$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: +nZFuW1zDKy22+RHJ2aXO8ZW5icoD+vdZMWP5U0YLDA= Subject key identifier: D5:38:03:F8:AC:70:47:62:47:37:D8:7B:81:1B:17:9B:8B:07:67:81 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 0251 Signing time: Tue 03 Nov 2026 03:06:49 +0000 Manifest this update: Tue 03 Nov 2026 03:06:48 +0000 Manifest next update: Tue 10 Nov 2026 03:06:48 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: 0S5EqD7MGIsImFewIZ9GL+EJ5kv7/mGxVgwKKkuiZcI=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 03:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Nov 3 03:06:48 2026 GMT Not After : Nov 10 03:06:48 2026 GMT Subject: CN=6ae94fc8-5030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:2c:02:ef:21:a9:ab:8d:ca:22:13:d6:9c: f9:0e:2a:1c:8a:48:54:42:25:70:21:7d:59:f5:bb: ff:0a:00:be:3e:8f:4f:f4:1f:9c:7b:b6:8a:86:fa: 26:96:12:ac:d5:ed:86:3a:9b:1b:6d:5d:9c:ce:53: 5e:c8:0a:b1:09:46:12:ef:fa:0c:86:27:35:71:89: 11:30:f8:8b:87:8c:9a:9c:52:18:c9:1e:07:c2:f8: 0f:1d:9a:b8:b3:a8:6b:1c:b5:07:8a:88:fe:ee:a0: 23:96:3f:e6:43:78:e2:c8:ec:0b:ec:32:07:e5:aa: b9:56:e6:45:a7:45:39:36:8c:11:1d:3d:cd:10:56: 22:cf:be:50:f4:b4:12:5f:d6:66:fc:d9:13:d9:6b: b7:ac:42:d8:d9:6e:2a:cc:3b:6c:a4:eb:4d:07:40: d9:8c:4a:1e:18:da:b3:0a:5c:bd:bc:f7:de:95:b5: 62:96:99:d2:1d:9c:c2:2f:e6:16:cd:8e:7d:d0:06: 5c:10:0a:de:bd:05:69:ec:4c:50:47:b0:c0:16:1f: e4:26:cf:d3:22:1e:43:d4:32:a4:f1:09:b9:98:5e: 4f:f0:ea:90:8a:f2:a2:50:48:79:25:fd:98:35:5a: c3:fe:ef:7c:be:75:e9:87:d2:ee:d8:25:9d:f0:db: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:38:03:F8:AC:70:47:62:47:37:D8:7B:81:1B:17:9B:8B:07:67:81 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:4b:69:a8:e1:49:fa:a1:f5:89:4f:e3:87:b0:78:71:43:f8: fd:f0:e5:c0:fa:88:ca:04:02:f0:1b:1c:0a:37:a9:ed:8e:6a: 5b:1c:35:83:dd:0e:6d:58:c3:c7:6c:81:52:26:d6:b3:f1:38: d2:e8:fc:69:d4:7b:f8:83:41:b6:06:ff:25:dd:f1:62:5e:ec: 5d:df:88:8d:a1:d8:58:d1:49:99:96:66:4e:fd:2f:d9:f2:32: a4:74:f8:e8:87:c0:ac:9b:e6:73:99:62:c8:1f:74:07:18:30: 38:29:e5:f0:56:e6:a0:7c:3b:36:5b:e5:25:7e:b3:34:07:bb: 8e:64:b7:45:c6:e1:80:c1:7d:dd:0e:ac:76:18:bc:0d:bc:3c: 07:59:59:19:1b:21:a1:58:db:56:a8:48:cb:b3:da:85:60:d8: 8c:52:e4:14:b5:26:61:db:b8:41:90:94:ee:e8:40:c1:ac:30: d1:e9:c2:85:9c:fa:1b:5d:30:98:07:20:6c:04:31:71:8a:e3: 33:c1:6c:dd:64:a1:06:76:52:b1:22:df:26:88:d2:0d:70:d9: e8:9b:dc:52:45:2e:83:58:d9:03:ee:ea:7e:94:6f:a9:79:13: 22:69:60:90:28:80:0f:fb:84:c1:07:d7:2a:84:83:94:a0:ed: 4e:4a:28:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYxMTAzMDMwNjQ4WhcNMjYxMTEwMDMwNjQ4WjAYMRYwFAYD VQQDEw02YWU5NGZjOC01MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E0sAu8hqauNyiIT1pz5DiocikhUQiVwIX1Z9bv/CgC+Po9P9B+ce7aKhvom lhKs1e2GOpsbbV2czlNeyAqxCUYS7/oMhic1cYkRMPiLh4yanFIYyR4HwvgPHZq4 s6hrHLUHioj+7qAjlj/mQ3jiyOwL7DIH5aq5VuZFp0U5NowRHT3NEFYiz75Q9LQS X9Zm/NkT2Wu3rELY2W4qzDtspOtNB0DZjEoeGNqzCly9vPfelbVilpnSHZzCL+YW zY590AZcEArevQVp7ExQR7DAFh/kJs/TIh5D1DKk8Qm5mF5P8OqQivKiUEh5Jf2Y NVrD/u98vnXph9Lu2CWd8NsTMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU4A/is cEdiRzfYe4EbF5uLB2eBMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApktpqOFJ+qH1iU/jh7B4cUP4/fDlwPqIygQC8BscCjep7Y5qWxw1g90ObVjD x2yBUibWs/E40uj8adR7+INBtgb/Jd3xYl7sXd+IjaHYWNFJmZZmTv0v2fIypHT4 6IfArJvmc5liyB90BxgwOCnl8FbmoHw7NlvlJX6zNAe7jmS3RcbhgMF93Q6sdhi8 Dbw8B1lZGRshoVjbVqhIy7PahWDYjFLkFLUmYdu4QZCU7uhAwaww0enChZz6G10w mAcgbAQxcYrjM8Fs3WShBnZSsSLfJojSDXDZ6JvcUkUug1jZA+7qfpRvqXkTImlg kCiAD/uEwQfXKoSDlKDtTkootw== -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:19 2026 by rpki-client