$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: jTOVbEuE9T7BnzI+IBXCkp+Ujq1pMToX/h50CLGotp0= Subject key identifier: B7:04:2B:46:25:1E:2E:C4:CC:89:9C:B7:37:FD:24:B8:51:56:60:D0 Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: BA Signing time: Sun 15 Nov 2026 07:16:55 +0000 Manifest this update: Sun 15 Nov 2026 07:16:55 +0000 Manifest next update: Sun 22 Nov 2026 07:16:55 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: EVp6Vgynm783aj8DXRdv7tQHp8h6QawpMNm9bZNLgng=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: C6n4CKTLus0le6GvOuMAOqp7CZSB754RPW+BsJBKvDo=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: msyCQ/czlxVP4EfnOfA3beQPUOxdvP8PZzB1UIGuVjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Nov 15 07:16:55 2026 GMT Not After : Nov 22 07:16:55 2026 GMT Subject: CN=6af95c67-3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:c8:ea:c8:84:86:fa:8b:e7:97:f4:da:a1: 8a:19:25:9c:1b:e6:d8:db:ae:9d:65:09:0d:7e:e3: d6:2c:6d:95:96:45:55:74:94:73:4f:8b:5c:c7:aa: 3d:c7:5d:55:8f:4a:d7:c3:64:ef:11:c5:31:26:20: 7e:86:73:f3:a7:3c:5b:fa:57:11:d6:2d:e7:cb:7c: e2:00:e1:19:39:e8:77:11:f5:84:63:d3:00:e9:0f: 62:37:f9:ae:5d:62:74:e5:a7:c4:b2:b7:e7:83:11: 64:05:dd:1c:32:5e:e2:5d:11:72:67:57:4a:cb:35: f8:57:cc:4c:e2:7f:75:25:19:cf:26:ce:fc:b1:58: 30:be:b4:49:5d:8f:18:d5:45:b4:ae:9f:fd:80:75: b1:54:77:43:92:a3:5c:93:4c:39:d8:d8:11:c7:b2: c6:e4:7f:df:6c:a1:88:f2:a2:30:7d:26:af:39:c8: 6f:6a:e8:d5:95:a0:97:a1:33:e2:91:d0:9e:07:90: c5:38:02:c2:0f:e4:2a:bd:08:24:39:56:f4:31:2f: 19:d7:8a:e0:10:35:9c:37:67:11:64:ae:52:80:ff: 86:03:d1:8c:56:19:fa:2f:2a:63:ad:43:18:d7:d5: 17:ae:5f:33:2a:7a:ff:45:b4:26:87:2b:94:d6:68: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:04:2B:46:25:1E:2E:C4:CC:89:9C:B7:37:FD:24:B8:51:56:60:D0 X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bc:52:72:6f:66:8c:75:bc:b2:2e:77:b5:1a:06:ca:da:62: 71:0c:c5:b2:35:ad:61:0e:d8:f4:9d:97:21:81:69:de:df:06: 23:c4:ba:12:a5:5a:ee:a3:88:59:ba:44:b7:45:65:e9:b4:1d: fc:26:39:1a:5e:0b:6d:18:7a:b0:6c:5d:ae:9e:71:40:13:10: 97:e5:b0:68:80:50:e1:05:12:f5:34:68:44:8e:02:32:a0:74: 83:a5:e7:2c:9b:19:cf:be:ec:e7:2e:f7:86:8c:46:4e:79:13: 4d:97:5b:0d:39:99:48:54:ee:81:f5:73:75:48:33:27:c6:df: 2f:af:e5:d2:57:58:13:e4:96:35:00:29:40:f9:56:58:0c:f4: 2f:30:31:5f:93:27:f9:8d:f2:44:41:e5:04:f1:4c:da:76:38: 48:e4:d7:31:f1:95:01:41:64:1f:91:a6:7e:e3:c0:d3:37:7d: 09:2b:40:0b:64:ef:69:30:18:d5:45:11:9a:bd:01:c3:f9:0c: 0f:9d:d7:de:f2:0f:16:e6:89:80:bd:64:ed:84:e1:4f:58:d4: f1:28:fb:84:fd:4a:4d:4b:86:cd:11:7b:12:4e:bc:56:78:eb: e3:76:03:86:87:bf:29:ae:a0:5e:5f:21:0e:9f:ef:62:28:2f: c0:2c:77:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdBQTBDOEFGQzc3 RjRGMEJCQjMwHhcNMjYxMTE1MDcxNjU1WhcNMjYxMTIyMDcxNjU1WjAYMRYwFAYD VQQDEw02YWY5NWM2Ny0zMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAka7I6siEhvqL55f02qGKGSWcG+bY266dZQkNfuPWLG2VlkVVdJRzT4tcx6o9 x11Vj0rXw2TvEcUxJiB+hnPzpzxb+lcR1i3ny3ziAOEZOeh3EfWEY9MA6Q9iN/mu XWJ05afEsrfngxFkBd0cMl7iXRFyZ1dKyzX4V8xM4n91JRnPJs78sVgwvrRJXY8Y 1UW0rp/9gHWxVHdDkqNck0w52NgRx7LG5H/fbKGI8qIwfSavOchvaujVlaCXoTPi kdCeB5DFOALCD+QqvQgkOVb0MS8Z14rgEDWcN2cRZK5SgP+GA9GMVhn6LypjrUMY 19UXrl8zKnr/RbQmhyuU1miDewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcEK0Yl Hi7EzImctzf9JLhRVmDQMB8GA1UdIwQYMBaAFB5TD6n2YKjcFzjHqgyK/Hf08Luz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNS80MDBDNURFQ0Qw MTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FOd1hPTWVxRElyOGRfVHd1 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FO d1hPTWVxRElyOGRfVHd1N00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7xScm9mjHW8si53tRoGytpicQzFsjWtYQ7Y9J2XIYFp3t8GI8S6EqVa7qOI WbpEt0Vl6bQd/CY5Gl4LbRh6sGxdrp5xQBMQl+WwaIBQ4QUS9TRoRI4CMqB0g6Xn LJsZz77s5y73hoxGTnkTTZdbDTmZSFTugfVzdUgzJ8bfL6/l0ldYE+SWNQApQPlW WAz0LzAxX5Mn+Y3yREHlBPFM2nY4SOTXMfGVAUFkH5GmfuPA0zd9CStAC2TvaTAY 1UURmr0Bw/kMD53X3vIPFuaJgL1k7YThT1jU8Sj7hP1KTUuGzRF7Ek68Vnjr43YD hoe/Ka6gXl8hDp/vYigvwCx39Q== -----END CERTIFICATE-----Generated at Sun Nov 15 17:25:38 2026 by rpki-client