$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: +bCdSGnHV8YP4Ou5ecGKGzVw0IupMigfcfJq/9y+khs= Subject key identifier: 2B:F1:C6:42:B4:44:07:B6:4B:47:B7:B5:38:E9:7F:29:AA:60:4E:27 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 07ED Signing time: Sat 14 Nov 2026 21:15:34 +0000 Manifest this update: Sat 14 Nov 2026 21:15:34 +0000 Manifest next update: Sat 21 Nov 2026 21:15:34 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: ryNDiCI5Aa3KwAW+WRyn/QLuzNZL/gKzwmTng2ghNTQ=) 2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: j601VB2aV1i6zHcGHGnI+gjwgTNPmShSUWofaXd/nyI=) 3: 74CBF518D5E311F1A10F4780FB65CEF9.roa (hash: +7U05j0iLpUCgmnplM2PHzzERgi/Hub2k72s0/IT/bE=) 4: B8A6EC507C0311F19A8027EB8FA30FBC.roa (hash: /Q/OsSViVbdEWWh4hmj1eO/01IaaRMepWRYxRTkU9Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Nov 14 21:15:34 2026 GMT Not After : Nov 21 21:15:34 2026 GMT Subject: CN=6af8cf76-0897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:6d:fc:a2:00:f4:da:2f:d4:d0:25:9a:1c: 04:f3:b6:0f:66:3c:d9:b1:14:e1:dd:94:ad:fc:a0: 30:12:3c:83:df:c6:76:b1:c1:bd:be:c0:c3:d5:e5: bb:40:86:28:4d:41:3f:43:7d:b4:78:92:c3:ac:52: d8:b7:3e:26:2c:e2:ab:8b:6e:91:36:b3:d0:b5:87: 06:b0:72:d0:eb:dc:b9:3a:4c:69:8b:dd:79:a8:0e: 56:d8:67:1c:c1:a6:99:b6:10:19:de:11:43:08:bd: 32:58:40:88:59:60:d2:1b:91:36:d2:6a:2c:d7:44: 30:52:2e:bc:0b:08:9a:4a:8b:fc:e8:e6:08:43:68: dd:bd:41:38:38:7b:5e:c8:a0:8f:ac:dc:ad:be:c3: d4:d0:c3:ce:0d:42:de:b0:0a:30:92:7a:b0:57:c9: cc:1f:63:a3:b0:2f:4a:0c:6c:ff:48:c9:4e:9c:8b: e7:3a:1f:a8:ee:14:2f:c8:06:40:0f:16:94:06:b1: 59:9f:86:be:11:cd:57:f9:d9:6e:55:4c:3a:77:8a: 93:24:f2:c8:6e:c5:28:e4:d6:ed:c4:9e:b0:b6:85: a2:df:90:10:52:39:87:26:ba:c5:d3:01:b5:8e:d8: 71:4a:a9:f5:ae:bd:c7:ba:3a:a9:0d:40:21:53:d5: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:C6:42:B4:44:07:B6:4B:47:B7:B5:38:E9:7F:29:AA:60:4E:27 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:d6:17:0f:71:f4:0c:50:aa:fd:c8:bd:2c:14:4f:4b:f0:96: 2a:04:ec:52:30:05:13:57:4e:d7:56:4e:ea:f8:38:19:77:54: 75:2b:c2:2e:ee:27:7b:30:bc:4a:06:d9:a6:17:2e:25:58:b2: b0:8e:92:83:51:94:c2:f1:a7:ea:ec:64:23:54:4d:35:e9:8c: 80:a9:09:5e:b5:32:4e:ad:72:05:ca:19:0e:cc:71:21:3e:69: 16:26:fb:b6:7f:d4:b3:29:c7:11:57:5b:b8:41:60:f2:3d:30: 4b:9d:79:fb:8e:a4:63:69:9d:d8:d2:21:c1:b7:25:7f:7e:48: c7:66:5d:b2:77:5e:f3:81:85:7f:0c:96:44:49:67:ca:90:75: f8:a7:a5:61:77:7f:9c:bd:62:02:a5:cd:44:f1:33:46:dd:5c: ad:2c:f6:36:b7:03:21:57:16:ba:6b:44:91:09:12:f6:98:92: b9:eb:37:08:92:34:b1:3d:8a:45:c2:80:a7:fb:0c:f6:2e:32: bc:1a:af:b3:79:de:eb:43:10:37:87:1e:51:60:1a:b4:74:a9: 43:c6:c6:a6:94:7d:86:fc:6f:f5:75:d0:56:59:0d:04:a3:ce: d0:36:eb:7c:a9:3a:00:1c:9f:02:bc:0c:97:a3:a4:a7:03:e4: 66:8e:12:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjYxMTE0MjExNTM0WhcNMjYxMTIxMjExNTM0WjAYMRYwFAYD VQQDEw02YWY4Y2Y3Ni0wODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqFt/KIA9Nov1NAlmhwE87YPZjzZsRTh3ZSt/KAwEjyD38Z2scG9vsDD1eW7 QIYoTUE/Q320eJLDrFLYtz4mLOKri26RNrPQtYcGsHLQ69y5Okxpi915qA5W2Gcc waaZthAZ3hFDCL0yWECIWWDSG5E20mos10QwUi68CwiaSov86OYIQ2jdvUE4OHte yKCPrNytvsPU0MPODULesAowknqwV8nMH2OjsC9KDGz/SMlOnIvnOh+o7hQvyAZA DxaUBrFZn4a+Ec1X+dluVUw6d4qTJPLIbsUo5NbtxJ6wtoWi35AQUjmHJrrF0wG1 jthxSqn1rr3HujqpDUAhU9VbNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvxxkK0 RAe2S0e3tTjpfymqYE4nMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2tYXD3H0DFCq/ci9LBRPS/CWKgTsUjAFE1dO11ZO6vg4GXdUdSvCLu4nezC8 SgbZphcuJViysI6Sg1GUwvGn6uxkI1RNNemMgKkJXrUyTq1yBcoZDsxxIT5pFib7 tn/UsynHEVdbuEFg8j0wS515+46kY2md2NIhwbclf35Ix2Zdsnde84GFfwyWREln ypB1+KelYXd/nL1iAqXNRPEzRt1crSz2NrcDIVcWumtEkQkS9piSues3CJI0sT2K RcKAp/sM9i4yvBqvs3ne60MQN4ceUWAatHSpQ8bGppR9hvxv9XXQVlkNBKPO0Dbr fKk6AByfArwMl6OkpwPkZo4SlA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:31:56 2026 by rpki-client