$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: Hn2jS1nMBeqanVxSYfMDEim8Tn9d1Dp44ziJtjvxawE= Subject key identifier: 7C:83:9C:EC:A2:0F:57:7F:98:8F:D8:50:D5:1E:7A:89:70:D9:B0:0E Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 019D Signing time: Thu 05 Nov 2026 05:14:23 +0000 Manifest this update: Thu 05 Nov 2026 05:14:23 +0000 Manifest next update: Thu 12 Nov 2026 05:14:23 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: 0YQ9qGNXdgiCPOF3x4am3rlSyWBVqlRu0P8LC+n51HI=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: d+XlkZfujpDkvCo9FmKooB3nuK4tFlgynQ1hbouvf0E=) 3: gIAB1jjaEgjeslv5VMUlSsMGkDE.asa (hash: ZAOfZijOT4efohcG2CtyuIwUiE+Ceod+FhEytO0j+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 05:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Nov 5 05:14:23 2026 GMT Not After : Nov 12 05:14:23 2026 GMT Subject: CN=6aec10af-cb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:83:16:b3:7a:a4:6e:85:dc:00:ea:7c:7e: 58:9f:96:61:f2:9c:30:aa:2a:a7:7f:de:9a:dc:51: 19:10:9b:3d:7f:6b:eb:34:5c:99:b1:a7:2d:71:a3: b1:ec:b9:df:b0:17:3e:10:80:fd:85:1a:53:8b:8f: 1e:ca:fb:f4:e3:ed:6d:01:23:ac:67:e9:76:bf:f0: 5f:51:fa:79:4c:3c:61:2b:12:c2:0a:61:43:57:50: c7:f1:e9:8a:54:48:b9:28:7c:72:3f:ff:b5:50:e7: e6:be:07:92:2f:41:e2:4c:80:e6:ba:58:3d:13:8d: 08:10:37:17:0a:ba:45:4e:f8:73:ac:5f:a0:9c:75: cd:67:13:c8:eb:7e:46:9a:a4:69:f6:3c:76:db:8e: 92:7f:8c:71:7b:69:1c:af:c4:23:bd:fc:82:a2:ee: 4b:f9:20:39:41:aa:b3:60:54:61:ba:e1:76:a9:29: 06:01:da:96:fa:51:52:d5:68:71:6d:46:07:fb:46: 6f:88:e8:d7:65:5a:be:49:98:7a:f2:b9:8b:3c:f2: bd:f9:1d:7b:4f:01:ed:9d:0a:25:b6:9c:ec:65:7a: 9f:a0:93:27:4d:60:aa:37:75:5e:24:59:4d:15:b2: a0:52:cd:d6:4e:69:1d:7b:a5:48:4e:e6:37:24:73: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:9C:EC:A2:0F:57:7F:98:8F:D8:50:D5:1E:7A:89:70:D9:B0:0E X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:df:26:b2:d9:cb:70:50:3c:95:d5:2b:1c:6f:76:48:a7:ee: 5e:ea:c4:ee:18:ca:49:f1:22:86:c4:18:8d:a4:e6:0f:3b:05: 41:87:fb:80:03:97:c3:12:47:d0:71:11:21:40:3a:cb:5e:72: 43:69:77:a7:85:52:f0:2a:31:65:eb:62:a6:4b:09:8f:03:69: 90:3b:60:9c:9d:e7:76:69:af:bd:c6:0f:52:73:9a:d5:67:b2: 93:5c:2f:54:39:07:c7:c5:4a:f6:dd:d0:32:1c:93:eb:60:06: 8d:cb:2b:33:a0:83:83:cc:e1:3e:5a:8a:2e:71:97:5c:de:ce: 15:17:13:c7:67:1a:d3:d1:a9:18:bd:42:b0:46:f5:bc:fc:9c: 45:28:33:7a:91:d5:10:41:3f:4d:c7:97:cd:87:b7:a0:7e:82: b2:15:dd:19:b1:61:17:6c:55:8f:19:9f:b5:93:5c:60:65:63: 27:f8:b5:0d:1e:4c:5f:c9:39:0a:11:39:24:6c:83:97:f3:34: 1b:2b:a0:7c:2e:36:c0:14:18:e4:6a:a0:2b:ab:0d:3e:bc:29: 33:28:f4:10:52:1b:a6:82:87:66:5e:de:9b:e6:e6:61:82:95: 38:f8:c0:9d:ad:d1:3b:58:03:d2:d6:3a:c5:1a:6e:ab:60:65: d7:d0:c1:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjYxMTA1MDUxNDIzWhcNMjYxMTEyMDUxNDIzWjAYMRYwFAYD VQQDEw02YWVjMTBhZi1jYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01GDFrN6pG6F3ADqfH5Yn5Zh8pwwqiqnf96a3FEZEJs9f2vrNFyZsactcaOx 7LnfsBc+EID9hRpTi48eyvv04+1tASOsZ+l2v/BfUfp5TDxhKxLCCmFDV1DH8emK VEi5KHxyP/+1UOfmvgeSL0HiTIDmulg9E40IEDcXCrpFTvhzrF+gnHXNZxPI635G mqRp9jx2246Sf4xxe2kcr8QjvfyCou5L+SA5QaqzYFRhuuF2qSkGAdqW+lFS1Whx bUYH+0ZviOjXZVq+SZh68rmLPPK9+R17TwHtnQoltpzsZXqfoJMnTWCqN3VeJFlN FbKgUs3WTmkde6VITuY3JHNDeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyDnOyi D1d/mI/YUNUeeolw2bAOMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArN8mstnLcFA8ldUrHG92SKfuXurE7hjKSfEihsQYjaTmDzsFQYf7gAOXwxJH 0HERIUA6y15yQ2l3p4VS8CoxZetipksJjwNpkDtgnJ3ndmmvvcYPUnOa1Weyk1wv VDkHx8VK9t3QMhyT62AGjcsrM6CDg8zhPlqKLnGXXN7OFRcTx2ca09GpGL1CsEb1 vPycRSgzepHVEEE/TceXzYe3oH6CshXdGbFhF2xVjxmftZNcYGVjJ/i1DR5MX8k5 ChE5JGyDl/M0GyugfC42wBQY5GqgK6sNPrwpMyj0EFIbpoKHZl7em+bmYYKVOPjA na3RO1gD0tY6xRpuq2Bl19DBAw== -----END CERTIFICATE-----Generated at Thu Nov 5 20:01:37 2026 by rpki-client