$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft File: aOkXw1nR1G-x79ULcydnbeApSt8.mft (raw, json) Hash identifier: 3sy8krYiZCb6UZdE2a+UzYF8+Hn/fCZSSMHJ6QXsatQ= Subject key identifier: 1E:26:DE:84:DC:15:46:B4:DD:09:84:68:6F:DC:11:92:61:36:5C:EF Authority key identifier: 68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF Certificate issuer: /CN=A91A2F6C/serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft Manifest number: 0AC3 Signing time: Wed 04 Nov 2026 19:43:36 +0000 Manifest this update: Wed 04 Nov 2026 19:43:36 +0000 Manifest next update: Wed 11 Nov 2026 19:43:36 +0000 Files and hashes: 1: aOkXw1nR1G-x79ULcydnbeApSt8.crl (hash: S8I/2e3dxslSj3+JK4WEseAN2Bgd5CgMq7WjK3VKogk=) 2: 8746F506B54C11F1AB2B07BF9DEE528E.roa (hash: xqQ8RcJ+KeY8he+b6ly8ijnBrNknvFeLnsjxPvuvK6c=) 3: oqJx-jvqVcsqpHYrmBQJRm0qYx0.asa (hash: RUMqslC7bug77qj14G+7Ah5OwG26LsWHGYxirdhoh20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 19:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C, serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Validity Not Before: Nov 4 19:43:36 2026 GMT Not After : Nov 11 19:43:36 2026 GMT Subject: CN=6aeb8ae8-391a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:06:14:da:c3:9f:40:cb:3d:16:ed:17:4a: 4d:d7:3c:ad:66:01:06:12:f8:7f:51:00:de:1a:12: c8:f1:c9:cb:c8:69:ef:a2:ee:54:f9:33:c4:89:6f: 60:76:00:6a:ee:65:78:e6:c9:da:21:37:80:85:1a: 5d:c2:7e:96:18:a7:37:35:4f:63:43:3c:b8:82:92: cc:7b:08:62:87:9c:85:1e:0b:b3:2d:0e:5f:f8:4e: a0:87:cf:66:ee:9f:7a:9f:43:6b:7f:7a:1c:60:18: b1:a8:6a:67:7c:c2:f3:ed:3a:94:38:30:90:f4:5f: 69:f5:d2:6d:3a:6a:da:47:94:54:86:ac:97:95:4e: 93:8d:1e:26:34:c7:99:52:42:a3:75:04:19:e2:ba: 32:4c:77:07:a7:93:57:c4:2b:e7:32:e9:31:ff:f3: 6c:cf:b9:27:77:36:ff:4c:6c:c7:8f:a8:e8:8f:31: 57:c1:f8:e2:80:2a:e7:58:e8:b9:94:38:d4:23:e7: e1:a2:c5:1d:a0:23:9e:90:84:c5:ea:9b:cb:52:6c: a3:d6:3b:5a:72:e7:27:90:5e:94:12:5d:0f:20:f7: cc:7d:58:dd:27:b9:17:62:89:48:9c:00:a3:1c:b4: b1:c1:2d:df:d4:70:fd:0d:2e:45:a3:41:59:a9:39: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:DE:84:DC:15:46:B4:DD:09:84:68:6F:DC:11:92:61:36:5C:EF X509v3 Authority Key Identifier: keyid:68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:bd:6e:5b:bb:18:d3:e4:90:2d:d3:56:29:38:df:87:cc: 04:c9:80:20:fa:07:69:88:0a:af:4d:2e:bc:94:8d:4b:f3:66: ee:65:e6:16:32:6b:e4:f8:67:84:e3:77:3a:e4:1d:10:7d:47: 66:e4:e7:a9:7a:9c:93:6e:f7:14:e8:91:25:94:3b:d1:b9:30: 3b:60:01:1a:4d:39:d8:e0:b4:14:5b:06:8b:f3:ea:35:2f:6e: b1:27:22:82:2a:26:a7:f7:e3:72:dc:34:31:cf:bd:bf:32:f1: 4b:0a:1b:4d:54:51:84:35:0a:2e:45:9e:6b:52:31:8b:96:bf: dc:9c:13:eb:38:56:dc:d6:73:70:c0:9d:9e:77:26:f0:0b:99: 21:47:84:d9:84:8b:b6:8a:87:ce:ea:82:69:8b:3a:df:5c:c5: 98:95:b8:f1:7a:81:1f:0b:aa:77:c5:14:bf:1d:9e:28:d7:df: ac:4e:57:db:30:27:97:2e:55:f0:a7:a9:e5:b2:36:64:c9:77: d5:34:18:11:f4:ee:3b:27:2e:18:d4:75:eb:74:aa:93:6e:c3: 0a:79:c9:58:ae:66:7b:d4:45:74:ae:e7:12:af:61:75:31:7a: 51:f5:eb:2f:73:09:f0:70:9b:c3:cd:7f:8d:05:c1:78:0d:ee: c9:5d:ff:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkY2QzExMC8GA1UEBRMoNjhFOTE3QzM1OUQxRDQ2RkIxRUZENTBCNzMyNzY3NkRF MDI5NEFERjAeFw0yNjExMDQxOTQzMzZaFw0yNjExMTExOTQzMzZaMBgxFjAUBgNV BAMTDTZhZWI4YWU4LTM5MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJIwYU2sOfQMs9Fu0XSk3XPK1mAQYS+H9RAN4aEsjxycvIae+i7lT5M8SJb2B2 AGruZXjmydohN4CFGl3CfpYYpzc1T2NDPLiCksx7CGKHnIUeC7MtDl/4TqCHz2bu n3qfQ2t/ehxgGLGoamd8wvPtOpQ4MJD0X2n10m06atpHlFSGrJeVTpONHiY0x5lS QqN1BBniujJMdwenk1fEK+cy6TH/82zPuSd3Nv9MbMePqOiPMVfB+OKAKudY6LmU ONQj5+GixR2gI56QhMXqm8tSbKPWO1py5yeQXpQSXQ8g98x9WN0nuRdiiUicAKMc tLHBLd/UcP0NLkWjQVmpOWJbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHibehNwV RrTdCYRob9wRkmE2XO8wHwYDVR0jBBgwFoAUaOkXw1nR1G+x79ULcydnbeApSt8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRjZDLzlFMzFGM0IyOEFC MzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUcteDc5VUxjeWRuYmVBcFN0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU9rWHcxblIxRy14NzlVTGN5ZG5iZUFwU3Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RjZDLzlFMzFGM0IyOEFCMzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUct eDc5VUxjeWRuYmVBcFN0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEyr1uW7sY0+SQLdNWKTjfh8wEyYAg+gdpiAqvTS68lI1L82buZeYWMmvk+GeE 43c65B0QfUdm5OepepyTbvcU6JEllDvRuTA7YAEaTTnY4LQUWwaL8+o1L26xJyKC Kian9+Ny3DQxz72/MvFLChtNVFGENQouRZ5rUjGLlr/cnBPrOFbc1nNwwJ2edybw C5khR4TZhIu2iofO6oJpizrfXMWYlbjxeoEfC6p3xRS/HZ4o19+sTlfbMCeXLlXw p6nlsjZkyXfVNBgR9O47Jy4Y1HXrdKqTbsMKeclYrmZ71EV0rucSr2F1MXpR9esv cwnwcJvDzX+NBcF4De7JXf/W -----END CERTIFICATE-----Generated at Thu Nov 5 14:41:32 2026 by rpki-client