$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: ZIeC2GLULFsm9o7p95imX/zb2O2fPlIHERsLlN8RLIA= Subject key identifier: 46:27:07:66:A8:45:4B:86:66:3F:42:9B:6B:F0:24:D4:0E:E6:FC:8C Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 013E Signing time: Fri 13 Nov 2026 05:42:34 +0000 Manifest this update: Fri 13 Nov 2026 05:42:34 +0000 Manifest next update: Fri 20 Nov 2026 05:42:34 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: uLQNrWc0K3B9EKL8O4DJDsB65lJknKN+YIYb56iI7v4=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=) 3: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=) 4: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 05:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Nov 13 05:42:34 2026 GMT Not After : Nov 20 05:42:34 2026 GMT Subject: CN=6af6a34a-3707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:67:88:43:7e:d5:74:38:e6:95:46:1b:88: 26:12:25:44:57:83:6a:8f:af:86:94:00:aa:74:b2: 23:22:1a:c0:20:85:c4:55:cf:c1:37:76:32:ad:82: 7b:e1:a8:99:ef:60:69:04:45:34:17:f7:e9:af:c5: 5b:b3:ec:3d:97:38:49:61:8e:4a:5c:df:66:b8:b9: db:c5:d4:9c:c7:fa:1b:3b:b7:79:91:4d:39:b2:10: fe:bd:c5:2a:63:b6:d8:ac:59:69:50:08:8a:be:ef: 43:f8:d4:65:5c:24:d9:be:c0:3c:d3:36:cd:f8:33: 57:5e:96:d9:fe:1c:3c:2e:2b:b5:4a:3f:f9:1e:cf: e0:7c:a0:f5:46:b2:88:82:e0:93:99:f1:e2:67:e8: 32:25:14:02:b2:73:71:7c:7d:af:49:63:bf:0b:53: b2:17:50:43:be:4d:b7:f7:85:10:b7:bd:98:b8:27: de:ee:cd:c1:46:95:f1:c0:c4:de:76:d8:14:a2:e5: fa:30:2a:2c:5f:b3:84:4e:f9:bc:e7:da:c8:df:3d: 3e:4b:30:ae:3d:1b:2f:35:8e:ba:68:29:95:d4:bc: 71:55:c9:20:94:25:58:ef:f1:6f:77:c4:ae:97:bf: e2:ed:f9:90:14:61:8f:37:6c:6f:89:eb:cd:36:dd: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:27:07:66:A8:45:4B:86:66:3F:42:9B:6B:F0:24:D4:0E:E6:FC:8C X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:14:8d:14:e2:e5:98:dc:79:91:ec:21:1f:c8:0e:a7:14:83: b9:60:7f:8a:da:13:fa:c1:c8:ac:7d:81:c7:4e:be:c2:c5:e2: 24:1a:30:df:28:7e:85:0d:c5:ca:52:65:4e:22:30:4b:5c:67: 54:6a:ff:7f:39:e1:dd:38:49:09:c7:71:ce:6f:96:c0:a2:6d: 0f:ad:1b:c6:9f:6c:12:66:7a:2e:52:fe:a4:d6:1c:7e:7d:5e: ba:e9:79:43:5e:10:e4:6a:c4:38:e8:d4:fa:a4:b3:88:f8:a5: 79:e9:bd:0c:83:64:0a:6d:04:f4:a7:c0:9e:ad:16:5a:9c:41: f8:7b:61:9f:2a:14:ec:a9:b9:08:94:25:52:ca:48:39:33:90: 22:43:8e:ed:f4:22:3b:89:af:d6:cb:e1:46:a9:68:27:60:09: 67:5f:bb:dc:c8:19:09:c6:d2:ef:a6:25:d1:f2:6c:51:7b:1a: 8c:5e:99:43:f1:54:11:3d:bb:da:e9:28:57:98:e4:6f:89:d5: 92:18:b8:9a:94:f8:6e:5e:35:30:cb:b2:0c:7e:f3:0f:f4:f8: 8e:05:04:45:b3:16:ec:65:24:9e:5a:d2:ef:0b:91:58:18:35: bb:6d:e3:2c:77:dd:1a:3b:bf:57:50:5f:be:08:79:64:98:1c: e5:e0:8e:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjYxMTEzMDU0MjM0WhcNMjYxMTIwMDU0MjM0WjAYMRYwFAYD VQQDEw02YWY2YTM0YS0zNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL1niEN+1XQ45pVGG4gmEiVEV4Nqj6+GlACqdLIjIhrAIIXEVc/BN3YyrYJ7 4aiZ72BpBEU0F/fpr8Vbs+w9lzhJYY5KXN9muLnbxdScx/obO7d5kU05shD+vcUq Y7bYrFlpUAiKvu9D+NRlXCTZvsA80zbN+DNXXpbZ/hw8Liu1Sj/5Hs/gfKD1RrKI guCTmfHiZ+gyJRQCsnNxfH2vSWO/C1OyF1BDvk2394UQt72YuCfe7s3BRpXxwMTe dtgUouX6MCosX7OETvm859rI3z0+SzCuPRsvNY66aCmV1LxxVckglCVY7/Fvd8Su l7/i7fmQFGGPN2xvievNNt1nFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYnB2ao RUuGZj9Cm2vwJNQO5vyMMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxSNFOLlmNx5kewhH8gOpxSDuWB/itoT+sHIrH2Bx06+wsXiJBow3yh+hQ3F ylJlTiIwS1xnVGr/fznh3ThJCcdxzm+WwKJtD60bxp9sEmZ6LlL+pNYcfn1euul5 Q14Q5GrEOOjU+qSziPileem9DINkCm0E9KfAnq0WWpxB+HthnyoU7Km5CJQlUspI OTOQIkOO7fQiO4mv1svhRqloJ2AJZ1+73MgZCcbS76Yl0fJsUXsajF6ZQ/FUET27 2ukoV5jkb4nVkhi4mpT4bl41MMuyDH7zD/T4jgUERbMW7GUknlrS7wuRWBg1u23j LHfdGju/V1Bfvgh5ZJgc5eCO/w== -----END CERTIFICATE-----Generated at Sat Nov 14 22:33:09 2026 by rpki-client