$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: zVLDPIKAcvj4N55vqLvS7OkfuDZ0FMdPOythBkXx+Yk= Subject key identifier: 96:2A:EC:EA:1C:C2:BF:C3:EE:9E:C2:73:58:7D:B6:C9:83:07:B9:74 Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 166B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 1651 Signing time: Sat 14 Nov 2026 16:37:06 +0000 Manifest this update: Sat 14 Nov 2026 16:37:06 +0000 Manifest next update: Sat 21 Nov 2026 16:37:06 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: 94BfYOJ9YESQEjciMHGeut7CBh8HDGSKxNTuTRQznZc=) 2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: Lo3XMSKg8agVzx55tHFzr470VZoMbp50JJLkCDFF7Uo=) 3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: A9iOSCnHXh3iJa4349r8JORSw8ym91SM/p7nkJSCSR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5739 (0x166b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Nov 14 16:37:06 2026 GMT Not After : Nov 21 16:37:06 2026 GMT Subject: CN=6af88e32-5314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:48:8f:f5:7d:39:b7:16:a3:bd:ef:ef:e7: 77:98:d9:fb:29:75:cb:2e:7f:75:55:ef:f8:eb:d9: c5:fc:b2:9c:9f:88:9f:d3:d4:4c:3a:0c:5f:d9:b7: ed:93:5a:51:a7:bc:b1:01:bb:ac:d1:9f:65:b4:aa: fb:a6:4b:56:32:ec:42:2d:8f:a4:e6:aa:6c:e8:e4: eb:3e:77:07:99:12:3f:1c:4a:4a:09:36:00:48:da: a2:75:ca:6c:68:03:56:80:57:ed:fd:4b:25:ac:ec: 83:88:ef:52:47:83:98:5b:7b:f9:7f:89:80:f4:bb: 49:8b:1e:1c:e6:b1:9c:d7:8f:99:d4:f9:a4:ed:f6: d5:06:4c:88:e0:3d:50:20:3c:ee:4f:25:3e:ef:52: b4:d7:79:43:af:08:cd:6d:11:66:ac:06:81:9b:67: 7c:3c:a1:22:33:8d:2b:20:06:a9:f9:da:b4:04:a9: 07:a6:c8:5f:1c:36:4e:d4:8a:94:37:15:91:7e:1e: 12:73:87:dd:05:91:2e:23:58:09:3d:f0:0f:99:39: 8c:91:3f:7d:ff:0e:1e:6f:70:10:5e:fe:39:0b:81: 85:5e:2e:40:7c:d0:4e:3e:15:35:1b:1f:22:58:99: 40:31:a7:86:4b:e6:94:0e:ab:71:16:24:28:d9:29: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:EC:EA:1C:C2:BF:C3:EE:9E:C2:73:58:7D:B6:C9:83:07:B9:74 X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:c3:60:0d:9a:d2:8c:5a:56:15:f4:3e:29:a4:a3:ed:e1: 74:d7:35:44:3a:1a:e8:a7:59:d9:3f:b7:32:65:2e:22:5a:93: e9:35:a5:47:28:fd:b3:c2:c3:f4:b4:3b:e6:22:e6:cd:e7:df: 5b:7e:e4:2f:8f:c7:9a:be:03:32:3e:7c:0c:7b:95:71:6d:d8: 25:20:6c:b7:30:35:6e:f9:2a:df:97:0f:d5:60:e7:9e:79:15: 12:01:81:eb:b4:7b:61:52:a7:70:fd:18:c9:3c:88:03:74:c9: af:28:99:41:91:be:ea:4c:e8:13:64:f7:c3:73:d2:22:9e:e8: 35:c0:6a:19:5f:32:14:bf:4e:90:9f:fd:83:4b:23:22:6e:21: 6b:de:8a:9e:d7:3b:b0:53:29:60:96:04:81:ce:a8:eb:d9:f3: bf:60:ed:42:07:c8:4c:78:3b:69:fb:6c:88:c0:da:04:85:3f: 3f:de:02:f2:fe:41:4b:7e:d6:81:d5:24:d9:50:b0:06:3f:b7: 61:ed:8b:f9:1c:28:9c:7e:69:10:11:a3:aa:e0:60:51:11:a7: 57:71:b9:2d:f2:61:6e:29:42:5c:57:c6:99:fb:93:72:64:2a: 6b:9a:a7:41:d6:e2:7b:2b:07:0e:21:3a:9f:89:36:5e:69:4c: 0f:eb:cf:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjYxMTE0MTYzNzA2WhcNMjYxMTIxMTYzNzA2WjAYMRYwFAYD VQQDEw02YWY4OGUzMi01MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbtIj/V9ObcWo73v7+d3mNn7KXXLLn91Ve/469nF/LKcn4if09RMOgxf2bft k1pRp7yxAbus0Z9ltKr7pktWMuxCLY+k5qps6OTrPncHmRI/HEpKCTYASNqidcps aANWgFft/UslrOyDiO9SR4OYW3v5f4mA9LtJix4c5rGc14+Z1Pmk7fbVBkyI4D1Q IDzuTyU+71K013lDrwjNbRFmrAaBm2d8PKEiM40rIAap+dq0BKkHpshfHDZO1IqU NxWRfh4Sc4fdBZEuI1gJPfAPmTmMkT99/w4eb3AQXv45C4GFXi5AfNBOPhU1Gx8i WJlAMaeGS+aUDqtxFiQo2Sm1gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYq7Ooc wr/D7p7Cc1h9tsmDB7l0MB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASVzDYA2a0oxaVhX0Pimko+3hdNc1RDoa6KdZ2T+3MmUuIlqT6TWlRyj9s8LD 9LQ75iLmzeffW37kL4/Hmr4DMj58DHuVcW3YJSBstzA1bvkq35cP1WDnnnkVEgGB 67R7YVKncP0YyTyIA3TJryiZQZG+6kzoE2T3w3PSIp7oNcBqGV8yFL9OkJ/9g0sj Im4ha96Kntc7sFMpYJYEgc6o69nzv2DtQgfITHg7aftsiMDaBIU/P94C8v5BS37W gdUk2VCwBj+3Ye2L+RwonH5pEBGjquBgURGnV3G5LfJhbilCXFfGmfuTcmQqa5qn QdbieysHDiE6n4k2XmlMD+vPlw== -----END CERTIFICATE-----Generated at Sun Nov 15 10:10:03 2026 by rpki-client