$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: +Dw6q4Mk03a9TvKgFeaO7cLPMkm8z+fjMOL7mgPrPNg= Subject key identifier: 5E:50:1C:5E:DC:72:5A:8C:87:DA:92:AB:7C:B0:56:F4:3F:DB:60:B7 Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: A1 Signing time: Fri 13 Nov 2026 07:33:24 +0000 Manifest this update: Fri 13 Nov 2026 07:33:23 +0000 Manifest next update: Fri 20 Nov 2026 07:33:23 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: wLrL4OModE0HxBr5j5cYGigCoeQP62No3HSc8Q51RL0=) 2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) 3: 50AC9032C9E711F1A80DA5333C11F970.roa (hash: nGQ9BkXkDE16rHKidH2ESbQX6DqBjmUB5cX6HUL/W8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 07:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Nov 13 07:33:23 2026 GMT Not After : Nov 20 07:33:23 2026 GMT Subject: CN=6af6bd44-7cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:59:61:36:67:35:a7:db:52:82:58:79:c5: a4:cb:ff:db:21:72:0b:14:e6:4c:bb:fa:55:36:c6: de:29:30:06:31:b8:b7:23:a9:0f:4c:9f:0a:83:85: 04:65:b3:1b:4b:ae:33:b8:dc:e9:bb:b1:56:24:58: 89:88:e8:a2:56:f7:01:1a:a5:64:19:05:34:b3:3f: c7:a3:d1:be:b3:63:76:82:60:fe:17:ed:88:db:55: 5e:65:e0:a6:d1:63:1a:4f:1a:75:30:a0:1d:09:dc: 42:17:21:1a:55:a4:04:8c:72:fe:f6:80:6b:59:23: 17:97:0e:3d:6a:fc:ac:26:7c:27:aa:4c:c2:e5:3a: 88:9e:25:62:89:71:2d:5b:96:c5:29:88:e8:8c:7d: 0f:3e:59:e7:a2:15:0a:4b:3b:39:7a:a8:4c:52:1d: 73:49:66:18:72:86:13:df:75:24:cc:27:af:60:a7: e7:79:2e:75:77:5e:e3:75:8b:45:2c:cd:6b:04:8d: dd:d1:20:6d:d2:a2:01:b8:79:bc:ac:93:0e:e6:28: 28:f9:aa:05:90:2a:ba:61:19:6a:2e:e1:c7:c9:f7: df:21:0d:ef:5b:7f:bf:ec:f8:d2:7e:56:b0:5a:68: b1:c4:6d:10:07:ed:a2:60:b6:d4:fd:62:bf:e8:ca: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:1C:5E:DC:72:5A:8C:87:DA:92:AB:7C:B0:56:F4:3F:DB:60:B7 X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8c:26:ff:22:03:e2:88:90:56:73:e3:37:f6:91:5d:18:2f: 52:bc:af:41:40:45:49:f6:12:87:7b:06:79:60:56:9f:56:8d: c9:ae:76:fb:f0:70:ba:40:a3:25:41:7c:14:7f:b2:17:59:03: 08:49:fb:d6:3c:be:65:41:03:0d:c1:18:e8:60:a5:c4:56:27: 24:a7:82:a4:a7:da:e6:a0:d8:b5:82:aa:2a:45:db:7d:bc:62: 49:f8:cd:d1:d6:c4:46:b1:3d:4e:96:47:fd:c3:de:08:4f:c8: 24:49:a0:7c:a0:e8:6d:af:f1:6e:8b:d4:2a:4e:bc:5a:b0:1c: dd:ef:4e:67:63:42:46:ff:3a:f6:c4:fb:ce:c4:ae:35:b1:75: 04:6d:c1:42:65:95:0b:ad:9c:22:5f:a5:ac:19:99:85:2f:9d: 07:07:b5:97:68:71:ae:63:1e:0b:ed:65:dd:f7:e6:ed:1d:ce: 2d:47:58:ad:20:12:87:4d:66:1c:97:b6:d8:bf:8c:26:26:04: 02:2b:f3:c5:27:9c:bc:2f:03:53:e3:d9:bd:5d:0c:49:e2:6f: 2a:de:fe:2f:27:5b:58:4c:b2:d7:9b:c0:82:e1:bb:37:d4:32: ec:b4:53:25:b5:4d:de:21:63:15:8a:62:29:0b:13:4c:e4:65: ab:24:41:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RjcxMTAvBgNVBAUTKDk4RTk5NUJDM0E0RkYyQ0QwOEM2RTM1NTRCNjYzNzRC NjY5NzkyNzAwHhcNMjYxMTEzMDczMzIzWhcNMjYxMTIwMDczMzIzWjAYMRYwFAYD VQQDEw02YWY2YmQ0NC03Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0RZYTZnNafbUoJYecWky//bIXILFOZMu/pVNsbeKTAGMbi3I6kPTJ8Kg4UE ZbMbS64zuNzpu7FWJFiJiOiiVvcBGqVkGQU0sz/Ho9G+s2N2gmD+F+2I21VeZeCm 0WMaTxp1MKAdCdxCFyEaVaQEjHL+9oBrWSMXlw49avysJnwnqkzC5TqIniViiXEt W5bFKYjojH0PPlnnohUKSzs5eqhMUh1zSWYYcoYT33UkzCevYKfneS51d17jdYtF LM1rBI3d0SBt0qIBuHm8rJMO5igo+aoFkCq6YRlqLuHHyfffIQ3vW3+/7PjSflaw WmixxG0QB+2iYLbU/WK/6Mpq3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5QHF7c clqMh9qSq3ywVvQ/22C3MB8GA1UdIwQYMBaAFJjplbw6T/LNCMbjVUtmN0tml5Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGNy9GMERDQ0RENEYx RjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhzMEl4dU5WUzJZM1MyYVhr bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9GMERDQ0RENEYxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhz MEl4dU5WUzJZM1MyYVhrbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYwm/yID4oiQVnPjN/aRXRgvUryvQUBFSfYSh3sGeWBWn1aNya52+/BwukCj JUF8FH+yF1kDCEn71jy+ZUEDDcEY6GClxFYnJKeCpKfa5qDYtYKqKkXbfbxiSfjN 0dbERrE9TpZH/cPeCE/IJEmgfKDoba/xbovUKk68WrAc3e9OZ2NCRv869sT7zsSu NbF1BG3BQmWVC62cIl+lrBmZhS+dBwe1l2hxrmMeC+1l3ffm7R3OLUdYrSASh01m HJe22L+MJiYEAivzxSecvC8DU+PZvV0MSeJvKt7+LydbWEyy15vAguG7N9Qy7LRT JbVN3iFjFYpiKQsTTORlqyRByg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:40:25 2026 by rpki-client