$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: xjz3MP1srbIf7BNPxAdIUJUolAqU+Q0lCkwwXep6/IY= Subject key identifier: A7:7E:94:58:A7:00:4D:3D:56:46:5D:F7:3C:6D:A5:D6:0F:B5:04:12 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 024F Signing time: Tue 03 Nov 2026 03:06:52 +0000 Manifest this update: Tue 03 Nov 2026 03:06:51 +0000 Manifest next update: Tue 10 Nov 2026 03:06:51 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: QpfRTYQs2WIUXqSo77kTnAXEIww3q+jEdU4AlDKTxiY=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 03:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Nov 3 03:06:51 2026 GMT Not After : Nov 10 03:06:51 2026 GMT Subject: CN=6ae94fcc-b3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:a0:8f:c4:12:a5:b6:21:81:5d:88:32:ee: 0f:db:7d:49:e3:ba:2b:39:73:9b:5d:e0:4b:79:a3: 48:4a:69:fe:2e:2e:f1:fa:d6:b3:08:f7:c8:04:54: 88:22:26:e6:33:aa:f4:f5:2d:08:11:aa:aa:ad:60: 5d:b3:4e:a6:24:db:b7:54:98:00:5e:89:9b:4b:e8: a1:7d:9a:5c:f1:a5:4f:8f:2e:ea:f3:22:7d:3e:cf: cc:de:50:08:1e:64:e2:60:d8:cf:50:55:e0:d9:ae: 5d:37:4b:4c:80:80:00:88:15:1b:79:c4:c5:97:e2: 02:08:24:e6:cd:68:f3:85:e3:0b:56:90:97:64:f1: 0a:ab:9f:1f:3e:da:38:6a:0a:fa:e7:c0:33:dd:c3: 7a:9d:f2:95:65:fd:a9:99:66:57:a9:e5:9e:3d:e9: 27:8e:cd:8e:e6:c1:bb:ec:51:81:e8:b9:e5:6a:5f: 99:3d:ac:c8:ec:1e:eb:61:43:be:33:f6:46:0a:f3: 44:35:2c:be:09:b0:ad:dc:ac:79:1d:cd:eb:02:16: 0b:26:8d:82:63:0b:ff:9c:33:bd:6b:04:3b:a9:f6: f4:da:69:14:14:04:0b:13:25:4f:b0:53:d4:fc:26: 79:ec:96:11:a7:86:ca:c4:30:0a:b9:b7:ca:ed:48: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:94:58:A7:00:4D:3D:56:46:5D:F7:3C:6D:A5:D6:0F:B5:04:12 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fe:fc:d8:42:39:9c:37:ab:67:56:10:39:06:60:38:43:3d: 0c:6a:95:c4:55:94:e6:b5:c1:1c:1d:4f:e0:41:53:60:7e:9f: 6d:6f:db:30:98:e7:2d:95:ff:e8:d5:c6:2d:c0:43:15:0e:1c: ba:f9:c6:e7:a2:41:32:ef:25:c2:78:75:75:7a:71:60:fc:2f: 23:d2:da:96:93:da:de:35:dc:b7:d1:ca:a0:56:af:a7:f5:05: aa:f6:fc:c3:6a:31:e5:e2:e4:5b:d5:3b:aa:eb:b8:35:a8:1e: 5d:0b:fe:53:b0:cd:2b:f7:1c:7f:30:bf:60:2f:8d:e1:f3:9b: 48:72:cd:50:72:5b:a7:29:d4:b4:a6:b0:c3:7e:da:37:17:9a: 04:6d:c3:2d:f0:26:19:2c:1d:47:f0:f4:a0:6f:44:80:ec:2b: c8:09:88:e9:65:0d:25:2b:9f:e2:3a:aa:c4:f1:5e:55:53:13: b1:32:68:fa:89:2f:e8:ea:e8:e8:8c:8b:6b:f6:6f:a1:d0:f7: 14:1e:52:a6:e6:3f:ac:31:f2:46:9b:72:e4:92:c3:f5:c9:25: 45:92:41:49:b5:f1:e6:c0:6c:50:88:47:cc:13:cf:d1:e2:f8: 66:b2:1a:2d:62:9b:8a:b7:24:76:0a:c0:1b:b1:16:09:26:68: 3a:3a:46:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYxMTAzMDMwNjUxWhcNMjYxMTEwMDMwNjUxWjAYMRYwFAYD VQQDEw02YWU5NGZjYy1iM2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogGgj8QSpbYhgV2IMu4P231J47orOXObXeBLeaNISmn+Li7x+tazCPfIBFSI IibmM6r09S0IEaqqrWBds06mJNu3VJgAXombS+ihfZpc8aVPjy7q8yJ9Ps/M3lAI HmTiYNjPUFXg2a5dN0tMgIAAiBUbecTFl+ICCCTmzWjzheMLVpCXZPEKq58fPto4 agr658Az3cN6nfKVZf2pmWZXqeWePeknjs2O5sG77FGB6Lnlal+ZPazI7B7rYUO+ M/ZGCvNENSy+CbCt3Kx5Hc3rAhYLJo2CYwv/nDO9awQ7qfb02mkUFAQLEyVPsFPU /CZ57JYRp4bKxDAKubfK7UilRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKd+lFin AE09VkZd9zxtpdYPtQQSMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFf782EI5nDerZ1YQOQZgOEM9DGqVxFWU5rXBHB1P4EFTYH6fbW/bMJjnLZX/ 6NXGLcBDFQ4cuvnG56JBMu8lwnh1dXpxYPwvI9LalpPa3jXct9HKoFavp/UFqvb8 w2ox5eLkW9U7quu4NageXQv+U7DNK/ccfzC/YC+N4fObSHLNUHJbpynUtKaww37a NxeaBG3DLfAmGSwdR/D0oG9EgOwryAmI6WUNJSuf4jqqxPFeVVMTsTJo+okv6Oro 6IyLa/ZvodD3FB5SpuY/rDHyRpty5JLD9cklRZJBSbXx5sBsUIhHzBPP0eL4ZrIa LWKbirckdgrAG7EWCSZoOjpGow== -----END CERTIFICATE-----Generated at Thu Nov 5 02:40:38 2026 by rpki-client