$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: tEietmRPwnRa/5PRuNJavI9yB3X4S9Ij0VyqzcI2bZ8= Subject key identifier: B4:E9:B7:B8:05:56:04:F0:2F:92:19:5A:BC:B2:9D:6E:E5:24:01:8A Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 0421 Signing time: Sun 15 Nov 2026 00:21:45 +0000 Manifest this update: Sun 15 Nov 2026 00:21:44 +0000 Manifest next update: Sun 22 Nov 2026 00:21:44 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: XAUMTYBFxDH3rDt1xFFMYgc0bdKlIB93LhjrOjB+2HY=) 2: 6762C6E0909211F18C4BD3AE6911F970.roa (hash: GO5zh7MCHBg56U5rWYeNTB2vPGPUOw86aIMrka1N4cg=) 3: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: brgVDCGXixcbJRNF8ggHKQFgFrzS4R9OgM/PcYC5nQc=) 4: 72CB1E1C7B5011F1B2F9C2DC58A30FBC.roa (hash: dORDFnaaxQGY4vjjFr7BGYntkVIFxkqdlRTgdg+fLbo=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: eo97g9UlZshMJA4HXsGwl2EqgsYxkz3OFQu0ZT7ioY4=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: xU1zjA76l+0iM9bsFjOEAgjkfSx72d/teh/7jiFl8qs=) 7: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: AKoZyPuf4M9ZcEU/leMev9H1xz48aswraZiTQr7vftg=) 8: 2E7E25EA921D11F1B1C7D4CB6611F970.roa (hash: NxHB5XBL7ve4r080JLtFWlK5r7K17fGRWsvt/Wn/coQ=) 9: 9C44EEECC31911F1878AAE4C6211F970.roa (hash: dv/6Xt7rrEWzWBtvrPLzqeqcEQ4nJb9KcI0LgAiPSTA=) 10: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: H7MTLgBvJqkX/zlXhQ1M+AoAUBypYzZNCTAi5k1DtyM=) 11: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CDOHJRFPLioKIq0PuStTWBZGQbhh1O/85ZcAsgFBOoU=) 12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: eKDAjFI7uLbjlMqzaXqO/giEMIaCgnJ47zdh3OypaOI=) 13: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: 9E7fitqPq9ar/Ob4y6a6R4Pwq8T7ZTTzFgXU4K5+Oug=) 14: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: pJq2I6/phF6xwFXAl6PEEV/RgzAR5E+0Z+tE1UwO0T8=) 15: B111111288B411EF80480527C4F9AE02.roa (hash: xJMBIq+z+Hr5KMjAaKBxe80ZwBF0kEHvPHKxaRo9DIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Nov 15 00:21:44 2026 GMT Not After : Nov 22 00:21:44 2026 GMT Subject: CN=6af8fb18-a8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:e9:6b:50:91:2f:d0:dd:cc:7e:fe:bc:1b: 78:d2:37:35:84:62:12:20:d7:7a:f9:bf:66:f0:ce: c4:b7:99:68:65:73:34:c6:95:18:d3:9c:8c:90:14: e3:59:fe:14:42:fb:31:0f:d8:9c:3d:56:a8:d1:e6: d3:6e:0c:b2:f9:7f:e1:10:87:7b:97:ab:96:70:53: 1d:83:c5:3b:7e:30:f5:88:76:3f:b3:8c:ea:ea:6e: 03:44:66:fe:63:a6:db:1c:d2:33:07:3c:dc:16:e9: a7:db:06:4d:63:58:4e:b0:78:19:eb:a5:bf:7b:52: 2c:71:6e:0e:4a:ac:2a:08:a4:d4:1f:42:79:b6:cf: f3:b7:1a:e1:38:81:64:ed:8e:52:40:00:c0:a0:43: 26:65:67:55:2e:7e:5c:cd:23:81:3e:d2:31:a5:b7: 29:6c:fd:e0:b6:1a:a5:0b:41:8e:64:ae:76:81:35: d2:7d:2f:53:88:09:9e:4c:67:1d:15:36:51:ec:27: 03:6b:32:0c:7b:f4:a8:02:87:00:d0:50:d0:84:31: 1b:36:39:4a:26:9e:18:01:a6:11:85:2e:69:0a:6b: 45:90:43:72:5c:70:c3:f7:02:03:b1:ef:35:6c:0f: 02:1f:a6:cf:e7:14:99:ee:0f:8c:4d:cc:2d:3e:02: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E9:B7:B8:05:56:04:F0:2F:92:19:5A:BC:B2:9D:6E:E5:24:01:8A X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:5f:45:45:6c:71:1d:29:47:64:1b:bc:30:9c:bf:f0:52:16: 39:6c:e9:90:b5:67:a7:a0:9c:e3:c0:8d:94:95:03:56:95:51: 36:95:e8:4a:e3:61:2a:41:37:e2:71:ee:5c:2a:ea:bb:d9:ae: 59:5e:4d:32:41:9f:50:1e:f8:08:84:fa:c1:4e:11:9d:b0:31: 3e:61:22:5f:62:83:74:05:b3:3b:f8:d3:cb:cc:b6:a8:ad:fa: d4:28:0e:7f:2e:86:c2:5b:b8:de:29:49:17:45:9c:72:93:fa: 0b:a0:ce:9f:fa:f7:21:fc:e4:7a:22:ea:a1:a7:8c:90:98:4e: 4b:c4:51:f2:f7:ad:72:a3:4f:79:fa:7e:95:58:b7:c3:1b:a7: 9d:1c:0c:c8:34:c6:d4:e6:5c:87:f0:c6:d2:b6:71:3e:c6:53: e7:b1:24:d0:5d:bd:b3:be:36:d5:10:e8:ee:37:05:9e:84:5b: 01:47:9f:ab:00:1b:84:7b:4f:cd:07:81:ec:e2:30:d2:f5:e3: c0:be:35:99:40:65:da:13:0c:04:94:3b:9d:f8:b4:48:c1:ea: cb:6e:c8:96:a6:17:62:0c:43:68:c8:02:c9:8a:b3:67:ba:ce: ee:5b:57:1c:83:8b:6e:1e:25:5a:4d:03:66:c0:5c:a1:e0:5c: ea:88:62:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYxMTE1MDAyMTQ0WhcNMjYxMTIyMDAyMTQ0WjAYMRYwFAYD VQQDEw02YWY4ZmIxOC1hOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwprpa1CRL9DdzH7+vBt40jc1hGISINd6+b9m8M7Et5loZXM0xpUY05yMkBTj Wf4UQvsxD9icPVao0ebTbgyy+X/hEId7l6uWcFMdg8U7fjD1iHY/s4zq6m4DRGb+ Y6bbHNIzBzzcFumn2wZNY1hOsHgZ66W/e1IscW4OSqwqCKTUH0J5ts/ztxrhOIFk 7Y5SQADAoEMmZWdVLn5czSOBPtIxpbcpbP3gthqlC0GOZK52gTXSfS9TiAmeTGcd FTZR7CcDazIMe/SoAocA0FDQhDEbNjlKJp4YAaYRhS5pCmtFkENyXHDD9wIDse81 bA8CH6bP5xSZ7g+MTcwtPgKOnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTpt7gF VgTwL5IZWryynW7lJAGKMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2F9FRWxxHSlHZBu8MJy/8FIWOWzpkLVnp6Cc48CNlJUDVpVRNpXoSuNhKkE3 4nHuXCrqu9muWV5NMkGfUB74CIT6wU4RnbAxPmEiX2KDdAWzO/jTy8y2qK361CgO fy6Gwlu43ilJF0WccpP6C6DOn/r3IfzkeiLqoaeMkJhOS8RR8vetcqNPefp+lVi3 wxunnRwMyDTG1OZch/DG0rZxPsZT57Ek0F29s7421RDo7jcFnoRbAUefqwAbhHtP zQeB7OIw0vXjwL41mUBl2hMMBJQ7nfi0SMHqy27IlqYXYgxDaMgCyYqzZ7rO7ltX HIOLbh4lWk0DZsBcoeBc6ohijw== -----END CERTIFICATE-----Generated at Sun Nov 15 20:57:36 2026 by rpki-client