$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json) Hash identifier: Z7UDScN7l2tTThHe7g9XqYdr3r0FXBJ82Qrze/ylFDw= Subject key identifier: E7:A5:0B:12:97:1E:97:79:B6:6F:4C:06:7B:F7:07:F8:68:9B:7D:9D Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft Manifest number: 016F Signing time: Fri 13 Nov 2026 05:03:57 +0000 Manifest this update: Fri 13 Nov 2026 05:03:56 +0000 Manifest next update: Fri 20 Nov 2026 05:03:56 +0000 Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: hDcv0kAZueG6rjlmlRefpv3rV6LWFK/nlQGUhkzT6G0=) 2: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=) 3: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Nov 13 05:03:56 2026 GMT Not After : Nov 20 05:03:56 2026 GMT Subject: CN=6af69a3c-2cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:9a:96:4d:ac:2e:89:26:8e:91:66:c7:55: 39:22:e9:5e:c9:e9:54:dd:bc:df:c2:f3:d0:01:e9: de:92:74:11:60:3f:17:99:91:2f:42:38:43:e7:90: 96:ad:f4:46:46:42:d8:06:cb:7f:6d:f4:96:59:a4: 57:58:23:38:f5:f5:7d:18:24:d0:a6:05:42:ee:e3: 60:80:f0:a3:93:cc:bd:49:bc:8a:2c:78:3b:a2:6d: d7:ad:d0:ce:00:2e:2e:34:37:43:e9:64:09:5f:a3: 5b:a4:46:f5:2c:82:40:42:92:af:1b:86:b5:dc:5a: f3:79:91:87:c9:1c:6d:be:6b:82:58:3a:ed:7e:a9: 02:de:43:c7:3c:c0:b4:5b:f4:95:f3:03:c6:41:19: 5e:e1:24:0d:ac:b8:f3:c9:78:47:ef:f3:29:fb:bc: c4:24:17:1c:95:77:02:eb:1c:65:e6:29:6c:20:65: 0d:73:58:27:f7:ea:28:b0:ca:95:b8:83:8b:e8:dd: 31:c3:a7:a2:86:4f:e5:15:f1:89:42:bd:2e:a8:a5: 50:12:b8:d7:e0:17:fb:fb:ed:eb:c8:79:19:bd:c7: 91:5b:e2:57:fa:19:1c:06:16:fa:82:cc:be:4a:c9: 63:56:11:65:e7:41:03:41:c7:65:84:ef:ff:ea:b3: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A5:0B:12:97:1E:97:79:B6:6F:4C:06:7B:F7:07:F8:68:9B:7D:9D X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:3e:85:da:37:ed:94:18:c6:f2:2e:af:04:03:2b:60:27: dc:bb:15:fc:87:f0:8c:8d:ab:25:7f:9e:5b:0d:54:8f:b3:0a: 72:c4:b6:49:fd:34:b5:4f:2e:a5:9a:a4:9e:65:7d:bd:d2:0f: 40:1c:01:49:91:1e:66:34:2f:24:c2:80:38:29:b7:14:f3:fc: f3:cd:8b:29:12:b0:9c:89:b3:4f:7f:0d:9c:e3:ce:25:af:f9: d5:d9:41:59:e9:b5:60:07:91:e6:35:b1:9b:f4:c7:00:b5:f1: 72:09:ad:82:08:e0:a3:e3:56:1f:ea:25:dd:63:d3:07:ea:14: 68:e7:be:9a:12:5a:d9:20:10:62:c7:28:75:72:86:85:c5:58: cc:14:28:d6:e5:61:ea:d4:89:3d:b4:63:54:40:ba:07:38:85: ae:27:b2:e5:fe:81:8b:8d:57:29:21:a4:e6:cf:ee:32:2d:af: 3e:65:ed:ce:ee:61:8f:f2:cb:f7:7c:52:ba:26:31:ce:03:a3: 0d:2c:90:8e:5c:16:17:6b:c0:8b:d7:dc:3a:a9:69:e8:6b:de: 33:3c:a7:2a:71:eb:99:e6:0c:c9:06:cd:66:e0:8a:57:3d:94: 06:a0:44:bc:19:92:90:31:12:be:c2:7e:1e:cf:bc:b1:16:e1: 15:96:d4:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjYxMTEzMDUwMzU2WhcNMjYxMTIwMDUwMzU2WjAYMRYwFAYD VQQDEw02YWY2OWEzYy0yY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Salk2sLokmjpFmx1U5IuleyelU3bzfwvPQAeneknQRYD8XmZEvQjhD55CW rfRGRkLYBst/bfSWWaRXWCM49fV9GCTQpgVC7uNggPCjk8y9SbyKLHg7om3XrdDO AC4uNDdD6WQJX6NbpEb1LIJAQpKvG4a13FrzeZGHyRxtvmuCWDrtfqkC3kPHPMC0 W/SV8wPGQRle4SQNrLjzyXhH7/Mp+7zEJBcclXcC6xxl5ilsIGUNc1gn9+oosMqV uIOL6N0xw6eihk/lFfGJQr0uqKVQErjX4Bf7++3ryHkZvceRW+JX+hkcBhb6gsy+ SsljVhFl50EDQcdlhO//6rMa8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOelCxKX Hpd5tm9MBnv3B/hom32dMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ UUNIZmxQZFlZbVRzUjlORGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALO8+hdo37ZQYxvIurwQDK2An3LsV/IfwjI2rJX+eWw1Uj7MKcsS2Sf00tU8u pZqknmV9vdIPQBwBSZEeZjQvJMKAOCm3FPP8882LKRKwnImzT38NnOPOJa/51dlB Wem1YAeR5jWxm/THALXxcgmtggjgo+NWH+ol3WPTB+oUaOe+mhJa2SAQYscodXKG hcVYzBQo1uVh6tSJPbRjVEC6BziFriey5f6Bi41XKSGk5s/uMi2vPmXtzu5hj/LL 93xSuiYxzgOjDSyQjlwWF2vAi9fcOqlp6GveMzynKnHrmeYMyQbNZuCKVz2UBqBE vBmSkDESvsJ+Hs+8sRbhFZbU1A== -----END CERTIFICATE-----Generated at Sun Nov 15 08:04:07 2026 by rpki-client