$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: t0p5sk71CDuP1O6QYJbXgBvpKEAAvk3neZcM9M6rxYE= Subject key identifier: 24:A3:C9:AF:E5:3E:8F:FC:48:3E:7E:3B:5E:EF:60:BE:E1:E7:1C:47 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 11A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1187 Signing time: Wed 04 Nov 2026 17:17:51 +0000 Manifest this update: Wed 04 Nov 2026 17:17:50 +0000 Manifest next update: Wed 11 Nov 2026 17:17:50 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: pKETwpcxvnNTCGOQnFQ5EW9QfQvr00tzy12mzu6YWLY=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: iQFJd86XO7yAIa5GnWERfrbSbZ5wfHcFrug+5uoA1TM=) 3: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o=) 4: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4512 (0x11a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Nov 4 17:17:50 2026 GMT Not After : Nov 11 17:17:50 2026 GMT Subject: CN=6aeb68bf-8dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:25:45:15:25:e2:81:c8:7e:59:d4:3d:e3: 34:ff:c4:a8:8e:9e:f1:fc:c7:f2:c7:fe:d3:5d:62: ce:a2:9a:8c:65:ac:24:ef:84:51:79:1d:c9:63:82: 3d:2e:a0:fc:66:a6:c4:a8:bc:aa:65:2f:62:9f:a5: f2:db:67:f4:a4:12:86:02:d3:9e:e2:3b:1e:32:07: 48:e6:52:8b:30:7b:7e:07:48:85:67:66:41:cc:66: 44:86:1e:a0:a4:00:4b:d4:29:34:fe:b6:cf:ab:43: 91:0f:76:0f:b3:b3:e6:15:d9:47:0a:70:51:50:75: 44:3f:97:7a:66:c2:6f:22:64:95:e6:ba:cd:bf:00: 7b:02:81:73:fd:d2:2f:b0:6a:49:0e:e5:90:42:ba: 1f:ef:45:56:5b:bb:3e:e8:38:4e:27:68:b4:ec:8e: b0:85:0a:c2:a2:42:0d:f7:38:d7:12:18:4d:92:da: f3:38:82:15:06:f8:72:f3:af:61:26:1f:72:20:96: c5:75:fe:73:49:99:10:3c:fe:e3:e8:17:8f:84:0b: 4f:50:16:65:05:a2:7b:c5:91:91:fa:ef:f5:44:f1: 08:66:cb:33:a8:3c:64:30:ee:6d:0b:0c:5d:12:5d: eb:0d:ef:82:ce:d5:dc:67:4d:d7:56:f3:dc:2f:8b: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A3:C9:AF:E5:3E:8F:FC:48:3E:7E:3B:5E:EF:60:BE:E1:E7:1C:47 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0a:5a:f3:76:66:18:20:97:31:1a:34:1d:d2:62:5d:37:7b: c8:22:3e:be:48:7f:a3:22:5b:b7:77:c7:f5:64:94:1e:6b:b5: ed:e2:00:7a:40:c5:ef:9a:28:b5:4d:08:6e:b4:49:47:95:60: c3:0f:f1:ee:bb:5c:54:e9:61:53:6d:12:35:60:39:21:6a:01: ce:5e:90:4a:e4:23:3f:38:aa:e4:a1:d6:11:3a:5e:47:d2:cf: e5:65:78:40:94:88:9f:62:3b:9f:4e:ca:02:d5:04:0f:7c:17: 93:5a:77:99:52:4e:0b:10:6a:4e:13:fc:bd:fd:93:c2:fd:1c: 3a:c6:c2:13:f6:5d:d1:ad:1f:d2:20:49:f1:07:bc:96:49:7f: 39:e6:74:0f:37:3f:9c:4f:d8:12:3e:20:59:8a:91:93:33:d2: 47:80:23:06:08:03:5e:19:42:d7:2a:f9:3a:47:55:62:fd:65: 48:83:0c:39:2f:1d:c9:0f:ca:70:29:1e:23:4e:86:2f:a9:fc: 41:25:fd:11:89:e5:24:f3:06:47:69:57:ed:44:5f:11:3e:63: 65:2a:9c:37:31:ae:8c:16:e7:ca:d8:17:62:8f:80:cd:80:5d: 75:e1:6a:61:fd:87:72:5e:6c:ea:4f:6b:96:eb:1d:e9:39:31: 73:ee:5b:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYxMTA0MTcxNzUwWhcNMjYxMTExMTcxNzUwWjAYMRYwFAYD VQQDEw02YWViNjhiZi04ZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweolRRUl4oHIflnUPeM0/8Sojp7x/Mfyx/7TXWLOopqMZawk74RReR3JY4I9 LqD8ZqbEqLyqZS9in6Xy22f0pBKGAtOe4jseMgdI5lKLMHt+B0iFZ2ZBzGZEhh6g pABL1Ck0/rbPq0ORD3YPs7PmFdlHCnBRUHVEP5d6ZsJvImSV5rrNvwB7AoFz/dIv sGpJDuWQQrof70VWW7s+6DhOJ2i07I6whQrCokIN9zjXEhhNktrzOIIVBvhy869h Jh9yIJbFdf5zSZkQPP7j6BePhAtPUBZlBaJ7xZGR+u/1RPEIZsszqDxkMO5tCwxd El3rDe+CztXcZ03XVvPcL4vQbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSjya/l Po/8SD5+O17vYL7h5xxHMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAngpa83ZmGCCXMRo0HdJiXTd7yCI+vkh/oyJbt3fH9WSUHmu17eIAekDF75oo tU0IbrRJR5Vgww/x7rtcVOlhU20SNWA5IWoBzl6QSuQjPziq5KHWETpeR9LP5WV4 QJSIn2I7n07KAtUED3wXk1p3mVJOCxBqThP8vf2Twv0cOsbCE/Zd0a0f0iBJ8Qe8 lkl/OeZ0Dzc/nE/YEj4gWYqRkzPSR4AjBggDXhlC1yr5OkdVYv1lSIMMOS8dyQ/K cCkeI06GL6n8QSX9EYnlJPMGR2lX7URfET5jZSqcNzGujBbnytgXYo+AzYBddeFq Yf2Hcl5s6k9rlusd6Tkxc+5b9Q== -----END CERTIFICATE-----Generated at Thu Nov 5 14:25:22 2026 by rpki-client