$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: GwXR4zrchccqcD41xn/90+bXUEtV8gqHPM4/2vpn9Yw= Subject key identifier: E9:33:17:DB:0E:B3:BE:D5:11:DD:64:C1:B8:38:85:F4:36:4E:C2:7F Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 043C Signing time: Thu 05 Nov 2026 00:14:44 +0000 Manifest this update: Thu 05 Nov 2026 00:14:43 +0000 Manifest next update: Thu 12 Nov 2026 00:14:43 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: tT0M4U0Iu6xNqvX27N2KFSYQ1whN119Mj5bMZE8Jv3w=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Nov 5 00:14:43 2026 GMT Not After : Nov 12 00:14:43 2026 GMT Subject: CN=6aebca74-ba6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:41:ac:b5:13:5a:65:bd:be:ac:c9:70:34: 26:de:3e:0a:1f:8f:69:c2:13:06:3f:ad:68:20:1f: 89:cb:09:a9:b7:2d:77:1a:ae:e9:73:20:97:f5:6f: a6:58:7f:6e:00:41:13:7d:8b:85:4d:aa:76:03:49: 9c:ab:cd:df:63:0b:e1:92:f6:16:1c:27:dd:46:16: 88:5e:88:98:a1:90:5b:5f:7c:5f:a1:c6:aa:aa:a3: e7:b4:dc:e7:61:d5:6d:a2:7b:5d:06:fd:b8:69:b6: 1d:39:12:9f:d3:63:e2:72:48:e1:5f:c9:4f:ee:60: d8:68:0a:d9:73:15:54:39:be:5e:aa:30:80:37:57: b0:03:8f:e3:30:db:f9:28:fb:df:d9:89:da:5d:1c: 65:bb:60:27:e3:66:55:57:e6:8b:74:4a:c0:93:ee: 0e:0d:78:bc:bd:5f:6d:ba:9f:d0:3b:f5:46:7d:f9: 7a:b7:20:15:8f:5c:51:c1:63:c8:d7:44:de:23:53: 9c:60:b7:5c:67:4a:dc:a4:6a:21:86:ae:9e:6f:bb: 6a:29:00:7d:2f:1b:92:82:87:34:22:3e:b4:bd:6e: cc:40:46:45:58:6c:0d:51:21:e0:75:27:14:4e:bc: 0e:93:1d:e9:d7:58:85:00:28:1c:ac:d9:50:71:ed: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:33:17:DB:0E:B3:BE:D5:11:DD:64:C1:B8:38:85:F4:36:4E:C2:7F X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:e1:e6:10:1a:98:c9:97:d4:17:1b:27:00:7f:ab:db:9c: 01:55:5f:d1:1a:69:22:ce:fe:f6:f5:82:4f:a7:0b:d0:d0:89: 0a:e8:88:7e:89:c9:cf:e9:d5:3d:1f:64:c7:73:6e:95:9c:67: 3e:2e:85:89:30:06:b2:03:8c:dd:38:17:e9:70:58:45:18:60: dd:60:a9:cc:d5:16:5a:50:ac:8d:2d:8b:b1:ff:d0:d5:1c:69: 17:cb:2b:67:e5:1b:91:59:c6:41:8e:2d:aa:ee:c5:44:dc:d8: ba:66:b4:3e:cd:74:22:f2:f4:42:8b:db:7e:3b:af:51:47:f0: 4e:79:51:40:9a:29:39:c3:a8:af:a7:15:e5:a6:d2:79:eb:bc: bf:76:98:8f:46:0f:ae:a9:4d:ed:90:9f:97:8c:74:67:dd:31: e9:89:ea:37:3f:9f:6a:0e:37:f9:f9:77:70:a3:e2:6d:88:18: a6:b5:b7:72:68:21:43:d7:a6:2b:c2:1b:98:62:25:a9:12:34: d0:3b:63:39:07:26:a3:8d:b4:a9:88:ac:cb:08:14:07:0e:b0: 3b:44:1e:cd:ca:54:2c:39:a8:38:26:79:49:2a:81:ea:43:fb: d5:2d:b7:c1:68:d5:b7:b1:82:72:5a:78:5a:0a:f2:9b:bd:76: b1:6d:27:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYxMTA1MDAxNDQzWhcNMjYxMTEyMDAxNDQzWjAYMRYwFAYD VQQDEw02YWViY2E3NC1iYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7upBrLUTWmW9vqzJcDQm3j4KH49pwhMGP61oIB+Jywmpty13Gq7pcyCX9W+m WH9uAEETfYuFTap2A0mcq83fYwvhkvYWHCfdRhaIXoiYoZBbX3xfocaqqqPntNzn YdVtontdBv24abYdORKf02PickjhX8lP7mDYaArZcxVUOb5eqjCAN1ewA4/jMNv5 KPvf2YnaXRxlu2An42ZVV+aLdErAk+4ODXi8vV9tup/QO/VGffl6tyAVj1xRwWPI 10TeI1OcYLdcZ0rcpGohhq6eb7tqKQB9LxuSgoc0Ij60vW7MQEZFWGwNUSHgdScU TrwOkx3p11iFACgcrNlQce1/twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkzF9sO s77VEd1kwbg4hfQ2TsJ/MB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABmvh5hAamMmX1BcbJwB/q9ucAVVf0RppIs7+9vWCT6cL0NCJCuiIfonJz+nV PR9kx3NulZxnPi6FiTAGsgOM3TgX6XBYRRhg3WCpzNUWWlCsjS2Lsf/Q1RxpF8sr Z+UbkVnGQY4tqu7FRNzYuma0Ps10IvL0QovbfjuvUUfwTnlRQJopOcOor6cV5abS eeu8v3aYj0YPrqlN7ZCfl4x0Z90x6YnqNz+fag43+fl3cKPibYgYprW3cmghQ9em K8IbmGIlqRI00DtjOQcmo420qYisywgUBw6wO0QezcpULDmoOCZ5SSqB6kP71S23 wWjVt7GCclp4Wgrym712sW0nUA== -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:36 2026 by rpki-client