$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: Pg15UU8W+ZEtw1vC75CkFqr1RWqkhufiGFuE/YWy6KA= Subject key identifier: 6D:53:F2:BE:88:D7:F7:80:DF:12:9E:F2:88:B3:E0:A0:05:C8:57:41 Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4C87 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4C58 Signing time: Sat 14 Nov 2026 14:50:27 +0000 Manifest this update: Sat 14 Nov 2026 14:50:27 +0000 Manifest next update: Sat 21 Nov 2026 14:50:27 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: ie/36CSQ+h12WEBFn+BfjviuxJT88qgFd+NiZ8ZJGsU=) 2: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=) 3: u_Gz58XB6yDJVjW4jkE07DamSWA.cer (hash: /cWiSXJLUhiEHMWpJvg6jcSRoa6h2/LjcNVn8dchMGQ=) 4: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: a5Ir0nV7KBW/9+U4soNUFcBC7U+vUfDbNDnpTLrDiRE=) 5: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=) 6: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=) 7: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: 8uhICv4Ua/GVjkWHxtdsoYmoqAISKKqyPkmvC9EVBnw=) 8: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: Jykal/79ESrmZg8HBK3c/WYXbtQTb6/9uO4/tPS78C8=) 9: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=) 10: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: NeCxFow7kBXkFh/UwPzYDU64nBCugUP7ufkzyj5XtKY=) 11: ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (hash: lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=) 12: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=) 13: V3LjuCeMtseqvXrPnvViq1k8LoI.cer (hash: uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=) 14: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: htbBSMVTb1ucorXZ0udEzZrVuTkh1MbpLmulXXbWomU=) 15: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: CSwwxhI62sXBUpjPgEmnyLlhThNiAd6aymOtHWTko68=) 16: oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer (hash: i0mvCv9BCkAZJXiyet6dSMMrqd+2TZuhoLyOP3Lqqlw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19591 (0x4c87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Nov 14 14:50:27 2026 GMT Not After : Nov 21 14:50:27 2026 GMT Subject: CN=6af87533-fac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:11:96:94:d8:ff:43:6c:e5:2f:1b:2a:7e: c0:e4:09:6f:bb:14:90:5e:da:f2:8f:ea:b1:80:95: 67:61:a3:2b:5a:fe:a7:69:4f:49:e8:c8:ce:d0:84: d9:c6:9f:2e:e9:59:09:36:c2:40:9b:d2:ff:5f:44: e2:ab:67:81:4a:9c:9d:7b:f5:34:7b:74:40:db:71: 9a:d8:8a:45:02:11:8a:93:6a:49:d9:1b:56:86:bd: 05:6d:a1:97:47:bc:1e:fb:06:47:74:91:61:02:49: 8a:6b:de:0a:c5:55:44:a8:97:90:24:20:ba:a7:1d: 3a:4d:e9:08:dd:ac:29:0f:99:db:5f:21:ce:d5:fb: 8b:c2:ab:16:a3:d8:04:4e:d2:4e:de:90:87:35:0c: c6:c7:9a:3c:62:d9:4f:14:5b:17:57:47:a0:1f:8c: c5:f7:24:cb:e4:a7:07:dd:93:a3:78:12:ea:4b:f2: 74:10:77:12:51:2a:66:99:c1:ca:e8:d2:2d:92:97: c4:68:24:9e:bc:78:d4:e2:95:9f:4f:1a:f8:4f:fa: 21:99:a4:fe:a4:ea:ca:3d:f9:d6:b1:20:51:e4:e6: 4a:d8:ac:90:bd:53:23:47:50:aa:87:48:97:6b:67: f3:a3:71:51:1c:49:e1:5d:18:31:19:8c:1f:b4:9f: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:F2:BE:88:D7:F7:80:DF:12:9E:F2:88:B3:E0:A0:05:C8:57:41 X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:36:f1:4c:cc:c8:35:a7:88:85:5e:27:89:b1:28:45:69:7e: a0:21:5f:b3:cd:b1:aa:2c:c9:3c:be:56:4a:32:6c:3f:7a:f5: b0:77:f3:f4:78:14:e5:61:fa:2d:38:d6:08:28:8b:1e:55:f7: 66:25:f6:ad:af:57:ef:86:71:3a:e9:94:e2:9e:b3:8d:e3:ac: 09:ac:65:65:2d:42:dc:91:f8:26:ce:29:b7:20:4c:a5:47:05: d2:5d:66:91:ed:e3:1c:14:3b:34:e3:1b:a3:bb:5d:20:cf:58: ec:8c:af:c0:9f:70:b9:fb:ac:f5:40:ae:eb:f3:22:f0:a1:c1: 0e:01:bb:41:a2:4d:22:d9:c2:c1:3f:6e:dc:46:53:6e:39:7e: d8:89:35:bc:99:89:c1:bd:77:8c:67:70:eb:dd:12:20:9e:02: af:00:7a:16:17:e1:ba:43:2f:cc:a2:a8:ea:79:19:ad:2c:ea: 68:5a:b9:97:0c:d9:25:a5:52:d3:71:74:69:49:37:a2:d5:96: 3d:17:73:f3:ca:97:c2:44:0b:c3:33:59:06:61:e9:16:84:ef: 7e:b6:19:33:93:5d:e0:e4:49:5e:65:cf:8c:bb:49:69:8f:d2: 6a:05:55:9d:93:b9:92:e6:f9:0c:b2:7e:83:94:e4:77:95:9f: 1b:5e:85:70 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjYxMTE0MTQ1MDI3WhcNMjYxMTIxMTQ1MDI3WjAYMRYwFAYD VQQDEw02YWY4NzUzMy1mYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5YRlpTY/0Ns5S8bKn7A5AlvuxSQXtryj+qxgJVnYaMrWv6naU9J6MjO0ITZ xp8u6VkJNsJAm9L/X0Tiq2eBSpyde/U0e3RA23Ga2IpFAhGKk2pJ2RtWhr0FbaGX R7we+wZHdJFhAkmKa94KxVVEqJeQJCC6px06TekI3awpD5nbXyHO1fuLwqsWo9gE TtJO3pCHNQzGx5o8YtlPFFsXV0egH4zF9yTL5KcH3ZOjeBLqS/J0EHcSUSpmmcHK 6NItkpfEaCSevHjU4pWfTxr4T/ohmaT+pOrKPfnWsSBR5OZK2KyQvVMjR1Cqh0iX a2fzo3FRHEnhXRgxGYwftJ+KFQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFG1T8r6I 1/eA3xKe8oiz4KAFyFdBMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAJzbxTMzINaeIhV4nibEoRWl+oCFfs82xqizJPL5WSjJs P3r1sHfz9HgU5WH6LTjWCCiLHlX3ZiX2ra9X74ZxOumU4p6zjeOsCaxlZS1C3JH4 Js4ptyBMpUcF0l1mke3jHBQ7NOMbo7tdIM9Y7IyvwJ9wufus9UCu6/Mi8KHBDgG7 QaJNItnCwT9u3EZTbjl+2Ik1vJmJwb13jGdw690SIJ4CrwB6FhfhukMvzKKo6nkZ rSzqaFq5lwzZJaVS03F0aUk3otWWPRdz88qXwkQLwzNZBmHpFoTvfrYZM5Nd4ORJ XmXPjLtJaY/SagVVnZO5kub5DLJ+g5Tkd5WfG16FcA== -----END CERTIFICATE-----Generated at Sun Nov 15 00:29:16 2026 by rpki-client