$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json) Hash identifier: dZb1vjwedoS7o5wbDHx68/uv0ZDhiBNd3rzGnZtBeX0= Subject key identifier: 32:BE:6E:7A:BC:AC:C0:AA:A4:EF:A0:F8:DF:BD:51:E9:42:B4:EB:B8 Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft Manifest number: BC Signing time: Fri 13 Nov 2026 07:07:53 +0000 Manifest this update: Fri 13 Nov 2026 07:07:52 +0000 Manifest next update: Fri 20 Nov 2026 07:07:52 +0000 Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: NU6fDQxq/esvpSG4LNlrpGFLFfwjlARcTo0wQh46MEw=) 2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: C7KmmWun2dX9H9haejMLucLDX6TZ17dC6V73S7CTAnw=) 3: 0853E998C45711F080167D38C4F9AE02.roa (hash: 9wGGSvONuRhyHPCYZAhrCUe7eBe9FnHcqTP8k+BasBo=) 4: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: WiAAcP0KH/A3PVdMf+WKZUcSOEY5/upnhbg6/b3N8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 07:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Validity Not Before: Nov 13 07:07:52 2026 GMT Not After : Nov 20 07:07:52 2026 GMT Subject: CN=6af6b749-d6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:b0:92:74:fe:71:62:37:82:95:3d:30:53: 97:7b:07:1b:8c:a4:6c:c6:0d:95:2e:68:f2:a7:9d: 45:a7:b1:75:1d:85:57:aa:3f:09:ca:1c:35:fc:27: d1:1a:f8:31:2e:9c:6c:15:82:2b:15:3b:63:36:38: 7e:17:d3:81:53:48:2f:66:26:94:83:b2:ed:c8:67: ff:4a:3e:63:fe:4f:94:c0:fe:29:54:c3:34:8c:d7: fd:58:77:19:4c:f3:4b:ad:ad:0b:21:78:a6:0d:96: 48:c4:74:e2:6a:38:6b:7d:71:b6:1d:07:a7:8e:7e: a0:6e:58:27:52:6b:e4:d1:c8:a2:fd:15:5a:15:9d: bb:a6:c2:64:48:f7:22:4c:af:5a:2f:be:9f:94:c5: 8b:0c:f1:98:47:15:20:51:e6:41:3a:fc:73:8e:9a: 70:56:c5:79:e4:79:f9:ae:b2:86:94:f2:6c:04:a6: 6f:07:b6:df:f4:a5:7b:cf:a9:43:d0:69:7c:05:e9: d4:44:fb:dd:43:40:17:3e:7e:b6:c2:ba:0a:69:96: 8f:d2:d8:db:de:a8:9f:f5:87:9d:0c:2d:12:64:ca: 38:98:a9:0d:5c:28:84:09:34:4b:3b:26:47:00:06: 7d:f2:b4:65:cb:b1:dc:71:eb:24:e6:54:2d:4d:16: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:6E:7A:BC:AC:C0:AA:A4:EF:A0:F8:DF:BD:51:E9:42:B4:EB:B8 X509v3 Authority Key Identifier: keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:90:ee:df:17:4c:52:35:d5:7c:06:e6:a5:e8:10:50:02:cd: b4:81:95:ce:75:88:2b:7e:0b:15:ff:71:cf:7e:93:0c:24:d5: 9c:02:3e:64:7f:58:0c:e6:ae:5f:41:4e:c3:9b:e7:89:72:8d: b4:55:d9:ac:d8:01:0c:33:26:cd:cf:c9:59:3c:f6:86:b2:d2: 79:03:0f:48:bb:5e:35:45:99:e9:20:ff:40:04:7c:ba:a8:cc: 4f:72:84:e2:dc:ce:f8:09:0f:34:7a:58:0c:8d:81:57:a0:0e: 44:99:e8:c3:ab:15:60:56:4f:0b:18:81:68:38:a5:68:ce:ce: 3b:aa:c1:36:ec:f3:70:db:4d:cf:16:c3:e1:a4:4b:88:92:2c: f3:01:8c:a7:a0:db:46:71:d8:d9:a7:f1:8e:11:a2:b1:0e:6c: c6:3d:b2:c3:e0:60:d1:30:21:15:aa:74:cc:5e:6a:7d:46:e4: 9f:8f:52:65:53:9d:c6:b5:bd:e4:4d:2f:70:fb:6d:7b:ad:7e: a2:07:91:31:37:38:63:cd:c4:8c:46:5d:73:99:fa:90:c1:c1: 6d:de:a9:fc:50:ec:5d:42:41:1c:c2:83:c8:8d:db:25:c0:b4: 37:82:71:74:6b:8d:fa:44:8e:22:89:88:90:cf:87:b2:4a:f0: 40:ab:c2:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFNzkxMTAvBgNVBAUTKDcxQTNEQkUyRjBGRkQwQjEwN0NBNkI1NzEzQjE1Qzk3 QThFM0UxRDEwHhcNMjYxMTEzMDcwNzUyWhcNMjYxMTIwMDcwNzUyWjAYMRYwFAYD VQQDEw02YWY2Yjc0OS1kNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTiwknT+cWI3gpU9MFOXewcbjKRsxg2VLmjyp51Fp7F1HYVXqj8Jyhw1/CfR GvgxLpxsFYIrFTtjNjh+F9OBU0gvZiaUg7LtyGf/Sj5j/k+UwP4pVMM0jNf9WHcZ TPNLra0LIXimDZZIxHTiajhrfXG2HQenjn6gblgnUmvk0cii/RVaFZ27psJkSPci TK9aL76flMWLDPGYRxUgUeZBOvxzjppwVsV55Hn5rrKGlPJsBKZvB7bf9KV7z6lD 0Gl8BenURPvdQ0AXPn62wroKaZaP0tjb3qif9YedDC0SZMo4mKkNXCiECTRLOyZH AAZ98rRly7Hccesk5lQtTRa8fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDK+bnq8 rMCqpO+g+N+9UelCtOu4MB8GA1UdIwQYMBaAFHGj2+Lw/9CxB8prVxOxXJeo4+HR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUU3OS85NTFFMjhGOEM0 NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBMRUh5bXRYRTdGY2w2amo0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUU3OS85NTFFMjhGOEM0NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBM RUh5bXRYRTdGY2w2amo0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJDu3xdMUjXVfAbmpegQUALNtIGVznWIK34LFf9xz36TDCTVnAI+ZH9YDOau X0FOw5vniXKNtFXZrNgBDDMmzc/JWTz2hrLSeQMPSLteNUWZ6SD/QAR8uqjMT3KE 4tzO+AkPNHpYDI2BV6AORJnow6sVYFZPCxiBaDilaM7OO6rBNuzzcNtNzxbD4aRL iJIs8wGMp6DbRnHY2afxjhGisQ5sxj2yw+Bg0TAhFap0zF5qfUbkn49SZVOdxrW9 5E0vcPtte61+ogeRMTc4Y83EjEZdc5n6kMHBbd6p/FDsXUJBHMKDyI3bJcC0N4Jx dGuN+kSOIomIkM+HskrwQKvClw== -----END CERTIFICATE-----Generated at Sat Nov 14 21:39:53 2026 by rpki-client