$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: YvGzm7iNueLeVnYOJUf5k+K7yIcp6eaymXnzEar6vFw= Subject key identifier: 1E:61:F6:AA:7E:16:95:DA:AC:9C:59:95:80:0D:C3:6C:32:47:CF:C6 Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 0246 Signing time: Sun 15 Nov 2026 02:39:54 +0000 Manifest this update: Sun 15 Nov 2026 02:39:53 +0000 Manifest next update: Sun 22 Nov 2026 02:39:53 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: CmSD7z1UBQ3D6Bl9dO5yMzMIPRIY5lrfjrB/++IJL8I=) 2: NqbP4HOf_Jyjeg4GFVPMlc9Aumk.asa (hash: QSUd3sZtQESOmMmY99Q78BF0wQT6wi4H0X2SGisgJkA=) 3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: LW+WmGu6YlC9wjX0P0Tmes41deKyVjQFb3wGnRpYkOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Nov 15 02:39:53 2026 GMT Not After : Nov 22 02:39:53 2026 GMT Subject: CN=6af91b7a-e465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:0d:5f:41:a5:5f:ae:90:ae:8c:c7:98:7a: 31:1d:81:5a:a6:cf:8f:6d:8a:95:ce:c9:c4:07:d6: fc:f7:b3:a9:ad:48:ba:e3:54:98:a7:98:e0:4b:f7: 93:36:6f:9a:f2:e6:ea:11:a9:8b:40:60:d8:c9:61: d1:6c:61:5d:12:69:dd:e2:e6:28:b8:cf:b9:b5:47: f0:fc:1f:a9:1a:a1:98:48:84:7b:4e:65:64:95:29: ff:81:79:42:59:36:3a:f9:9f:3c:28:2b:e2:78:43: 04:08:47:cb:da:bd:5f:c9:4d:11:ab:a6:72:4a:6e: d7:e1:9a:b8:71:62:e4:68:b9:45:a2:4e:0d:04:c6: 2d:bc:58:59:59:7f:e9:39:a0:61:4e:1c:09:c2:81: 0f:7b:d5:22:c1:be:28:e6:38:a2:43:46:af:21:25: 16:46:fc:46:7c:f9:7b:ac:a1:ea:68:a7:b1:a9:0d: 85:c2:2e:e5:79:12:76:97:20:b3:ea:5a:42:c0:32: d4:c1:4c:0e:c0:32:ec:38:4f:03:d3:67:b8:e8:1b: 1a:6a:0c:3a:5e:9f:5f:dd:8c:01:78:af:8b:10:da: 7a:02:04:d5:f5:51:4b:1f:d2:33:05:21:6b:09:ef: 53:c9:56:70:56:5b:ab:87:a0:59:84:7c:8b:e5:6a: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:61:F6:AA:7E:16:95:DA:AC:9C:59:95:80:0D:C3:6C:32:47:CF:C6 X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:8c:34:c0:05:f1:5b:7b:6e:10:92:86:4b:c0:23:bd:9b: 89:7b:a1:3e:03:30:90:74:ff:ad:c7:ae:6c:1d:2a:3b:b5:65: 9c:3a:26:db:fc:4e:e9:90:d5:75:e4:17:74:78:3c:3d:f1:d4: 96:b0:ee:3e:be:1f:d3:b5:5f:72:e0:a2:21:ae:a7:8a:33:33: a1:f2:2f:39:24:6e:aa:cb:00:f7:1a:ff:6a:e5:55:e9:c0:e4: ab:4d:64:5c:b7:f3:74:e3:1f:5c:81:55:aa:b2:23:2c:34:96: 54:84:a3:b7:d7:31:4c:f8:41:a7:85:28:7b:30:a1:b0:86:30: 93:0f:5a:a8:ce:d1:87:98:57:6a:9e:fe:82:33:3f:be:06:c2: 59:25:33:fb:82:17:79:f9:4c:02:94:e6:d3:b2:dc:60:aa:b5: 90:13:f6:29:f7:cb:35:8c:81:9d:b0:36:2d:85:05:85:f4:d1: 2e:60:52:c8:5b:73:90:bb:f7:6a:18:77:ce:d8:2b:f4:bc:97: bd:c5:cc:f2:20:b2:f6:6b:47:33:fc:9d:e9:ab:5c:65:61:23: f0:43:f8:71:2f:db:31:74:97:79:f3:af:10:dc:f8:38:e0:ac: 92:57:7d:6e:30:34:5b:26:db:9b:f7:45:af:99:58:ff:c6:a2: 08:b0:81:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYxMTE1MDIzOTUzWhcNMjYxMTIyMDIzOTUzWjAYMRYwFAYD VQQDEw02YWY5MWI3YS1lNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVkNX0GlX66QrozHmHoxHYFaps+PbYqVzsnEB9b897OprUi641SYp5jgS/eT Nm+a8ubqEamLQGDYyWHRbGFdEmnd4uYouM+5tUfw/B+pGqGYSIR7TmVklSn/gXlC WTY6+Z88KCvieEMECEfL2r1fyU0Rq6ZySm7X4Zq4cWLkaLlFok4NBMYtvFhZWX/p OaBhThwJwoEPe9Uiwb4o5jiiQ0avISUWRvxGfPl7rKHqaKexqQ2Fwi7leRJ2lyCz 6lpCwDLUwUwOwDLsOE8D02e46Bsaagw6Xp9f3YwBeK+LENp6AgTV9VFLH9IzBSFr Ce9TyVZwVlurh6BZhHyL5Wr7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5h9qp+ FpXarJxZlYANw2wyR8/GMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnr2MNMAF8Vt7bhCShkvAI72biXuhPgMwkHT/rceubB0qO7VlnDom2/xO6ZDV deQXdHg8PfHUlrDuPr4f07VfcuCiIa6nijMzofIvOSRuqssA9xr/auVV6cDkq01k XLfzdOMfXIFVqrIjLDSWVISjt9cxTPhBp4UoezChsIYwkw9aqM7Rh5hXap7+gjM/ vgbCWSUz+4IXeflMApTm07LcYKq1kBP2KffLNYyBnbA2LYUFhfTRLmBSyFtzkLv3 ahh3ztgr9LyXvcXM8iCy9mtHM/yd6atcZWEj8EP4cS/bMXSXefOvENz4OOCskld9 bjA0Wybbm/dFr5lY/8aiCLCBAw== -----END CERTIFICATE-----Generated at Sun Nov 15 15:49:29 2026 by rpki-client