$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: 1wP2fldz4D5NRIBU1Lg1+EvBwgXJ+yFTitbcUPpY4R4= Subject key identifier: 11:B4:66:AC:47:95:B9:1A:0B:8B:83:E2:60:F2:41:F4:30:63:0B:B1 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 025A Signing time: Thu 05 Nov 2026 02:58:21 +0000 Manifest this update: Thu 05 Nov 2026 02:58:20 +0000 Manifest next update: Thu 12 Nov 2026 02:58:20 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: YfwML5kcNKL88P9SlHjSrClBa2E64wF0Lkpd5F0jHgU=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 02:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Nov 5 02:58:20 2026 GMT Not After : Nov 12 02:58:20 2026 GMT Subject: CN=6aebf0cd-1817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:4e:0f:01:9e:ca:14:c3:33:b5:c6:6f:ce: 82:69:bc:f5:2f:8f:8e:7f:ef:08:db:9a:a4:f8:64: 9c:c9:af:fe:8e:96:1d:5b:06:9f:dc:85:0b:26:d1: f2:3a:e5:dd:ae:ae:bf:8a:45:ac:08:67:78:dc:fa: 62:7e:cf:7d:ee:40:27:a9:ce:2e:a1:d2:3e:56:91: 18:15:40:a0:98:b9:bc:4c:24:63:d9:81:cb:97:1a: e0:42:61:33:44:48:7d:ce:d7:01:df:c8:88:cd:8f: 72:f3:d7:1b:4d:28:80:04:2f:d5:92:af:d5:ec:26: 46:5c:8a:7a:d6:fd:84:fb:6b:8d:ca:21:35:7e:82: 7f:b9:1f:c7:0b:ea:29:3d:83:7e:a9:15:7a:fe:0f: 78:0d:67:6b:f8:46:45:02:1b:6f:08:25:1d:6f:0d: 54:b1:5c:9f:c3:fc:37:4d:c5:bf:0a:e7:e9:0c:a2: 91:11:ad:de:45:9d:e5:f8:b2:9d:db:42:9c:81:e7: 98:d2:eb:18:10:a7:33:ea:19:87:bd:a8:1d:29:02: ff:41:cd:6e:85:00:3c:db:3a:0a:ab:ff:5a:75:a5: 82:1d:c5:0e:41:a1:8d:1c:ee:70:6e:5b:bd:0c:0f: d7:ff:0d:b7:b4:67:ea:46:b3:c5:32:97:36:3a:c7: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:66:AC:47:95:B9:1A:0B:8B:83:E2:60:F2:41:F4:30:63:0B:B1 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ae:5c:c7:5a:c3:9a:32:5d:c1:24:0d:e4:43:08:15:b5:87: 9b:bc:f0:53:a6:b6:a2:44:e6:76:f9:a7:fe:6d:a4:10:9f:aa: af:2f:bd:11:10:06:34:6a:35:06:d9:1e:90:8c:e1:f5:df:67: b8:48:8a:94:70:15:d7:ef:29:fc:31:17:8d:50:f3:a6:fc:bd: 2a:06:f4:0c:bf:e4:65:de:c3:2c:19:40:c4:73:25:22:64:d2: 19:61:c6:e3:99:a3:61:30:91:d9:a8:ae:78:3e:d2:6a:fb:85: 20:e3:9c:e4:40:1f:75:3b:49:9e:47:ba:9a:56:ea:5d:a0:c5: 85:17:0d:ad:fc:21:b6:90:15:84:1b:f8:54:1f:fe:1b:a8:66: c6:79:ba:99:d4:ce:42:af:1c:f9:19:ec:09:0c:57:a5:85:2f: 57:91:a0:74:e8:b1:1e:8c:16:14:ed:6c:38:28:41:5f:90:83: 55:c8:4b:d5:b4:e7:b1:3d:ef:2b:92:9b:df:ec:3a:e1:02:ff: d5:42:7c:fa:22:2e:c0:74:e6:bd:d6:60:78:b2:7e:79:d1:94: 1d:d1:c4:8d:83:c6:aa:cc:ed:69:44:cd:cb:b4:ce:ea:c7:3f: d7:83:10:57:c0:5a:0b:63:b2:1e:8f:04:60:59:89:ea:78:88: df:16:ec:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjYxMTA1MDI1ODIwWhcNMjYxMTEyMDI1ODIwWjAYMRYwFAYD VQQDEw02YWViZjBjZC0xODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1RODwGeyhTDM7XGb86Cabz1L4+Of+8I25qk+GScya/+jpYdWwaf3IULJtHy OuXdrq6/ikWsCGd43Ppifs997kAnqc4uodI+VpEYFUCgmLm8TCRj2YHLlxrgQmEz REh9ztcB38iIzY9y89cbTSiABC/Vkq/V7CZGXIp61v2E+2uNyiE1foJ/uR/HC+op PYN+qRV6/g94DWdr+EZFAhtvCCUdbw1UsVyfw/w3TcW/CufpDKKREa3eRZ3l+LKd 20KcgeeY0usYEKcz6hmHvagdKQL/Qc1uhQA82zoKq/9adaWCHcUOQaGNHO5wblu9 DA/X/w23tGfqRrPFMpc2Osc/ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBG0ZqxH lbkaC4uD4mDyQfQwYwuxMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC65cx1rDmjJdwSQN5EMIFbWHm7zwU6a2okTmdvmn/m2kEJ+qry+9ERAGNGo1 BtkekIzh9d9nuEiKlHAV1+8p/DEXjVDzpvy9Kgb0DL/kZd7DLBlAxHMlImTSGWHG 45mjYTCR2aiueD7SavuFIOOc5EAfdTtJnke6mlbqXaDFhRcNrfwhtpAVhBv4VB/+ G6hmxnm6mdTOQq8c+RnsCQxXpYUvV5GgdOixHowWFO1sOChBX5CDVchL1bTnsT3v K5Kb3+w64QL/1UJ8+iIuwHTmvdZgeLJ+edGUHdHEjYPGqsztaUTNy7TO6sc/14MQ V8BaC2OyHo8EYFmJ6niI3xbsVg== -----END CERTIFICATE-----Generated at Thu Nov 5 07:13:32 2026 by rpki-client