$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: JsEzxczwc9v5nqACjfPWBPfgDVzs9cFHwZ3zmlg+6eg= Subject key identifier: 87:BA:EC:B2:32:50:81:C9:D8:6C:2A:74:29:DE:86:A8:C9:EA:A6:33 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 0202 Signing time: Fri 13 Nov 2026 03:29:44 +0000 Manifest this update: Fri 13 Nov 2026 03:29:43 +0000 Manifest next update: Fri 20 Nov 2026 03:29:43 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: xey6FiNcLGwnbtvVNXIWK4iPVFAUCwimniVtWE44V4U=) 2: 4245FA98D2D311F1A23D69DB0A66CEF9.roa (hash: JVy5WaY2Y4FAQ/yj20JZwhMGnKhuvpndpcgnAiuidSc=) 3: 402154D8D2D311F1A23D69DB0A66CEF9.roa (hash: z58L51Y9ufn7tU4rbYOZj2ujsu64L0cIN34Hg8GFraQ=) 4: 412A9B46D2D311F1A23D69DB0A66CEF9.roa (hash: LTtk7CrZnxbdgvVF9Z53CrBxeeHelBUJNh1ePDCEZtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 03:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Nov 13 03:29:43 2026 GMT Not After : Nov 20 03:29:43 2026 GMT Subject: CN=6af68428-b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:18:ff:88:eb:fd:f5:63:92:80:bc:0a:64: 48:1a:39:9a:89:5f:20:e7:4c:3f:60:ca:15:00:b7: 29:14:ea:cd:51:87:c4:60:d4:b3:7b:9d:a3:60:3f: ff:50:3e:4a:8f:38:b7:57:bb:6c:6c:17:3c:25:f7: 37:d0:4c:9a:eb:ef:52:7c:74:d0:2c:76:17:3e:fb: 8e:e0:5d:a1:72:03:e2:c0:06:ca:c0:36:5f:64:3e: 3c:fe:fd:27:4d:d2:4d:2f:f7:20:f6:86:c8:1a:bf: 31:27:34:34:ce:3f:19:06:31:02:85:af:3a:30:d2: e9:6d:16:02:1a:f3:de:16:37:7d:f6:f2:5f:1a:a2: 32:5c:f3:56:94:83:81:5f:f7:09:0e:d4:f1:03:dd: e6:51:fc:e7:96:7c:92:d2:65:64:83:3a:89:29:b0: 94:13:40:2a:43:86:b4:76:3a:e0:be:43:2d:29:b6: 28:93:2b:83:87:3e:2c:4b:51:0e:8c:23:b1:47:65: 56:cd:ff:51:c8:17:e3:77:44:56:73:2e:ff:c7:d6: 27:11:71:fe:17:70:56:d0:b4:1c:b9:b4:b8:38:eb: 61:4e:92:fc:2c:4e:9b:fe:55:92:80:5d:b9:5e:84: 81:ae:f4:a6:bd:21:db:79:8e:90:d1:a0:ee:c1:86: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:EC:B2:32:50:81:C9:D8:6C:2A:74:29:DE:86:A8:C9:EA:A6:33 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:78:9b:f4:8e:63:c6:07:c3:ef:73:be:4b:1d:45:26:ae:f3: 9f:00:e7:dc:6b:51:ac:58:c4:1b:8b:c6:2b:1c:b2:b8:18:ee: f6:08:5f:04:ff:2e:31:b3:64:37:ac:71:53:10:80:dd:a9:e7: af:cc:d0:45:b8:0a:6a:55:6a:10:70:43:09:bf:ce:1d:df:50: d9:05:59:c0:f9:8f:05:a7:cf:24:12:ee:1c:16:a9:0a:5e:39: 26:5a:69:ec:73:20:15:3e:2c:1b:a8:cc:50:4c:b8:a3:cc:f0: e3:5a:19:1f:23:cf:23:24:12:7e:a3:33:8e:cf:14:0e:70:70: a6:72:cf:a3:7c:24:e9:7a:19:28:5d:f8:d1:9d:56:c5:77:b6: 3f:81:2a:35:df:dd:ea:22:3c:df:d2:b0:d0:63:3a:74:28:ad: ff:a5:80:d7:ec:e2:a8:17:3c:95:1e:84:db:9e:53:11:8b:d5: 8a:a5:a7:00:77:09:23:3f:a8:8b:a8:6b:96:e7:63:b4:65:d4: ca:e6:13:1a:4f:03:e6:3d:5d:8d:59:6e:51:d2:bf:06:e6:c3: 02:07:9d:3b:e0:5d:22:15:8a:e4:98:81:13:d4:61:3b:fc:a2: cf:d8:4e:b5:aa:8d:f7:28:0e:2d:04:21:79:7e:9f:11:6b:5d: ef:a6:84:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjYxMTEzMDMyOTQzWhcNMjYxMTIwMDMyOTQzWjAYMRYwFAYD VQQDEw02YWY2ODQyOC1iNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZwY/4jr/fVjkoC8CmRIGjmaiV8g50w/YMoVALcpFOrNUYfEYNSze52jYD// UD5Kjzi3V7tsbBc8Jfc30Eya6+9SfHTQLHYXPvuO4F2hcgPiwAbKwDZfZD48/v0n TdJNL/cg9obIGr8xJzQ0zj8ZBjECha86MNLpbRYCGvPeFjd99vJfGqIyXPNWlIOB X/cJDtTxA93mUfznlnyS0mVkgzqJKbCUE0AqQ4a0djrgvkMtKbYokyuDhz4sS1EO jCOxR2VWzf9RyBfjd0RWcy7/x9YnEXH+F3BW0LQcubS4OOthTpL8LE6b/lWSgF25 XoSBrvSmvSHbeY6Q0aDuwYZBPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIe67LIy UIHJ2GwqdCnehqjJ6qYzMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjXib9I5jxgfD73O+Sx1FJq7znwDn3GtRrFjEG4vGKxyyuBju9ghfBP8uMbNk N6xxUxCA3annr8zQRbgKalVqEHBDCb/OHd9Q2QVZwPmPBafPJBLuHBapCl45Jlpp 7HMgFT4sG6jMUEy4o8zw41oZHyPPIyQSfqMzjs8UDnBwpnLPo3wk6XoZKF340Z1W xXe2P4EqNd/d6iI839Kw0GM6dCit/6WA1+ziqBc8lR6E255TEYvViqWnAHcJIz+o i6hrludjtGXUyuYTGk8D5j1djVluUdK/BubDAgedO+BdIhWK5JiBE9RhO/yiz9hO taqN9ygOLQQheX6fEWtd76aEGg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:56:09 2026 by rpki-client