$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: r4hauimRkTVbwKkrIViz+YkV4W21I+ZNUXT5vc4IKkQ= Subject key identifier: 6E:32:55:4B:5E:AC:61:32:C0:D3:54:5F:BA:15:C6:DF:18:C7:39:49 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0458 Signing time: Thu 05 Nov 2026 00:25:20 +0000 Manifest this update: Thu 05 Nov 2026 00:25:20 +0000 Manifest next update: Thu 12 Nov 2026 00:25:20 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: kqMLp/qATl10wGlaxrzVYrtz25VQJSmyFDxa873EfpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Nov 5 00:25:20 2026 GMT Not After : Nov 12 00:25:20 2026 GMT Subject: CN=6aebccf0-8ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:86:3b:9e:5a:1b:6b:a6:39:de:e4:d1:42: f5:16:43:e6:c1:49:1e:d3:34:8c:eb:c7:07:c5:8a: 42:ac:4c:78:12:52:e9:10:a4:3a:e0:d3:e4:23:51: 06:72:06:52:20:05:fd:81:37:a3:ef:e0:9c:43:92: 5c:94:b6:a1:1c:f6:cc:0f:4f:96:68:4b:32:b0:86: 9d:c6:ea:ee:33:34:a3:7a:68:14:0a:02:56:3f:84: bd:61:56:9c:3f:12:1e:d3:9e:c4:0b:00:21:0c:a7: 76:da:38:b1:9d:e5:08:10:46:4f:ff:27:ab:e4:f3: ff:c7:55:bc:96:93:3b:83:30:1e:44:11:69:55:b5: 92:f8:8d:e4:df:07:9e:0c:b8:6f:91:c2:15:4b:e3: 39:31:79:3f:65:04:c5:92:12:5c:a5:bb:73:4b:49: dd:74:34:46:49:b9:fc:24:e5:0c:b9:c2:d4:92:f6: 44:36:a7:c4:7d:2c:96:bc:60:15:95:42:23:31:08: 7a:ae:62:08:dd:35:64:b8:3d:94:0d:a1:f7:23:67: af:79:b8:ce:a9:d3:59:75:80:30:77:db:2c:3f:1d: f7:e6:e0:f1:c1:fe:01:a9:31:dc:19:01:6b:ff:e2: 7d:ae:df:60:27:23:9b:53:98:a0:af:b0:65:c9:fd: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:32:55:4B:5E:AC:61:32:C0:D3:54:5F:BA:15:C6:DF:18:C7:39:49 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:21:2d:9c:18:6e:c8:c7:d1:cf:04:34:c4:f1:b7:75:c4: 17:b7:83:ce:7e:b9:bc:6d:52:89:28:f3:ae:c2:dc:99:84:fa: 79:d4:b9:a9:dc:55:06:b4:b7:be:51:d9:58:3a:1b:cc:17:92: a8:12:d0:2a:bc:47:2a:db:fa:5b:7a:a3:92:2f:9c:e6:62:23: 11:8d:5f:08:b5:b4:2b:82:c2:18:72:b1:0a:20:8a:ac:9d:a0: 9c:88:ba:f9:71:de:24:00:8b:22:9c:64:c7:a3:26:63:97:05: 14:9e:f2:68:9d:4f:ff:0a:7c:43:12:05:b4:4e:a4:88:77:c6: 33:b7:e8:b4:da:3b:ba:95:f8:fa:39:1b:e5:c9:f0:77:ff:ed: e0:94:09:5b:1a:97:59:d8:6f:bc:4a:df:29:b7:60:48:01:5d: d8:5d:8c:79:48:df:ba:52:ec:b4:82:70:d9:f8:c8:37:30:68: fc:7a:f6:36:dd:d5:55:2b:3c:26:02:c1:cd:06:81:e9:f0:d8: 3d:e5:b1:58:20:e7:f2:03:be:f7:a8:aa:39:ec:ed:47:62:e7: 09:a0:2f:9e:b1:3b:a5:50:c6:f1:4d:8d:12:2b:64:58:7f:16: 7e:a5:95:0a:ff:88:ba:5e:23:bb:f0:91:c4:5b:46:17:99:1b: dc:ef:f8:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjYxMTA1MDAyNTIwWhcNMjYxMTEyMDAyNTIwWjAYMRYwFAYD VQQDEw02YWViY2NmMC04ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiUOGO55aG2umOd7k0UL1FkPmwUke0zSM68cHxYpCrEx4ElLpEKQ64NPkI1EG cgZSIAX9gTej7+CcQ5JclLahHPbMD0+WaEsysIadxuruMzSjemgUCgJWP4S9YVac PxIe057ECwAhDKd22jixneUIEEZP/yer5PP/x1W8lpM7gzAeRBFpVbWS+I3k3wee DLhvkcIVS+M5MXk/ZQTFkhJcpbtzS0nddDRGSbn8JOUMucLUkvZENqfEfSyWvGAV lUIjMQh6rmII3TVkuD2UDaH3I2evebjOqdNZdYAwd9ssPx335uDxwf4BqTHcGQFr /+J9rt9gJyObU5igr7Blyf0b4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4yVUte rGEywNNUX7oVxt8YxzlJMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmz4hLZwYbsjH0c8ENMTxt3XEF7eDzn65vG1SiSjzrsLcmYT6edS5qdxVBrS3 vlHZWDobzBeSqBLQKrxHKtv6W3qjki+c5mIjEY1fCLW0K4LCGHKxCiCKrJ2gnIi6 +XHeJACLIpxkx6MmY5cFFJ7yaJ1P/wp8QxIFtE6kiHfGM7fotNo7upX4+jkb5cnw d//t4JQJWxqXWdhvvErfKbdgSAFd2F2MeUjfulLstIJw2fjINzBo/Hr2Nt3VVSs8 JgLBzQaB6fDYPeWxWCDn8gO+96iqOeztR2LnCaAvnrE7pVDG8U2NEitkWH8WfqWV Cv+Iul4ju/CRxFtGF5kb3O/43Q== -----END CERTIFICATE-----Generated at Thu Nov 5 16:41:53 2026 by rpki-client