$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: F+ssxmuJL45MKzIprLyrUKPp66Jf9W8zuOfQwaTOIw4= Subject key identifier: A5:FB:7C:6E:CC:A1:4B:0D:D0:A4:F8:7F:A3:82:5B:80:25:E5:A3:01 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 02CE Signing time: Tue 03 Nov 2026 02:01:22 +0000 Manifest this update: Tue 03 Nov 2026 02:01:22 +0000 Manifest next update: Tue 10 Nov 2026 02:01:22 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: tVCKMgujLYGDwt0uksbBy7vhldGaVF65DARwwRRtpRE=) 2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Nov 3 02:01:22 2026 GMT Not After : Nov 10 02:01:22 2026 GMT Subject: CN=6ae94072-c0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:9a:ed:cc:10:d6:cd:bc:30:da:ec:5e:45: 52:98:ce:79:c3:ad:10:72:90:13:cc:31:62:56:4f: b1:c8:96:50:f9:5e:96:89:ad:ad:25:28:c7:73:20: d6:9c:cf:80:71:f6:6a:73:94:2a:1d:2d:8b:53:50: 39:cd:7c:ac:ce:02:87:a2:0b:07:91:7f:14:8b:a1: e7:2f:ce:b4:2f:63:7d:59:be:32:46:3d:e1:89:49: 5f:1c:2c:5a:0f:3c:36:e0:00:64:f9:68:4a:4f:8c: 07:08:eb:2b:82:6a:8f:22:52:5b:8f:9e:7a:dd:81: dc:89:dc:e9:aa:96:8b:11:9d:ea:2f:f8:5f:ea:c8: 6b:2d:cc:c3:62:fb:b6:71:80:0a:f3:5e:c1:3c:e9: 42:f2:79:d9:bc:73:60:f8:50:8d:71:d1:ee:f4:37: 34:09:54:03:32:bd:42:57:2f:c0:12:ef:5f:e9:26: cd:90:2a:66:44:84:28:39:51:1a:7f:0b:8c:a1:5f: 83:27:06:4c:bc:5a:c7:3d:52:2a:b5:9d:42:0c:d9: c8:37:77:96:e5:58:91:25:e0:77:b9:91:34:91:d0: b7:8c:20:33:11:c1:a5:c8:2d:65:f7:1b:39:54:a7: f4:12:5f:59:23:da:cb:f7:0b:4d:5f:52:24:a5:a3: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:7C:6E:CC:A1:4B:0D:D0:A4:F8:7F:A3:82:5B:80:25:E5:A3:01 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5f:e3:35:ac:95:d3:82:c4:1f:59:fd:90:01:42:ad:ae:c1: 2e:dc:42:a9:a4:c3:60:aa:69:3c:f5:76:ac:7a:01:ee:30:44: 94:ff:fa:0c:6a:22:d8:f3:aa:6b:ca:63:ed:da:01:e8:1f:8b: 4b:3a:04:62:8b:35:18:82:81:a2:33:2d:3a:c3:95:87:af:96: 19:69:45:28:96:24:8b:41:85:76:8f:95:75:11:c2:0e:9a:0d: 81:04:66:4c:54:0e:af:bd:06:6c:1e:f9:d4:1f:00:c2:da:0d: 0b:13:84:9a:b5:f2:a4:b0:79:68:64:d5:02:fb:45:a6:4d:67: b2:34:fc:2e:be:1c:3e:69:68:21:45:0c:44:56:5c:19:75:3b: 0e:c5:ed:3e:b5:21:13:7c:9f:9b:cc:cb:a4:64:0e:a5:8e:4d: 22:2a:af:01:8f:bc:20:2a:87:87:eb:a5:d2:4b:2a:96:70:d3: 76:35:ad:fc:7a:0c:e9:b6:1e:85:bc:31:e9:8d:4b:74:2a:38: da:69:83:67:3d:3d:88:17:0b:98:55:5f:99:59:eb:46:3d:12: 7a:b8:cc:1b:fe:c9:57:14:d7:1c:ee:f5:5b:dc:48:ae:21:cb: 83:a8:e6:32:34:dd:d8:01:03:fa:95:1b:d7:13:ce:b3:19:8f: 57:13:8c:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjYxMTAzMDIwMTIyWhcNMjYxMTEwMDIwMTIyWjAYMRYwFAYD VQQDEw02YWU5NDA3Mi1jMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g2a7cwQ1s28MNrsXkVSmM55w60QcpATzDFiVk+xyJZQ+V6Wia2tJSjHcyDW nM+AcfZqc5QqHS2LU1A5zXyszgKHogsHkX8Ui6HnL860L2N9Wb4yRj3hiUlfHCxa Dzw24ABk+WhKT4wHCOsrgmqPIlJbj5563YHcidzpqpaLEZ3qL/hf6shrLczDYvu2 cYAK817BPOlC8nnZvHNg+FCNcdHu9Dc0CVQDMr1CVy/AEu9f6SbNkCpmRIQoOVEa fwuMoV+DJwZMvFrHPVIqtZ1CDNnIN3eW5ViRJeB3uZE0kdC3jCAzEcGlyC1l9xs5 VKf0El9ZI9rL9wtNX1IkpaO0pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKX7fG7M oUsN0KT4f6OCW4Al5aMBMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbF/jNayV04LEH1n9kAFCra7BLtxCqaTDYKppPPV2rHoB7jBElP/6DGoi2POq a8pj7doB6B+LSzoEYos1GIKBojMtOsOVh6+WGWlFKJYki0GFdo+VdRHCDpoNgQRm TFQOr70GbB751B8AwtoNCxOEmrXypLB5aGTVAvtFpk1nsjT8Lr4cPmloIUUMRFZc GXU7DsXtPrUhE3yfm8zLpGQOpY5NIiqvAY+8ICqHh+ul0ksqlnDTdjWt/HoM6bYe hbwx6Y1LdCo42mmDZz09iBcLmFVfmVnrRj0SerjMG/7JVxTXHO71W9xIriHLg6jm MjTd2AED+pUb1xPOsxmPVxOMfg== -----END CERTIFICATE-----Generated at Wed Nov 4 23:19:36 2026 by rpki-client