$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: KwGKZPAZSP9178bXfzVeWUC1fUviNemmVJwkxPxe+Qw= Subject key identifier: A9:22:BE:20:2C:58:8C:A0:7A:1B:BB:90:A8:D5:19:EB:5B:FA:A2:B3 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 36AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 3628 Signing time: Sat 14 Nov 2026 14:47:12 +0000 Manifest this update: Sat 14 Nov 2026 14:47:11 +0000 Manifest next update: Sat 21 Nov 2026 14:47:11 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: jbl0v7jSKjsA+vv/Xn7IgbGDndsPUIlSAxURO1tgDFs=) 2: 87C417D4AD1811F1A4C6F2B14011F970.roa (hash: vfxrhswzYVyis8nqhj1saPaXkKFUMc2dyL938MDx0Ks=) 3: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: S0YLxsHlXMPIsVCQedNtqPAi1Oql5ySH0VmkSqkBk0E=) 4: LMardGQVU7SgVsEHuvvq6G5bNHo.asa (hash: uCjd/1V2XZFFkjACYEsI6EwkUzW85dCtwJEXNTYqk60=) 5: Pn5U0hDH2rWNLlXOZlJYzTM_eqs.asa (hash: k2nVSfWe0RbcRK3RVEZBlxzASYtl+/NIehTOJC9e46I=) 6: pz3CZGvhoHs5XXn0y5Vgfq-NyVk.asa (hash: WDt8Zrp06UtBJeSR2SidZQnieL/HS6Hh3xVzanltoqY=) 7: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: yuGYengovCUZQoU7yyNyCediRoyhB2ZeEtOZfuAxhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13998 (0x36ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Nov 14 14:47:11 2026 GMT Not After : Nov 21 14:47:11 2026 GMT Subject: CN=6af8746f-8071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:82:cb:df:fa:72:64:88:94:83:5b:2d:cf: 8e:34:8d:b3:80:37:7a:4d:95:b2:97:70:c0:52:41: c1:0f:d9:e8:81:62:8d:dd:92:a8:27:1e:f4:71:02: 0e:e1:d5:00:36:08:ba:78:02:92:08:36:2b:d5:75: ef:1c:ec:b5:75:46:9f:0b:73:ec:63:30:a6:2d:a8: c6:0a:06:47:dc:ac:48:b9:56:c3:f3:60:12:6e:91: d3:02:7d:38:da:da:60:19:73:fc:c8:6c:63:84:b6: 62:b8:18:c1:21:2b:9a:b4:09:1e:08:16:4d:90:ef: ce:42:f8:3a:9f:2b:91:d0:b6:cb:77:b6:9c:f5:2b: 0e:df:42:a5:16:b9:d6:b7:03:48:10:72:5f:6b:41: cd:bf:92:8d:f1:89:d5:4f:27:df:74:76:0f:fb:d4: dd:4c:3d:3c:d1:3c:2c:76:b3:4f:98:b0:d9:e2:2c: 6c:b1:d9:ab:04:7e:8b:82:61:eb:27:35:d1:c6:8f: 2f:82:4d:80:20:23:d7:bf:b7:ef:f6:0c:c0:ef:4c: 30:a7:4a:9d:32:00:13:26:b5:3e:a6:1d:a9:23:49: 29:e2:e7:cb:93:61:bb:0e:18:80:ed:95:21:b5:a5: 21:4f:bd:81:19:e1:d6:d7:45:7c:e8:c0:b6:9f:c3: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:BE:20:2C:58:8C:A0:7A:1B:BB:90:A8:D5:19:EB:5B:FA:A2:B3 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:04:8e:51:28:69:eb:9c:5b:cc:11:7e:38:e2:25:91:e8:01: 3b:85:44:de:83:28:80:8e:e3:ec:1c:6e:57:17:12:75:b2:bd: df:37:29:b8:37:cb:70:16:fb:56:c2:71:bc:34:3e:16:10:c1: 03:86:4e:50:a9:df:44:76:b6:fe:70:9d:46:cb:cc:a3:f8:fc: cd:de:ce:4e:ef:45:c2:e3:a3:53:e1:b8:23:a5:38:c3:d9:d6: 43:56:5d:b2:c4:1f:45:3d:97:58:3b:3a:f5:fb:c1:19:bd:1a: 8a:08:f5:50:37:8d:c0:7a:bb:61:38:4d:1a:d3:7b:e7:75:1c: e2:91:3f:3b:88:2b:bc:9e:c9:4e:38:82:ee:bf:63:28:b0:62: 33:4c:9c:66:10:49:e7:30:2a:26:3e:9f:3f:0a:08:2f:e6:f3: 7c:ac:c3:55:b5:11:1d:79:9f:da:2d:ea:75:92:74:81:4b:42: d6:91:cc:66:1a:aa:95:32:d4:8d:b7:68:3d:6d:e6:a6:62:de: 9e:73:82:b3:8b:3b:9b:7b:c7:2e:d1:07:e8:ac:33:83:66:89: 4c:78:1e:c8:96:97:9b:09:db:5d:b5:5f:52:c0:82:cf:41:ec: 4d:1b:46:1d:43:4f:25:17:d7:6e:2f:ac:f3:62:a6:a1:c5:d8: 25:f1:14:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYxMTE0MTQ0NzExWhcNMjYxMTIxMTQ0NzExWjAYMRYwFAYD VQQDEw02YWY4NzQ2Zi04MDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GGCy9/6cmSIlINbLc+ONI2zgDd6TZWyl3DAUkHBD9nogWKN3ZKoJx70cQIO 4dUANgi6eAKSCDYr1XXvHOy1dUafC3PsYzCmLajGCgZH3KxIuVbD82ASbpHTAn04 2tpgGXP8yGxjhLZiuBjBISuatAkeCBZNkO/OQvg6nyuR0LbLd7ac9SsO30KlFrnW twNIEHJfa0HNv5KN8YnVTyffdHYP+9TdTD080TwsdrNPmLDZ4ixssdmrBH6LgmHr JzXRxo8vgk2AICPXv7fv9gzA70wwp0qdMgATJrU+ph2pI0kp4ufLk2G7DhiA7ZUh taUhT72BGeHW10V86MC2n8MNhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkiviAs WIygehu7kKjVGetb+qKzMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIgSOUShp65xbzBF+OOIlkegBO4VE3oMogI7j7BxuVxcSdbK93zcpuDfLcBb7 VsJxvDQ+FhDBA4ZOUKnfRHa2/nCdRsvMo/j8zd7OTu9FwuOjU+G4I6U4w9nWQ1Zd ssQfRT2XWDs69fvBGb0aigj1UDeNwHq7YThNGtN753Uc4pE/O4grvJ7JTjiC7r9j KLBiM0ycZhBJ5zAqJj6fPwoIL+bzfKzDVbURHXmf2i3qdZJ0gUtC1pHMZhqqlTLU jbdoPW3mpmLennOCs4s7m3vHLtEH6Kwzg2aJTHgeyJaXmwnbXbVfUsCCz0HsTRtG HUNPJRfXbi+s82KmocXYJfEUVA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:53:31 2026 by rpki-client