$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: 9uRd5t/cgAD0V/6d4K9wQCydVTWaYwURbouDQlM8kP8= Subject key identifier: 3A:37:DF:62:3C:77:4D:CB:17:7F:08:04:32:18:A3:EA:A2:91:4C:B6 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12D5 Signing time: Wed 04 Nov 2026 17:08:05 +0000 Manifest this update: Wed 04 Nov 2026 17:08:05 +0000 Manifest next update: Wed 11 Nov 2026 17:08:05 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: YMi8FKvAp3Vy8iziTUFlS0gENt7W+IP+tBWd0bYc6fA=) 2: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: yEHcdIRxGvcvL3LH1FATyxWaJjcbOvRWhMW0n20VfHo=) 3: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: wH/YBuSIvwTFmyy31k9N28U8ny+6AQtP4uVAhBFpStc=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: wClZOasA7CYFIrgh0jHCNkh1TB6Atr6EuIVvJgOfZHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4858 (0x12fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Nov 4 17:08:05 2026 GMT Not After : Nov 11 17:08:05 2026 GMT Subject: CN=6aeb6675-c949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:eb:d7:2c:df:15:d8:de:51:ef:cd:6b:69: 8f:a7:b1:d2:80:a1:9b:e3:53:79:c1:36:ba:3e:f0: ec:67:91:43:d3:4c:1d:a4:74:62:88:ec:24:02:f7: 6d:99:f0:35:b8:d4:ee:16:39:be:58:16:44:51:a1: 9b:05:22:c5:6b:1e:79:40:50:9c:b8:26:2e:be:d6: 6a:38:db:47:97:f2:25:5b:1b:6c:28:b5:df:6d:9f: 45:0d:e6:d5:d0:a4:ef:bf:2a:b0:bf:73:94:48:6c: 6d:56:7d:83:4c:ed:b2:d3:e9:73:2d:c2:aa:6d:50: 17:89:f0:3e:78:ae:20:fa:01:06:a0:8f:eb:ae:de: 7f:21:8e:8c:df:6a:e9:41:b9:a4:63:03:d3:fc:40: 60:5a:7c:6b:9b:70:af:9f:70:67:f8:25:f1:ad:23: 8d:b3:53:a8:5a:d9:35:6f:25:78:32:0a:73:ae:c3: 05:8f:f2:0b:86:21:8c:44:d8:fd:43:e9:48:29:ea: ad:89:f8:33:da:85:9b:a3:1d:38:49:8a:56:32:08: c5:81:22:19:c5:39:48:93:8f:96:c8:77:33:95:7c: 3e:90:6f:97:93:cd:ec:cd:b0:45:d8:41:62:8c:aa: 28:bc:c7:ca:6d:7d:6e:bd:eb:92:5c:95:fa:3a:f9: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:DF:62:3C:77:4D:CB:17:7F:08:04:32:18:A3:EA:A2:91:4C:B6 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:ab:52:9f:52:d3:fa:10:77:4a:d2:bf:50:f1:e2:f4:02: ad:a8:12:f0:fb:c1:db:f1:94:ac:ad:8e:b8:d8:36:96:b7:94: df:03:f7:23:e2:dc:5d:4b:79:25:c0:30:c9:b2:a2:72:75:c4: a1:5a:4b:d8:94:28:c5:6d:c7:5c:d6:a4:ca:30:f3:98:a4:7b: 86:42:85:24:9d:5b:4d:3d:70:5c:94:a6:a4:f7:2a:ee:41:52: 40:17:34:58:ff:5f:73:aa:e7:93:70:0a:ec:c9:5c:c2:31:3c: 1a:e6:3e:ca:5f:a6:cd:b6:1b:1e:e9:5b:4d:79:92:83:84:75: e8:69:57:6b:29:52:ae:67:cd:fe:76:44:df:e5:a2:55:13:db: 60:ac:06:cd:98:8b:c1:6f:83:f3:73:20:ef:07:cd:1b:18:f5: 56:ab:4f:72:be:0d:e6:a1:7d:e2:c3:be:13:b9:a6:af:5c:36: 00:b8:f0:ef:88:d9:ec:3b:81:b8:1c:61:da:f6:76:6b:8f:39: 15:ae:b6:3a:5b:2d:75:23:b3:c4:f8:34:b2:c7:1d:d9:b0:05: 4d:42:4a:54:aa:50:02:bd:31:6c:d6:1f:4d:09:14:84:0f:17: 03:1c:8f:96:5f:ab:c3:da:96:8d:2d:32:d8:de:de:54:2a:02: e3:16:e4:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYxMTA0MTcwODA1WhcNMjYxMTExMTcwODA1WjAYMRYwFAYD VQQDEw02YWViNjY3NS1jOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqfr1yzfFdjeUe/Na2mPp7HSgKGb41N5wTa6PvDsZ5FD00wdpHRiiOwkAvdt mfA1uNTuFjm+WBZEUaGbBSLFax55QFCcuCYuvtZqONtHl/IlWxtsKLXfbZ9FDebV 0KTvvyqwv3OUSGxtVn2DTO2y0+lzLcKqbVAXifA+eK4g+gEGoI/rrt5/IY6M32rp QbmkYwPT/EBgWnxrm3Cvn3Bn+CXxrSONs1OoWtk1byV4MgpzrsMFj/ILhiGMRNj9 Q+lIKeqtifgz2oWbox04SYpWMgjFgSIZxTlIk4+WyHczlXw+kG+Xk83szbBF2EFi jKoovMfKbX1uveuSXJX6OvltqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDo332I8 d03LF38IBDIYo+qikUy2MB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpyrUp9S0/oQd0rSv1Dx4vQCragS8PvB2/GUrK2OuNg2lreU3wP3I+LcXUt5 JcAwybKicnXEoVpL2JQoxW3HXNakyjDzmKR7hkKFJJ1bTT1wXJSmpPcq7kFSQBc0 WP9fc6rnk3AK7MlcwjE8GuY+yl+mzbYbHulbTXmSg4R16GlXaylSrmfN/nZE3+Wi VRPbYKwGzZiLwW+D83Mg7wfNGxj1VqtPcr4N5qF94sO+E7mmr1w2ALjw74jZ7DuB uBxh2vZ2a485Fa62OlstdSOzxPg0sscd2bAFTUJKVKpQAr0xbNYfTQkUhA8XAxyP ll+rw9qWjS0y2N7eVCoC4xbkZQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:25:34 2026 by rpki-client