$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: YohlgmcYR21sXm+67ZOTJnYNQW1pGvjnu0InssILHao= Subject key identifier: 9E:A4:7D:2A:22:B0:8F:A0:ED:74:FC:F3:0F:F0:F2:4C:0F:36:55:01 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 04C2 Signing time: Thu 05 Nov 2026 00:19:21 +0000 Manifest this update: Thu 05 Nov 2026 00:19:21 +0000 Manifest next update: Thu 12 Nov 2026 00:19:21 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: oyVFHyFxGoxV9JzyDU+d3kCHpEqrP8Wyvq86/CcvDMs=) 2: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 3: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 4: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 5: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 6: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 7: E2ADA1E4AE8311F196A6E2687011F970.roa (hash: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=) 8: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 9: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Nov 5 00:19:21 2026 GMT Not After : Nov 12 00:19:21 2026 GMT Subject: CN=6aebcb89-4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:71:4e:3b:f6:af:ba:a5:0f:01:0c:e0:2c: 69:0c:e0:85:bb:b4:d9:25:2e:78:20:9f:d6:c2:71: 7b:6e:c9:00:01:6e:72:30:a0:0f:58:24:92:f9:b8: bb:1d:0e:02:e0:c7:a7:cd:87:25:0d:c1:27:12:a8: 9f:fb:89:5e:af:ed:e4:f1:d2:fd:ad:06:6f:9c:f0: 57:cc:fb:8d:69:29:b7:46:c7:04:de:42:7b:66:94: 76:46:92:f6:90:b6:64:6b:c7:0e:cd:c1:b7:cc:0a: ac:8e:9b:be:f7:7c:14:68:c2:7d:90:60:90:7d:8a: 35:ea:95:3b:8e:0e:51:80:07:69:f4:9d:7f:68:f9: 56:ac:7b:d2:1c:38:d4:39:16:82:e2:41:ae:2b:a4: 02:7a:2c:63:d3:d7:08:46:6b:d0:2f:78:09:b4:d2: 6c:59:d8:8d:ad:af:ec:fb:33:ff:22:f2:ed:13:a0: 1b:ea:cf:ad:3d:51:35:3a:77:a9:a2:7e:95:f3:51: d1:de:a8:97:91:2e:33:87:a6:90:69:b9:30:41:1a: a9:3b:f0:24:d0:1c:f2:f7:92:c7:1f:a1:ac:ff:6b: aa:10:a7:38:6a:6c:f6:c9:dd:15:1d:cf:8b:c1:05: 65:ee:be:8e:3f:06:f2:60:65:1a:ef:b0:4d:c1:11: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A4:7D:2A:22:B0:8F:A0:ED:74:FC:F3:0F:F0:F2:4C:0F:36:55:01 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:99:8f:1c:ce:e9:70:ac:dd:96:c7:7d:7e:0c:a8:3f:c7:07: e4:0d:0c:54:f3:7a:73:1b:07:60:13:4b:17:d3:f2:5f:fa:7d: 46:52:6c:84:09:fc:8b:78:50:03:93:29:e5:08:51:de:ca:c0: ce:39:a5:b2:34:fb:48:55:44:75:f0:ac:76:37:6c:cc:13:0e: f4:35:91:4f:bb:a8:43:82:a0:f6:37:aa:3c:de:9f:3f:6f:24: c8:b7:5a:96:76:f8:be:a4:f9:cd:60:93:d7:29:87:8d:ce:fc: 7f:38:a9:99:c7:36:06:f5:bb:6d:f7:19:70:2f:07:50:a7:d5: 94:3c:d9:3d:c2:85:0b:d9:10:e2:98:c5:e5:81:93:03:87:c6: 3f:c8:e6:34:c2:b6:fc:3b:5f:15:4e:c3:77:2c:67:c1:e9:20: 52:dd:ce:ce:ae:e6:00:2f:ac:76:ab:23:a5:2b:a2:c0:1b:18: 63:0c:60:14:4f:16:41:4e:24:d2:24:92:10:18:c9:ab:35:c4: 65:07:3c:4b:fa:31:58:10:2f:69:b7:bf:6d:ff:9b:bd:34:1f: d1:09:07:c5:69:53:5a:19:bf:c6:7d:46:79:0c:a6:3e:84:77: 11:77:83:b2:90:18:09:30:81:a0:ce:53:f7:9b:d1:db:c8:17: c2:7f:6f:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYxMTA1MDAxOTIxWhcNMjYxMTEyMDAxOTIxWjAYMRYwFAYD VQQDEw02YWViY2I4OS00NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutFxTjv2r7qlDwEM4CxpDOCFu7TZJS54IJ/WwnF7bskAAW5yMKAPWCSS+bi7 HQ4C4MenzYclDcEnEqif+4ler+3k8dL9rQZvnPBXzPuNaSm3RscE3kJ7ZpR2RpL2 kLZka8cOzcG3zAqsjpu+93wUaMJ9kGCQfYo16pU7jg5RgAdp9J1/aPlWrHvSHDjU ORaC4kGuK6QCeixj09cIRmvQL3gJtNJsWdiNra/s+zP/IvLtE6Ab6s+tPVE1Onep on6V81HR3qiXkS4zh6aQabkwQRqpO/Ak0Bzy95LHH6Gs/2uqEKc4amz2yd0VHc+L wQVl7r6OPwbyYGUa77BNwRHPkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6kfSoi sI+g7XT88w/w8kwPNlUBMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj5mPHM7pcKzdlsd9fgyoP8cH5A0MVPN6cxsHYBNLF9PyX/p9RlJshAn8i3hQ A5Mp5QhR3srAzjmlsjT7SFVEdfCsdjdszBMO9DWRT7uoQ4Kg9jeqPN6fP28kyLda lnb4vqT5zWCT1ymHjc78fzipmcc2BvW7bfcZcC8HUKfVlDzZPcKFC9kQ4pjF5YGT A4fGP8jmNMK2/DtfFU7DdyxnwekgUt3Ozq7mAC+sdqsjpSuiwBsYYwxgFE8WQU4k 0iSSEBjJqzXEZQc8S/oxWBAvabe/bf+bvTQf0QkHxWlTWhm/xn1GeQymPoR3EXeD spAYCTCBoM5T95vR28gXwn9v9w== -----END CERTIFICATE-----Generated at Thu Nov 5 05:46:58 2026 by rpki-client