$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: VdvTTzsOthypWtGeHtlj35M/+fVYAcIU/hDEXbD7ePE= Subject key identifier: 97:6D:96:BA:E0:4B:41:77:4B:60:FE:23:C6:F4:5E:11:74:8C:39:A4 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0255 Signing time: Sun 15 Nov 2026 02:29:39 +0000 Manifest this update: Sun 15 Nov 2026 02:29:38 +0000 Manifest next update: Sun 22 Nov 2026 02:29:38 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: XGyn5pAkc/cbTnL830iR/sUKpgTKCyf/okPNlY1Iw/Y=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Nov 15 02:29:38 2026 GMT Not After : Nov 22 02:29:38 2026 GMT Subject: CN=6af91913-4943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:8e:75:bf:1b:b2:4e:0e:95:f4:69:5d:a4: cb:3b:3a:a0:fd:04:62:14:17:63:ca:77:23:5a:0c: 44:1d:38:3d:a0:29:8f:26:66:90:3d:de:54:a7:72: 3c:59:e6:42:04:e0:a1:a8:27:bc:0d:89:d9:a6:57: b1:74:60:8f:52:33:d8:f2:13:13:bf:4c:83:0d:69: f6:30:c7:92:db:c0:c2:0c:60:69:3e:85:c3:cb:0e: 2d:86:1b:67:7d:68:63:f3:78:e8:9d:d2:d3:e0:25: 1e:b1:40:a4:af:03:35:69:ed:0d:f7:20:bb:fb:66: 23:72:21:54:6d:4e:14:9e:e9:c0:f1:8b:c7:de:35: 49:21:9d:f6:26:7e:bf:11:a0:d4:37:c1:74:0d:6d: a5:31:ad:ea:80:b9:b9:27:2e:a4:3a:9b:5f:69:8d: cc:57:97:7a:54:6f:80:66:b3:61:94:89:6e:de:f8: 20:1c:4a:5a:80:58:f0:ed:bc:6a:a0:b3:e2:49:e8: f9:df:eb:f5:2d:02:e1:7f:0b:e7:e3:f3:b8:34:ea: be:6e:e6:67:a3:78:2c:e3:2e:87:3a:46:f5:cb:b5: 52:37:e0:39:69:0f:3b:2b:ea:b1:8c:d3:d9:f3:7d: 80:8e:dd:c3:69:41:99:de:28:88:cc:69:b5:78:22: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:96:BA:E0:4B:41:77:4B:60:FE:23:C6:F4:5E:11:74:8C:39:A4 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:d5:51:fd:77:de:b7:5e:d3:d6:49:7f:ac:f8:aa:7f:d3: bc:1f:47:a9:d8:18:2b:8e:6e:a9:51:f5:eb:1f:11:e4:7e:ae: ec:c8:d5:08:4f:b7:db:3f:47:84:64:38:d3:45:a0:d9:5a:29: 11:89:6e:1b:db:8f:96:70:30:07:2c:ca:ef:8a:a7:90:af:13: a5:d8:f9:c7:0c:1b:b7:7d:ab:4f:90:9b:ff:cb:ee:2b:a8:af: 57:ed:51:80:42:72:87:43:cd:f0:b9:0b:b3:25:df:45:d6:83: b0:85:01:ea:d1:4f:da:e2:f2:c2:99:9d:f1:5f:ea:4f:39:93: f3:d7:98:20:49:76:0d:b7:82:f7:61:51:0e:e7:33:49:53:ee: d8:30:20:a3:1e:db:79:88:8e:02:e6:d7:e3:bd:54:9a:b9:cb: b7:b3:12:a3:6c:90:4a:4e:1e:63:9f:53:db:3a:4f:da:2f:69: 85:69:ae:03:ea:47:ae:35:86:cb:f9:e9:a7:14:e4:b7:58:4f: 5b:16:94:46:dd:2c:26:01:d3:65:07:af:8f:35:6d:b6:50:eb: 96:b7:64:54:28:32:b6:cc:e8:33:d7:a4:6c:b8:d3:dc:ed:d9: 16:b6:88:14:5f:bc:65:36:48:93:44:42:9e:ce:01:b0:c8:01: a8:9e:3a:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYxMTE1MDIyOTM4WhcNMjYxMTIyMDIyOTM4WjAYMRYwFAYD VQQDEw02YWY5MTkxMy00OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr32Odb8bsk4OlfRpXaTLOzqg/QRiFBdjyncjWgxEHTg9oCmPJmaQPd5Up3I8 WeZCBOChqCe8DYnZplexdGCPUjPY8hMTv0yDDWn2MMeS28DCDGBpPoXDyw4thhtn fWhj83jondLT4CUesUCkrwM1ae0N9yC7+2YjciFUbU4UnunA8YvH3jVJIZ32Jn6/ EaDUN8F0DW2lMa3qgLm5Jy6kOptfaY3MV5d6VG+AZrNhlIlu3vggHEpagFjw7bxq oLPiSej53+v1LQLhfwvn4/O4NOq+buZno3gs4y6HOkb1y7VSN+A5aQ87K+qxjNPZ 832Ajt3DaUGZ3iiIzGm1eCJogwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdtlrrg S0F3S2D+I8b0XhF0jDmkMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvTVUf133rde09ZJf6z4qn/TvB9HqdgYK45uqVH16x8R5H6u7MjVCE+32z9H hGQ400Wg2VopEYluG9uPlnAwByzK74qnkK8Tpdj5xwwbt32rT5Cb/8vuK6ivV+1R gEJyh0PN8LkLsyXfRdaDsIUB6tFP2uLywpmd8V/qTzmT89eYIEl2DbeC92FRDucz SVPu2DAgox7beYiOAubX471UmrnLt7MSo2yQSk4eY59T2zpP2i9phWmuA+pHrjWG y/nppxTkt1hPWxaURt0sJgHTZQevjzVttlDrlrdkVCgytszoM9ekbLjT3O3ZFraI FF+8ZTZIk0RCns4BsMgBqJ46Qg== -----END CERTIFICATE-----Generated at Sun Nov 15 17:46:21 2026 by rpki-client