$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft File: q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft (raw, json) Hash identifier: 9vP5CGl8+GHJdtZ/IkBss6lj+703g+TF/Lj/xX+HC88= Subject key identifier: 31:05:5B:57:7D:AF:09:6F:C2:B4:56:72:30:4B:1D:AB:CF:3B:AD:37 Authority key identifier: AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83 Certificate issuer: /CN=A91EAF29/serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft Manifest number: 50 Signing time: Tue 03 Nov 2026 09:24:07 +0000 Manifest this update: Tue 03 Nov 2026 09:24:06 +0000 Manifest next update: Tue 10 Nov 2026 09:24:06 +0000 Files and hashes: 1: q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl (hash: 5jZvsQyeZsxsDdBmWeDmQu2+lDSs0jRQmFZXPB0N2A4=) 2: 7E55CC0E610C11F1BA3A45B39947A888.roa (hash: eTtJJVqk7ZxJt5XY8BF1qdjuOrwSZ4xhlgAXc4b3Isw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF29, serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883 Validity Not Before: Nov 3 09:24:06 2026 GMT Not After : Nov 10 09:24:06 2026 GMT Subject: CN=6ae9a837-68cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:93:cb:63:4e:f2:9d:8c:31:41:35:52:b5: 97:38:fa:8c:c3:47:96:58:4e:64:bd:f4:bb:d1:bc: 74:e6:8a:ec:3a:a2:2b:fe:94:91:0c:01:fd:3f:18: 99:a9:7d:d6:88:6b:f5:3f:29:c6:9e:a3:ba:78:57: 34:5b:f0:15:43:3a:a5:9e:d5:a5:c7:28:c9:89:8a: 6f:d8:23:65:9f:a5:62:56:70:b0:68:73:9f:97:7d: 65:7f:2e:82:4e:b5:0e:c5:b8:03:37:04:ea:38:67: 02:55:6d:88:9d:6d:1d:4d:f9:e5:e0:9e:3a:7c:50: f6:34:d0:0c:00:8c:53:36:c3:fb:75:48:ac:a3:e9: 85:67:8f:57:86:b5:aa:87:c5:4b:0c:93:12:1d:a0: aa:7c:3b:05:11:0a:9b:1e:49:f5:fb:54:a9:ed:6c: 99:9c:31:a3:32:5e:4e:5c:3b:c9:27:b9:e3:be:b1: cd:79:ae:83:27:d3:d7:54:f6:91:26:d7:c4:6e:e6: c3:3a:55:64:7e:05:14:eb:98:1d:05:90:47:6f:a6: cb:89:b2:ea:01:ec:10:b3:0b:50:d3:86:54:3f:9e: 16:62:4f:3d:1b:3c:68:19:e5:28:43:f1:f4:ed:c6: 0e:cf:ec:8d:be:3b:89:b5:56:8e:36:f4:86:86:99: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:5B:57:7D:AF:09:6F:C2:B4:56:72:30:4B:1D:AB:CF:3B:AD:37 X509v3 Authority Key Identifier: keyid:AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2b:b8:40:1a:64:6e:cb:16:b6:0a:1c:f4:b2:d8:21:7a:ee: 47:48:66:9e:04:7d:9e:db:59:dd:be:98:0f:0c:c9:87:d3:47: e4:bd:ae:a8:c5:85:96:a0:be:a1:c3:c3:0f:1e:cd:cb:6c:b3: c5:ce:61:cd:c7:14:69:33:d3:50:b9:84:a3:fe:cf:00:c7:49: 59:e2:9d:65:5f:6f:dd:90:52:cb:98:ba:96:a1:f6:ed:2a:16: 66:65:a2:4e:a4:0f:fd:59:5a:b9:e7:11:fb:c5:1a:f1:29:86: d3:c6:8e:74:02:2f:1a:c7:f3:f0:38:a9:5e:21:b4:aa:73:2b: 78:d6:df:15:53:09:e5:c3:e6:db:7c:bc:c6:07:8c:de:b9:6c: 23:c0:9d:e7:69:10:78:54:80:7c:2b:cd:37:1b:41:b4:fe:41: f6:42:28:fe:d7:cd:58:2b:8a:1b:5b:ca:0e:ae:d0:0f:ee:73: 06:59:bb:d4:7d:a3:6b:a2:d4:1d:de:f1:a1:ea:de:1e:9e:75: 9b:fb:26:74:72:33:10:17:82:87:71:7a:11:c3:45:df:7a:93: 0b:6d:c8:9c:fc:de:e5:65:5a:be:e5:0b:30:46:98:86:22:d0: 65:48:27:db:19:b3:fe:71:55:18:c1:e5:5d:40:05:82:6a:50: 00:46:56:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUYyOTExMC8GA1UEBRMoQUJDMkU0ODRGRUIxRUM3OTM1RTBGMEYzOEYxOTE4QzYz OTUxODg4MzAeFw0yNjExMDMwOTI0MDZaFw0yNjExMTAwOTI0MDZaMBgxFjAUBgNV BAMTDTZhZTlhODM3LTY4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWq5PLY07ynYwxQTVStZc4+ozDR5ZYTmS99LvRvHTmiuw6oiv+lJEMAf0/GJmp fdaIa/U/Kcaeo7p4VzRb8BVDOqWe1aXHKMmJim/YI2WfpWJWcLBoc5+XfWV/LoJO tQ7FuAM3BOo4ZwJVbYidbR1N+eXgnjp8UPY00AwAjFM2w/t1SKyj6YVnj1eGtaqH xUsMkxIdoKp8OwURCpseSfX7VKntbJmcMaMyXk5cO8knueO+sc15roMn09dU9pEm 18Ru5sM6VWR+BRTrmB0FkEdvpsuJsuoB7BCzC1DThlQ/nhZiTz0bPGgZ5ShD8fTt xg7P7I2+O4m1Vo429IaGmbzdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMQVbV32v CW/CtFZyMEsdq887rTcwHwYDVR0jBBgwFoAUq8LkhP6x7Hk14PDzjxkYxjlRiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRjI5LzEwN0FDMzU2NjEw QzExRjFBQTNERTgxNTk5NDdBODg4L3E4TGtoUDZ4N0hrMTRQRHpqeGtZeGpsUmlJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcThMa2hQNng3SGsxNFBEemp4a1l4amxSaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RjI5LzEwN0FDMzU2NjEwQzExRjFBQTNERTgxNTk5NDdBODg4L3E4TGtoUDZ4N0hr MTRQRHpqeGtZeGpsUmlJTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVK7hAGmRuyxa2Chz0stgheu5HSGaeBH2e21ndvpgPDMmH00fkva6oxYWWoL6h w8MPHs3LbLPFzmHNxxRpM9NQuYSj/s8Ax0lZ4p1lX2/dkFLLmLqWofbtKhZmZaJO pA/9WVq55xH7xRrxKYbTxo50Ai8ax/PwOKleIbSqcyt41t8VUwnlw+bbfLzGB4ze uWwjwJ3naRB4VIB8K803G0G0/kH2Qij+181YK4obW8oOrtAP7nMGWbvUfaNrotQd 3vGh6t4ennWb+yZ0cjMQF4KHcXoRw0XfepMLbcic/N7lZVq+5QswRpiGItBlSCfb GbP+cVUYweVdQAWCalAARlb+ -----END CERTIFICATE-----Generated at Tue Nov 3 15:22:05 2026 by rpki-client