$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: vOs4apt48u08TbX4VVNC9BMmYOsyHM181ZN/iur9dS0= Subject key identifier: E5:B7:0B:6A:50:FB:6B:9A:14:8C:85:8B:6B:C4:BF:41:8E:B2:EC:31 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 04CD Signing time: Sat 14 Nov 2026 23:36:38 +0000 Manifest this update: Sat 14 Nov 2026 23:36:37 +0000 Manifest next update: Sat 21 Nov 2026 23:36:37 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: WPxVGebcjtEanPLJYj/ZAHXUxesd5uWcbtG+qRVcMmI=) 2: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=) 3: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=) 6: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=) 7: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Nov 14 23:36:37 2026 GMT Not After : Nov 21 23:36:37 2026 GMT Subject: CN=6af8f086-0f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:d4:16:aa:52:8b:d1:3e:32:07:88:70:d0: ed:a6:16:96:b1:48:5d:40:66:cd:8b:90:88:44:55: e8:aa:4f:30:1a:c0:96:de:fb:ee:c3:8a:f1:e8:82: 28:79:ce:92:d3:d0:54:78:7d:19:cf:cd:20:45:46: 88:f7:d5:6d:3e:6a:ba:41:fe:25:b4:7f:48:78:2a: b1:b9:38:9d:e9:55:c9:75:24:80:8d:8b:ca:cf:69: b8:9d:5c:02:bd:af:c6:e9:6d:c4:aa:4e:5f:7e:a8: 05:9c:47:5d:6f:43:12:28:72:bc:1e:3e:14:83:61: 77:5e:e3:28:ac:27:c5:4b:bc:a7:29:d8:f7:ee:53: 91:ef:e3:97:30:b2:8b:1d:c5:3b:d8:41:b5:a3:87: 7b:d1:1d:4e:d4:75:99:0f:89:68:7f:93:28:f9:6b: 6d:89:44:07:4b:32:fd:38:60:95:f8:f8:77:2d:ec: fc:d0:df:fa:d9:f9:bd:9d:4c:eb:7b:95:bf:41:43: c7:33:6b:dc:27:9b:fd:be:cc:97:35:b3:b2:57:3e: d0:47:7c:b7:d8:49:e9:cd:b2:d4:23:c2:9e:53:a6: e4:ab:36:27:7c:96:40:ef:36:48:ef:d0:b2:b7:17: b1:a6:49:69:01:b1:67:0b:28:4c:dc:a2:ab:80:2b: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:0B:6A:50:FB:6B:9A:14:8C:85:8B:6B:C4:BF:41:8E:B2:EC:31 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:68:8e:f1:21:d1:bb:c6:af:72:3b:e2:ab:04:31:e8:03: 45:e1:cc:dd:8c:08:b3:f2:b8:c0:f8:68:68:3f:d4:4d:ff:cb: fe:2c:cb:fe:f8:94:10:14:d6:49:89:ea:2b:4e:82:97:c1:0c: d3:28:d6:f5:60:67:ff:ab:43:bd:ab:03:d8:6e:a4:45:8c:43: f0:1b:13:25:6c:e1:80:0a:e2:18:1f:e7:67:c0:3f:16:69:10: e5:d9:ad:87:75:c9:a3:97:a1:c4:79:e2:52:96:5b:88:77:90: 76:73:6e:2a:8d:6f:92:a1:1c:48:22:bb:40:b3:08:d4:80:a0: a0:fc:92:28:57:c6:ca:a6:f0:b6:9f:c4:92:f0:9d:e7:1d:24: fd:60:e4:ca:69:e9:e2:05:9a:a0:a9:6a:cd:55:2e:1c:4b:04: 03:46:96:10:ca:88:0a:3f:e0:03:d4:57:ae:6a:2f:99:a8:d0: 1c:b7:31:69:b7:20:7a:19:c8:a9:95:ce:00:de:79:21:8c:02: 95:34:0f:da:53:2d:a7:6d:8f:b8:0c:b4:56:81:3e:a1:a4:81: c2:46:fc:c5:fc:5e:98:d3:c3:a6:f0:8f:e1:96:65:4f:8f:c5: 42:d5:9f:4a:41:d0:04:ad:c3:2a:ad:20:aa:02:42:a0:88:c1: 61:b7:32:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYxMTE0MjMzNjM3WhcNMjYxMTIxMjMzNjM3WjAYMRYwFAYD VQQDEw02YWY4ZjA4Ni0wZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnPUFqpSi9E+MgeIcNDtphaWsUhdQGbNi5CIRFXoqk8wGsCW3vvuw4rx6IIo ec6S09BUeH0Zz80gRUaI99VtPmq6Qf4ltH9IeCqxuTid6VXJdSSAjYvKz2m4nVwC va/G6W3Eqk5ffqgFnEddb0MSKHK8Hj4Ug2F3XuMorCfFS7ynKdj37lOR7+OXMLKL HcU72EG1o4d70R1O1HWZD4lof5Mo+WttiUQHSzL9OGCV+Ph3Lez80N/62fm9nUzr e5W/QUPHM2vcJ5v9vsyXNbOyVz7QR3y32EnpzbLUI8KeU6bkqzYnfJZA7zZI79Cy txexpklpAbFnCyhM3KKrgCt0rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOW3C2pQ +2uaFIyFi2vEv0GOsuwxMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjJRojvEh0bvGr3I74qsEMegDReHM3YwIs/K4wPhoaD/UTf/L/izL/viUEBTW SYnqK06Cl8EM0yjW9WBn/6tDvasD2G6kRYxD8BsTJWzhgAriGB/nZ8A/FmkQ5dmt h3XJo5ehxHniUpZbiHeQdnNuKo1vkqEcSCK7QLMI1ICgoPySKFfGyqbwtp/EkvCd 5x0k/WDkymnp4gWaoKlqzVUuHEsEA0aWEMqICj/gA9RXrmovmajQHLcxabcgehnI qZXOAN55IYwClTQP2lMtp22PuAy0VoE+oaSBwkb8xfxemNPDpvCP4ZZlT4/FQtWf SkHQBK3DKq0gqgJCoIjBYbcyhQ== -----END CERTIFICATE-----Generated at Sun Nov 15 13:15:50 2026 by rpki-client