$ rpki-client -vvvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: Ih8qNPptf9+sJkwJhLjwjoL0AY/lbicY+vYK/bKfuz8= Subject key identifier: A5:8A:C4:D5:B4:EC:5E:A6:67:83:A3:76:FE:B8:41:16:55:E8:E9:06 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0CC3 Signing time: Wed 04 Nov 2026 18:43:46 +0000 Manifest this update: Wed 04 Nov 2026 18:43:46 +0000 Manifest next update: Wed 11 Nov 2026 18:43:46 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: XKGG4FbzyReMDCq8gWIHl28stJO3kVA4OAfAE39QnlU=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 18:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Nov 4 18:43:46 2026 GMT Not After : Nov 11 18:43:46 2026 GMT Subject: CN=6aeb7ce2-d141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:52:5f:1b:db:a9:c9:26:ae:26:ea:89:57: b6:4e:b5:57:d6:ec:c0:1d:44:f1:e9:91:91:8d:ea: b5:10:36:5c:e6:e9:a3:9f:77:62:42:87:cb:ee:ea: 9f:49:ca:98:39:10:96:a6:19:c6:79:6e:04:f0:88: d8:57:af:8e:25:ad:82:22:dc:07:78:74:73:9b:c0: d9:7d:42:08:88:2b:60:11:9d:43:bd:38:f4:f7:18: d8:99:dc:aa:9a:de:ea:50:a9:18:a8:73:42:fb:96: 63:c7:2e:da:e5:76:cb:da:8e:46:f2:9a:5d:23:a2: b1:04:c5:14:10:40:84:03:be:ef:c5:57:a6:bd:4f: 11:e5:b5:5a:bf:68:22:f5:7c:94:d2:62:7a:5b:ab: fa:59:7f:8b:7d:1b:bc:0a:31:f2:0e:91:11:63:c4: 4f:04:e3:a2:be:9a:54:bc:d8:73:df:33:52:1f:9c: a0:5d:91:da:da:9a:12:4c:e3:80:7a:b3:e3:3d:65: 89:ae:84:d6:a7:a3:b4:37:a0:89:d0:d2:16:b8:bd: 58:ec:ec:ad:ed:9b:88:10:24:84:74:59:5d:3c:a5: 34:69:1b:81:4f:1f:bd:87:f7:70:f2:fa:f8:aa:e7: e8:13:37:92:33:52:8e:e2:08:db:ef:5a:97:09:1b: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:C4:D5:B4:EC:5E:A6:67:83:A3:76:FE:B8:41:16:55:E8:E9:06 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:97:3c:91:40:7d:ec:cd:f7:7f:5f:93:5b:14:cc:0e:93: a8:5d:33:74:9a:8b:1e:4d:6f:cc:9a:39:a1:2a:ea:71:40:74: 9b:09:e1:0b:98:17:f3:4d:98:8f:78:0b:4f:c9:2f:d1:8f:1f: df:68:16:86:0d:ed:08:a6:92:7d:dc:40:7d:cf:a0:07:7c:5a: 20:20:1a:1c:3c:98:d5:10:57:92:86:b4:b9:d6:09:df:5c:70: 85:93:17:05:f7:2f:d8:69:14:9a:0c:10:6e:89:96:d0:95:6e: b8:6c:55:3b:58:5d:09:8d:0a:00:b6:f5:dc:b2:37:4e:3d:84: 89:dc:d9:b7:27:27:5f:fc:58:7f:cb:1c:a3:d4:7b:47:8d:38: d5:96:ce:53:5e:52:3d:85:50:ef:1e:e7:f9:7e:5e:52:a2:56: e2:dd:db:52:5f:96:60:80:fc:64:76:3b:3c:5d:a3:90:7d:db: 10:71:0c:9e:6f:6c:a3:5a:ff:17:fb:66:2e:a2:9c:0f:f9:0f: e4:6b:d2:69:0f:e7:53:34:e6:01:90:6e:0e:e2:11:df:f6:08: eb:2e:a8:c8:db:36:15:26:07:ef:ef:a3:56:d7:55:cf:42:81: 9e:a3:31:d6:d5:24:ed:d0:3a:2c:b0:91:a6:6a:6f:f4:92:ab: d0:4e:e2:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYxMTA0MTg0MzQ2WhcNMjYxMTExMTg0MzQ2WjAYMRYwFAYD VQQDEw02YWViN2NlMi1kMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aRSXxvbqckmribqiVe2TrVX1uzAHUTx6ZGRjeq1EDZc5umjn3diQofL7uqf ScqYORCWphnGeW4E8IjYV6+OJa2CItwHeHRzm8DZfUIIiCtgEZ1DvTj09xjYmdyq mt7qUKkYqHNC+5Zjxy7a5XbL2o5G8ppdI6KxBMUUEECEA77vxVemvU8R5bVav2gi 9XyU0mJ6W6v6WX+LfRu8CjHyDpERY8RPBOOivppUvNhz3zNSH5ygXZHa2poSTOOA erPjPWWJroTWp6O0N6CJ0NIWuL1Y7Oyt7ZuIECSEdFldPKU0aRuBTx+9h/dw8vr4 qufoEzeSM1KO4gjb71qXCRtk1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWKxNW0 7F6mZ4Ojdv64QRZV6OkGMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtGXPJFAfezN939fk1sUzA6TqF0zdJqLHk1vzJo5oSrqcUB0mwnhC5gX802Y j3gLT8kv0Y8f32gWhg3tCKaSfdxAfc+gB3xaICAaHDyY1RBXkoa0udYJ31xwhZMX Bfcv2GkUmgwQbomW0JVuuGxVO1hdCY0KALb13LI3Tj2EidzZtycnX/xYf8sco9R7 R4041ZbOU15SPYVQ7x7n+X5eUqJW4t3bUl+WYID8ZHY7PF2jkH3bEHEMnm9so1r/ F/tmLqKcD/kP5GvSaQ/nUzTmAZBuDuIR3/YI6y6oyNs2FSYH7++jVtdVz0KBnqMx 1tUk7dA6LLCRpmpv9JKr0E7i5A== -----END CERTIFICATE-----Generated at Thu Nov 5 17:28:06 2026 by rpki-client