$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: uPJug0ZIMrgS2tnybKejUrjccRb7PcM1NApxByebrXU= Subject key identifier: 2C:98:2F:89:7A:CA:85:4F:33:5E:6A:1B:93:8C:01:12:7F:30:23:AE Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 04C7 Signing time: Sat 14 Nov 2026 23:47:28 +0000 Manifest this update: Sat 14 Nov 2026 23:47:27 +0000 Manifest next update: Sat 21 Nov 2026 23:47:27 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: pozjxCWSQorOmBVP/9Fxk7EGLsdVS3WsWxnt7cZ/7jE=) 2: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 3: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 4: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 6: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 7: E2ADA1E4AE8311F196A6E2687011F970.roa (hash: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=) 8: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 9: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Nov 14 23:47:27 2026 GMT Not After : Nov 21 23:47:27 2026 GMT Subject: CN=6af8f30f-c6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:30:67:67:bd:c7:e0:6e:21:a9:a5:dc:fa: da:af:2a:1d:8d:91:38:03:20:e0:e1:5d:df:f5:76: eb:b3:cc:0e:31:df:26:54:93:98:e1:9b:d3:ae:4a: bf:cf:3d:19:08:78:67:6d:dc:9a:4b:04:76:5f:33: 24:e2:fb:1e:8b:7e:94:5f:1a:0f:19:a7:12:75:32: aa:0e:d6:61:63:0b:3e:d2:4c:66:b6:ae:12:6d:f2: c0:7d:82:2c:88:96:b5:55:6c:4e:26:e2:48:46:4d: 2d:f5:41:a3:08:b6:a9:2e:cf:8e:e5:95:76:cc:1a: a4:07:98:40:7b:77:f5:41:25:02:e5:d6:d5:ca:6f: 4a:68:a0:01:df:70:e7:33:72:25:19:f9:e7:0e:c9: 47:33:ff:4e:c5:b8:97:0e:2c:48:9a:bb:2c:52:ef: d1:ba:41:b6:15:c2:bd:46:32:2e:7d:63:a7:37:a5: 1e:33:c5:13:11:c2:64:4e:50:74:2c:00:9d:f9:e4: 73:72:34:d6:63:f7:2c:c2:55:f6:35:26:3e:95:fa: d4:7a:2f:8d:ee:dc:b6:d8:bb:2f:14:42:3a:86:c9: 92:c1:d1:43:4e:ea:f5:a1:b5:53:dd:ed:aa:41:7a: 19:bd:d4:98:8c:91:cd:03:e6:45:c6:55:6a:db:a1: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:2F:89:7A:CA:85:4F:33:5E:6A:1B:93:8C:01:12:7F:30:23:AE X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1e:03:c9:96:12:85:73:39:ca:f8:3c:44:72:62:2e:d4:7b: 4e:70:8f:61:90:10:70:70:47:52:25:5e:cc:7b:58:b0:94:31: a2:69:80:43:59:a4:8f:d2:26:6b:3e:a4:03:76:7e:8d:05:b5: 14:e6:b9:fa:f1:37:dc:9f:bf:22:79:c4:b7:64:46:c3:eb:36: 62:db:19:8a:57:ae:0a:e1:c7:47:e0:2d:ff:43:fb:8d:03:89: f5:1f:6d:a0:69:60:ef:db:2e:6f:00:bd:69:d3:9a:74:5d:df: 83:07:d2:18:8e:cb:7c:ce:61:b3:fb:7a:44:e4:12:6d:b4:b9: c0:81:13:2d:f0:3d:08:fb:72:cd:73:0f:66:b4:d6:93:31:d1: 48:49:73:a7:ee:5f:04:e8:80:50:98:8c:15:47:3c:f4:69:75: 5c:33:97:8f:5d:a8:a7:dd:c1:62:34:28:b6:bf:bc:2b:12:49: a7:bd:7f:e1:85:87:7e:01:c0:cb:d3:06:43:19:46:b0:39:80: e4:35:63:27:93:0f:39:ea:23:2b:2d:e0:f7:e8:2a:df:6a:eb: 6f:67:38:dd:47:fa:0e:fb:05:f2:6e:30:ba:41:99:f2:36:d5: 05:69:4b:4c:35:e9:47:16:dd:29:0e:2c:0a:19:e4:d6:bd:62: 5a:56:7c:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYxMTE0MjM0NzI3WhcNMjYxMTIxMjM0NzI3WjAYMRYwFAYD VQQDEw02YWY4ZjMwZi1jNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0swZ2e9x+BuIaml3PraryodjZE4AyDg4V3f9Xbrs8wOMd8mVJOY4ZvTrkq/ zz0ZCHhnbdyaSwR2XzMk4vsei36UXxoPGacSdTKqDtZhYws+0kxmtq4SbfLAfYIs iJa1VWxOJuJIRk0t9UGjCLapLs+O5ZV2zBqkB5hAe3f1QSUC5dbVym9KaKAB33Dn M3IlGfnnDslHM/9OxbiXDixImrssUu/RukG2FcK9RjIufWOnN6UeM8UTEcJkTlB0 LACd+eRzcjTWY/cswlX2NSY+lfrUei+N7ty22LsvFEI6hsmSwdFDTur1obVT3e2q QXoZvdSYjJHNA+ZFxlVq26FmVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyYL4l6 yoVPM15qG5OMARJ/MCOuMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADh4DyZYShXM5yvg8RHJiLtR7TnCPYZAQcHBHUiVezHtYsJQxommAQ1mkj9Im az6kA3Z+jQW1FOa5+vE33J+/InnEt2RGw+s2YtsZileuCuHHR+At/0P7jQOJ9R9t oGlg79subwC9adOadF3fgwfSGI7LfM5hs/t6ROQSbbS5wIETLfA9CPtyzXMPZrTW kzHRSElzp+5fBOiAUJiMFUc89Gl1XDOXj12op93BYjQotr+8KxJJp71/4YWHfgHA y9MGQxlGsDmA5DVjJ5MPOeojKy3g9+gq32rrb2c43Uf6DvsF8m4wukGZ8jbVBWlL TDXpRxbdKQ4sChnk1r1iWlZ8KA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:24:16 2026 by rpki-client