$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: QyZEpHiDcMHf2UTU0scMOKWk5NzTSK1SP9c46Jjv260= Subject key identifier: 3C:40:0B:11:AF:2F:7F:AC:27:81:E1:23:C9:8D:0E:16:9C:65:61:17 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 0970 Signing time: Sat 14 Nov 2026 20:00:12 +0000 Manifest this update: Sat 14 Nov 2026 20:00:11 +0000 Manifest next update: Sat 21 Nov 2026 20:00:11 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: DbVzUKIQ/djga4rolXTMBK8WdV1z0xyf5/WWbeqnWw8=) 2: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: riAugWDJ5DhTN45EUt+CrAmJbM/LXJrUChi4MZPTCz4=) 3: 43BCAA10601011F1B53A223F8947A888.roa (hash: PvaMnipjN2/6D2XT8nCMTCBYamBVEvFMuHbwXiaCqBQ=) 4: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: buyx/Zgu3y611nh9T4dSAAiTISx8UOEjNS/DdMo9lBY=) 5: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: EHcYT6oCHARXkDDb8C838dkRtY2h9WRwHaDz4/MO5M0=) 6: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: X5XS1dvyLHsvbjHPpv5kKZpWSsQsy3ayWCVk+Z08DIo=) 7: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: ykRLO+ZdZfBe4QOQevrztKIQH1RJwrWspurqoK7BUg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Nov 14 20:00:11 2026 GMT Not After : Nov 21 20:00:11 2026 GMT Subject: CN=6af8bdcc-0ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:30:6e:55:f4:2b:7a:19:f5:7f:9e:b1:ca:6a: f7:0e:d9:51:38:1c:14:4f:ff:dd:80:60:9f:7e:bd: 01:fb:90:59:19:50:a2:2b:ef:be:8b:16:16:a3:03: 3a:a5:72:b0:f9:fb:28:1d:1a:56:08:f7:33:a7:44: 7e:35:77:a9:a0:af:d1:f0:bc:a4:21:ef:78:1b:f7: eb:1b:50:dc:43:10:8d:ef:74:5d:af:1c:31:97:b3: b4:32:0e:c8:32:79:62:8f:35:cd:e0:78:6a:b3:73: a7:4f:50:68:5f:8b:6a:3b:86:f2:bd:e4:a8:b1:8d: c6:f2:89:ee:24:93:eb:5b:b0:bb:e7:96:43:5b:8e: 74:6f:b4:88:5c:b2:1e:19:7b:61:d2:f5:7b:50:b4: 5b:53:da:c7:00:a8:2b:1e:93:72:6e:ee:17:95:40: a1:b8:3f:bc:7e:39:7d:72:05:e8:07:aa:d7:9c:00: eb:46:ee:9b:f0:ac:9d:e4:f0:79:23:50:2e:40:e1: 59:f0:86:45:cc:25:41:80:c9:7f:17:2d:16:9a:e4: c9:e0:5b:52:a3:8f:d0:96:53:ee:b4:bd:fa:27:c4: 69:b2:e1:64:eb:cb:97:e5:a7:14:ed:5c:ae:ec:63: d5:06:9b:0e:43:61:59:e6:30:14:da:6b:65:17:66: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:40:0B:11:AF:2F:7F:AC:27:81:E1:23:C9:8D:0E:16:9C:65:61:17 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:fd:4c:c5:99:bb:b7:de:df:94:48:37:42:5f:87:8f:ec: 84:17:f0:29:08:70:74:81:82:20:8e:8e:a5:d0:f7:2b:b1:41: 66:7c:bf:2d:7e:b0:3d:44:c4:fa:fd:52:b9:1e:1d:87:18:4a: 0b:5b:36:5a:30:76:8f:00:41:77:c9:7f:3f:4c:ff:7a:c6:be: 30:01:49:ac:a3:2e:2c:d8:c9:a9:88:6a:6b:49:ff:1f:f9:be: c5:b0:1f:0a:f3:d7:fd:a5:30:d2:e1:86:ee:e0:73:57:00:a8: 00:9e:f0:34:65:f2:9c:9b:a1:3d:3d:01:7e:ba:c0:58:63:63: b4:2e:53:ad:3f:fe:13:02:41:48:27:d0:d0:a7:db:96:be:74: 7b:5b:51:8f:f4:8d:c0:00:0f:0a:fb:1e:7e:f9:f6:98:c7:bf: af:1f:19:bd:22:ae:a9:e3:a5:3c:6d:41:00:03:89:68:05:e0: 46:4d:23:ce:b1:e7:4b:e4:de:ba:72:f5:4e:88:52:d4:41:85: ec:a7:a5:d6:76:43:29:46:15:33:77:dc:10:fe:fc:2d:63:96: 8f:aa:15:82:f7:d7:d6:0f:db:52:f8:08:2e:d5:e1:ef:80:21: 1a:f2:a3:57:af:08:f5:03:6e:82:af:6a:94:1f:51:c7:48:47: 1a:bc:d1:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYxMTE0MjAwMDExWhcNMjYxMTIxMjAwMDExWjAYMRYwFAYD VQQDEw02YWY4YmRjYy0wZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DBuVfQrehn1f56xymr3DtlROBwUT//dgGCffr0B+5BZGVCiK+++ixYWowM6 pXKw+fsoHRpWCPczp0R+NXepoK/R8LykIe94G/frG1DcQxCN73Rdrxwxl7O0Mg7I MnlijzXN4Hhqs3OnT1BoX4tqO4byveSosY3G8onuJJPrW7C755ZDW450b7SIXLIe GXth0vV7ULRbU9rHAKgrHpNybu4XlUChuD+8fjl9cgXoB6rXnADrRu6b8Kyd5PB5 I1AuQOFZ8IZFzCVBgMl/Fy0WmuTJ4FtSo4/QllPutL36J8RpsuFk68uX5acU7Vyu 7GPVBpsOQ2FZ5jAU2mtlF2bBWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxACxGv L3+sJ4HhI8mNDhacZWEXMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfWf9TMWZu7fe35RIN0Jfh4/shBfwKQhwdIGCII6OpdD3K7FBZny/LX6wPUTE +v1SuR4dhxhKC1s2WjB2jwBBd8l/P0z/esa+MAFJrKMuLNjJqYhqa0n/H/m+xbAf CvPX/aUw0uGG7uBzVwCoAJ7wNGXynJuhPT0BfrrAWGNjtC5TrT/+EwJBSCfQ0Kfb lr50e1tRj/SNwAAPCvsefvn2mMe/rx8ZvSKuqeOlPG1BAAOJaAXgRk0jzrHnS+Te unL1TohS1EGF7Kel1nZDKUYVM3fcEP78LWOWj6oVgvfX1g/bUvgILtXh74AhGvKj V68I9QNugq9qlB9Rx0hHGrzRgQ== -----END CERTIFICATE-----Generated at Sun Nov 15 13:01:56 2026 by rpki-client