$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json) Hash identifier: eK4Tlx+ODBR8L2Rpd7bdsZklZTYyxcifz4Jz4ZDAXYM= Subject key identifier: AE:7E:57:11:98:B8:87:3B:93:1E:29:39:4B:E5:D2:41:78:E8:5D:63 Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft Manifest number: 04C0 Signing time: Sat 14 Nov 2026 23:38:45 +0000 Manifest this update: Sat 14 Nov 2026 23:38:44 +0000 Manifest next update: Sat 21 Nov 2026 23:38:44 +0000 Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: DeamO5MrDgK6isdzHsCJvH4SKni2LDLTZY5ZyqzxG+k=) 2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: wOy6heD304ZYKXHgXC6sjOSWrBhnhYKkUolhpPmInz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Nov 14 23:38:44 2026 GMT Not After : Nov 21 23:38:44 2026 GMT Subject: CN=6af8f105-42ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:07:44:2d:ba:21:28:bc:f0:b6:e5:d2:c6: f7:ae:9d:18:cb:d3:48:e3:1e:93:82:6d:93:90:ff: a7:b8:84:1b:50:dd:9e:29:0c:dd:65:9b:53:9b:1d: ce:de:e7:60:76:2e:d6:11:64:0e:6f:62:21:79:fa: c3:bb:14:41:72:68:70:81:90:19:9d:2e:42:38:eb: 03:9a:4d:c7:30:21:08:11:30:4a:51:84:9c:6e:df: 06:f1:dc:19:99:d5:ae:43:3a:09:32:83:25:42:26: 99:70:a1:6a:23:7d:df:18:14:eb:d4:d8:35:17:98: 81:53:af:40:20:7c:34:bc:a4:dd:77:67:9d:19:fc: 7a:07:14:67:fd:45:cf:67:d6:0b:99:b3:94:24:24: d6:05:49:97:ba:9d:e9:56:36:99:3d:3c:b2:26:c2: 88:29:3e:54:3d:e7:ae:f4:1b:a0:f9:d7:11:09:e3: 86:7d:2f:68:18:3c:42:6e:3c:92:a3:9a:0f:6b:21: a6:28:84:f0:56:66:b1:3e:08:80:fd:19:2c:d4:81: 7f:9b:8b:dd:4c:d4:f9:7a:34:30:cd:45:4f:8f:64: 86:5c:65:90:5c:2d:10:65:40:3a:b4:f7:ec:cb:1f: 47:e9:9e:5c:c2:4b:35:56:18:d6:e9:a3:27:15:fc: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:57:11:98:B8:87:3B:93:1E:29:39:4B:E5:D2:41:78:E8:5D:63 X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:24:d7:7e:52:45:a2:49:f1:c2:f5:19:43:71:34:30:47:06: 77:9e:5b:fd:05:00:76:52:32:45:1f:f1:d7:e7:67:51:df:80: 1b:fd:10:c6:2a:f6:87:a9:b0:62:28:7a:7d:c9:2e:e3:84:63: 28:25:b3:07:e9:fd:32:48:6f:2d:1a:42:2e:6c:37:17:03:97: 5e:0e:87:af:9e:89:c5:41:2e:6f:aa:ef:0c:10:c7:fb:f0:76: 57:8c:8e:e4:a4:c9:af:0a:db:1a:b1:37:9d:f6:37:66:b3:e7: af:a3:30:a7:f2:39:32:54:ac:a1:b9:40:b6:21:6f:72:59:ef: 49:9b:f3:27:48:07:1d:96:02:86:8d:91:cd:cc:b4:6c:1a:f1: 6b:b1:30:cb:b7:6c:4b:f5:dc:a9:a4:4f:b1:90:8f:a8:3c:b5: d0:b2:37:a4:d2:c9:af:f1:7a:05:d3:1c:ca:68:21:ee:f8:1f: 39:2d:88:38:18:35:1a:4e:f5:23:0f:37:df:ac:31:aa:47:14: 9f:97:54:85:d8:b2:d4:7b:bf:ac:05:d8:29:34:dd:9e:47:8d: 6f:3b:8a:d2:77:14:fe:c6:1d:37:13:2e:70:3f:93:f2:7d:cd: 09:54:5e:48:5c:cf:f5:05:98:f7:33:fe:11:9a:3e:ce:1a:e3: e3:d5:11:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjYxMTE0MjMzODQ0WhcNMjYxMTIxMjMzODQ0WjAYMRYwFAYD VQQDEw02YWY4ZjEwNS00MmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzAHRC26ISi88Lbl0sb3rp0Yy9NI4x6Tgm2TkP+nuIQbUN2eKQzdZZtTmx3O 3udgdi7WEWQOb2IhefrDuxRBcmhwgZAZnS5COOsDmk3HMCEIETBKUYScbt8G8dwZ mdWuQzoJMoMlQiaZcKFqI33fGBTr1Ng1F5iBU69AIHw0vKTdd2edGfx6BxRn/UXP Z9YLmbOUJCTWBUmXup3pVjaZPTyyJsKIKT5UPeeu9Bug+dcRCeOGfS9oGDxCbjyS o5oPayGmKITwVmaxPgiA/Rks1IF/m4vdTNT5ejQwzUVPj2SGXGWQXC0QZUA6tPfs yx9H6Z5cwks1VhjW6aMnFfxB+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5+VxGY uIc7kx4pOUvl0kF46F1jMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh X1JMTFg2UGtpRjM4MkZBRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtSTXflJFoknxwvUZQ3E0MEcGd55b/QUAdlIyRR/x1+dnUd+AG/0Qxir2h6mw Yih6fcku44RjKCWzB+n9MkhvLRpCLmw3FwOXXg6Hr56JxUEub6rvDBDH+/B2V4yO 5KTJrwrbGrE3nfY3ZrPnr6Mwp/I5MlSsoblAtiFvclnvSZvzJ0gHHZYCho2Rzcy0 bBrxa7Ewy7dsS/XcqaRPsZCPqDy10LI3pNLJr/F6BdMcymgh7vgfOS2IOBg1Gk71 Iw8336wxqkcUn5dUhdiy1Hu/rAXYKTTdnkeNbzuK0ncU/sYdNxMucD+T8n3NCVRe SFzP9QWY9zP+EZo+zhrj49URvw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:02:22 2026 by rpki-client