$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: BG7vgBYqgvdDnrJOxB70RtrYtkEMqAVFJ8u4CH64TUE= Subject key identifier: 27:D4:CA:A3:E8:57:1E:B4:39:64:80:4D:26:A2:65:80:B0:B9:8A:93 Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05FD Signing time: Mon 02 Nov 2026 23:43:13 +0000 Manifest this update: Mon 02 Nov 2026 23:43:12 +0000 Manifest next update: Mon 09 Nov 2026 23:43:12 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: ZOgtlZswe9FVGXGn0OJglsLNGHGM19sdp39Q8dGIs4w=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: B7eeynmZn5QMHRy3iJsabBdBW926YXoXtc97+OPhdYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 23:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Nov 2 23:43:12 2026 GMT Not After : Nov 9 23:43:12 2026 GMT Subject: CN=6ae92011-5d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:63:bb:16:c1:fb:b3:be:f0:da:5d:2f:98: 05:4b:8e:4c:5c:37:59:83:2d:1e:60:62:2d:a0:49: 5f:75:67:10:37:f9:d1:19:27:8e:e2:00:5d:d1:44: b9:dc:bb:b8:18:d0:d8:ad:30:6d:c3:c0:68:57:fb: 4f:2f:f6:7a:b6:dc:3c:76:06:04:98:59:de:77:75: a7:d6:87:c5:1b:31:6d:22:b8:0b:06:0a:43:05:f9: 97:c1:20:aa:ee:9c:b1:be:d0:56:cc:8e:bf:02:00: ce:c3:41:64:ba:d9:61:96:1d:5d:e8:f1:74:9d:5f: 04:22:df:10:9d:18:8e:7d:54:d1:4a:09:b7:d8:7a: af:65:ff:b0:45:81:79:f4:21:1b:6e:25:16:74:ca: 2c:08:de:21:3e:ec:d6:4d:f2:cc:a0:72:4f:a0:b9: 09:6e:cd:bc:8d:bb:ed:14:a8:15:85:30:7e:ba:06: 9b:57:86:16:d4:be:d9:cb:17:8c:4e:0f:ae:fc:42: 25:23:21:5f:73:f6:60:85:75:99:8c:e4:bb:c2:ed: 35:9b:4f:21:14:d3:70:b7:61:4a:ca:8c:1b:dd:ce: fa:86:dd:a2:73:61:44:d4:3e:6e:84:4b:f9:5e:22: 49:95:41:33:5e:d5:f1:8a:4a:e4:ef:d7:40:14:79: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:CA:A3:E8:57:1E:B4:39:64:80:4D:26:A2:65:80:B0:B9:8A:93 X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:d1:8c:18:94:e0:85:89:88:f3:fe:05:28:7f:15:13:33: bf:84:60:a1:1c:e9:a6:57:05:8b:fe:d5:da:de:aa:4d:ad:c2: b2:04:93:86:e2:e2:51:56:49:28:26:81:90:c9:46:dd:7e:ff: ba:0d:da:93:06:4e:dd:21:96:9d:1b:f5:3c:2f:fb:03:9b:d1: da:28:31:7a:d3:8c:b9:a6:6f:df:99:b2:d7:27:05:cb:6a:ac: 9a:cf:db:99:64:bc:f4:db:53:fb:c5:63:74:22:01:b7:aa:a3: b7:36:b9:0d:d0:7b:ae:5e:db:99:2e:f6:dc:43:f1:f3:53:9f: 83:db:bc:9a:10:4d:92:ac:e0:5d:15:9a:09:58:7b:73:e5:c5: 8f:08:19:2d:93:8f:ca:17:1d:6c:52:6d:79:e3:f6:23:69:2f: 33:e9:a6:6d:1d:93:b4:9a:de:50:ae:67:48:80:29:9b:6a:a0: 0a:f2:19:87:f6:c3:a3:38:0a:b5:cc:d9:a9:c5:63:c7:15:0d: f4:46:ef:46:40:d2:6e:b5:6c:b9:70:a2:94:ab:18:92:41:30: 78:f4:b8:e1:2a:81:99:e7:e3:81:79:7d:3e:69:00:77:df:6f: d2:c5:b2:14:41:60:d1:00:3b:40:e4:12:30:99:ed:31:f3:5d: fe:99:bc:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYxMTAyMjM0MzEyWhcNMjYxMTA5MjM0MzEyWjAYMRYwFAYD VQQDEw02YWU5MjAxMS01ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotVjuxbB+7O+8NpdL5gFS45MXDdZgy0eYGItoElfdWcQN/nRGSeO4gBd0US5 3Lu4GNDYrTBtw8BoV/tPL/Z6ttw8dgYEmFned3Wn1ofFGzFtIrgLBgpDBfmXwSCq 7pyxvtBWzI6/AgDOw0Fkutlhlh1d6PF0nV8EIt8QnRiOfVTRSgm32HqvZf+wRYF5 9CEbbiUWdMosCN4hPuzWTfLMoHJPoLkJbs28jbvtFKgVhTB+ugabV4YW1L7ZyxeM Tg+u/EIlIyFfc/ZghXWZjOS7wu01m08hFNNwt2FKyowb3c76ht2ic2FE1D5uhEv5 XiJJlUEzXtXxikrk79dAFHmrnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfUyqPo Vx60OWSATSaiZYCwuYqTMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7DRjBiU4IWJiPP+BSh/FRMzv4RgoRzpplcFi/7V2t6qTa3CsgSThuLiUVZJ KCaBkMlG3X7/ug3akwZO3SGWnRv1PC/7A5vR2igxetOMuaZv35my1ycFy2qsms/b mWS89NtT+8VjdCIBt6qjtza5DdB7rl7bmS723EPx81Ofg9u8mhBNkqzgXRWaCVh7 c+XFjwgZLZOPyhcdbFJteeP2I2kvM+mmbR2TtJreUK5nSIApm2qgCvIZh/bDozgK tczZqcVjxxUN9EbvRkDSbrVsuXCilKsYkkEwePS44SqBmefjgXl9PmkAd99v0sWy FEFg0QA7QOQSMJntMfNd/pm8hg== -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:27 2026 by rpki-client