$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: dT4TD0fs7QgmS5ZYOC5qcf+aA/+/MtL+RfTMGaeKKW4= Subject key identifier: E2:A6:83:C6:64:61:A4:3C:01:F4:35:21:12:19:29:37:BC:CD:FC:C0 Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 078E Signing time: Sat 14 Nov 2026 21:25:07 +0000 Manifest this update: Sat 14 Nov 2026 21:25:07 +0000 Manifest next update: Sat 21 Nov 2026 21:25:07 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: K+ApOa+F9F1k3oxRDWGAvBHkMVGQEKhDgXDrP5d0xfA=) 2: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=) 3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=) 4: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Nov 14 21:25:07 2026 GMT Not After : Nov 21 21:25:07 2026 GMT Subject: CN=6af8d1b3-8fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:36:71:2c:24:c2:6f:3a:d7:8b:4d:7e:e8: af:e7:1b:85:a9:cd:a2:6b:6b:21:42:b1:52:0d:dc: 24:d2:a5:50:25:ae:6a:10:2b:8d:91:89:3a:2e:f4: 5a:35:ce:d6:6b:73:5f:93:38:5d:4d:e6:0b:86:c4: e4:74:96:c7:01:c5:2c:b3:98:30:ff:93:23:85:8d: 34:12:89:d4:f5:f8:4e:2e:89:d6:4e:b3:a8:86:dc: 4a:66:19:4a:c3:53:8d:23:16:fa:3f:31:c0:44:7e: 0e:63:9e:e0:a3:bc:b6:06:e3:fd:42:40:3d:9d:c1: 0b:61:8a:7f:58:95:57:39:7a:8c:91:30:85:46:4c: 97:03:27:a7:75:1f:fd:67:f4:0a:c8:08:e3:de:50: 82:53:a2:86:40:1d:f4:b4:fe:60:25:f7:ae:9b:7b: e4:14:9a:7e:83:30:10:88:bb:ad:4c:49:68:af:e8: 3b:e9:ae:54:d2:fe:81:ac:28:c4:52:e7:54:3a:8e: fd:29:52:e2:04:29:d7:bb:e9:e4:37:4d:66:a2:53: fc:f9:c0:5d:6e:b9:16:e2:38:e3:dc:6c:fb:40:20: ec:8e:50:60:b7:c1:57:b8:2a:58:e8:83:36:86:f5: 95:e9:1a:d5:cf:69:3d:cd:b1:e5:a9:58:8f:0d:a7: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A6:83:C6:64:61:A4:3C:01:F4:35:21:12:19:29:37:BC:CD:FC:C0 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:a8:ba:bc:e1:24:91:db:fb:b4:f6:30:76:2f:80:bb:c9: 4f:96:76:f5:b4:6e:82:bd:90:b4:85:41:4c:fd:8c:73:ed:a7: 8f:83:8b:47:87:53:43:a5:7c:99:b1:2e:76:29:dc:3b:a2:28: b7:a5:b0:b6:ff:75:b5:44:1f:91:8e:e0:47:37:b1:fb:9e:06: 80:0e:1d:80:11:a0:26:23:4b:6c:97:11:64:87:80:09:07:8a: 79:6b:5d:34:db:b4:8b:e6:b4:3f:db:07:67:25:3f:1e:c9:2a: 1f:43:a7:ed:4e:02:78:3f:a1:bc:f6:ca:d6:9d:aa:d6:3e:2c: 69:1b:9c:36:0c:9c:86:6c:6b:9b:49:35:75:1d:a0:e7:40:ed: 72:b0:4d:1b:58:44:09:3a:da:85:6a:19:52:80:a7:01:db:83: 9f:c9:d8:b7:9f:c3:d3:af:1d:78:4c:4c:3f:42:a8:01:e2:52: ce:74:8c:3d:24:dc:47:63:a8:0c:c7:76:5f:3d:5f:1a:a2:11: ab:ae:71:83:7b:11:fc:52:a3:ac:6c:ab:8d:b3:fd:a5:85:44: 3e:f8:55:8b:30:e4:5c:88:06:0e:13:9f:29:ce:6a:5d:bb:8a: ab:f2:95:64:ea:20:da:99:d9:3c:12:41:6f:e5:a6:07:89:f7: 00:ee:cd:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjYxMTE0MjEyNTA3WhcNMjYxMTIxMjEyNTA3WjAYMRYwFAYD VQQDEw02YWY4ZDFiMy04ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqg2cSwkwm8614tNfuiv5xuFqc2ia2shQrFSDdwk0qVQJa5qECuNkYk6LvRa Nc7Wa3NfkzhdTeYLhsTkdJbHAcUss5gw/5MjhY00EonU9fhOLonWTrOohtxKZhlK w1ONIxb6PzHARH4OY57go7y2BuP9QkA9ncELYYp/WJVXOXqMkTCFRkyXAyendR/9 Z/QKyAjj3lCCU6KGQB30tP5gJfeum3vkFJp+gzAQiLutTElor+g76a5U0v6BrCjE UudUOo79KVLiBCnXu+nkN01molP8+cBdbrkW4jjj3Gz7QCDsjlBgt8FXuCpY6IM2 hvWV6RrVz2k9zbHlqViPDadcKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKmg8Zk YaQ8AfQ1IRIZKTe8zfzAMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaP6ourzhJJHb+7T2MHYvgLvJT5Z29bRugr2QtIVBTP2Mc+2nj4OLR4dTQ6V8 mbEudincO6Iot6Wwtv91tUQfkY7gRzex+54GgA4dgBGgJiNLbJcRZIeACQeKeWtd NNu0i+a0P9sHZyU/HskqH0On7U4CeD+hvPbK1p2q1j4saRucNgychmxrm0k1dR2g 50DtcrBNG1hECTrahWoZUoCnAduDn8nYt5/D068deExMP0KoAeJSznSMPSTcR2Oo DMd2Xz1fGqIRq65xg3sR/FKjrGyrjbP9pYVEPvhVizDkXIgGDhOfKc5qXbuKq/KV ZOog2pnZPBJBb+WmB4n3AO7NnA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:37:48 2026 by rpki-client