$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: BiklJkyWIC8xgra2Dm9Jp5zkaDSPwzdxI+WolsIkdGo= Subject key identifier: E9:7F:A6:97:1A:E9:61:7A:68:F9:0A:12:56:EA:2F:EF:AE:8F:E7:6B Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0EE1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0ECA Signing time: Fri 06 Nov 2026 14:41:19 +0000 Manifest this update: Fri 06 Nov 2026 14:41:19 +0000 Manifest next update: Fri 13 Nov 2026 14:41:19 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: rkfL40ECpIQpGtCihCFKpbwHH5pJnfVGzX5uaq1BasA=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3809 (0xee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Nov 6 14:41:19 2026 GMT Not After : Nov 13 14:41:19 2026 GMT Subject: CN=6aede70f-0f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:9a:69:58:ce:9c:5d:ae:f8:fd:b6:31:2b: fe:e5:a2:89:01:49:35:e7:02:ec:e4:17:f1:2e:74: b5:ee:b1:7c:86:81:70:af:c6:f5:d5:f8:0f:93:d2: 03:4d:6c:1a:a2:d0:f1:b7:c2:da:07:8c:60:37:ac: 1d:0e:4b:e4:ce:f7:16:29:a0:e8:fa:5f:cc:a1:20: af:d7:8e:d5:ca:15:42:73:43:9a:ed:87:e1:ad:8b: 21:d1:9d:4b:f4:55:15:b1:51:a6:a0:3e:65:02:ed: 4f:e5:04:fd:b9:93:f4:ae:30:e6:29:aa:76:a8:9e: b3:33:97:b0:b9:7b:c7:2b:f4:f1:7b:fa:10:e6:da: d7:e0:86:36:88:68:50:f6:7c:2b:eb:99:6d:d6:b6: 36:c0:17:83:1e:93:8a:e6:b8:c4:39:58:72:f1:aa: fb:f3:8e:37:fa:ee:44:72:af:eb:d9:7c:dc:cd:b7: dc:54:55:38:3f:48:db:ff:af:97:06:0d:5b:4b:ac: 53:fe:c1:b4:38:3f:24:f4:f6:6b:ff:4c:8d:f3:1e: b7:a6:15:e8:a3:32:ad:4b:2e:ba:61:3a:9f:89:f7: 02:4b:b8:21:a4:45:d9:35:49:e0:49:4b:de:9b:a6: 99:d6:7e:84:10:78:14:ab:b3:2a:96:25:26:26:7d: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:A6:97:1A:E9:61:7A:68:F9:0A:12:56:EA:2F:EF:AE:8F:E7:6B X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:28:2f:7a:44:a5:94:f0:4e:0b:77:ab:89:94:72:78:47:29: 2d:20:c0:b9:b5:1d:00:13:26:92:da:2e:9c:6f:53:e1:ce:2e: ab:55:bb:9a:3e:f2:ef:59:53:1b:23:33:a0:e3:c7:f6:e0:92: e2:b1:ae:54:19:5c:d3:a8:3c:5b:e7:c3:1c:28:3a:17:d6:ae: 01:dd:75:61:22:58:1e:5d:7e:87:8f:e8:be:dc:d0:26:92:7d: 4e:d6:ac:c9:68:e2:e7:59:f6:c4:ab:9b:a5:ce:af:29:af:5c: 06:ac:96:c7:f5:21:1c:ff:a4:7d:98:af:42:b8:20:72:d6:30: 90:93:79:d4:e8:d1:b4:07:cd:41:76:d7:ac:47:a8:dc:d0:16: e5:c4:5e:a5:2a:92:e3:f1:fc:9b:3d:1c:57:f5:f7:7d:80:a2: b4:bf:6c:ca:3a:d2:c3:5f:7a:ac:81:97:99:76:8e:63:49:86: 15:cd:ad:5c:d7:10:b2:63:ee:6b:3b:a2:0e:2c:0a:49:0a:42: 68:2d:0b:46:57:5b:7f:e5:f4:7b:3b:d8:ba:9a:89:19:a4:47: e5:c0:e7:29:0c:16:5c:95:69:2b:c6:ac:07:de:cc:1c:47:83: f1:bd:13:a7:85:fa:69:d5:4c:83:d7:e1:99:28:9d:cc:6b:82: 44:f3:c6:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYxMTA2MTQ0MTE5WhcNMjYxMTEzMTQ0MTE5WjAYMRYwFAYD VQQDEw02YWVkZTcwZi0wZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkG2aaVjOnF2u+P22MSv+5aKJAUk15wLs5BfxLnS17rF8hoFwr8b11fgPk9ID TWwaotDxt8LaB4xgN6wdDkvkzvcWKaDo+l/MoSCv147VyhVCc0Oa7YfhrYsh0Z1L 9FUVsVGmoD5lAu1P5QT9uZP0rjDmKap2qJ6zM5ewuXvHK/Txe/oQ5trX4IY2iGhQ 9nwr65lt1rY2wBeDHpOK5rjEOVhy8ar78443+u5Ecq/r2XzczbfcVFU4P0jb/6+X Bg1bS6xT/sG0OD8k9PZr/0yN8x63phXoozKtSy66YTqfifcCS7ghpEXZNUngSUve m6aZ1n6EEHgUq7MqliUmJn0ODQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOl/ppca 6WF6aPkKElbqL++uj+drMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuygvekSllPBOC3eriZRyeEcpLSDAubUdABMmktounG9T4c4uq1W7mj7y71lT GyMzoOPH9uCS4rGuVBlc06g8W+fDHCg6F9auAd11YSJYHl1+h4/ovtzQJpJ9Ttas yWji51n2xKubpc6vKa9cBqyWx/UhHP+kfZivQrggctYwkJN51OjRtAfNQXbXrEeo 3NAW5cRepSqS4/H8mz0cV/X3fYCitL9syjrSw196rIGXmXaOY0mGFc2tXNcQsmPu azuiDiwKSQpCaC0LRldbf+X0ezvYupqJGaRH5cDnKQwWXJVpK8asB97MHEeD8b0T p4X6adVMg9fhmSidzGuCRPPGnA== -----END CERTIFICATE-----Generated at Sun Nov 8 11:09:44 2026 by rpki-client