$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft File: 4unXDvDCGSHEDJDGOhWJAzQGHgo.mft (raw, json) Hash identifier: 5UsU7joCngpIkhKcObYssgTv6fbkIeoAA5vQFVrpxzY= Subject key identifier: F2:B5:70:B2:C5:46:36:A0:AA:6D:E5:C3:C5:66:03:C6:40:97:1E:68 Authority key identifier: E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A Certificate issuer: /CN=A91D84F7/serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft Manifest number: 16 Signing time: Tue 03 Nov 2026 05:05:02 +0000 Manifest this update: Tue 03 Nov 2026 05:05:01 +0000 Manifest next update: Tue 10 Nov 2026 05:05:01 +0000 Files and hashes: 1: 4unXDvDCGSHEDJDGOhWJAzQGHgo.crl (hash: iltgZbAbK3tE7sZ4K7B37yM9koVgY4iw8uMDSM3b8/I=) 2: A565D4CEBD6411F1A6562A506111F970.roa (hash: T/xEOQEiJQhdgw15tZDJt1DA4Dw7ba/+Rtzg+a2osjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 05:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A Validity Not Before: Nov 3 05:05:01 2026 GMT Not After : Nov 10 05:05:01 2026 GMT Subject: CN=6ae96b7d-c5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:91:77:c3:c7:1c:8f:58:df:9a:5c:3e:74: d6:b5:b4:13:0d:18:86:8b:1a:19:de:f5:e1:0a:45: 44:8c:88:63:c9:8d:ad:f9:19:11:3d:d4:90:c8:c4: cc:3e:74:99:81:a3:59:8c:9c:3d:ee:40:a1:59:ec: 60:3f:3f:36:f6:11:a7:1f:e1:71:c8:1c:82:d4:7e: b5:b7:d9:f5:90:08:9f:a2:73:3c:63:24:52:45:55: 26:c8:21:4e:23:db:5d:5f:c2:ef:aa:8b:da:45:ba: 74:ee:fa:a9:8a:dc:a0:f9:3b:fa:52:3b:77:5d:3d: 6b:48:fd:3c:d4:8d:9b:fe:c7:7f:07:fd:c8:be:85: 2d:e5:12:d1:4d:2d:89:a1:13:71:09:0a:94:38:96: 84:db:53:31:42:a0:4f:c1:20:a1:b9:c4:4c:ae:04: e5:43:33:a2:ed:a3:cf:76:13:38:e7:db:c7:2c:f2: 50:61:b6:b6:22:fe:d1:b7:b0:3e:04:17:ab:ee:ec: ec:5c:04:56:26:10:61:63:dd:c1:fd:32:8e:ac:9e: 2e:cc:40:53:39:f8:e1:32:b3:bd:03:24:08:e1:f1: 13:8c:7a:e0:8e:f6:59:50:3d:93:e9:cf:14:b0:f8: 90:da:8a:84:b9:fb:85:64:d4:5d:d2:ef:c2:f5:05: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B5:70:B2:C5:46:36:A0:AA:6D:E5:C3:C5:66:03:C6:40:97:1E:68 X509v3 Authority Key Identifier: keyid:E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:0c:43:d2:4b:5b:b5:f8:49:dd:72:54:d0:b1:48:67:e0:98: c1:0b:13:03:94:64:b6:e7:eb:8e:07:33:79:d4:84:82:7d:34: f1:77:ac:af:bf:ca:75:ab:d8:37:09:c3:5f:b9:a8:c7:60:64: e1:42:b0:52:f0:05:4a:ff:34:c9:5c:0a:23:a3:85:c9:58:67: 7a:ef:e1:ab:fb:db:dc:ba:7d:86:6c:b7:78:fb:c9:be:c7:6a: 6b:e6:76:7b:f0:3f:3f:1f:57:e4:80:5b:eb:ff:04:71:6c:9b: 92:67:58:5d:93:50:a2:86:5c:69:5a:22:1b:0b:8d:49:81:df: 10:76:18:bd:9e:b5:8f:57:bd:c1:7b:b8:a7:07:e8:9d:3f:7f: e9:16:58:ce:5c:c5:2c:fe:e5:41:82:4d:b6:c0:82:30:22:da: 19:9c:15:c9:18:e4:02:21:9e:95:cc:51:74:68:7e:bc:0c:29: f4:8b:15:54:10:ca:7c:d8:51:aa:e2:b6:13:7d:39:40:63:ae: 4b:b4:f6:7c:b8:37:b4:4f:0c:0a:eb:8b:34:f1:f6:00:6f:00: 77:07:a9:64:c7:33:1b:87:fb:31:ea:e8:27:34:6a:41:18:e4: 18:4a:f4:1c:7b:0b:ef:1f:9f:5c:6c:f2:c8:72:6a:e2:88:77: ee:9b:e5:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODRGNzExMC8GA1UEBRMoRTJFOUQ3MEVGMEMyMTkyMUM0MEM5MEM2M0ExNTg5MDMz NDA2MUUwQTAeFw0yNjExMDMwNTA1MDFaFw0yNjExMTAwNTA1MDFaMBgxFjAUBgNV BAMTDTZhZTk2YjdkLWM1ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwAZF3w8ccj1jfmlw+dNa1tBMNGIaLGhne9eEKRUSMiGPJja35GRE91JDIxMw+ dJmBo1mMnD3uQKFZ7GA/Pzb2Eacf4XHIHILUfrW32fWQCJ+iczxjJFJFVSbIIU4j 211fwu+qi9pFunTu+qmK3KD5O/pSO3ddPWtI/TzUjZv+x38H/ci+hS3lEtFNLYmh E3EJCpQ4loTbUzFCoE/BIKG5xEyuBOVDM6Lto892Ezjn28cs8lBhtrYi/tG3sD4E F6vu7OxcBFYmEGFj3cH9Mo6sni7MQFM5+OEys70DJAjh8ROMeuCO9llQPZPpzxSw +JDaioS5+4Vk1F3S78L1BcNrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8rVwssVG NqCqbeXDxWYDxkCXHmgwHwYDVR0jBBgwFoAU4unXDvDCGSHEDJDGOhWJAzQGHgow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NEY3L0EwNTgxQzY2QkM3 QTExRjE4MTIxMTNFRDU5MTFGOTcwLzR1blhEdkRDR1NIRURKREdPaFdKQXpRR0hn by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVuWER2RENHU0hFREpER09oV0pBelFHSGdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 NEY3L0EwNTgxQzY2QkM3QTExRjE4MTIxMTNFRDU5MTFGOTcwLzR1blhEdkRDR1NI RURKREdPaFdKQXpRR0hnby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDWDEPSS1u1+EndclTQsUhn4JjBCxMDlGS25+uOBzN51ISCfTTxd6yvv8p1q9g3 CcNfuajHYGThQrBS8AVK/zTJXAojo4XJWGd67+Gr+9vcun2GbLd4+8m+x2pr5nZ7 8D8/H1fkgFvr/wRxbJuSZ1hdk1CihlxpWiIbC41Jgd8Qdhi9nrWPV73Be7inB+id P3/pFljOXMUs/uVBgk22wIIwItoZnBXJGOQCIZ6VzFF0aH68DCn0ixVUEMp82FGq 4rYTfTlAY65LtPZ8uDe0TwwK64s08fYAbwB3B6lkxzMbh/sx6ugnNGpBGOQYSvQc ewvvH59cbPLIcmriiHfum+W7 -----END CERTIFICATE-----Generated at Thu Nov 5 05:35:25 2026 by rpki-client