$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: HIHJzbHwOX+s+GqR8+kLJCmrCgiBls8Blb7rZJr+NdE= Subject key identifier: D5:15:46:74:90:27:20:48:3F:D4:0E:E9:31:F8:45:14:C0:EB:BC:5C Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0D34 Signing time: Mon 02 Nov 2026 18:22:24 +0000 Manifest this update: Mon 02 Nov 2026 18:22:24 +0000 Manifest next update: Mon 09 Nov 2026 18:22:24 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: nU3E/stKveaAVaTONP7il1jUw+g+HOamjKhbCIKl60o=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 18:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Nov 2 18:22:24 2026 GMT Not After : Nov 9 18:22:24 2026 GMT Subject: CN=6ae8d4e0-69ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:7f:22:40:a8:9a:a5:04:db:05:88:bb:45: 51:b2:9d:f0:7c:25:5b:16:b2:a1:f2:02:90:37:66: 02:44:7d:13:af:e2:a5:ec:f9:77:29:50:7e:69:2a: ee:30:6d:67:f6:4b:59:e7:c9:87:67:55:ca:23:2d: 88:69:a1:f0:d1:76:3e:93:25:9f:59:67:c2:37:57: 9e:7e:05:80:1d:6b:a0:e8:30:80:e9:be:9b:b3:b6: 1e:0d:b5:39:c5:1f:48:79:27:3d:da:fc:b8:9f:98: 8a:38:9e:ea:99:dc:91:01:c1:d1:8a:f1:7d:48:ac: 59:c2:24:56:ae:45:ba:aa:5d:15:d1:db:33:19:b4: 12:c2:a4:3f:44:1a:d1:9e:51:bb:f6:ef:01:b2:ab: de:b6:4f:b1:91:6a:26:aa:99:29:68:1d:88:ad:ec: 42:52:10:e6:fa:9d:fa:7e:ed:7c:7e:84:d7:46:f2: 88:c1:1f:72:f8:cb:d2:ec:d5:b2:e2:04:2a:e9:89: f2:89:6d:2d:ba:f7:09:05:54:dc:2d:c5:e4:9d:07: d7:a3:ed:2a:d7:f3:21:26:fe:27:8e:0d:47:64:9a: 94:6b:61:7e:22:46:70:98:13:d0:35:09:15:c5:2c: 80:c6:c6:6f:ce:a3:b2:d9:a8:84:7c:9d:01:34:4e: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:15:46:74:90:27:20:48:3F:D4:0E:E9:31:F8:45:14:C0:EB:BC:5C X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0d:fc:eb:a0:fa:09:8e:52:a0:30:47:4a:16:4d:02:d1:dd: f4:52:ee:f9:bc:5f:79:81:54:b0:6f:fb:da:90:0b:19:b3:3a: 4e:19:a7:fa:09:9b:de:ba:8a:90:67:0b:17:64:84:03:39:30: 59:fb:87:d7:42:56:b9:7c:93:f5:ab:9d:cc:63:d2:c3:6b:5c: cd:fa:e6:c3:f3:13:3a:85:60:cd:ed:98:c0:35:fc:b4:d3:9d: 25:2a:5c:2f:78:7f:fe:0e:1e:1d:fd:94:66:22:e7:02:0a:05: cb:65:91:82:b0:bc:b9:c8:0d:c4:23:30:31:05:e6:f3:6f:b9: 8a:96:cb:65:f7:7a:26:2a:cb:f4:a9:68:93:bd:1f:89:be:ce: 0f:3f:28:e4:27:ad:f1:44:2f:60:d0:58:8a:e6:52:40:1b:29: 20:09:c7:b7:1c:4f:75:2b:8d:d6:5b:c1:d6:93:cc:cc:b0:7f: 73:94:32:11:52:67:e8:26:c4:68:12:b7:35:a9:29:40:bd:86: 73:92:75:f5:4a:b9:9d:78:8d:16:ec:46:ca:2d:bf:10:0e:63: 62:70:3e:70:b3:0b:dd:a6:99:ce:d3:a6:66:bc:af:3b:d4:61: 24:c6:dd:d5:ad:69:0a:f5:cb:26:25:e5:54:d4:bc:28:8b:3a: cf:1c:96:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjYxMTAyMTgyMjI0WhcNMjYxMTA5MTgyMjI0WjAYMRYwFAYD VQQDEw02YWU4ZDRlMC02OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhnN/IkComqUE2wWIu0VRsp3wfCVbFrKh8gKQN2YCRH0Tr+Kl7Pl3KVB+aSru MG1n9ktZ58mHZ1XKIy2IaaHw0XY+kyWfWWfCN1eefgWAHWug6DCA6b6bs7YeDbU5 xR9IeSc92vy4n5iKOJ7qmdyRAcHRivF9SKxZwiRWrkW6ql0V0dszGbQSwqQ/RBrR nlG79u8Bsqvetk+xkWomqpkpaB2IrexCUhDm+p36fu18foTXRvKIwR9y+MvS7NWy 4gQq6YnyiW0tuvcJBVTcLcXknQfXo+0q1/MhJv4njg1HZJqUa2F+IkZwmBPQNQkV xSyAxsZvzqOy2aiEfJ0BNE7VLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUVRnSQ JyBIP9QO6TH4RRTA67xcMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtg3866D6CY5SoDBHShZNAtHd9FLu+bxfeYFUsG/72pALGbM6Thmn+gmb3rqK kGcLF2SEAzkwWfuH10JWuXyT9audzGPSw2tczfrmw/MTOoVgze2YwDX8tNOdJSpc L3h//g4eHf2UZiLnAgoFy2WRgrC8ucgNxCMwMQXm82+5ipbLZfd6JirL9Klok70f ib7ODz8o5Cet8UQvYNBYiuZSQBspIAnHtxxPdSuN1lvB1pPMzLB/c5QyEVJn6CbE aBK3NakpQL2Gc5J19Uq5nXiNFuxGyi2/EA5jYnA+cLML3aaZztOmZryvO9RhJMbd 1a1pCvXLJiXlVNS8KIs6zxyWaA== -----END CERTIFICATE-----Generated at Wed Nov 4 14:29:10 2026 by rpki-client