$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: i3xM9rCsLXrOqpjt31ZNafZZVrchrK3L55nzNQG24uM= Subject key identifier: 1C:96:AA:EE:28:62:3B:04:38:5C:34:8C:88:C7:8B:68:57:A7:1A:9C Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 4A Signing time: Sun 15 Nov 2026 08:33:59 +0000 Manifest this update: Sun 15 Nov 2026 08:33:59 +0000 Manifest next update: Sun 22 Nov 2026 08:33:59 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: uwSaTlrVc3PfOJ7gCLM8MIBT2NV0kKC6q6nip2xGmew=) 2: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) 3: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) 4: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Nov 15 08:33:59 2026 GMT Not After : Nov 22 08:33:59 2026 GMT Subject: CN=6af96e77-8151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:5c:a7:f7:85:91:50:ed:6d:77:18:a2:6c: 2d:ce:76:e3:77:19:00:c6:aa:68:64:13:af:d6:12: 36:57:e1:3a:14:44:33:ad:c3:4b:6d:33:fb:b1:b2: 5a:56:48:78:d0:ac:a1:b3:07:e6:4d:47:98:e2:9e: 60:26:8c:e9:de:66:28:b8:ce:5a:dd:69:e0:c1:fa: 41:99:13:80:7f:99:da:87:61:41:fb:19:86:6b:ae: a4:46:d9:72:74:17:fd:2c:e5:d9:c9:d9:44:01:2b: 83:bf:b3:00:98:d8:ea:1a:95:6a:af:0e:09:55:73: c0:2e:bc:5a:ed:57:bc:60:7b:48:f6:88:fe:99:58: 93:f3:e3:a3:82:b4:12:47:1b:7e:f9:17:25:ff:cd: 03:6e:47:a1:be:85:31:d4:4a:f5:1b:c5:32:3e:a9: 7e:f5:18:a1:0f:77:4f:eb:f3:e8:e5:36:8f:56:d1: 52:ef:90:1d:67:2d:43:dd:f7:29:63:ca:b4:74:34: 22:1b:6f:42:55:3f:d4:c6:4f:06:61:5b:e3:fd:ee: 0a:68:be:24:04:20:14:d3:a8:ec:d5:c1:66:d8:2a: 4d:a2:33:0b:3e:eb:59:29:ee:8b:70:77:74:8a:d6: 74:de:2c:e8:bf:eb:e7:97:0f:57:70:cc:3d:b0:88: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:AA:EE:28:62:3B:04:38:5C:34:8C:88:C7:8B:68:57:A7:1A:9C X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a4:41:7e:97:2f:c6:e4:fe:d9:01:09:fd:1f:38:bc:34:a5: d5:5a:79:25:ac:b8:08:f1:11:87:d6:89:01:18:a6:dc:c1:66: 7c:4d:9a:0f:da:ee:64:54:b8:66:52:d2:92:09:4b:e3:bd:0a: 9a:e6:5c:8d:50:e5:ad:0c:85:d5:9c:fa:b8:15:73:2a:92:c8: 23:2c:35:31:f5:c1:07:78:27:72:fa:88:30:1f:c7:d2:70:65: 65:69:53:a4:ca:af:4e:7d:ff:9a:cf:be:65:e9:dd:c9:71:f7: 09:53:59:4c:3b:fa:3c:92:40:a1:13:e1:c4:b4:6d:80:a2:ef: 0b:49:54:88:9e:09:1c:d4:6a:08:f7:e4:cc:08:63:8e:f9:4a: 2b:e1:3c:68:0f:d1:6e:71:2d:08:54:7a:c7:12:1c:67:a2:59: cb:90:b0:1c:eb:f5:31:1a:61:b5:1c:49:3f:be:14:a8:63:66: ca:70:6c:5a:28:e6:80:8e:59:f4:60:17:e7:fa:47:33:18:e5: 52:f8:8a:7f:f6:ce:c5:e0:85:9c:45:7a:eb:30:9a:5c:35:ce: 87:50:a9:05:99:e5:ac:d4:9c:22:cc:62:b6:48:f4:0b:0b:87: 42:61:4e:12:45:ce:4d:52:3e:33:b1:bf:98:70:79:fb:8e:13: b1:f3:5e:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjExMTUwODMzNTlaFw0yNjExMjIwODMzNTlaMBgxFjAUBgNV BAMTDTZhZjk2ZTc3LTgxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAtFyn94WRUO1tdxiibC3OduN3GQDGqmhkE6/WEjZX4ToURDOtw0ttM/uxslpW SHjQrKGzB+ZNR5jinmAmjOneZii4zlrdaeDB+kGZE4B/mdqHYUH7GYZrrqRG2XJ0 F/0s5dnJ2UQBK4O/swCY2OoalWqvDglVc8AuvFrtV7xge0j2iP6ZWJPz46OCtBJH G375FyX/zQNuR6G+hTHUSvUbxTI+qX71GKEPd0/r8+jlNo9W0VLvkB1nLUPd9ylj yrR0NCIbb0JVP9TGTwZhW+P97gpoviQEIBTTqOzVwWbYKk2iMws+61kp7otwd3SK 1nTeLOi/6+eXD1dwzD2wiEhpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHJaq7ihi OwQ4XDSMiMeLaFenGpwwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYpEF+ly/G5P7ZAQn9Hzi8NKXVWnklrLgI8RGH1okBGKbcwWZ8TZoP2u5kVLhm UtKSCUvjvQqa5lyNUOWtDIXVnPq4FXMqksgjLDUx9cEHeCdy+ogwH8fScGVlaVOk yq9Off+az75l6d3JcfcJU1lMO/o8kkChE+HEtG2Aou8LSVSIngkc1GoI9+TMCGOO +Uor4TxoD9FucS0IVHrHEhxnolnLkLAc6/UxGmG1HEk/vhSoY2bKcGxaKOaAjln0 YBfn+kczGOVS+Ip/9s7F4IWcRXrrMJpcNc6HUKkFmeWs1JwizGK2SPQLC4dCYU4S Rc5NUj4zsb+YcHn7jhOx817q -----END CERTIFICATE-----Generated at Sun Nov 15 18:14:57 2026 by rpki-client