$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft File: 19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft (raw, json) Hash identifier: Az3GjYiNO5f0enJtidLwXRxdUUmGFEAF6Q7WjrAFd9E= Subject key identifier: 99:B2:75:BE:E3:BB:6D:EA:3F:C8:2F:AC:EF:27:4F:79:6C:AD:88:75 Authority key identifier: 19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F Certificate issuer: /CN=A91A76B50000/serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F Certificate serial: 4BE3FE78EE335EE62BC9F7D757E605FC48EDCFD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft Manifest number: 1A Signing time: Sat 14 Nov 2026 15:40:16 +0000 Manifest this update: Sat 14 Nov 2026 15:35:16 +0000 Manifest next update: Sun 15 Nov 2026 19:05:16 +0000 Files and hashes: 1: 3130332e3139362e3132362e302f32342d3234203d3e2039333034.roa (hash: 6WNU+wqfdT0fXBx5W/E6F6fRmxjXf0BvzI/NHS9gxjU=) 2: 19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl (hash: lOZarRpzONEhr88rATDLgmHVO523wbs/+SazvaGM/bE=) 3: 34352e3132372e3138362e302f32342d3234203d3e20323138373830.roa (hash: J04DUbAQnH7XaeQCrzhZFj1XiSikujS2PUvox0CXw0A=) 4: 3130332e3139362e3132342e302f32342d3234203d3e20323138393131.roa (hash: 6FYv1nZWI104iJFKHgYCLsipw2kdkWRx0u2DVAH0v5I=) 5: 34352e3132372e3138362e302f32342d3234203d3e20323139303735.roa (hash: 8G9UPBMZ15+bS2bjE9iCDSmEdnghoWu0ZfmBvgqt6bc=) 6: 3130332e3139362e3132342e302f32342d3234203d3e20323139303735.roa (hash: zZzkF0vYGeXJ/3dTxfU2BWWvUtR9Fzmsmy8hSyXpVDo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 19:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e3:fe:78:ee:33:5e:e6:2b:c9:f7:d7:57:e6:05:fc:48:ed:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76B50000, serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F Validity Not Before: Nov 14 15:35:16 2026 GMT Not After : Nov 15 19:05:16 2026 GMT Subject: CN=99B275BEE3BB6DEA3FC82FACEF274F796CAD8875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:15:d3:14:26:75:f2:31:b9:d2:38:9a:ba: 04:bb:4c:03:24:6d:c1:fd:10:f1:36:ba:7a:d8:ee: 5c:61:9c:fd:19:9b:14:81:84:d4:55:57:17:1c:67: bf:89:2f:4e:a3:41:ab:5c:b5:d3:10:77:b8:99:38: 22:5e:45:98:29:8c:c6:e2:e2:54:60:51:b9:af:9f: 0f:34:96:b9:7e:9b:4b:5a:59:0d:c7:5d:3b:cf:c0: 56:b9:9b:3a:49:23:eb:8f:06:bf:53:fa:94:39:37: 54:b2:a5:b8:e4:15:d2:9a:dd:e0:58:3f:3d:83:ad: a7:c3:aa:16:e5:9e:9d:0f:0b:ce:1b:65:f7:26:9e: d1:3d:e4:b5:56:f0:fa:3b:64:f9:8c:30:e8:87:7f: 70:53:b9:32:0d:cb:8c:14:c8:0a:92:fe:01:20:75: 26:99:f4:d7:91:73:5d:f9:29:a8:c8:64:3d:45:f6: 16:0e:dd:b0:64:90:6d:c8:41:50:aa:3e:c3:46:f3: e6:5f:b3:13:fc:9a:8b:47:1f:77:17:eb:e1:31:28: a0:1b:34:8f:18:c5:b6:ea:7d:03:49:d9:05:bc:51: 66:2f:79:87:67:1c:71:c5:16:a3:00:7c:c9:ac:4a: c9:89:b4:10:c4:fd:60:3e:d6:1a:78:56:d2:35:6b: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:75:BE:E3:BB:6D:EA:3F:C8:2F:AC:EF:27:4F:79:6C:AD:88:75 X509v3 Authority Key Identifier: keyid:19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:25:37:fc:2d:23:74:da:3d:ef:35:6d:51:94:c7:e3:17:04: fd:1f:61:40:dc:aa:2f:a8:05:75:53:2e:fa:52:db:85:27:5c: d3:72:b2:ae:ae:d9:17:4c:0a:f1:2f:18:19:89:26:49:3d:70: 29:8d:14:77:03:ed:de:1c:8c:20:66:08:66:10:13:b4:83:78: c9:ff:de:06:7f:33:d1:48:a4:ff:dd:c9:cc:8b:19:a5:0e:6f: ba:7e:1d:94:25:7a:52:81:49:2d:e8:96:92:86:2c:75:74:85: b1:f9:48:3b:56:90:25:fe:39:0f:e2:b9:01:8f:bd:39:b7:65: 45:d9:7d:aa:03:70:04:d1:c1:2b:da:cd:39:df:b2:70:00:9e: 8b:f3:ff:94:1d:fa:1a:52:d6:af:6e:9d:cb:50:5e:a2:c4:fb: 60:ed:8c:79:9f:f3:21:ad:6d:74:4f:9d:c2:d9:b0:a8:3e:4d: 49:e0:41:c2:2b:97:21:9c:bf:99:ac:c5:3a:27:4d:91:1b:72: 19:00:bc:9f:8b:1b:bb:7d:62:14:bd:85:19:e6:97:ab:5a:a6: 6f:69:23:2a:b2:01:88:ec:81:c9:94:28:40:d1:fa:0f:69:36: 68:29:e2:bf:52:75:d1:88:66:a4:19:e4:d2:da:af:e6:c9:96: 21:48:1e:b6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS+P+eO4zXuYryffXV+YF/Ejtz9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTc2QjUwMDAwMTEwLwYDVQQFEygxOTk0NEI4NDc0 Q0I2RDkwODFBMERDNDQzOEYyRUNDNzJGRThFNzNGMB4XDTI2MTExNDE1MzUxNloX DTI2MTExNTE5MDUxNlowMzExMC8GA1UEAxMoOTlCMjc1QkVFM0JCNkRFQTNGQzgy RkFDRUYyNzRGNzk2Q0FEODg3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGQFdMUJnXyMbnSOJq6BLtMAyRtwf0Q8Ta6etjuXGGc/RmbFIGE1FVXFxxn v4kvTqNBq1y10xB3uJk4Il5FmCmMxuLiVGBRua+fDzSWuX6bS1pZDcddO8/AVrmb Okkj648Gv1P6lDk3VLKluOQV0prd4Fg/PYOtp8OqFuWenQ8Lzhtl9yae0T3ktVbw +jtk+Yww6Id/cFO5Mg3LjBTICpL+ASB1Jpn015FzXfkpqMhkPUX2Fg7dsGSQbchB UKo+w0bz5l+zE/yai0cfdxfr4TEooBs0jxjFtup9A0nZBbxRZi95h2ccccUWowB8 yaxKyYm0EMT9YD7WGnhW0jVrfacCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSZsnW+ 47tt6j/IL6zvJ095bK2IdTAfBgNVHSMEGDAWgBQZlEuEdMttkIGg3EQ48uzHL+jn PzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNzZCNTAwMDAvMC8xOTk0NEI4 NDc0Q0I2RDkwODFBMERDNDQzOEYyRUNDNzJGRThFNzNGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HWlJMaEhUTGJa Q0JvTnhFT1BMc3h5X281ejguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNzZC NTAwMDAvMC8xOTk0NEI4NDc0Q0I2RDkwODFBMERDNDQzOEYyRUNDNzJGRThFNzNG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAuyU3/C0jdNo97zVtUZTH4xcE/R9hQNyqL6gFdVMu+lLbhSdc 03Kyrq7ZF0wK8S8YGYkmST1wKY0UdwPt3hyMIGYIZhATtIN4yf/eBn8z0Uik/93J zIsZpQ5vun4dlCV6UoFJLeiWkoYsdXSFsflIO1aQJf45D+K5AY+9ObdlRdl9qgNw BNHBK9rNOd+ycACei/P/lB36GlLWr26dy1BeosT7YO2MeZ/zIa1tdE+dwtmwqD5N SeBBwiuXIZy/mazFOidNkRtyGQC8n4sbu31iFL2FGeaXq1qmb2kjKrIBiOyByZQo QNH6D2k2aCniv1J10YhmpBnk0tqv5smWIUgetg== -----END CERTIFICATE-----Generated at Sat Nov 14 20:58:01 2026 by rpki-client