$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: Mx0Spbc7vxUo/ibO7vZxH0ckA3BcXMpbO9Ck0c7qVKI= Subject key identifier: 80:53:6F:26:87:D9:C6:E2:AC:FF:FD:F0:86:66:F8:21:27:97:51:83 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: D2 Signing time: Thu 05 Nov 2026 07:37:51 +0000 Manifest this update: Thu 05 Nov 2026 07:37:50 +0000 Manifest next update: Thu 12 Nov 2026 07:37:50 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: V4WKqb/E2l53c6XGsKNmPxro8g3/O1+AHw0/4uIQIyY=) 2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=) 3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=) 4: 7A339E4448F711F1A886AD5191833773.roa (hash: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 07:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Nov 5 07:37:50 2026 GMT Not After : Nov 12 07:37:50 2026 GMT Subject: CN=6aec324e-ccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:9b:03:b3:c9:9b:66:26:0a:9b:1e:f2:a2: 8e:46:37:54:c5:dd:36:0d:7f:14:0b:24:dd:30:d3: cb:72:65:f6:7a:a5:c4:ec:61:93:9a:f4:6d:11:8d: 81:64:26:14:78:04:28:b9:c4:92:99:c1:1b:87:01: 08:80:d1:bb:79:d7:d5:e4:48:03:59:16:1c:f5:fe: c3:b0:db:8a:87:40:9b:8a:59:f3:e0:70:45:86:c1: 17:d3:06:bc:23:b8:a5:cb:7e:d9:80:30:a8:ab:bb: 66:e7:32:c2:76:5d:81:7a:83:65:e4:6c:0e:cd:e5: f4:80:95:71:65:31:8a:b1:db:82:78:c4:cb:c6:06: 2e:23:90:05:ad:25:cc:e4:7b:e6:a8:42:ba:47:59: bd:6e:10:02:48:28:c9:2a:b4:f3:39:7b:f5:fb:28: 16:de:e7:18:8f:79:f8:b3:69:55:1d:4b:a0:ab:ad: 47:e8:bd:66:20:6f:5c:e1:ff:f0:26:2f:c0:83:1a: 92:0f:1a:cf:56:2e:ae:d2:0d:67:8d:b6:de:53:f8: 11:52:8d:be:8b:7c:b3:c9:3a:51:42:e8:38:d2:57: f8:48:6c:1e:0c:52:13:38:ac:e0:c3:ed:2a:0f:5f: df:17:15:ce:5c:42:e0:6c:3c:d1:31:5c:b0:11:9c: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:6F:26:87:D9:C6:E2:AC:FF:FD:F0:86:66:F8:21:27:97:51:83 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:b8:b3:ad:a4:14:1f:84:37:a1:41:92:79:76:ad:2e:cc: 30:3d:a6:47:97:d8:a7:10:b7:fb:ea:5c:d5:d8:49:8e:8b:aa: 45:ec:e5:4d:0a:3b:21:cc:ba:86:b7:bf:ea:1c:53:62:89:f8: bd:47:a7:83:c1:8b:30:71:7e:01:7b:82:5e:e5:6f:18:da:ce: bc:63:37:66:b8:3b:3e:74:a9:ca:57:c0:2a:c1:f4:d7:30:d4: 39:e1:ba:3b:b9:e4:5a:73:10:68:c1:2f:3a:1e:b2:cc:4c:da: 9e:d3:9d:ef:13:62:14:61:3d:7c:64:fa:2d:73:2f:85:fc:85: 80:d0:ef:c6:f5:35:7d:d5:74:16:8e:f6:c1:92:87:35:f6:44: 5c:42:52:82:46:35:f9:f5:57:70:ea:08:6c:b4:37:50:b1:d2: ad:0a:3e:b4:38:21:b0:38:9d:47:73:d7:da:df:28:8b:5b:89: 97:a7:08:2c:53:85:f4:f9:ef:a8:4a:31:df:f7:e1:f2:25:94: 40:8b:ee:b9:ff:fd:9c:e8:48:ac:2c:bf:ef:9d:93:06:ea:e9: 07:da:aa:99:eb:d2:a5:ad:43:73:dd:b7:f2:c8:52:73:75:54: 84:09:1e:bd:71:94:60:7f:4c:6a:c6:06:81:db:12:d9:5c:87: 6e:ba:ca:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0Q0QxMTAvBgNVBAUTKEU3MDYwMTJBMTA2QkQwOTQ2NThFNjA0QzU2MDMwNTBG MTREQzNGNEMwHhcNMjYxMTA1MDczNzUwWhcNMjYxMTEyMDczNzUwWjAYMRYwFAYD VQQDEw02YWVjMzI0ZS1jY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXSbA7PJm2YmCpse8qKORjdUxd02DX8UCyTdMNPLcmX2eqXE7GGTmvRtEY2B ZCYUeAQoucSSmcEbhwEIgNG7edfV5EgDWRYc9f7DsNuKh0Cbilnz4HBFhsEX0wa8 I7ily37ZgDCoq7tm5zLCdl2BeoNl5GwOzeX0gJVxZTGKsduCeMTLxgYuI5AFrSXM 5HvmqEK6R1m9bhACSCjJKrTzOXv1+ygW3ucYj3n4s2lVHUugq61H6L1mIG9c4f/w Ji/AgxqSDxrPVi6u0g1njbbeU/gRUo2+i3yzyTpRQug40lf4SGweDFITOKzgw+0q D1/fFxXOXELgbDzRMVywEZzDtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBTbyaH 2cbirP/98IZm+CEnl1GDMB8GA1UdIwQYMBaAFOcGASoQa9CUZY5gTFYDBQ8U3D9M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8yQ0Q3RkQwRTlF QzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBKUmxqbUJNVmdNRkR4VGNQ MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Awdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBK UmxqbUJNVmdNRkR4VGNQMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAle64s62kFB+EN6FBknl2rS7MMD2mR5fYpxC3++pc1dhJjouqRezlTQo7Icy6 hre/6hxTYon4vUeng8GLMHF+AXuCXuVvGNrOvGM3Zrg7PnSpylfAKsH01zDUOeG6 O7nkWnMQaMEvOh6yzEzantOd7xNiFGE9fGT6LXMvhfyFgNDvxvU1fdV0Fo72wZKH NfZEXEJSgkY1+fVXcOoIbLQ3ULHSrQo+tDghsDidR3PX2t8oi1uJl6cILFOF9Pnv qEox3/fh8iWUQIvuuf/9nOhIrCy/752TBurpB9qqmevSpa1Dc9238shSc3VUhAke vXGUYH9MasYGgdsS2VyHbrrKsg== -----END CERTIFICATE-----Generated at Thu Nov 5 16:27:48 2026 by rpki-client