$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: abZoALQmi9pFcb5gHEFf3yaewB3PuETzxqRuXpdHRcE= Subject key identifier: DA:22:E2:38:98:33:4D:D5:F4:00:9B:5C:EB:46:BE:52:49:DD:FF:24 Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 01FF Signing time: Thu 05 Nov 2026 04:04:25 +0000 Manifest this update: Thu 05 Nov 2026 04:04:25 +0000 Manifest next update: Thu 12 Nov 2026 04:04:25 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: ZVMHms6cfpZgvyM7ny26qWu6gshJdxikYK2c922Hrw0=) 2: C63D0814097B11F0B1329480C4F9AE02.roa (hash: MmLLr6l4IDOg8XMaUZVystbsTDwX0oyuPDuuzGnXhFs=) 3: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: 1R5i5o2t6sI6xlQkmjgkQQNJTTUz/BHQTGAZz17WwEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 04:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Nov 5 04:04:25 2026 GMT Not After : Nov 12 04:04:25 2026 GMT Subject: CN=6aec0049-bc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:78:35:19:59:dc:80:30:67:b6:7b:ec:46: 89:f2:e5:cd:31:58:d9:a6:07:53:f8:0b:7d:47:ae: 53:f7:4e:17:8c:86:2b:56:13:08:5c:d6:51:cc:53: 3e:90:95:71:5b:ef:ea:e2:6b:a3:19:77:55:6a:1d: 50:96:25:b4:4c:ac:3b:80:5b:b6:d7:6b:19:11:6e: ca:42:6f:58:a0:0a:f6:ee:a4:f3:47:0d:a1:3e:ac: e3:50:3b:db:be:3c:16:02:74:5f:37:e6:c7:d5:38: 7d:26:88:fe:f1:fc:23:f6:df:b1:b0:f4:88:f9:58: 41:00:2c:19:36:6b:56:c1:87:48:63:d6:32:ff:2d: bd:f9:9e:9c:23:41:62:f5:e7:6a:f3:34:31:25:92: f4:2c:16:a2:90:be:c7:76:43:3a:80:13:71:83:ec: 07:be:3e:02:91:2c:c2:76:c3:27:49:0b:78:30:66: 63:f9:98:6b:69:86:80:8c:19:ca:2d:71:45:39:8c: ab:fc:22:58:b8:ef:e4:d3:b8:17:c3:4f:59:98:c0: f0:30:30:86:4b:16:b5:1e:ce:1e:a3:2d:1f:9a:dd: e1:81:07:7e:16:e3:f5:fa:54:0a:1a:86:dc:0e:f0: 9c:35:65:fb:71:b3:76:dc:f1:e1:80:bb:76:15:5f: 89:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:E2:38:98:33:4D:D5:F4:00:9B:5C:EB:46:BE:52:49:DD:FF:24 X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fe:9e:69:f6:44:4a:dc:15:20:45:cf:ae:f4:ef:70:03:54: 75:21:90:8c:16:ab:e0:94:84:c4:6e:3d:1f:14:4e:ec:5b:f9: 24:82:b3:13:ff:9e:b6:ba:28:5e:90:6c:8b:f4:83:43:9d:16: f3:4a:c6:c3:77:80:bf:d7:5e:2e:27:28:53:57:79:6a:4e:08: 90:c0:a9:37:08:4f:ef:ea:73:24:0e:4a:31:47:2d:0c:13:0d: 93:ea:a0:50:f6:33:a8:67:5f:ba:28:a9:37:9a:8f:6c:d6:80: 7f:e8:2d:9b:73:96:f3:b8:fd:3d:a2:b2:53:82:92:5c:14:a2: 59:13:ef:56:6d:0b:ed:21:52:86:3f:54:a2:55:16:3d:d1:3b: 44:eb:64:ee:a1:45:5c:75:25:6a:f0:03:de:08:0c:28:75:42: db:7a:7f:8b:98:21:96:58:71:98:9b:c5:4d:59:f7:01:c3:6d: 83:75:dd:cb:f7:00:33:8c:fe:b3:e1:19:48:af:52:76:ff:2a: 0d:2e:73:0a:82:8f:a3:a1:d6:91:d6:73:0b:2b:13:d2:6f:d9: b5:e9:a8:13:95:dc:c2:87:18:d5:ad:b0:c5:35:3a:44:2e:4b: e9:46:a7:5e:8a:ad:95:80:77:d2:9a:3c:29:7a:ce:61:c1:f6: 81:5a:30:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjYxMTA1MDQwNDI1WhcNMjYxMTEyMDQwNDI1WjAYMRYwFAYD VQQDEw02YWVjMDA0OS1iYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxZ4NRlZ3IAwZ7Z77EaJ8uXNMVjZpgdT+At9R65T904XjIYrVhMIXNZRzFM+ kJVxW+/q4mujGXdVah1QliW0TKw7gFu212sZEW7KQm9YoAr27qTzRw2hPqzjUDvb vjwWAnRfN+bH1Th9Joj+8fwj9t+xsPSI+VhBACwZNmtWwYdIY9Yy/y29+Z6cI0Fi 9edq8zQxJZL0LBaikL7HdkM6gBNxg+wHvj4CkSzCdsMnSQt4MGZj+ZhraYaAjBnK LXFFOYyr/CJYuO/k07gXw09ZmMDwMDCGSxa1Hs4eoy0fmt3hgQd+FuP1+lQKGobc DvCcNWX7cbN23PHhgLt2FV+JIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoi4jiY M03V9ACbXOtGvlJJ3f8kMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE/6eafZEStwVIEXPrvTvcANUdSGQjBar4JSExG49HxRO7Fv5JIKzE/+etroo XpBsi/SDQ50W80rGw3eAv9deLicoU1d5ak4IkMCpNwhP7+pzJA5KMUctDBMNk+qg UPYzqGdfuiipN5qPbNaAf+gtm3OW87j9PaKyU4KSXBSiWRPvVm0L7SFShj9UolUW PdE7ROtk7qFFXHUlavAD3ggMKHVC23p/i5ghllhxmJvFTVn3AcNtg3Xdy/cAM4z+ s+EZSK9Sdv8qDS5zCoKPo6HWkdZzCysT0m/ZtemoE5XcwocY1a2wxTU6RC5L6Uan XoqtlYB30po8KXrOYcH2gVowVA== -----END CERTIFICATE-----Generated at Thu Nov 5 07:11:21 2026 by rpki-client