$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json) Hash identifier: r+t/EvBwCrTXQek+Z3rJtJ+GG8Pk0mTR5wEbOFcwQiU= Subject key identifier: 7D:08:79:7F:AB:A5:D7:32:DD:28:36:B0:42:95:22:85:0C:53:D6:40 Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft Manifest number: 41 Signing time: Tue 03 Nov 2026 09:33:32 +0000 Manifest this update: Tue 03 Nov 2026 09:33:32 +0000 Manifest next update: Tue 10 Nov 2026 09:33:32 +0000 Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: xInjyx+EeDgqo15jqTiDmT0hlRH2M9e06a/xohF1Ak4=) 2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Validity Not Before: Nov 3 09:33:32 2026 GMT Not After : Nov 10 09:33:32 2026 GMT Subject: CN=6ae9aa6c-950f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:07:33:ab:ed:15:2a:73:1f:8f:6c:74:95: 92:03:01:2a:03:34:a6:84:8e:42:a1:1e:71:79:45: e0:a7:6a:81:85:b8:5b:3d:6a:63:81:dc:23:d4:27: 09:bd:61:92:1c:2e:23:4f:c5:9d:3e:31:32:b9:7a: 53:e1:75:8e:22:36:ed:2b:9e:8b:51:b5:b1:45:4d: 66:e8:c0:c0:a9:ea:03:b0:13:ee:19:bd:4a:92:76: 01:05:ff:42:a6:e7:12:7f:16:db:d0:b8:f9:61:45: 91:83:bc:70:cd:6d:74:e6:ac:93:07:c1:1b:9d:6c: de:1d:8e:4a:0a:54:05:e2:64:fe:7b:c4:08:2a:fd: 38:0b:cb:a9:07:61:b2:07:c1:2b:1e:79:e4:65:19: 87:ef:f4:1b:22:bd:7e:f7:5e:90:26:0c:63:72:f8: 94:b9:cb:15:d9:ef:b1:1a:cf:4d:9e:fa:07:76:7f: 8e:3d:e7:e1:8e:a3:1d:d3:f9:d2:dd:62:b4:de:55: 90:b8:44:34:d2:03:ee:a7:25:cd:1a:2a:03:e6:79: 79:c9:e3:11:79:93:a5:ac:b5:4a:cf:37:04:10:b3: d2:e3:1c:17:02:af:8a:b2:08:78:9f:16:3f:8c:25: 91:2a:a5:2c:3e:32:f4:3d:96:5a:10:74:a4:bb:06: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:79:7F:AB:A5:D7:32:DD:28:36:B0:42:95:22:85:0C:53:D6:40 X509v3 Authority Key Identifier: keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:65:76:c9:7a:6b:96:20:cf:85:4e:f7:fe:d8:33:d0:91:7d: 6b:ce:5f:16:a5:a5:f4:b9:83:b4:d9:0c:94:c7:7b:87:84:25: 3e:6c:a8:5e:ac:d2:11:4e:7a:8c:c3:57:d2:5a:dc:dc:8e:57: cf:9f:a9:2b:6a:5b:e8:63:b6:84:16:c7:51:35:7e:a0:66:1b: 11:ed:19:d1:9a:8c:4b:1e:c2:4d:91:47:8a:03:3c:d2:46:e0: 0e:38:ec:e3:ef:a7:f8:8d:ac:eb:86:7e:51:d6:6f:ca:4c:47: d9:cb:de:e8:ea:0f:eb:8c:ce:6c:7b:05:fa:7b:3a:ab:93:6c: 00:67:ee:da:75:b4:bd:7f:c2:da:fe:c1:c0:0d:2f:4d:d0:b6: 46:d8:66:70:f7:47:e9:72:4a:84:82:96:97:5e:b5:29:c7:27: 12:41:2e:fc:8d:62:d4:d5:55:3f:01:f4:f5:72:7b:66:e4:47: 36:d2:8f:fb:63:f0:c8:cd:d1:93:8a:a0:d5:5c:2f:af:dd:93: 37:e9:f9:3e:73:ca:b1:6f:86:29:fe:a0:db:39:c5:fd:54:08: 3d:6d:61:ec:d6:92:3c:ac:b8:aa:58:8b:a7:19:4d:5f:fb:67: 54:96:6d:76:84:78:c6:f7:8f:14:eb:aa:9a:60:05:e4:4b:be: 52:5b:b5:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0VEOTExMC8GA1UEBRMoM0I2M0UxRTRGMTFGMEY5Nzk1ODM2MTAxRUE2NkU2MkE1 OUZDNkVGODAeFw0yNjExMDMwOTMzMzJaFw0yNjExMTAwOTMzMzJaMBgxFjAUBgNV BAMTDTZhZTlhYTZjLTk1MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRBAczq+0VKnMfj2x0lZIDASoDNKaEjkKhHnF5ReCnaoGFuFs9amOB3CPUJwm9 YZIcLiNPxZ0+MTK5elPhdY4iNu0rnotRtbFFTWbowMCp6gOwE+4ZvUqSdgEF/0Km 5xJ/FtvQuPlhRZGDvHDNbXTmrJMHwRudbN4djkoKVAXiZP57xAgq/TgLy6kHYbIH wSseeeRlGYfv9BsivX73XpAmDGNy+JS5yxXZ77Eaz02e+gd2f4495+GOox3T+dLd YrTeVZC4RDTSA+6nJc0aKgPmeXnJ4xF5k6WstUrPNwQQs9LjHBcCr4qyCHifFj+M JZEqpSw+MvQ9lloQdKS7Bk9zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfQh5f6ul 1zLdKDawQpUihQxT1kAwHwYDVR0jBBgwFoAUO2Ph5PEfD5eVg2EB6mbmKln8bvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRUQ5LzE5MjZDQTdDNzZB NjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVlVmcyRUI2bWJtS2xuOGJ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzJQaDVQRWZENWVWZzJFQjZtYm1LbG44YnZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RUQ5LzE5MjZDQTdDNzZBNjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVl VmcyRUI2bWJtS2xuOGJ2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvZXbJemuWIM+FTvf+2DPQkX1rzl8WpaX0uYO02QyUx3uHhCU+bKherNIRTnqM w1fSWtzcjlfPn6kralvoY7aEFsdRNX6gZhsR7RnRmoxLHsJNkUeKAzzSRuAOOOzj 76f4jazrhn5R1m/KTEfZy97o6g/rjM5sewX6ezqrk2wAZ+7adbS9f8La/sHADS9N 0LZG2GZw90fpckqEgpaXXrUpxycSQS78jWLU1VU/AfT1cntm5Ec20o/7Y/DIzdGT iqDVXC+v3ZM36fk+c8qxb4Yp/qDbOcX9VAg9bWHs1pI8rLiqWIunGU1f+2dUlm12 hHjG948U66qaYAXkS75SW7WS -----END CERTIFICATE-----Generated at Thu Nov 5 09:51:08 2026 by rpki-client