$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: V9S6Zzj8wbaypjio4SqoBvNzjOPclF4dB5UAjPjTEXg= Subject key identifier: F2:F7:C7:74:C3:AB:D7:A2:37:DB:87:7F:F7:B0:C0:A6:75:CB:EE:6B Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0E70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0E42 Signing time: Wed 04 Nov 2026 17:54:41 +0000 Manifest this update: Wed 04 Nov 2026 17:54:41 +0000 Manifest next update: Wed 11 Nov 2026 17:54:41 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: LGmRXf1OiKJPuiqC7/lNlxvzZP02FJkLoAYuKUR362k=) 2: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=) 3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=) 4: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=) 5: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3696 (0xe70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Nov 4 17:54:41 2026 GMT Not After : Nov 11 17:54:41 2026 GMT Subject: CN=6aeb7161-67af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:48:dc:54:05:a5:b1:00:36:56:03:21:0a: 4d:12:53:fe:b6:b6:44:5d:f9:61:7d:10:54:42:4f: ea:62:1b:0e:3a:8d:56:e8:81:64:db:ad:da:03:cb: fb:8f:59:11:9e:ff:e9:80:23:a4:1c:4d:e2:62:1e: 40:80:17:3c:e0:37:b8:73:06:46:23:c6:24:89:17: d6:f6:5b:9a:be:22:4b:ef:ff:58:60:53:38:9e:05: 03:1d:41:f2:4c:d3:9c:c6:24:7f:3e:06:8b:3b:17: e8:02:0a:9c:2d:4c:b3:3c:98:4c:2f:c1:f1:93:59: 3e:27:39:c5:9c:2c:7e:70:1b:12:e1:07:41:ec:c9: 22:73:62:4f:8e:5b:86:97:3f:4b:70:9b:f8:17:6b: 7e:9c:bc:1d:30:9c:a6:58:3d:0e:cc:8d:b1:ae:e4: 6a:00:1e:a4:13:c1:f1:db:49:4c:8c:b6:9a:9f:a8: 57:04:3a:b6:fe:70:2c:05:68:69:28:cb:8b:db:b5: f0:d9:3f:d2:ad:e4:2c:49:f4:e2:3f:76:3b:55:cc: de:bb:89:6f:58:c8:66:b7:17:04:e7:66:6e:8f:37: d8:bc:e6:ca:1f:c6:4a:15:55:11:cb:64:b4:a9:4d: ad:b9:b4:1c:6e:2b:a8:5a:25:bd:f8:d9:79:f5:dc: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F7:C7:74:C3:AB:D7:A2:37:DB:87:7F:F7:B0:C0:A6:75:CB:EE:6B X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:79:b8:47:7f:0a:b0:5f:d4:2f:2a:39:44:60:72:f9:cc:e0: 26:dd:95:ce:c8:8b:3c:05:5b:d6:0b:23:2c:d8:91:a7:a0:94: 24:1d:2f:3b:42:64:67:8e:58:28:84:b7:94:75:cd:2b:0b:2b: 69:7c:72:3a:55:30:3a:03:68:0d:4a:c1:66:4c:c5:94:d1:28: 0f:c9:4d:f5:f5:21:9f:ba:9a:a3:60:5c:91:fe:0b:1b:07:1d: d1:7c:41:d1:0f:a2:4a:0d:59:68:a3:f4:b6:6a:83:d1:db:a2: 51:4f:fc:bd:a6:9a:09:26:07:6a:cd:a4:eb:c5:88:3b:4e:43: fe:2a:2e:84:11:3a:b9:b4:ec:54:9f:b4:c8:17:bc:8f:7a:07: 65:89:1c:b2:73:47:4f:a1:4b:56:9a:c3:7f:d2:13:75:54:ce: 0b:37:38:10:c1:48:26:2f:d7:e9:f4:8b:40:05:0d:67:f6:f2: 0b:0c:cf:e4:66:ae:f5:71:49:90:0a:ac:ec:7d:16:6c:87:64: 1b:56:84:07:82:8d:b7:3d:3e:80:db:9e:e5:c7:f0:40:43:7d: 60:10:71:1d:43:15:fa:2a:a9:2a:d1:86:c7:74:de:fd:46:e3: e9:9f:6d:91:70:01:e4:e6:5e:d5:c3:c0:b8:fd:09:cd:c1:29: d2:6f:6e:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjYxMTA0MTc1NDQxWhcNMjYxMTExMTc1NDQxWjAYMRYwFAYD VQQDEw02YWViNzE2MS02N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKRI3FQFpbEANlYDIQpNElP+trZEXflhfRBUQk/qYhsOOo1W6IFk263aA8v7 j1kRnv/pgCOkHE3iYh5AgBc84De4cwZGI8YkiRfW9luaviJL7/9YYFM4ngUDHUHy TNOcxiR/PgaLOxfoAgqcLUyzPJhML8Hxk1k+JznFnCx+cBsS4QdB7Mkic2JPjluG lz9LcJv4F2t+nLwdMJymWD0OzI2xruRqAB6kE8Hx20lMjLaan6hXBDq2/nAsBWhp KMuL27Xw2T/SreQsSfTiP3Y7Vczeu4lvWMhmtxcE52ZujzfYvObKH8ZKFVURy2S0 qU2tubQcbiuoWiW9+Nl59dwwqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPL3x3TD q9eiN9uHf/ewwKZ1y+5rMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXm4R38KsF/ULyo5RGBy+czgJt2VzsiLPAVb1gsjLNiRp6CUJB0vO0JkZ45Y KIS3lHXNKwsraXxyOlUwOgNoDUrBZkzFlNEoD8lN9fUhn7qao2Bckf4LGwcd0XxB 0Q+iSg1ZaKP0tmqD0duiUU/8vaaaCSYHas2k68WIO05D/iouhBE6ubTsVJ+0yBe8 j3oHZYkcsnNHT6FLVprDf9ITdVTOCzc4EMFIJi/X6fSLQAUNZ/byCwzP5Gau9XFJ kAqs7H0WbIdkG1aEB4KNtz0+gNue5cfwQEN9YBBxHUMV+iqpKtGGx3Te/Ubj6Z9t kXAB5OZe1cPAuP0JzcEp0m9uNg== -----END CERTIFICATE-----Generated at Thu Nov 5 07:31:53 2026 by rpki-client