$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft File: 70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft (raw, json) Hash identifier: leMlnnYwmgUk3kqiLb2/LKhJn4eZYE8M48LxgqGdrD8= Subject key identifier: 94:17:FD:17:BD:F6:DF:C5:90:0D:7C:B1:88:B7:83:CD:2A:2E:FC:F7 Authority key identifier: 70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA Certificate issuer: /CN=A91E4ACE0000/serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Certificate serial: 0AE9FC9317A7C5F3FB5D7C24F6ADADFD78A7BEB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft Manifest number: 06 Signing time: Sat 14 Nov 2026 08:13:28 +0000 Manifest this update: Sat 14 Nov 2026 08:08:28 +0000 Manifest next update: Sun 15 Nov 2026 08:24:28 +0000 Files and hashes: 1: 70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl (hash: W5X7fmH1JOckWF0lZyAYyd8qXI02RhrmIyvdv/cLhJw=) 2: 3130332e3233322e33362e302f32342d3234203d3e20323139303735.roa (hash: zhQ3WQUy0MKS1S2+xvlIpxnAAhLx9FxW+ogw028DgZ4=) 3: 3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa (hash: mcvo84dPzNcDdATJl+JG3/Lc6qM0MMPRnFjpUt3IkpE=) 4: 3130332e3233322e33382e302f32342d3234203d3e20323138373830.roa (hash: 0D32h0rfn6ZbVqHFkeAYRppI0AMzAjtzu/6uNUjJ0rM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e9:fc:93:17:a7:c5:f3:fb:5d:7c:24:f6:ad:ad:fd:78:a7:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ACE0000, serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Validity Not Before: Nov 14 08:08:28 2026 GMT Not After : Nov 15 08:24:28 2026 GMT Subject: CN=9417FD17BDF6DFC5900D7CB188B783CD2A2EFCF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:d4:a6:a7:ab:c3:9b:62:3c:19:6e:dd:58: c4:f3:98:70:b0:83:0f:bf:f7:02:0d:9d:2d:b5:a2: 10:e2:6e:6e:4f:28:dd:b3:26:ae:37:f8:77:d6:53: 3c:53:9b:5f:44:3a:07:50:81:65:90:6a:73:54:00: 7a:db:0b:59:08:54:0a:68:7f:7c:a2:d1:de:8e:e1: b3:41:17:7c:43:a0:51:8b:ca:3c:10:36:8b:f9:46: 37:97:47:52:72:5a:a7:08:fd:42:d7:8a:d6:24:fa: 39:9f:33:32:ef:99:29:8e:9c:9f:b5:ac:4e:05:3a: c1:4d:2e:63:3d:ea:84:5b:63:ac:63:cc:8b:68:d6: 7d:6d:9e:56:03:95:98:ab:71:f1:51:d4:cd:c3:be: cd:f0:e2:ea:88:8f:6f:37:74:ff:46:de:3f:86:75: aa:2d:02:cb:19:66:3b:63:b4:73:d4:9a:fc:d8:da: a8:89:3f:cf:f1:a6:af:84:37:40:8e:e9:cb:fb:ca: 82:9d:a7:20:f0:a3:6b:5f:17:2a:9f:60:81:0e:89: 9a:26:02:71:4c:92:f1:f4:e0:99:a9:02:fe:6d:7c: f6:62:8a:35:6d:bc:fd:68:50:e7:23:06:f0:6d:c9: 01:58:cf:18:8e:80:fe:d8:ce:7d:a3:2b:d8:cf:c7: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:17:FD:17:BD:F6:DF:C5:90:0D:7C:B1:88:B7:83:CD:2A:2E:FC:F7 X509v3 Authority Key Identifier: keyid:70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d1:33:12:44:f1:d1:8a:17:d8:47:7c:56:6e:8c:11:16:ef: df:22:5d:f9:ad:50:e1:22:ac:28:00:35:5b:58:b3:f6:4a:c4: 66:5c:22:40:71:b1:5c:ce:a3:a5:fe:84:64:20:0e:7b:9b:35: 8b:a3:13:40:d6:d5:ee:c2:09:84:24:89:c8:32:08:b7:5b:14: c8:f3:bc:d5:d2:c2:15:b1:80:bb:c0:99:63:2c:b7:e9:82:ee: 7f:95:68:f5:47:ad:8b:bf:86:39:d5:3b:f3:c2:61:e1:fe:43: 3b:b3:c2:74:31:6a:5e:c4:69:32:3b:4a:2f:af:ab:9d:79:77: 08:19:ca:74:14:d4:24:ac:78:00:12:b7:51:4a:1a:d9:b6:6e: 03:e7:f0:73:af:94:42:45:33:18:60:80:bd:20:bd:d6:49:78: 24:26:b1:cd:9c:79:d3:19:2d:0a:7a:2c:c8:0a:eb:31:8a:6f: c2:c5:f4:37:a6:aa:d8:af:47:1a:7e:a2:fe:8a:ef:7e:f8:92: fb:25:82:1a:de:0a:a3:7e:16:f3:63:c2:aa:4a:53:81:2a:45: 0e:f0:52:df:1f:50:9f:dc:92:50:20:b0:31:89:04:0a:3b:8f: 7e:6d:04:0e:b8:e8:70:d9:10:ff:4b:0b:4b:50:c2:f0:de:9b: 27:dc:a3:e7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCun8kxenxfP7XXwk9q2t/XinvrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTRBQ0UwMDAwMTEwLwYDVQQFEyg3MEI2QUE1N0FD REMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBMB4XDTI2MTExNDA4MDgyOFoX DTI2MTExNTA4MjQyOFowMzExMC8GA1UEAxMoOTQxN0ZEMTdCREY2REZDNTkwMEQ3 Q0IxODhCNzgzQ0QyQTJFRkNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMM+1Kanq8ObYjwZbt1YxPOYcLCDD7/3Ag2dLbWiEOJubk8o3bMmrjf4d9ZT PFObX0Q6B1CBZZBqc1QAetsLWQhUCmh/fKLR3o7hs0EXfEOgUYvKPBA2i/lGN5dH UnJapwj9QteK1iT6OZ8zMu+ZKY6cn7WsTgU6wU0uYz3qhFtjrGPMi2jWfW2eVgOV mKtx8VHUzcO+zfDi6oiPbzd0/0beP4Z1qi0CyxlmO2O0c9Sa/NjaqIk/z/Gmr4Q3 QI7py/vKgp2nIPCja18XKp9ggQ6JmiYCcUyS8fTgmakC/m189mKKNW28/WhQ5yMG 8G3JAVjPGI6A/tjOfaMr2M/Hpg0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSUF/0X vfbfxZANfLGIt4PNKi789zAfBgNVHSMEGDAWgBRwtqpXrNwxDre6FwDYw2wQA97X yjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNEFDRTAwMDAvMC83MEI2QUE1 N0FDREMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jTGFxVjZ6Y01R NjN1aGNBMk1Oc0VBUGUxOG8uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNEFD RTAwMDAvMC83MEI2QUE1N0FDREMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAXdEzEkTx0YoX2Ed8Vm6MERbv3yJd+a1Q4SKsKAA1W1iz9krE ZlwiQHGxXM6jpf6EZCAOe5s1i6MTQNbV7sIJhCSJyDIIt1sUyPO81dLCFbGAu8CZ Yyy36YLuf5Vo9Ueti7+GOdU788Jh4f5DO7PCdDFqXsRpMjtKL6+rnXl3CBnKdBTU JKx4ABK3UUoa2bZuA+fwc6+UQkUzGGCAvSC91kl4JCaxzZx50xktCnosyArrMYpv wsX0N6aq2K9HGn6i/orvfviS+yWCGt4Ko34W82PCqkpTgSpFDvBS3x9Qn9ySUCCw MYkECjuPfm0EDrjocNkQ/0sLS1DC8N6bJ9yj5w== -----END CERTIFICATE-----Generated at Sun Nov 15 00:40:21 2026 by rpki-client