$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: d6ffkuu5LSjjrpepJV/Rjo6WOqK8SvoOI+jvZT+Klvk= Subject key identifier: F5:79:CA:5D:E9:36:F6:EE:10:98:C8:2A:E2:11:46:B0:98:92:34:71 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 021A Signing time: Thu 05 Nov 2026 03:45:33 +0000 Manifest this update: Thu 05 Nov 2026 03:45:32 +0000 Manifest next update: Thu 12 Nov 2026 03:45:32 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: QsqVmZOpkwBvhZzsJbLV1+EsjIaaO2vMJbyvQ9hxiYo=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 4: BF8E316480F311F1948786A865A30FBC.roa (hash: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Nov 5 03:45:32 2026 GMT Not After : Nov 12 03:45:32 2026 GMT Subject: CN=6aebfbdd-8620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:b5:49:57:28:f3:08:91:43:03:b2:46:7b: a9:20:d9:fd:08:92:4d:15:f8:54:f3:9b:56:91:28: 00:ce:a5:02:08:3e:6f:ec:c9:12:fd:d0:06:b7:bf: 43:4c:17:38:aa:ef:75:97:a9:c5:4b:00:71:43:70: b8:c4:d1:17:8e:03:0f:e0:71:f2:7c:79:b7:56:44: c7:b0:dd:82:01:a1:03:40:5f:df:b0:87:71:23:51: d2:14:85:38:76:c4:45:cc:ef:f5:a4:e2:6f:c7:44: 08:3b:a7:13:fe:d2:55:13:42:02:cf:61:cf:31:cd: 93:83:3e:71:93:b5:da:9f:5b:19:59:ee:6c:df:de: 99:8c:e9:b4:b3:de:ca:c1:28:00:d6:94:d9:8f:8e: a9:cd:08:7c:8b:8c:98:39:f1:b3:50:35:ad:0c:ed: b9:88:f4:5e:00:bb:21:0e:7c:68:6f:7b:9a:a3:51: d4:e9:1a:b5:0c:35:bb:18:11:f3:e4:76:b0:41:2a: 67:4a:64:b3:9a:4a:4a:45:53:c0:8a:6b:5f:e9:d4: e4:3c:93:ca:92:4b:12:27:9d:3d:5b:73:28:1d:96: 5a:98:6b:1e:83:78:19:b4:3d:94:e6:52:91:59:b5: 95:7e:e8:d2:e1:b9:4e:a9:5c:ee:c9:bb:5a:f4:3b: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:CA:5D:E9:36:F6:EE:10:98:C8:2A:E2:11:46:B0:98:92:34:71 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b6:b3:c3:dd:3c:24:f4:82:2f:8e:3f:38:7c:17:48:a3:db: 07:70:52:e2:1d:59:cc:40:a4:59:a8:0f:a5:cc:33:30:a3:dc: a4:a9:8b:d6:f0:43:34:4b:fc:7b:78:27:50:e1:1c:5c:ff:f1: 82:3f:10:13:ee:18:70:80:5a:c5:ae:1d:24:f2:b3:60:5e:29: 20:a1:ed:a7:33:c9:b7:59:2d:57:07:c4:48:b5:8e:73:a2:74: 07:2e:ed:8a:79:6f:2b:40:ec:bd:1e:a2:06:f3:a5:e9:32:5d: 2d:1c:91:80:ae:56:e8:da:aa:1e:0e:fa:ee:fb:6b:7e:9c:0b: ce:a7:8e:ff:4c:f4:48:d7:5b:e5:4d:39:d6:a0:e6:3e:6e:d4: 2e:ec:24:1e:ba:cd:d6:21:de:dc:3e:74:49:e7:30:60:05:66: 44:ad:ba:49:ea:e2:4a:0c:58:5f:5b:08:5f:31:dc:d2:db:92: 99:bb:6d:43:58:88:58:f6:07:11:de:46:52:db:eb:b5:62:bb: d8:d5:33:de:9f:7f:6e:f1:2c:3a:c9:b7:20:1d:87:7a:30:26: 32:ce:f2:82:11:fe:17:7d:15:43:14:cb:5a:d7:46:80:a4:29: 8e:ab:26:a5:7e:da:c1:50:24:d9:2f:91:4c:67:5e:31:41:8f: 64:d3:30:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYxMTA1MDM0NTMyWhcNMjYxMTEyMDM0NTMyWjAYMRYwFAYD VQQDEw02YWViZmJkZC04NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUS1SVco8wiRQwOyRnupINn9CJJNFfhU85tWkSgAzqUCCD5v7MkS/dAGt79D TBc4qu91l6nFSwBxQ3C4xNEXjgMP4HHyfHm3VkTHsN2CAaEDQF/fsIdxI1HSFIU4 dsRFzO/1pOJvx0QIO6cT/tJVE0ICz2HPMc2Tgz5xk7Xan1sZWe5s396ZjOm0s97K wSgA1pTZj46pzQh8i4yYOfGzUDWtDO25iPReALshDnxob3uao1HU6Rq1DDW7GBHz 5HawQSpnSmSzmkpKRVPAimtf6dTkPJPKkksSJ509W3MoHZZamGseg3gZtD2U5lKR WbWVfujS4blOqVzuybta9DtTgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV5yl3p NvbuEJjIKuIRRrCYkjRxMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7azw908JPSCL44/OHwXSKPbB3BS4h1ZzECkWagPpcwzMKPcpKmL1vBDNEv8 e3gnUOEcXP/xgj8QE+4YcIBaxa4dJPKzYF4pIKHtpzPJt1ktVwfESLWOc6J0By7t inlvK0DsvR6iBvOl6TJdLRyRgK5W6NqqHg767vtrfpwLzqeO/0z0SNdb5U051qDm Pm7ULuwkHrrN1iHe3D50SecwYAVmRK26SeriSgxYX1sIXzHc0tuSmbttQ1iIWPYH Ed5GUtvrtWK72NUz3p9/bvEsOsm3IB2HejAmMs7yghH+F30VQxTLWtdGgKQpjqsm pX7awVAk2S+RTGdeMUGPZNMwdQ== -----END CERTIFICATE-----Generated at Thu Nov 5 14:00:04 2026 by rpki-client