$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: W+5ORtcLPnyLMXNwvLvZVV+mbEf9sqeLAZit1CbXKTk= Subject key identifier: 8C:94:DE:D3:91:9B:8A:BF:EB:0F:6F:5A:CA:38:47:E1:F0:50:E2:E7 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 149B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 1464 Signing time: Tue 10 Nov 2026 16:51:45 +0000 Manifest this update: Tue 10 Nov 2026 16:51:44 +0000 Manifest next update: Tue 17 Nov 2026 16:51:44 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: 8v3LpxaV3Yh1T2NCw9fXW4TWP0sRClXDiIJDwFflKN8=) 2: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WqMqFVIMW/WczjTWRvzLRKr2fBm6q4MFQ+IAb2s3IrY=) 3: 40567CA8F25A11F09752333B5F6F56BC.roa (hash: U0GNCfpy1dgEgbpczlcezpy3ewPFlHp4o8M0zeM91oI=) 4: 999C6728F7FF11F08B2BFA086C6F56BC.roa (hash: 5jwoaJRF05ynypppsournA2NpxdgiK2g9i/wb3qUNp4=) 5: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: lwkWaq6p0L37tuMHM356+eKrIkOsIPecy57fgsnLnhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5275 (0x149b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Nov 10 16:51:44 2026 GMT Not After : Nov 17 16:51:44 2026 GMT Subject: CN=6af34ba1-1761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:ca:31:63:3d:61:48:42:90:dd:e1:c0:c3: aa:c9:ba:37:3c:ba:ae:7d:09:c1:fb:f0:ae:62:04: 12:30:ef:25:22:3d:5d:c9:c5:29:c6:2a:f0:08:b7: 36:1e:d7:22:ad:3e:24:1f:42:43:38:c4:76:e0:c8: cc:10:96:92:1b:09:8b:f1:89:71:10:db:07:92:76: 3b:56:3f:9e:09:da:c1:91:51:2e:6a:57:fd:6e:5e: a6:d6:3b:cd:61:c4:45:a2:a5:85:3a:19:92:06:9d: 6b:15:5e:de:66:69:14:1a:ae:77:71:c1:ef:d9:52: 07:5d:89:ac:e4:75:f9:7f:3d:e0:b0:52:12:a7:1f: e5:c9:77:94:78:a7:a7:23:26:a3:66:18:b2:c3:db: 4d:34:9f:57:da:d9:6a:f1:af:b8:76:0c:4c:1f:35: 01:bd:8c:38:b4:92:45:36:a4:b3:5d:b0:a6:2a:ca: 5f:cb:dc:9a:1e:e7:c5:ed:c5:be:5a:ba:b5:d5:ce: 83:ff:cd:71:0b:38:62:07:87:a6:e6:ce:59:94:78: 47:a9:1f:37:cd:22:39:3a:92:76:d0:17:5e:44:f9: dd:6f:10:2a:70:68:c3:c5:69:63:c0:24:89:75:4c: 7c:ab:7f:fc:c0:f6:91:ce:2e:6d:01:41:06:15:b9: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:DE:D3:91:9B:8A:BF:EB:0F:6F:5A:CA:38:47:E1:F0:50:E2:E7 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:b7:cb:b0:5a:da:f2:69:eb:69:5a:3f:49:35:1d:63:ca:43: 4f:bf:b4:eb:16:a2:2d:59:f3:d5:a1:cc:f2:37:f8:39:0a:d8: 69:d2:a5:94:3b:ed:f8:f9:08:83:22:5d:21:df:37:10:1b:50: 18:3f:19:2d:73:c0:2c:e1:e0:b3:0d:47:dc:1f:01:49:06:3a: 1b:0f:3a:13:77:97:4e:f8:bb:ce:b9:7e:5e:a6:4c:fd:3f:2d: 19:eb:04:1a:bb:64:1a:0d:a0:5b:ed:bb:6d:ca:55:0e:97:a8: c8:b0:47:9e:16:a4:c8:9b:6c:a3:35:65:c9:d1:10:cf:0b:0d: 00:07:39:90:d8:c0:82:4d:cf:ff:c5:d9:f6:c5:f2:cc:09:c5: 31:8b:d9:df:fe:c8:02:41:bf:8b:44:22:ff:6f:67:e0:8f:38: 4d:fc:66:cd:ce:ed:2b:6a:b1:b7:f9:5b:ba:89:23:87:58:ab: 52:b3:89:a9:25:f3:e4:48:ee:9e:65:cc:bb:ae:df:0e:f3:51: 73:31:6c:87:f2:f0:ff:ff:ec:9b:e7:b7:27:4f:1e:5f:3f:dd: 54:d3:4a:7a:bb:32:4e:39:70:6a:54:c1:30:bc:33:61:19:ca: 6e:b2:44:e7:fd:a1:29:a9:d9:3a:f2:26:28:a7:74:3a:dc:25: 93:e5:b3:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjYxMTEwMTY1MTQ0WhcNMjYxMTE3MTY1MTQ0WjAYMRYwFAYD VQQDEw02YWYzNGJhMS0xNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7jKMWM9YUhCkN3hwMOqybo3PLqufQnB+/CuYgQSMO8lIj1dycUpxirwCLc2 HtcirT4kH0JDOMR24MjMEJaSGwmL8YlxENsHknY7Vj+eCdrBkVEualf9bl6m1jvN YcRFoqWFOhmSBp1rFV7eZmkUGq53ccHv2VIHXYms5HX5fz3gsFISpx/lyXeUeKen IyajZhiyw9tNNJ9X2tlq8a+4dgxMHzUBvYw4tJJFNqSzXbCmKspfy9yaHufF7cW+ Wrq11c6D/81xCzhiB4em5s5ZlHhHqR83zSI5OpJ20BdeRPndbxAqcGjDxWljwCSJ dUx8q3/8wPaRzi5tAUEGFbn+RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyU3tOR m4q/6w9vWso4R+HwUOLnMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1LfLsFra8mnraVo/STUdY8pDT7+06xaiLVnz1aHM8jf4OQrYadKllDvt+PkI gyJdId83EBtQGD8ZLXPALOHgsw1H3B8BSQY6Gw86E3eXTvi7zrl+XqZM/T8tGesE GrtkGg2gW+27bcpVDpeoyLBHnhakyJtsozVlydEQzwsNAAc5kNjAgk3P/8XZ9sXy zAnFMYvZ3/7IAkG/i0Qi/29n4I84Tfxmzc7tK2qxt/lbuokjh1irUrOJqSXz5Eju nmXMu67fDvNRczFsh/Lw///sm+e3J08eXz/dVNNKersyTjlwalTBMLwzYRnKbrJE 5/2hKanZOvImKKd0Otwlk+WzwQ== -----END CERTIFICATE-----Generated at Tue Nov 10 21:08:32 2026 by rpki-client