$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: OX4e3WvUGT06nWkXr1scFd4bYn9Nq4PLbMbteEPj7pg= Subject key identifier: AE:72:13:EC:4D:BF:CB:39:4B:A0:94:D2:C7:7C:27:40:FE:9D:E1:B0 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 043D Signing time: Fri 13 Nov 2026 00:01:25 +0000 Manifest this update: Fri 13 Nov 2026 00:01:24 +0000 Manifest next update: Fri 20 Nov 2026 00:01:24 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: L+tvwBQA5X4X2RNHzIBJhBuogSv+YOWinQ/yekuD10k=) 2: EAAF7884450411F09738105FC4F9AE02.roa (hash: s7PvGMjj7mjpLP1ZkrrYQzfCt7Nowhw1ZhztentGrbk=) 3: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: OOByC8/uw6ffnIWwfvMTnrrm+xO8XKIBxcxBWMrFOjo=) 4: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: xtfMhsvCmNC/KLnIedjo12Ghs4JLU1JBpj4bKmYOfGI=) 5: EA2C5116450411F09738105FC4F9AE02.roa (hash: Xr2VYUhkH0/de+tQtfsGqNTFcSg1V81ZtLTrfEbPMyY=) 6: EB1C709C450411F09738105FC4F9AE02.roa (hash: kKSTbR+tVpgjH6vhWqQI0BMVxGVtvEw6KnQiqBQIJPw=) 7: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: MD5jR5tpYJlNlwKY582qX3evpCpiOhexciEbOh4B16Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Nov 13 00:01:24 2026 GMT Not After : Nov 20 00:01:24 2026 GMT Subject: CN=6af65355-d687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:d8:03:87:31:13:78:24:e3:2b:2b:81:cb: 1e:51:85:98:2c:6f:86:6d:b9:7e:3a:79:ef:4b:f6: 98:05:79:cf:60:27:31:62:db:cd:09:72:4e:4d:de: 0e:25:5f:6e:9d:6e:de:3e:1e:d8:c0:38:4a:b1:7f: 9e:5c:76:bc:e5:96:21:b5:42:ee:f8:4c:74:57:5d: 11:22:84:82:71:f7:55:b4:88:e9:f3:d6:e3:cb:05: 53:0f:1c:d0:df:c0:8e:2c:3e:a4:06:07:42:bf:70: d1:8c:f3:28:88:b1:69:91:0f:b9:a2:35:ba:02:5b: 92:8b:ad:56:01:83:a4:af:3b:0e:3c:c0:04:e9:0b: ce:56:4f:b7:42:f7:a2:32:4a:cd:33:41:f7:ac:0d: 5e:86:68:e7:8e:c2:89:f2:0c:81:f4:da:1c:81:1d: 26:21:e4:ef:1b:16:db:e0:b8:6b:99:9e:65:90:0a: 89:82:f7:75:d9:74:16:a4:56:29:0b:a8:2d:7f:9a: 97:8f:ff:06:90:f3:83:46:e7:c6:77:33:86:a8:7e: 43:f5:74:23:1a:75:5b:d6:9e:a4:4b:93:d7:37:ce: 14:2f:da:86:7d:19:28:5e:89:dd:74:3d:6c:9a:2b: 27:33:8c:16:ce:4a:50:d0:68:06:0b:ec:e6:89:a7: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:13:EC:4D:BF:CB:39:4B:A0:94:D2:C7:7C:27:40:FE:9D:E1:B0 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0a:ae:70:37:29:42:8c:68:61:fc:30:b5:c5:e4:6e:18:ac: 4b:b1:5b:d2:8d:8b:f2:7a:b3:83:f7:29:63:f6:12:11:5b:61: 5e:8d:c8:90:dd:47:ce:95:41:3d:d6:a0:8a:c5:d2:3f:1e:37: e5:4c:74:46:2d:f2:af:05:33:da:91:f4:53:4d:d4:98:4e:53: 73:d1:20:bf:c0:f1:f2:7a:6e:0a:28:92:8e:e0:89:42:a8:7f: 6b:e5:72:da:10:4d:38:ca:43:b6:61:ad:05:06:ce:c4:d2:8b: f2:2d:04:60:f9:55:47:89:7c:39:0f:e8:c5:81:98:24:26:7a: 87:54:87:ee:4b:63:23:dc:e4:64:68:de:92:fe:d8:fe:a4:26: 7b:13:56:32:8f:17:a8:29:ab:37:ba:3c:e2:51:76:1f:ef:4f: 76:cb:0b:44:f2:4b:41:33:80:00:db:de:04:b0:53:c2:d9:f6: cf:81:74:fa:02:99:4f:93:0e:e7:55:1c:7d:8a:99:1d:ee:b7: bf:31:14:0b:55:8b:ec:19:3a:2c:3e:f8:51:70:c4:6b:4c:5c: 55:fc:b7:df:40:7a:f7:39:50:3b:5b:db:1b:51:ed:36:7b:7e: fa:af:f2:2f:5b:d8:b4:2f:ed:5e:82:32:f3:2c:2d:c6:75:57: ba:6e:b4:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjYxMTEzMDAwMTI0WhcNMjYxMTIwMDAwMTI0WjAYMRYwFAYD VQQDEw02YWY2NTM1NS1kNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qzYA4cxE3gk4ysrgcseUYWYLG+Gbbl+OnnvS/aYBXnPYCcxYtvNCXJOTd4O JV9unW7ePh7YwDhKsX+eXHa85ZYhtULu+Ex0V10RIoSCcfdVtIjp89bjywVTDxzQ 38COLD6kBgdCv3DRjPMoiLFpkQ+5ojW6AluSi61WAYOkrzsOPMAE6QvOVk+3Qvei MkrNM0H3rA1ehmjnjsKJ8gyB9NocgR0mIeTvGxbb4LhrmZ5lkAqJgvd12XQWpFYp C6gtf5qXj/8GkPODRufGdzOGqH5D9XQjGnVb1p6kS5PXN84UL9qGfRkoXonddD1s misnM4wWzkpQ0GgGC+zmiaelzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5yE+xN v8s5S6CU0sd8J0D+neGwMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEgqucDcpQoxoYfwwtcXkbhisS7Fb0o2L8nqzg/cpY/YSEVthXo3IkN1HzpVB PdagisXSPx435Ux0Ri3yrwUz2pH0U03UmE5Tc9Egv8Dx8npuCiiSjuCJQqh/a+Vy 2hBNOMpDtmGtBQbOxNKL8i0EYPlVR4l8OQ/oxYGYJCZ6h1SH7ktjI9zkZGjekv7Y /qQmexNWMo8XqCmrN7o84lF2H+9PdssLRPJLQTOAANveBLBTwtn2z4F0+gKZT5MO 51UcfYqZHe63vzEUC1WL7Bk6LD74UXDEa0xcVfy330B69zlQO1vbG1HtNnt++q/y L1vYtC/tXoIy8ywtxnVXum60og== -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:43 2026 by rpki-client