$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft File: EDhLgnxFluWuq0OYhypdFG6ggV8.mft (raw, json) Hash identifier: z+C5hRZLZowwnA2s2iNOfmGCQ3Wvb1na8jpJVenAtAA= Subject key identifier: 36:46:5C:C3:BE:3D:6C:71:C6:CA:F0:90:42:46:D3:E2:25:56:56:E7 Authority key identifier: 10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F Certificate issuer: /CN=A91BA3E7/serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft Manifest number: 36 Signing time: Thu 05 Nov 2026 09:35:16 +0000 Manifest this update: Thu 05 Nov 2026 09:35:15 +0000 Manifest next update: Thu 12 Nov 2026 09:35:15 +0000 Files and hashes: 1: EDhLgnxFluWuq0OYhypdFG6ggV8.crl (hash: B5dk+bZr2ncdKSc+o7gFdm582dSg42JbdGP8ZdWfNPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 09:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F Validity Not Before: Nov 5 09:35:15 2026 GMT Not After : Nov 12 09:35:15 2026 GMT Subject: CN=6aec4dd3-acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:0e:1e:d9:4f:f4:04:78:5a:26:fe:b8:d4: cd:47:0d:62:63:32:9f:a0:1f:9c:ad:9e:78:12:30: ae:91:21:2d:3e:65:54:06:09:8b:64:3a:fb:53:5c: e5:62:18:c4:74:a6:a0:4e:5f:5f:8e:f1:b3:20:48: 67:5d:9e:db:16:53:21:9a:c8:c7:58:d6:2c:f4:56: 73:18:6d:b9:73:43:66:f8:17:61:34:79:36:9c:29: 77:cb:0f:9b:9a:e0:6f:51:bf:fd:61:61:19:61:32: b9:e2:24:6f:91:28:e4:84:b5:b9:62:8a:2e:75:12: 99:3a:b8:a8:22:13:3a:56:1a:3b:49:b2:c3:80:cc: 68:98:e0:86:bc:ef:eb:23:65:19:0b:83:ad:a1:e6: cb:9b:cb:55:35:83:9b:aa:49:7e:a7:94:80:b0:cd: bd:6f:cb:27:70:cf:b0:c3:28:cc:f7:42:8d:d6:b8: 53:b8:c0:60:e0:98:f1:b3:61:ac:39:aa:0a:23:bf: 52:b1:92:9f:66:f6:aa:d0:47:21:40:00:9c:dc:f7: fd:33:d2:d5:31:96:a3:4e:5f:e1:b1:36:93:84:03: 4e:35:76:9f:62:d4:92:a1:be:3e:be:d0:40:e6:f9: 4c:62:ee:ca:ff:c8:bd:d5:17:2d:bf:83:66:eb:ff: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:5C:C3:BE:3D:6C:71:C6:CA:F0:90:42:46:D3:E2:25:56:56:E7 X509v3 Authority Key Identifier: keyid:10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:77:4c:77:f0:6f:3f:e7:6c:a6:07:b8:c1:9c:04:34:4e:1a: 33:d7:95:9b:ae:37:53:4c:41:02:68:68:14:0d:57:27:44:fc: f3:24:4e:56:4b:50:82:cd:93:10:ab:14:65:89:3b:73:05:ff: 30:12:1e:f8:42:f4:78:f6:cf:03:b8:57:cd:97:a6:ba:38:2e: 55:47:fb:15:a0:38:3e:0c:30:13:0d:11:6f:59:17:2d:59:b1: 3d:f8:cb:f1:cf:43:ba:5f:aa:c8:27:4c:6a:a6:0a:3b:3f:d4: d6:6d:57:9f:96:64:f4:11:65:aa:a3:b6:9b:e3:82:31:ee:5b: 16:2e:44:59:20:a7:4a:5f:e4:ab:71:b7:ba:a1:35:e7:fa:a5: 3f:cc:af:1a:5e:6b:4b:72:7e:88:83:51:5b:d9:51:23:a4:0d: 76:8f:22:2f:01:89:17:90:21:d0:ef:d6:68:f6:3c:34:c4:ae: 93:43:5c:ad:3f:10:ed:d5:42:88:84:41:e4:36:64:cb:de:ce: 70:b7:86:73:07:6f:e3:70:79:ad:bb:9e:9f:26:7f:bd:2b:c5: a5:f8:52:46:74:9d:87:7a:e6:20:14:03:c8:92:de:ed:78:3f: 94:bd:64:0c:2c:f8:08:13:65:55:5b:53:1c:46:44:ee:23:7b: 3c:3e:55:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTAzODRCODI3QzQ1OTZFNUFFQUI0Mzk4ODcyQTVEMTQ2 RUEwODE1RjAeFw0yNjExMDUwOTM1MTVaFw0yNjExMTIwOTM1MTVaMBgxFjAUBgNV BAMTDTZhZWM0ZGQzLWFjZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgKw4e2U/0BHhaJv641M1HDWJjMp+gH5ytnngSMK6RIS0+ZVQGCYtkOvtTXOVi GMR0pqBOX1+O8bMgSGddntsWUyGayMdY1iz0VnMYbblzQ2b4F2E0eTacKXfLD5ua 4G9Rv/1hYRlhMrniJG+RKOSEtbliii51Epk6uKgiEzpWGjtJssOAzGiY4Ia87+sj ZRkLg62h5suby1U1g5uqSX6nlICwzb1vyydwz7DDKMz3Qo3WuFO4wGDgmPGzYaw5 qgojv1Kxkp9m9qrQRyFAAJzc9/0z0tUxlqNOX+GxNpOEA041dp9i1JKhvj6+0EDm +Uxi7sr/yL3VFy2/g2br/wu3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNkZcw749 bHHGyvCQQkbT4iVWVucwHwYDVR0jBBgwFoAUEDhLgnxFluWuq0OYhypdFG6ggV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzZFQjRCNTEyOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVXdXEwT1loeXBkRkc2Z2dW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURoTGdueEZsdVd1cTBPWWh5cGRGRzZnZ1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB M0U3LzZFQjRCNTEyOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVX dXEwT1loeXBkRkc2Z2dWOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYd0x38G8/52ymB7jBnAQ0Thoz15WbrjdTTEECaGgUDVcnRPzzJE5WS1CCzZMQ qxRliTtzBf8wEh74QvR49s8DuFfNl6a6OC5VR/sVoDg+DDATDRFvWRctWbE9+Mvx z0O6X6rIJ0xqpgo7P9TWbVeflmT0EWWqo7ab44Ix7lsWLkRZIKdKX+Srcbe6oTXn +qU/zK8aXmtLcn6Ig1Fb2VEjpA12jyIvAYkXkCHQ79Zo9jw0xK6TQ1ytPxDt1UKI hEHkNmTL3s5wt4ZzB2/jcHmtu56fJn+9K8Wl+FJGdJ2HeuYgFAPIkt7teD+UvWQM LPgIE2VVW1McRkTuI3s8PlX1 -----END CERTIFICATE-----Generated at Thu Nov 5 18:18:35 2026 by rpki-client