$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: GUDxt/9zRHHmA1CNLn4Im5uo3fc7ivdUlQivD7Mwjbc= Subject key identifier: 33:FD:68:0E:DE:7C:09:02:44:8A:1F:DF:C7:A4:94:40:AC:9C:AF:0A Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 0555 Signing time: Sat 14 Nov 2026 23:14:47 +0000 Manifest this update: Sat 14 Nov 2026 23:14:47 +0000 Manifest next update: Sat 21 Nov 2026 23:14:47 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: 9yJUnpjQyvF7FsJnFgC2lXapNdrgVesJnhEAgeDPhsA=) 2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=) 3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Nov 14 23:14:47 2026 GMT Not After : Nov 21 23:14:47 2026 GMT Subject: CN=6af8eb67-02b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:74:45:90:5d:32:24:5a:fb:69:c1:75:56: 44:f1:f2:52:2c:a4:58:2e:c2:6b:58:8c:60:93:fc: a8:40:fe:b3:2e:3b:80:ed:69:45:70:3e:74:2b:82: 9d:38:8c:95:b3:52:85:71:5c:b5:8d:1b:d3:22:f5: d8:f1:2d:18:64:7e:76:da:cc:9f:72:74:88:3e:1d: 48:c0:28:84:3b:90:9e:2c:16:9e:ba:15:80:e0:d0: 21:53:30:dc:36:d8:f6:30:86:2a:ea:f5:f6:f9:ae: c4:94:02:98:02:05:1b:ab:b5:0d:b5:73:e3:31:45: 12:7b:d1:5e:f8:8a:04:2c:80:bf:8a:9c:ff:73:3d: f7:92:fa:1b:ea:a8:20:6f:88:2c:9d:33:08:71:40: 1b:53:6c:0d:20:42:07:5f:b6:0b:0b:f3:92:5c:14: 51:b0:c0:ef:bb:e8:33:41:54:f3:02:60:36:b9:07: 15:be:c9:8c:76:71:13:7e:c3:d5:98:5b:03:62:88: 80:38:f8:e0:f7:d0:5e:e9:1b:24:7a:0a:bb:42:6e: 7c:36:4e:f6:e0:65:a4:28:81:55:9e:8a:d1:93:0d: 45:e9:a0:de:8f:c4:98:91:c9:52:21:ba:46:a8:4c: 03:c9:82:23:cc:6c:ce:06:75:91:2e:06:81:4e:03: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:68:0E:DE:7C:09:02:44:8A:1F:DF:C7:A4:94:40:AC:9C:AF:0A X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a5:1e:0b:86:21:f6:8b:5a:d9:41:0f:2b:e5:3e:73:2a:61: 72:65:93:f8:ca:af:5b:e8:00:9b:a4:78:e6:db:76:0b:f7:d6: 44:f5:c5:0e:49:15:c1:73:13:6e:86:8e:78:05:ea:7d:e4:a2: 1b:da:ca:74:f0:29:ff:2f:c1:13:8e:c7:5e:c5:cb:12:bb:71: e7:3c:6a:24:a5:cd:80:8a:4c:7f:69:92:18:5d:57:64:e8:bc: e3:ba:13:a4:59:70:c5:66:eb:24:c0:40:cd:9b:4e:50:07:25: 4a:81:16:35:c8:e7:eb:b5:b8:e3:14:fe:cc:5f:1e:29:2c:f3: 68:76:aa:37:7c:ac:35:7f:b6:31:7c:92:16:c9:02:92:af:81: 5c:41:7b:99:ac:7f:e8:31:7f:68:4f:41:1d:c5:44:52:80:32: aa:af:0a:73:a9:67:5b:02:8e:78:f4:15:4c:e6:2b:43:2e:26: 1e:ad:0a:ed:e0:57:2f:3f:ee:90:9c:ee:72:d8:d8:ff:73:8d: f6:71:1b:c6:44:76:27:5f:b6:ee:7c:f7:98:a8:04:be:db:0e: 16:ff:9a:3b:e5:56:10:cb:d8:a4:18:ed:62:3f:00:d0:a9:31: 5e:84:fb:34:13:7a:76:60:e6:ef:4c:21:3d:91:1f:f7:f6:a9: 5b:e3:09:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYxMTE0MjMxNDQ3WhcNMjYxMTIxMjMxNDQ3WjAYMRYwFAYD VQQDEw02YWY4ZWI2Ny0wMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrd0RZBdMiRa+2nBdVZE8fJSLKRYLsJrWIxgk/yoQP6zLjuA7WlFcD50K4Kd OIyVs1KFcVy1jRvTIvXY8S0YZH522syfcnSIPh1IwCiEO5CeLBaeuhWA4NAhUzDc Ntj2MIYq6vX2+a7ElAKYAgUbq7UNtXPjMUUSe9Fe+IoELIC/ipz/cz33kvob6qgg b4gsnTMIcUAbU2wNIEIHX7YLC/OSXBRRsMDvu+gzQVTzAmA2uQcVvsmMdnETfsPV mFsDYoiAOPjg99Be6Rskegq7Qm58Nk724GWkKIFVnorRkw1F6aDej8SYkclSIbpG qEwDyYIjzGzOBnWRLgaBTgOfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP9aA7e fAkCRIof38eklECsnK8KMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEqUeC4Yh9ota2UEPK+U+cyphcmWT+MqvW+gAm6R45tt2C/fWRPXFDkkVwXMT boaOeAXqfeSiG9rKdPAp/y/BE47HXsXLErtx5zxqJKXNgIpMf2mSGF1XZOi847oT pFlwxWbrJMBAzZtOUAclSoEWNcjn67W44xT+zF8eKSzzaHaqN3ysNX+2MXySFskC kq+BXEF7max/6DF/aE9BHcVEUoAyqq8Kc6lnWwKOePQVTOYrQy4mHq0K7eBXLz/u kJzuctjY/3ON9nEbxkR2J1+27nz3mKgEvtsOFv+aO+VWEMvYpBjtYj8A0KkxXoT7 NBN6dmDm70whPZEf9/apW+MJKg== -----END CERTIFICATE-----Generated at Sun Nov 15 14:46:42 2026 by rpki-client