$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: m68yv/y2evIVPucggEAiwgcpeAq2EejhFOtvsVbHZmo= Subject key identifier: 37:BA:61:32:F2:BF:C7:09:20:6E:E4:48:63:01:8B:CA:A2:5E:97:3E Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 04CA Signing time: Fri 30 Oct 2026 23:52:18 +0000 Manifest this update: Fri 30 Oct 2026 23:52:17 +0000 Manifest next update: Fri 06 Nov 2026 23:52:17 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: MRTmUvBkOK2T8EEL9q2D4Fk27JkwL8m0Pv+OiQAp5hM=) 2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=) 3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Oct 30 23:52:17 2026 GMT Not After : Nov 6 23:52:17 2026 GMT Subject: CN=6ae52db2-b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:2f:60:d5:d3:22:b1:b0:01:5c:5b:9b:89: ff:46:93:49:14:b7:e7:45:d3:20:ad:04:ff:37:a9: 1d:3f:94:2a:80:2a:67:57:48:f6:31:9b:f2:a9:76: 53:69:62:ea:55:8c:3b:b2:e2:75:80:24:40:c8:73: ab:e6:60:23:dc:2b:35:fc:8f:59:91:e2:2d:9c:f6: ff:a9:2d:cd:f4:27:59:9a:bb:44:08:26:2a:86:f5: d5:05:4c:aa:67:9f:45:ad:bb:7d:b2:fd:e3:e7:62: 33:e2:28:c3:db:9f:6a:64:98:34:c4:2c:14:c1:93: ff:65:27:e3:12:03:e6:1d:83:25:85:52:b5:1d:c2: 8a:f8:0d:fd:c3:49:42:38:ce:90:88:53:97:2e:49: 4a:79:dc:cf:e5:b4:14:54:58:93:c2:4b:cd:45:ee: bb:fb:0a:7a:d6:07:20:dd:96:d5:b4:f9:7d:f9:a3: 5e:e1:55:3d:28:d1:fd:bf:3a:71:f8:19:84:0a:ac: 4f:5c:62:5a:f4:f6:aa:42:aa:1a:8b:d8:fe:38:99: ca:4f:a9:87:d7:7e:d8:22:83:a4:32:c7:2b:5a:ed: 2c:d5:26:1e:69:87:8d:77:e6:14:d6:96:8a:9a:dd: bf:03:7a:04:f4:0c:75:b5:3d:f0:43:3f:0c:f3:2a: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:61:32:F2:BF:C7:09:20:6E:E4:48:63:01:8B:CA:A2:5E:97:3E X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:f7:e9:66:8a:18:8a:59:16:33:8c:71:62:1a:ce:91:44:40: 21:66:36:a9:d1:87:01:09:b2:d1:3b:cb:84:de:eb:2e:d1:b8: ef:64:a0:62:40:1b:3e:90:3a:42:5e:e4:d4:06:24:6e:0d:6d: 43:3d:e6:e4:75:95:92:99:a8:f8:df:68:e9:bf:82:bb:60:8f: 0b:1a:ff:6c:26:a3:e2:fd:8d:2a:a7:26:7c:6d:cc:54:27:0e: 84:75:f4:bd:75:d5:52:c2:83:de:f0:cd:4d:33:3c:a7:72:52: e7:04:b0:75:7f:69:41:a2:b6:9c:04:91:9f:82:3f:fd:d5:6a: d6:3e:5a:58:48:42:c2:c5:7e:7d:0e:82:d3:43:24:3b:51:ba: 86:9f:3a:85:18:00:05:2b:07:e3:c2:38:dd:47:05:36:96:99: af:4a:97:99:de:51:d9:ad:ae:2d:66:dc:49:ad:98:3a:63:d1: 37:3a:41:8c:ab:db:7d:fd:63:0f:83:3c:9b:d0:26:47:03:1d: 0a:c8:fd:11:cb:cd:65:31:91:76:b2:47:55:23:5f:ec:cc:06: 8a:4e:38:e7:e3:fe:a3:e1:7f:28:b3:94:30:31:23:ac:32:50: 72:d7:30:db:96:4f:bb:96:f1:e9:88:dc:08:98:9a:c8:2c:f6: 7a:69:e9:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjYxMDMwMjM1MjE3WhcNMjYxMTA2MjM1MjE3WjAYMRYwFAYD VQQDEw02YWU1MmRiMi1iMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo0vYNXTIrGwAVxbm4n/RpNJFLfnRdMgrQT/N6kdP5QqgCpnV0j2MZvyqXZT aWLqVYw7suJ1gCRAyHOr5mAj3Cs1/I9ZkeItnPb/qS3N9CdZmrtECCYqhvXVBUyq Z59Frbt9sv3j52Iz4ijD259qZJg0xCwUwZP/ZSfjEgPmHYMlhVK1HcKK+A39w0lC OM6QiFOXLklKedzP5bQUVFiTwkvNRe67+wp61gcg3ZbVtPl9+aNe4VU9KNH9vzpx +BmECqxPXGJa9PaqQqoai9j+OJnKT6mH137YIoOkMscrWu0s1SYeaYeNd+YU1paK mt2/A3oE9Ax1tT3wQz8M8yoQoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDe6YTLy v8cJIG7kSGMBi8qiXpc+MB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/fpZooYilkWM4xxYhrOkURAIWY2qdGHAQmy0TvLhN7rLtG472SgYkAbPpA6 Ql7k1AYkbg1tQz3m5HWVkpmo+N9o6b+Cu2CPCxr/bCaj4v2NKqcmfG3MVCcOhHX0 vXXVUsKD3vDNTTM8p3JS5wSwdX9pQaK2nASRn4I//dVq1j5aWEhCwsV+fQ6C00Mk O1G6hp86hRgABSsH48I43UcFNpaZr0qXmd5R2a2uLWbcSa2YOmPRNzpBjKvbff1j D4M8m9AmRwMdCsj9EcvNZTGRdrJHVSNf7MwGik445+P+o+F/KLOUMDEjrDJQctcw 25ZPu5bx6YjcCJiayCz2emnpnw== -----END CERTIFICATE-----Generated at Sat Oct 31 15:23:22 2026 by rpki-client