$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.mft File: L4hQEuFePb-rXPb4nKj0prChcgY.mft (raw, json) Hash identifier: Cju6givaM7qf9TGymSpUkDiaTNaJbY9MdjQMU8wwm6c= Subject key identifier: 5A:96:22:69:6F:D5:73:A5:DC:61:4C:CC:E1:55:F1:88:27:20:EE:23 Authority key identifier: 2F:88:50:12:E1:5E:3D:BF:AB:5C:F6:F8:9C:A8:F4:A6:B0:A1:72:06 Certificate issuer: /CN=A91F31C5/serialNumber=2F885012E15E3DBFAB5CF6F89CA8F4A6B0A17206 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.mft Manifest number: 02 Signing time: Tue 03 Nov 2026 15:27:58 +0000 Manifest this update: Tue 03 Nov 2026 15:27:57 +0000 Manifest next update: Tue 10 Nov 2026 15:27:57 +0000 Files and hashes: 1: L4hQEuFePb-rXPb4nKj0prChcgY.crl (hash: tnS7QpFWsZtyoEwvZeSLBU48j8ToWumTJojwTP0VCos=) 2: 22E2FABCD79B11F1B4FB16EE0266CEF9.roa (hash: cHJc3cCAETOo82M1gM1PQ6WGK5mbnKC98Zppuc2noOM=) 3: 225BF026D79B11F1B4FB16EE0266CEF9.roa (hash: 4HymZitMP9IIZPjpnJDLCCJKml4AkeWBYNXJwE7CrQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.crl rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 15:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31C5, serialNumber=2F885012E15E3DBFAB5CF6F89CA8F4A6B0A17206 Validity Not Before: Nov 3 15:27:57 2026 GMT Not After : Nov 10 15:27:57 2026 GMT Subject: CN=6ae9fd7d-e187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:fa:c1:10:cd:78:5b:dd:77:c6:a9:b2:aa: cc:73:13:66:fa:d6:65:d8:cd:ff:10:5f:f5:81:bc: 78:80:7f:62:77:ae:aa:5c:75:ec:ef:e2:e5:7f:a7: e9:17:aa:0e:46:1c:ee:46:ba:08:8a:9f:5f:0c:5c: 85:3f:09:b6:9d:00:83:66:43:19:e0:d3:0b:1a:65: 6d:2f:16:19:9e:ec:4a:d5:dc:87:57:1e:09:5a:d5: ad:f8:a7:a1:16:fa:3d:6e:b8:c7:5c:7c:f0:2f:31: af:50:d5:b6:f5:0f:00:d4:14:0e:ff:3b:97:0a:fc: 9f:fa:ff:8a:83:51:23:33:79:38:42:33:16:9e:30: 59:0b:e1:13:0e:5d:b5:94:8c:23:b3:58:fa:54:cc: 14:0c:e6:aa:23:47:7d:d6:34:b7:a2:aa:a6:2f:f2: eb:fb:49:f8:9b:9a:db:e1:5e:cd:0e:c6:ed:1e:f7: 6f:f3:cb:97:ca:e8:0f:94:fb:f7:3b:58:12:80:16: 31:76:da:ec:59:15:62:12:51:0f:4f:0e:37:06:b7: c3:81:08:b2:fa:02:f0:8f:fe:3f:fe:2e:1e:a6:8d: 88:77:9a:a8:25:fc:78:e0:9c:c2:d9:df:78:56:e5: 55:25:4e:c3:71:88:09:c0:cc:79:93:72:a4:82:23: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:96:22:69:6F:D5:73:A5:DC:61:4C:CC:E1:55:F1:88:27:20:EE:23 X509v3 Authority Key Identifier: keyid:2F:88:50:12:E1:5E:3D:BF:AB:5C:F6:F8:9C:A8:F4:A6:B0:A1:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cc:e8:c5:39:f9:1c:c0:b9:9f:b4:6b:98:ee:92:89:95:ff: 93:4f:bb:dc:67:8a:e2:54:3f:7e:94:35:17:14:24:ec:04:b8: dc:87:38:b7:ce:41:30:b2:9c:82:31:ae:e6:76:1b:39:c5:2e: e6:52:ce:16:78:99:91:ab:82:69:30:63:db:2e:aa:5d:6f:32: bc:eb:8c:fc:b5:55:8e:01:ce:f2:69:b2:15:d8:90:da:04:36: 18:dc:ca:a6:00:20:23:65:91:71:81:19:e1:c6:b1:fa:4e:71: 9d:8c:14:56:42:c7:fe:5f:03:8e:88:aa:99:be:74:41:8d:f7: 7d:1c:8d:af:59:05:83:89:7d:53:a5:af:1e:83:03:a5:d6:0f: bb:c6:97:f7:16:ef:62:16:8f:35:d5:16:8f:43:11:5c:48:19: 41:2d:c4:fd:93:ef:4c:44:63:bb:65:2a:60:bd:06:84:0c:79: 0b:77:21:13:a5:9b:80:23:f2:9b:a4:9a:d9:55:d4:53:2c:16: 75:7a:d6:e0:47:c3:a9:b5:9b:50:18:71:10:d1:6e:c0:01:7e: 0c:53:92:01:94:e9:96:48:eb:de:66:55:dd:77:be:29:ad:17: 90:16:9b:17:01:ca:fe:ec:a5:9d:59:e7:a5:be:9b:f2:d0:32: 0e:50:c9:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzFDNTExMC8GA1UEBRMoMkY4ODUwMTJFMTVFM0RCRkFCNUNGNkY4OUNBOEY0QTZC MEExNzIwNjAeFw0yNjExMDMxNTI3NTdaFw0yNjExMTAxNTI3NTdaMBgxFjAUBgNV BAMTDTZhZTlmZDdkLWUxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGxPrBEM14W913xqmyqsxzE2b61mXYzf8QX/WBvHiAf2J3rqpcdezv4uV/p+kX qg5GHO5GugiKn18MXIU/CbadAINmQxng0wsaZW0vFhme7ErV3IdXHgla1a34p6EW +j1uuMdcfPAvMa9Q1bb1DwDUFA7/O5cK/J/6/4qDUSMzeThCMxaeMFkL4RMOXbWU jCOzWPpUzBQM5qojR33WNLeiqqYv8uv7SfibmtvhXs0Oxu0e92/zy5fK6A+U+/c7 WBKAFjF22uxZFWISUQ9PDjcGt8OBCLL6AvCP/j/+Lh6mjYh3mqgl/HjgnMLZ33hW 5VUlTsNxiAnAzHmTcqSCI+8/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWpYiaW/V c6XcYUzM4VXxiCcg7iMwHwYDVR0jBBgwFoAUL4hQEuFePb+rXPb4nKj0prChcgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMUM1LzQ3M0QzQUVBRDc5 QTExRjFCOTNDMDZFNTAyNjZDRUY5L0w0aFFFdUZlUGItclhQYjRuS2owcHJDaGNn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTDRoUUV1RmVQYi1yWFBiNG5LajBwckNoY2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MUM1LzQ3M0QzQUVBRDc5QTExRjFCOTNDMDZFNTAyNjZDRUY5L0w0aFFFdUZlUGIt clhQYjRuS2owcHJDaGNnWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmzOjFOfkcwLmftGuY7pKJlf+TT7vcZ4riVD9+lDUXFCTsBLjchzi3zkEwspyC Ma7mdhs5xS7mUs4WeJmRq4JpMGPbLqpdbzK864z8tVWOAc7yabIV2JDaBDYY3Mqm ACAjZZFxgRnhxrH6TnGdjBRWQsf+XwOOiKqZvnRBjfd9HI2vWQWDiX1Tpa8egwOl 1g+7xpf3Fu9iFo811RaPQxFcSBlBLcT9k+9MRGO7ZSpgvQaEDHkLdyETpZuAI/Kb pJrZVdRTLBZ1etbgR8OptZtQGHEQ0W7AAX4MU5IBlOmWSOveZlXdd74prReQFpsX Acr+7KWdWeelvpvy0DIOUMnL -----END CERTIFICATE-----Generated at Thu Nov 5 05:20:00 2026 by rpki-client