$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: dYGulbonWZnRax2ntbiU+XUwOrRFGFk3M1m4LNsNGVo= Subject key identifier: A2:81:81:05:46:57:9D:8B:1A:4F:AB:37:F6:A0:C2:CE:71:D3:D6:E2 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 02C5 Signing time: Fri 13 Nov 2026 01:28:10 +0000 Manifest this update: Fri 13 Nov 2026 01:28:09 +0000 Manifest next update: Fri 20 Nov 2026 01:28:09 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: QNzdILP3Kpw+nfUOLeDa0mrbcAIOg/N7gdWYuapbdp0=) 2: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) 3: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) 4: 74FD4FD494BE11F1AFD2F6E63611F970.roa (hash: 0DKws/TZBwHKlP6bywafbYvjIkHk0Zh/vEoLGguK7rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 01:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Nov 13 01:28:09 2026 GMT Not After : Nov 20 01:28:09 2026 GMT Subject: CN=6af667a9-c8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:2f:92:ed:02:3a:75:6e:26:90:ee:4a:34: 61:fa:45:65:c3:ce:58:36:5e:49:7b:b6:94:3f:77: b2:52:0d:13:9f:6f:8b:55:ee:eb:57:e2:38:c5:95: cb:dd:41:34:96:d2:83:07:23:fd:02:41:0a:24:dd: bf:35:15:b4:cf:5e:53:e8:e2:01:2e:ed:ad:bf:65: 78:71:96:a2:a3:50:87:e8:94:7d:52:71:1c:5c:11: 17:1f:cb:fb:e8:2e:15:e0:4b:64:79:18:49:16:a3: 82:6c:51:68:08:5b:b9:f4:c5:a8:c7:12:32:ea:55: 14:3e:61:fa:4b:4b:5f:00:be:bf:fa:fa:1b:49:79: b9:df:d6:d8:3d:c0:0f:24:36:d7:95:d7:a0:2d:5d: 59:a5:9e:b1:9d:0c:e5:d6:19:70:70:0b:8f:fc:54: b8:a7:22:05:c1:30:71:a5:51:0b:56:78:8d:34:a6: 29:a2:6d:15:36:59:2c:a2:f5:92:59:d7:b5:10:5c: 55:dc:6c:9c:7c:3a:c2:02:40:e6:b4:14:9d:6e:4b: d8:e0:ca:f9:db:3b:7d:a4:f1:dc:ee:73:be:04:86: c2:96:3f:ab:d5:6f:ef:2f:2e:81:45:67:2a:36:5e: 69:10:d8:26:9a:62:15:d4:92:fe:da:0a:03:c4:bc: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:81:81:05:46:57:9D:8B:1A:4F:AB:37:F6:A0:C2:CE:71:D3:D6:E2 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f4:02:e0:2e:4b:d8:39:b7:0c:74:6b:5d:25:83:df:c8:e4: ac:a2:bf:55:13:df:66:8c:e0:0a:1d:f5:56:c6:dc:9e:8b:14: a1:5b:99:a8:8d:79:fe:a3:53:08:d6:ea:4c:65:a2:08:a8:5b: 60:36:60:64:c2:e9:10:bf:a7:6a:5d:9e:02:aa:bf:9b:bd:23: 2b:17:bf:43:48:b6:7e:ee:ac:6a:b1:53:85:ab:f8:a3:d7:8e: f0:77:29:8a:92:82:53:c7:ee:b5:b3:40:a9:ba:97:a9:4a:5b: a2:af:63:91:28:98:a8:ef:02:30:a0:7e:9e:bf:37:56:f8:86: 92:74:20:8c:5f:79:c4:23:10:83:97:05:2a:e7:cb:72:56:fe: 97:b1:0b:41:5e:22:2b:f5:8c:25:0a:a2:08:72:48:39:44:1b: 4d:c8:b1:fb:c8:fa:48:70:c6:78:00:49:a5:9c:5a:2b:40:8f: e6:59:60:db:6c:d8:4f:0b:d5:b2:f0:63:26:75:0a:60:89:fa: 03:e1:65:46:0d:48:3a:07:2b:d7:26:ea:df:f5:cb:3b:41:0a: c7:f3:15:3b:c9:b3:7c:cd:81:25:0e:01:68:31:4e:ab:32:08: 0f:08:fc:4e:eb:7a:5c:4f:85:5e:4b:35:0b:9d:d5:d0:b9:41: 0b:1f:0e:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYxMTEzMDEyODA5WhcNMjYxMTIwMDEyODA5WjAYMRYwFAYD VQQDEw02YWY2NjdhOS1jOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwQvku0COnVuJpDuSjRh+kVlw85YNl5Je7aUP3eyUg0Tn2+LVe7rV+I4xZXL 3UE0ltKDByP9AkEKJN2/NRW0z15T6OIBLu2tv2V4cZaio1CH6JR9UnEcXBEXH8v7 6C4V4EtkeRhJFqOCbFFoCFu59MWoxxIy6lUUPmH6S0tfAL6/+vobSXm539bYPcAP JDbXldegLV1ZpZ6xnQzl1hlwcAuP/FS4pyIFwTBxpVELVniNNKYpom0VNlksovWS Wde1EFxV3GycfDrCAkDmtBSdbkvY4Mr52zt9pPHc7nO+BIbClj+r1W/vLy6BRWcq Nl5pENgmmmIV1JL+2goDxLxRSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKBgQVG V52LGk+rN/agws5x09biMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/QC4C5L2Dm3DHRrXSWD38jkrKK/VRPfZozgCh31VsbcnosUoVuZqI15/qNT CNbqTGWiCKhbYDZgZMLpEL+nal2eAqq/m70jKxe/Q0i2fu6sarFThav4o9eO8Hcp ipKCU8futbNAqbqXqUpboq9jkSiYqO8CMKB+nr83VviGknQgjF95xCMQg5cFKufL clb+l7ELQV4iK/WMJQqiCHJIOUQbTcix+8j6SHDGeABJpZxaK0CP5llg22zYTwvV svBjJnUKYIn6A+FlRg1IOgcr1ybq3/XLO0EKx/MVO8mzfM2BJQ4BaDFOqzIIDwj8 Tut6XE+FXks1C53V0LlBCx8Okg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:08:39 2026 by rpki-client