$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: t9rmliQgtjVjquuFr4FTf0L6CkMwcytd6ffE2jJd7nM= Subject key identifier: 30:B8:33:DD:7D:B5:08:0B:89:A6:24:1F:BD:3A:17:67:57:D3:00:85 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0D1E Signing time: Wed 04 Nov 2026 18:29:55 +0000 Manifest this update: Wed 04 Nov 2026 18:29:55 +0000 Manifest next update: Wed 11 Nov 2026 18:29:55 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: ijjn05tsLXzSWqUfyRfd5uK34mUjFfLOhcSgCGJmzXE=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 18:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Nov 4 18:29:55 2026 GMT Not After : Nov 11 18:29:55 2026 GMT Subject: CN=6aeb79a3-1b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:77:59:00:33:09:73:04:19:a4:83:31:cf: 56:cf:cd:e2:46:c6:b7:76:68:bd:36:7c:72:ba:45: b9:99:5c:fe:7e:1a:37:3c:b4:ce:fe:7f:20:54:ef: 18:e3:72:9f:fa:ed:1d:6c:f7:21:f6:dd:2d:52:a1: 92:f6:fa:33:17:86:a5:21:a2:20:e6:7a:64:a3:c4: bf:8b:76:4c:9d:9f:a9:c3:e7:a5:26:0f:12:51:d6: 1e:c2:4a:1a:e9:e8:b5:ee:6a:a1:00:5f:73:32:8b: 8f:84:c4:dc:12:0d:68:fc:7d:56:0d:5a:a6:05:27: e0:9e:51:d9:9e:7d:0e:e0:59:9d:bb:c5:8b:00:3a: 07:af:f1:4a:a4:71:75:0f:d2:91:7f:04:c1:58:11: 6f:cc:45:b8:87:d9:fb:64:52:4b:67:cb:ea:79:7e: 17:57:84:05:52:28:9c:9c:06:ce:e0:24:20:a9:99: d4:e4:92:87:c6:f2:01:01:b9:03:f5:db:95:3c:91: 01:86:03:d8:32:a3:10:43:10:1d:c3:13:3b:4a:80: b6:92:ab:83:b0:91:0f:d0:aa:2b:64:aa:5b:12:22: 6c:7d:7e:d6:a4:f4:82:0a:05:d2:44:6a:62:60:c6: 29:1a:25:82:8e:85:e9:76:db:7b:a1:b0:45:d2:73: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B8:33:DD:7D:B5:08:0B:89:A6:24:1F:BD:3A:17:67:57:D3:00:85 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f2:68:fa:f1:9b:99:d6:9e:e5:8f:be:f5:8e:48:03:55:66: 89:f3:7c:1b:d2:5b:1a:ed:79:6c:34:6a:89:e6:af:e0:36:58: 9a:65:70:63:a1:50:c6:1e:75:9a:53:c6:9f:ac:94:46:82:6c: 77:2d:3b:80:13:b3:fa:a8:45:f3:93:06:ec:43:07:7d:81:a3: be:ec:11:36:3c:d9:c3:d9:10:fc:31:7c:7c:cb:90:76:04:0f: cd:7f:3f:9a:7b:50:5e:fe:ad:b9:b8:23:89:d1:a9:ac:8b:ab: 7a:be:1b:be:e1:85:09:52:51:9e:e3:e2:f8:ce:47:7e:5e:8b: 3e:1b:3c:f4:a4:f6:55:15:b7:aa:a7:c0:46:21:36:68:7c:79: 69:0a:d5:a9:f5:d7:65:71:1b:9f:e4:fb:5e:e2:4e:2c:7c:fe: 14:69:23:37:d5:23:1c:a1:c8:02:ac:f5:7f:e5:ca:8c:df:7e: 56:45:2d:92:2f:8b:6b:69:e5:0e:24:d4:e4:6f:40:70:67:b7: 43:95:66:49:79:62:e3:c9:97:61:c1:4a:1a:86:b4:82:99:ce: 45:81:13:cb:ec:73:bb:28:17:57:4d:52:9f:f8:be:44:47:bc: 1b:59:1e:36:6e:6e:3d:de:e2:95:36:63:45:59:1f:a3:21:e8: 26:7c:46:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYxMTA0MTgyOTU1WhcNMjYxMTExMTgyOTU1WjAYMRYwFAYD VQQDEw02YWViNzlhMy0xYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxZ3WQAzCXMEGaSDMc9Wz83iRsa3dmi9NnxyukW5mVz+fho3PLTO/n8gVO8Y 43Kf+u0dbPch9t0tUqGS9vozF4alIaIg5npko8S/i3ZMnZ+pw+elJg8SUdYewkoa 6ei17mqhAF9zMouPhMTcEg1o/H1WDVqmBSfgnlHZnn0O4Fmdu8WLADoHr/FKpHF1 D9KRfwTBWBFvzEW4h9n7ZFJLZ8vqeX4XV4QFUiicnAbO4CQgqZnU5JKHxvIBAbkD 9duVPJEBhgPYMqMQQxAdwxM7SoC2kquDsJEP0KorZKpbEiJsfX7WpPSCCgXSRGpi YMYpGiWCjoXpdtt7obBF0nOClwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDC4M919 tQgLiaYkH706F2dX0wCFMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvJo+vGbmdae5Y++9Y5IA1VmifN8G9JbGu15bDRqieav4DZYmmVwY6FQxh51 mlPGn6yURoJsdy07gBOz+qhF85MG7EMHfYGjvuwRNjzZw9kQ/DF8fMuQdgQPzX8/ mntQXv6tubgjidGprIurer4bvuGFCVJRnuPi+M5Hfl6LPhs89KT2VRW3qqfARiE2 aHx5aQrVqfXXZXEbn+T7XuJOLHz+FGkjN9UjHKHIAqz1f+XKjN9+VkUtki+La2nl DiTU5G9AcGe3Q5VmSXli48mXYcFKGoa0gpnORYETy+xzuygXV01Sn/i+REe8G1ke Nm5uPd7ilTZjRVkfoyHoJnxGmA== -----END CERTIFICATE-----Generated at Thu Nov 5 15:26:23 2026 by rpki-client