$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: regUBgK0k8fRmgA/ufepVo4jdv/Je+BjyDRMzkzICY4= Subject key identifier: E5:8A:AA:60:B5:12:B9:27:8F:3C:45:AA:36:5A:2E:F4:BD:A3:49:AB Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 0517 Signing time: Sat 14 Nov 2026 23:22:49 +0000 Manifest this update: Sat 14 Nov 2026 23:22:49 +0000 Manifest next update: Sat 21 Nov 2026 23:22:49 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: jeYv+Wi0+ghMT63BYZxeAEgtoFGA3pq4ZK5HOpkJhrs=) 2: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=) 3: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=) 4: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Nov 14 23:22:49 2026 GMT Not After : Nov 21 23:22:49 2026 GMT Subject: CN=6af8ed49-8b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:6a:3c:de:a5:68:32:35:d6:87:b3:34:9f: 2f:7c:af:96:35:13:1d:df:98:3b:aa:8a:60:d8:f2: 34:42:e6:c1:70:ff:9a:2f:b4:6c:df:a6:28:7d:77: db:94:f5:29:0a:65:0e:8e:d2:98:11:50:1b:5b:31: 8b:f4:e5:dd:e1:c1:95:c3:f2:33:c3:f7:1a:ed:f7: b4:32:8f:14:83:1a:b9:b4:a8:91:aa:0e:10:9f:4f: 45:4b:8e:83:8b:5f:7f:d1:b0:58:c3:01:4d:3f:b2: b2:24:bb:76:08:25:b4:09:7d:b5:6c:b1:ba:18:03: 5e:49:c0:f2:53:42:f1:f5:2b:ca:06:f0:98:ef:b1: 1d:f4:d3:47:0d:2d:4b:d1:82:0b:cd:35:59:c0:91: 5a:f7:3f:70:2d:f9:18:ff:ea:72:96:4e:20:3b:7b: eb:22:29:d3:b1:63:cf:d1:e8:f3:9b:7d:32:a1:15: 4a:c4:0c:04:4e:79:ad:42:bb:44:0a:1f:9f:f4:28: 75:22:f3:0a:0e:1e:a8:5e:48:da:b9:af:6f:c7:6d: 04:83:9d:a4:3a:f6:75:f8:46:cd:45:16:21:20:4d: 68:a4:0b:e6:12:8c:19:be:88:e9:72:97:df:a6:82: 7e:22:eb:f9:2a:95:c0:1e:40:d1:c3:b9:8d:5c:f7: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:AA:60:B5:12:B9:27:8F:3C:45:AA:36:5A:2E:F4:BD:A3:49:AB X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7b:f1:31:dc:18:13:12:95:76:e5:95:32:2c:d6:92:c6:83: 0f:d7:19:c1:96:a8:5c:97:b8:19:e5:27:0e:ca:ef:ae:7d:7b: 68:2e:2b:4c:bf:68:0b:0f:d8:10:07:e2:5b:dd:21:b4:0f:26: b0:6e:86:b0:fd:bf:26:41:2c:17:07:40:f6:2f:49:15:56:91: 00:10:89:2b:e7:5a:c2:53:b9:da:06:e3:e5:c8:fa:36:09:b3: 05:4e:74:79:be:1e:ad:e6:1a:36:48:c8:16:b3:96:ed:94:e0: a2:90:b8:eb:84:30:b6:b9:97:01:fe:4e:15:f0:66:ba:1e:15: 6e:45:ce:86:37:10:27:6c:f5:b7:57:18:43:69:da:2d:0f:8e: 14:20:c0:fd:ca:fc:1a:1a:64:81:f4:ca:dc:58:63:d2:3c:04: c5:b7:d8:54:44:30:1c:7e:21:78:31:a5:c8:0f:95:57:d2:73: 4d:54:b3:9d:80:28:ac:f1:ca:98:65:ee:75:ff:a8:09:10:29: 45:4a:b2:ce:70:e1:0a:8f:de:58:a3:97:20:12:54:9e:ab:e4: 03:ca:82:82:9d:02:a4:17:ba:1a:6c:56:96:4b:f4:26:2d:64: 3e:7c:fe:d1:08:51:13:ba:e2:be:34:43:a5:b5:49:de:68:1d: 77:43:f4:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjYxMTE0MjMyMjQ5WhcNMjYxMTIxMjMyMjQ5WjAYMRYwFAYD VQQDEw02YWY4ZWQ0OS04YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB5qPN6laDI11oezNJ8vfK+WNRMd35g7qopg2PI0QubBcP+aL7Rs36YofXfb lPUpCmUOjtKYEVAbWzGL9OXd4cGVw/Izw/ca7fe0Mo8Ugxq5tKiRqg4Qn09FS46D i19/0bBYwwFNP7KyJLt2CCW0CX21bLG6GANeScDyU0Lx9SvKBvCY77Ed9NNHDS1L 0YILzTVZwJFa9z9wLfkY/+pylk4gO3vrIinTsWPP0ejzm30yoRVKxAwETnmtQrtE Ch+f9Ch1IvMKDh6oXkjaua9vx20Eg52kOvZ1+EbNRRYhIE1opAvmEowZvojpcpff poJ+Iuv5KpXAHkDRw7mNXPc/yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWKqmC1 ErknjzxFqjZaLvS9o0mrMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHvxMdwYExKVduWVMizWksaDD9cZwZaoXJe4GeUnDsrvrn17aC4rTL9oCw/Y EAfiW90htA8msG6GsP2/JkEsFwdA9i9JFVaRABCJK+dawlO52gbj5cj6NgmzBU50 eb4ereYaNkjIFrOW7ZTgopC464QwtrmXAf5OFfBmuh4VbkXOhjcQJ2z1t1cYQ2na LQ+OFCDA/cr8GhpkgfTK3Fhj0jwExbfYVEQwHH4heDGlyA+VV9JzTVSznYAorPHK mGXudf+oCRApRUqyznDhCo/eWKOXIBJUnqvkA8qCgp0CpBe6GmxWlkv0Ji1kPnz+ 0QhRE7rivjRDpbVJ3mgdd0P0mw== -----END CERTIFICATE-----Generated at Sun Nov 15 15:08:45 2026 by rpki-client