$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: Wg1oqpZgHqSOHzxSUfTbYfzs7QC5rCLs+miP2mFVv0s= Subject key identifier: 16:A8:D0:4B:45:F1:90:E6:2C:A0:B8:C3:53:E7:4E:D2:1C:CA:F9:F1 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0F61 Signing time: Wed 04 Nov 2026 17:39:26 +0000 Manifest this update: Wed 04 Nov 2026 17:39:25 +0000 Manifest next update: Wed 11 Nov 2026 17:39:25 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: sJX9ZbvoDKlVVDDs/CcKEkN5gbpMzJlfefmtJKRwKno=) 2: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=) 3: 350711FA881211EE9710F928C4F9AE02.roa (hash: g5Jn/4mYG+O+uANS2Gq3ehc2407nXRKNECbsAhZFdHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3949 (0xf6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Nov 4 17:39:25 2026 GMT Not After : Nov 11 17:39:25 2026 GMT Subject: CN=6aeb6dce-f04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:3c:16:1e:67:0d:2a:fe:2e:94:d3:44:3b: 35:fe:99:c7:47:29:74:0b:fb:8a:96:e3:5e:87:11: 1f:3d:e1:c1:89:ed:1b:cb:a4:9e:bc:df:90:ec:d2: a3:78:6f:52:1d:d3:a3:d2:2a:94:61:b5:b4:db:42: d4:38:37:b1:4c:e3:f6:3f:fa:40:62:a8:6e:c5:a0: 20:9d:5c:b8:b9:13:2e:4b:d3:b3:2c:15:19:18:6c: ec:28:3e:8c:27:aa:e8:42:5d:8d:7f:94:e3:27:6b: b7:26:22:5d:cb:0c:ab:3c:e3:2e:e3:15:48:39:d5: cd:a2:69:47:70:3e:8d:69:93:ba:33:7e:86:0d:9d: 4a:2a:9b:48:f1:8d:fd:48:b9:4c:4b:a2:a5:db:b6: b3:87:18:93:0b:03:eb:4c:f4:61:5b:db:c2:72:1e: 23:19:9e:5f:c6:c2:29:db:40:f3:ee:9a:8c:6d:10: 33:c6:05:6f:0b:72:03:4c:2d:89:e7:42:19:7e:48: bb:64:fd:aa:e3:9d:27:95:06:71:ce:c0:27:54:bc: 3e:f4:c0:77:18:2a:de:e6:8b:78:5a:df:9a:3c:0c: b2:a6:e7:37:2c:c3:d8:df:d3:99:d3:d6:94:30:07: 75:ce:f2:72:8e:55:5a:7b:81:3d:31:83:e8:fd:97: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A8:D0:4B:45:F1:90:E6:2C:A0:B8:C3:53:E7:4E:D2:1C:CA:F9:F1 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ae:fa:5b:28:6a:db:2b:47:1a:aa:ae:2a:a7:0f:6a:a2:7d: 66:c2:d9:38:7f:e4:c0:20:5f:58:a6:88:80:fd:2c:70:ee:f1: b7:0b:50:74:d5:49:d6:6c:bd:d3:d1:34:61:9c:2d:05:62:57: a4:9e:67:89:49:3d:b0:6b:a1:e7:aa:f9:cf:55:54:f7:79:90: b3:cb:17:02:65:5b:72:fc:f3:56:ba:59:68:82:ec:a0:b1:0c: 26:c8:02:43:80:21:07:a4:3f:15:f7:f8:fe:1f:af:99:ca:17: 62:20:43:c7:c7:6b:2b:21:34:fc:e2:a3:55:32:a3:2a:c9:4f: 60:cb:0d:24:98:9d:e5:a8:93:0b:0d:ca:a0:90:8c:c1:24:c6: 7d:db:dd:cd:b9:00:fe:dc:4f:7e:40:60:c8:f9:3b:f3:58:24: 54:86:e9:50:c5:89:f5:54:84:d8:46:a3:46:1c:94:4f:47:c2: e8:89:7b:b1:0b:b8:49:06:85:a2:41:9d:63:60:4c:b9:8c:d1: 95:f8:ce:cd:09:0a:18:b2:06:1c:d8:fe:ee:84:2c:e7:04:e2: ac:9c:a6:7e:20:df:79:25:fc:44:3b:fa:88:1e:74:22:db:3d: 0c:12:da:e2:a8:21:a1:2c:e3:57:99:d5:23:55:49:07:f8:38: db:03:8a:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYxMTA0MTczOTI1WhcNMjYxMTExMTczOTI1WjAYMRYwFAYD VQQDEw02YWViNmRjZS1mMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaE8Fh5nDSr+LpTTRDs1/pnHRyl0C/uKluNehxEfPeHBie0by6SevN+Q7NKj eG9SHdOj0iqUYbW020LUODexTOP2P/pAYqhuxaAgnVy4uRMuS9OzLBUZGGzsKD6M J6roQl2Nf5TjJ2u3JiJdywyrPOMu4xVIOdXNomlHcD6NaZO6M36GDZ1KKptI8Y39 SLlMS6Kl27azhxiTCwPrTPRhW9vCch4jGZ5fxsIp20Dz7pqMbRAzxgVvC3IDTC2J 50IZfki7ZP2q450nlQZxzsAnVLw+9MB3GCre5ot4Wt+aPAyypuc3LMPY39OZ09aU MAd1zvJyjlVae4E9MYPo/ZcsmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBao0EtF 8ZDmLKC4w1PnTtIcyvnxMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaK76Wyhq2ytHGqquKqcPaqJ9ZsLZOH/kwCBfWKaIgP0scO7xtwtQdNVJ1my9 09E0YZwtBWJXpJ5niUk9sGuh56r5z1VU93mQs8sXAmVbcvzzVrpZaILsoLEMJsgC Q4AhB6Q/Fff4/h+vmcoXYiBDx8drKyE0/OKjVTKjKslPYMsNJJid5aiTCw3KoJCM wSTGfdvdzbkA/txPfkBgyPk781gkVIbpUMWJ9VSE2EajRhyUT0fC6Il7sQu4SQaF okGdY2BMuYzRlfjOzQkKGLIGHNj+7oQs5wTirJymfiDfeSX8RDv6iB50Its9DBLa 4qghoSzjV5nVI1VJB/g42wOK3g== -----END CERTIFICATE-----Generated at Thu Nov 5 14:31:53 2026 by rpki-client