$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: G4jiR+MiFemHvsGtlorAnazq1dRhuwm7olFbjf36U8c= Subject key identifier: 04:37:E3:51:AD:73:78:0E:4E:42:43:71:E6:59:93:EB:00:68:85:7A Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0FAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0F8A Signing time: Wed 04 Nov 2026 17:37:37 +0000 Manifest this update: Wed 04 Nov 2026 17:37:37 +0000 Manifest next update: Wed 11 Nov 2026 17:37:37 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: XdzteG89YlFSFAJj2/v0HKr2Ezyg1o0kRpU8JHUQm0w=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Nov 4 17:37:37 2026 GMT Not After : Nov 11 17:37:37 2026 GMT Subject: CN=6aeb6d61-2723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:2b:e6:79:67:de:b1:f4:f6:ef:56:d2:23: c4:bc:5d:18:f4:b4:cd:c7:fa:6a:e3:62:e5:f2:7c: 31:61:b7:05:42:3f:f5:dd:5a:ce:e3:58:20:0a:2a: 62:06:c2:54:11:22:ae:d1:3e:ab:4c:f1:bc:f5:01: 26:0d:4a:53:db:09:90:db:d0:48:b5:f6:fd:af:1b: ba:d7:95:02:f6:3a:07:94:12:c2:4e:e6:e0:62:4c: 95:d3:e8:e1:53:3b:e9:f2:92:7d:8d:27:07:7e:15: 73:26:8b:51:75:53:d8:cd:5f:d9:1d:f6:b3:dd:92: c8:bc:fe:cc:8b:38:24:d8:84:cd:d8:ef:04:43:9b: 0b:5c:f3:fe:e6:03:13:78:94:2c:d5:e6:c0:e7:d3: ac:99:e4:e2:96:ed:3e:64:25:29:a3:1e:5f:79:78: 5c:51:b6:cc:e4:64:c1:2f:6e:4a:38:4d:26:59:e0: 2c:82:d7:36:6f:65:11:68:0a:c2:0a:b1:3e:0b:b7: d8:6f:3f:e5:65:e2:28:a1:d1:d8:b3:9d:4b:14:ca: b6:b3:2c:8e:c4:d1:68:90:8c:40:f1:1b:60:5c:07: b9:dc:1b:e7:a4:93:e2:6f:29:d7:d6:e3:a6:69:77: 27:70:1e:34:68:dd:08:74:68:24:a0:12:10:e7:47: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:37:E3:51:AD:73:78:0E:4E:42:43:71:E6:59:93:EB:00:68:85:7A X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:30:3c:dd:79:bb:40:99:ea:41:ef:1b:06:fb:33:8b:87:b1: 9b:b6:e6:43:c2:d5:84:1f:94:f2:98:8b:cc:28:d2:ea:50:55: 02:ca:40:b9:2c:9f:5d:42:7d:ad:62:4e:cb:bd:9f:59:b2:35: 78:0a:92:1c:ea:db:ee:d2:c5:fd:22:86:cd:4b:e6:1c:29:08: 1b:4d:17:68:05:96:f5:3e:ec:1a:91:f6:4b:1a:60:92:69:a6: 1c:9f:18:04:6f:21:4e:29:c1:b3:b1:9e:fe:bc:02:9a:c3:ea: 66:ef:b3:df:12:87:da:85:8d:70:ba:bb:98:26:76:f9:5e:ae: df:35:a1:fd:a0:65:d9:80:cc:d1:a4:ea:6c:6d:1b:5d:c4:ee: b2:b9:85:f9:48:48:17:e7:8a:6c:44:56:c1:81:53:1c:ed:1b: 39:64:a3:5e:03:ce:91:3d:f6:82:00:46:3b:45:0a:7c:7d:18: df:50:ff:aa:d9:ed:60:78:c8:6e:5a:f2:86:1a:da:59:bc:13: 70:71:7f:8c:a3:85:01:b4:d8:79:39:13:cf:fc:56:05:4a:8f: 2b:d4:95:88:64:7d:8c:a1:f6:37:37:4c:72:86:b5:3c:e4:df: 68:00:2c:4b:4b:9b:3c:45:95:b2:19:40:db:03:cb:a6:51:40: 6d:40:5f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjYxMTA0MTczNzM3WhcNMjYxMTExMTczNzM3WjAYMRYwFAYD VQQDEw02YWViNmQ2MS0yNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7sr5nln3rH09u9W0iPEvF0Y9LTNx/pq42Ll8nwxYbcFQj/13VrO41ggCipi BsJUESKu0T6rTPG89QEmDUpT2wmQ29BItfb9rxu615UC9joHlBLCTubgYkyV0+jh Uzvp8pJ9jScHfhVzJotRdVPYzV/ZHfaz3ZLIvP7Mizgk2ITN2O8EQ5sLXPP+5gMT eJQs1ebA59OsmeTilu0+ZCUpox5feXhcUbbM5GTBL25KOE0mWeAsgtc2b2URaArC CrE+C7fYbz/lZeIoodHYs51LFMq2syyOxNFokIxA8RtgXAe53BvnpJPibynX1uOm aXcncB40aN0IdGgkoBIQ50dDiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ341Gt c3gOTkJDceZZk+sAaIV6MB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFDA83Xm7QJnqQe8bBvszi4exm7bmQ8LVhB+U8piLzCjS6lBVAspAuSyfXUJ9 rWJOy72fWbI1eAqSHOrb7tLF/SKGzUvmHCkIG00XaAWW9T7sGpH2SxpgkmmmHJ8Y BG8hTinBs7Ge/rwCmsPqZu+z3xKH2oWNcLq7mCZ2+V6u3zWh/aBl2YDM0aTqbG0b XcTusrmF+UhIF+eKbERWwYFTHO0bOWSjXgPOkT32ggBGO0UKfH0Y31D/qtntYHjI blryhhraWbwTcHF/jKOFAbTYeTkTz/xWBUqPK9SViGR9jKH2NzdMcoa1POTfaAAs S0ubPEWVshlA2wPLplFAbUBfnQ== -----END CERTIFICATE-----Generated at Thu Nov 5 14:42:22 2026 by rpki-client