$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: lMwdjKHgn1CfgBIlffpACk4Awicy8Iy0VnH6DkF/XfM= Subject key identifier: A9:41:5F:EE:E7:B4:58:DE:CC:1F:5E:64:76:B9:FB:07:70:8A:7D:3A Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 035B Signing time: Sun 15 Nov 2026 00:42:16 +0000 Manifest this update: Sun 15 Nov 2026 00:42:16 +0000 Manifest next update: Sun 22 Nov 2026 00:42:16 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: LVUN4nD1BLjrT95MjIlSbt9yKbBZcXE8//M4rNEzgeQ=) 2: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=) 3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=) 4: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=) 5: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=) 6: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=) 7: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Nov 15 00:42:16 2026 GMT Not After : Nov 22 00:42:16 2026 GMT Subject: CN=6af8ffe8-0321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:85:25:1d:3f:6c:c9:10:13:e6:2b:46:41: 0f:c2:66:86:29:17:72:de:86:88:48:b4:94:ce:7d: ef:97:ac:d9:99:cb:4b:96:91:2f:bd:07:84:36:80: af:de:e1:ff:b3:15:3e:56:52:92:f6:50:1a:13:48: 90:af:d1:82:79:c7:7e:28:43:14:42:05:29:82:d9: 11:29:4f:66:3d:f2:e6:b9:10:a0:6e:22:93:74:32: 63:e5:f5:82:d2:6c:ef:76:fe:70:9f:58:d8:f0:4c: cf:ac:49:48:c9:1b:49:7d:60:86:a0:15:ef:fe:37: ba:b3:a2:dc:06:b7:66:5f:4b:6a:bd:70:cf:43:58: 95:17:03:71:d8:76:f3:13:65:11:22:30:21:26:f2: 71:95:1f:32:68:28:99:12:4c:5a:b5:75:fb:d6:04: c1:cc:bd:9e:d6:da:5a:59:17:82:57:85:c7:51:4e: 40:8c:b3:f1:b4:7c:69:4f:3f:79:d9:a7:ce:a6:c7: e2:c5:3f:ba:39:0d:b1:cd:07:2e:fa:b0:46:41:30: 72:2e:71:1f:5d:12:53:46:8f:f8:b4:62:9d:7a:9b: a3:39:ff:1d:7d:5b:44:0c:ad:94:44:68:98:1f:ba: 07:0e:2c:09:85:80:4c:d8:05:78:7c:50:0f:af:19: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:5F:EE:E7:B4:58:DE:CC:1F:5E:64:76:B9:FB:07:70:8A:7D:3A X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3d:72:9e:26:71:c1:35:cd:46:09:e0:a3:3d:2d:24:ad:97: a8:54:39:7f:1a:47:17:32:9d:39:4a:62:32:09:87:4d:33:7e: 5b:94:6e:15:13:dd:07:bf:5e:7e:c7:13:92:5c:ec:9e:57:da: 81:16:c8:95:25:ba:32:61:40:5d:a5:64:59:40:7f:a6:eb:2e: 2b:25:40:ef:b2:81:1b:f1:9e:9b:df:a9:3c:14:67:40:d5:4a: 4b:06:5e:aa:89:fc:12:f2:6f:99:b7:75:e3:d6:82:2a:34:bc: 6b:ae:ce:4e:ee:a0:ca:19:bd:89:74:23:05:eb:a1:04:ea:60: d5:ce:ca:7c:2a:63:22:af:14:61:31:df:80:bf:13:be:fd:2e: b6:ba:e3:ff:9f:0d:21:49:10:6e:8e:b8:cb:b9:de:b5:43:b6: a2:4f:e0:43:42:e2:1e:1e:4c:4d:4d:4f:58:57:b0:61:b8:bb: 31:9d:c1:15:07:a3:10:3d:1b:32:85:e9:17:ad:e3:d1:1a:3e: 92:17:7d:38:8c:52:1f:51:a2:54:5a:9f:18:33:15:bc:9c:6d: cf:82:ac:57:51:1f:bb:e8:c4:7c:5b:21:08:94:00:b1:38:a6: 11:b4:55:37:33:5c:80:98:b4:49:c3:fe:1a:75:11:cb:ad:e7: 35:c3:19:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjYxMTE1MDA0MjE2WhcNMjYxMTIyMDA0MjE2WjAYMRYwFAYD VQQDEw02YWY4ZmZlOC0wMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2iFJR0/bMkQE+YrRkEPwmaGKRdy3oaISLSUzn3vl6zZmctLlpEvvQeENoCv 3uH/sxU+VlKS9lAaE0iQr9GCecd+KEMUQgUpgtkRKU9mPfLmuRCgbiKTdDJj5fWC 0mzvdv5wn1jY8EzPrElIyRtJfWCGoBXv/je6s6LcBrdmX0tqvXDPQ1iVFwNx2Hbz E2URIjAhJvJxlR8yaCiZEkxatXX71gTBzL2e1tpaWReCV4XHUU5AjLPxtHxpTz95 2afOpsfixT+6OQ2xzQcu+rBGQTByLnEfXRJTRo/4tGKdepujOf8dfVtEDK2URGiY H7oHDiwJhYBM2AV4fFAPrxki5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlBX+7n tFjezB9eZHa5+wdwin06MB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjj1yniZxwTXNRgngoz0tJK2XqFQ5fxpHFzKdOUpiMgmHTTN+W5RuFRPdB79e fscTklzsnlfagRbIlSW6MmFAXaVkWUB/pusuKyVA77KBG/Gem9+pPBRnQNVKSwZe qon8EvJvmbd149aCKjS8a67OTu6gyhm9iXQjBeuhBOpg1c7KfCpjIq8UYTHfgL8T vv0utrrj/58NIUkQbo64y7netUO2ok/gQ0LiHh5MTU1PWFewYbi7MZ3BFQejED0b MoXpF63j0Ro+khd9OIxSH1GiVFqfGDMVvJxtz4KsV1Efu+jEfFshCJQAsTimEbRV NzNcgJi0ScP+GnURy63nNcMZ0A== -----END CERTIFICATE-----Generated at Sun Nov 15 06:36:59 2026 by rpki-client