$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: qxnDrPoWTiTTlqtNkpQtXGfZCiIrXNvJ5/Jme0lluCc= Subject key identifier: 75:6C:DC:4B:0E:DB:A0:82:44:21:E6:EF:50:23:D6:67:0B:FD:61:4C Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 08AB Signing time: Sat 14 Nov 2026 20:34:50 +0000 Manifest this update: Sat 14 Nov 2026 20:34:49 +0000 Manifest next update: Sat 21 Nov 2026 20:34:49 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: X6qo/hbRqVFSnib27kRKXNKr1nI+8YWjicqby5OlEFc=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: 7Hski1LihuXP4DCejah8rpbbpApVv3sXUWUNBiqFJoY=) 3: F20C8EFCBEE611F1A4E8C3E15511F970.roa (hash: 7her/Y1gX5SIB6mQBE9UUUwi8htSoe6sVWZx5vBn2jA=) 4: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Nov 14 20:34:49 2026 GMT Not After : Nov 21 20:34:49 2026 GMT Subject: CN=6af8c5ea-ed43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:a3:62:95:37:22:77:e9:70:db:39:ea:09: e2:d5:30:9f:de:78:61:17:06:99:ee:3c:31:68:6a: 4d:3d:9c:74:7a:dd:71:db:45:aa:a7:80:1d:d3:b4: fb:19:56:ca:fc:54:f4:78:22:86:85:a1:b2:9e:da: 79:97:55:d5:55:55:1e:3b:d5:f6:c4:63:cf:3e:78: 97:ca:9c:0b:36:a7:f6:e6:b2:42:b7:7c:61:12:0d: d3:9d:7d:4e:ce:63:bc:28:79:d3:b1:bc:07:a2:93: 0c:d9:e3:73:87:b9:60:28:4e:c8:82:50:53:c5:41: e8:2b:3b:5b:f3:e8:c2:98:6e:c0:00:7f:3b:20:ac: 4c:e0:85:bd:3d:b3:e6:b4:8d:1c:3e:8e:aa:fb:62: 75:4d:e1:0e:cf:1a:1f:cf:f4:11:ba:3f:2b:7b:6b: d7:b0:9e:e3:57:3f:6f:7d:da:4b:9a:50:46:78:a5: 42:f2:29:c5:08:49:d0:d2:ba:f8:93:c3:da:f4:4a: b3:8f:ad:5f:5a:c4:26:fc:44:98:8a:fd:59:70:2a: 05:2f:73:2a:6b:97:e6:eb:2f:8c:68:14:5a:29:bb: ec:98:46:f4:0f:68:73:87:e7:32:e3:09:24:d1:d8: e0:41:15:97:0f:f8:a6:51:12:55:32:c0:9c:51:68: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6C:DC:4B:0E:DB:A0:82:44:21:E6:EF:50:23:D6:67:0B:FD:61:4C X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:8e:e9:ca:54:02:66:30:5a:b0:bf:1e:2c:7d:c1:e8:f3: a9:a1:6d:89:9a:ae:92:2d:ad:07:ec:06:31:23:46:ea:c1:5b: 66:4c:8f:4a:d2:b1:52:e5:dc:54:8e:45:8c:79:61:29:a5:88: 78:ef:84:85:93:fd:7d:68:2d:53:db:33:ea:a3:59:42:e4:67: c0:e1:7c:f5:c2:7b:ef:89:8a:77:1c:29:38:d3:8e:d2:41:e0: 5e:04:35:9a:9d:d8:bb:1f:0d:ca:6b:da:5d:b6:72:33:c1:3b: 1d:5b:a3:0a:08:22:6d:78:d9:87:26:1a:3a:9d:df:20:12:a5: 22:da:cf:5c:9d:ed:81:4b:8c:ac:d6:d4:7a:81:f3:ff:7c:45: 3c:2e:1a:5f:41:2b:0a:dd:db:7b:b0:94:0f:f4:39:3f:19:61: 0b:fc:ee:08:e0:bf:56:87:ce:8c:74:bb:36:20:d1:70:fe:52: d3:9f:e6:fb:8d:a4:a5:27:d0:a3:e7:96:25:a2:8d:fc:fd:d9: c6:6c:ce:04:b4:ec:bc:c4:d1:7c:8c:2d:ec:0a:5a:f4:60:e6: 25:3f:42:51:75:d0:12:0a:48:85:b2:6c:d3:2d:88:d6:1a:b8: bc:5b:85:dc:da:91:c2:a4:32:79:98:21:39:ad:67:a3:42:17: f2:3a:11:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYxMTE0MjAzNDQ5WhcNMjYxMTIxMjAzNDQ5WjAYMRYwFAYD VQQDEw02YWY4YzVlYS1lZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwajYpU3InfpcNs56gni1TCf3nhhFwaZ7jwxaGpNPZx0et1x20Wqp4Ad07T7 GVbK/FT0eCKGhaGyntp5l1XVVVUeO9X2xGPPPniXypwLNqf25rJCt3xhEg3TnX1O zmO8KHnTsbwHopMM2eNzh7lgKE7IglBTxUHoKztb8+jCmG7AAH87IKxM4IW9PbPm tI0cPo6q+2J1TeEOzxofz/QRuj8re2vXsJ7jVz9vfdpLmlBGeKVC8inFCEnQ0rr4 k8Pa9Eqzj61fWsQm/ESYiv1ZcCoFL3Mqa5fm6y+MaBRaKbvsmEb0D2hzh+cy4wkk 0djgQRWXD/imURJVMsCcUWi5xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVs3EsO 26CCRCHm71Aj1mcL/WFMMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUT+O6cpUAmYwWrC/Hix9wejzqaFtiZquki2tB+wGMSNG6sFbZkyPStKxUuXc VI5FjHlhKaWIeO+EhZP9fWgtU9sz6qNZQuRnwOF89cJ774mKdxwpONOO0kHgXgQ1 mp3Yux8NymvaXbZyM8E7HVujCggibXjZhyYaOp3fIBKlItrPXJ3tgUuMrNbUeoHz /3xFPC4aX0ErCt3be7CUD/Q5PxlhC/zuCOC/VofOjHS7NiDRcP5S05/m+42kpSfQ o+eWJaKN/P3ZxmzOBLTsvMTRfIwt7Apa9GDmJT9CUXXQEgpIhbJs0y2I1hq4vFuF 3NqRwqQyeZghOa1no0IX8joRFg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:00:00 2026 by rpki-client