7:cc:f7:7e:d5:a2:ef:97:7b:c2:22:30:8b:5f:c3:87:9d: e0:63:59:cf:fb:d5:43:4f:17:2f:b2:8a:7b:70:ab:05:46:8f: 3d:05:69:f1:56:41:19:7b:b4:e1:56:37:4e:41:78:de:c7:61: 23:46:f4:68:88:03:7d:ed:d1:fc:34:3b:de:5b:06:1b:67:5e: 9d:2f:eb:22:bc:a6:91:0b:01:39:f5:f3:41:b3:f0:fb:25:e1: d8:8a:2f:aa:67:6f:5c:8d:d9:fd:73:00:79:e6:94:81:39:dc: 7a:33:36:2e:09:f0:23:a6:6c:34:66:29:e3:7b:5b:f5:39:01: 0c:af:cc:0b:ef:98:87:6a:f1:b5:8a:5d:e5:05:7b:fb:9a:75: c8:1f:ea:15:2d:a0:73:40:48:c7:6a:1c:ac:cc:34:9b:41:90: 28:fe:ee:de:9c:49:fc:f8:65:e4:b2:f2:49:ff:3b:4d:b8:ef: fb:de:77:e4:c5:94:4c:83:ec:79:92:af:19:35:4d:fa:76:46: d0:77:ce:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjYxMTE0MTUwODA5WhcNMjYxMTIxMTUwODA5WjAYMRYwFAYD VQQDEw02YWY4Nzk1YS03OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjaKiCkMUA4NCEyse2vqAr7oq2n4Ak+PuoL8V3sL4nsLJDWhOPRG6OiQlG6mX YY6eREHG0z23AoPdxpuTaYp3cUaRRd6ZADToLf5Kw/5dlf8+GstvJU+AcgvkH70i FNqa9UdR56BkfbYNcjVD50WvPBLbJ95FZ+kYS4tftv/WGGefoGz3CGgibWpWCfBY WLQVkMmgOoF4X4XME7aBUJDCjEeXJZa8lDoH+SmgiqGEahO/cs4xiTnccxfONSit PH5K4eiHucfTusEkIrDBXWTst3+UvfvR6w2mbU3jpieuutcc0ialZtzJhHGcqEC1 z0BFsY77iHLN1vZ6A5l65h4rNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGs0D7aq KLO1us6VvS1JZoiq/pN0MB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdq2dv8X6HnbNkcIt/FKltaBcBP7fm5+ajeYuYjw0qU3FCmS1RTDnRPWp6CCu LRzJa0Eri7Gs5ffM937Vou+Xe8IiMItfw4ed4GNZz/vVQ08XL7KKe3CrBUaPPQVp 8VZBGXu04VY3TkF43sdhI0b0aIgDfe3R/DQ73lsGG2denS/rIrymkQsBOfXzQbPw +yXh2IovqmdvXI3Z/XMAeeaUgTncejM2LgnwI6ZsNGYp43tb9TkBDK/MC++Yh2rx tYpd5QV7+5p1yB/qFS2gc0BIx2ocrMw0m0GQKP7u3pxJ/Phl5LLySf87Tbjv+953 5MWUTIPseZKvGTVN+nZG0HfO9g== -----END CERTIFICATE-----Generated at Sun Nov 15 09:57:49 2026 by rpki-client