$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: YcpYfGHRhEKc9FzWYwgpmspBHo/CI+Zcg3w+DUOgLgQ= Subject key identifier: 57:E0:E9:DD:26:3A:83:1E:DF:07:2F:FF:8A:6B:3A:72:A2:FE:14:BA Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0B39 Signing time: Wed 04 Nov 2026 19:26:49 +0000 Manifest this update: Wed 04 Nov 2026 19:26:48 +0000 Manifest next update: Wed 11 Nov 2026 19:26:48 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: yRyEk5umqYmb+cs/iSSbzL6Jx101U6ckkTGY34tEHww=) 2: EaXLIihOAFqNWo7GFAdWwK2gT7U.asa (hash: m9Q/ja5supgZbnee+efxyBUeG6fbF6nbdi5JdB2MvBM=) 3: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 19:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Nov 4 19:26:48 2026 GMT Not After : Nov 11 19:26:48 2026 GMT Subject: CN=6aeb86f8-ce36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:31:67:71:37:20:9a:72:b0:5b:4c:ac:96: 4c:1b:f2:eb:d2:db:0d:36:18:7e:bf:3f:2a:93:52: 13:55:74:98:97:2b:e8:60:d9:41:85:dc:e5:78:46: 99:23:a1:9c:8b:aa:80:75:2d:93:5c:17:e0:4a:06: 3f:04:6d:92:93:24:24:46:96:c8:58:5a:d8:59:e6: de:2b:4c:40:89:34:4b:1a:ba:a1:90:5e:22:5b:db: 63:a0:02:03:dc:30:95:0a:11:1e:4f:55:0a:8d:c4: 3d:6c:bb:c0:a5:9e:58:bd:c9:26:9e:0f:51:a7:b9: f1:2a:3b:00:2f:3e:43:47:1d:f0:2c:33:7b:01:c7: 2f:2d:21:90:52:6a:66:97:3c:c7:dd:2b:ff:e8:bf: a4:85:a3:42:32:61:b1:43:df:38:9f:34:c1:7b:7d: 4b:92:08:cc:ef:cb:28:d6:5c:b1:25:7c:79:00:64: 34:aa:00:9f:12:a9:0d:6e:fb:44:97:c6:95:60:62: 95:5d:5f:1a:db:ac:c3:c8:ed:22:d4:bd:a2:5d:04: 37:12:2d:a8:2b:a0:e0:56:c1:a1:54:a5:dd:cd:c1: a4:16:1e:9b:a2:8b:7a:a7:7f:9f:7e:7c:5d:28:3f: 36:9e:56:14:43:be:97:4f:32:9d:88:fa:04:ab:90: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:E9:DD:26:3A:83:1E:DF:07:2F:FF:8A:6B:3A:72:A2:FE:14:BA X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:da:e9:1a:e9:5c:fb:37:97:81:45:38:65:fd:ec:57:80:e3: 59:3b:40:9f:f5:b9:d0:3c:02:12:0e:40:83:02:03:4b:9d:90: ee:1d:7d:87:e4:14:2a:97:fe:42:c5:1e:35:db:02:19:7b:7d: 76:08:27:f6:8f:52:8b:d4:dd:3a:40:f0:47:7b:99:e8:d3:7c: 6c:cc:71:0b:f9:84:ec:1a:26:d2:f9:32:70:f1:c4:ad:f1:a9: ae:62:22:0a:dd:43:90:10:9f:2e:48:31:96:b0:47:6b:cd:cb: 2d:cf:73:38:b8:9d:f4:41:1f:f2:5a:56:b7:dc:17:f5:12:5f: 8c:1f:3f:d0:d5:f9:62:94:a5:ec:3a:3a:94:68:4e:32:4f:c1: 7c:aa:73:f1:a5:01:cb:0c:8a:fc:bc:c4:d5:c8:f9:1f:53:57: 99:9c:40:bd:32:0a:2f:73:7f:3c:69:64:0f:1c:48:da:1a:5f: 01:52:79:a8:e2:3c:a7:2a:90:be:c2:df:26:44:ee:3d:b1:dc: 9d:7a:8b:1a:d9:ff:90:5e:32:03:99:9e:17:69:65:e6:e9:4f: 1a:c4:a8:15:52:c2:57:6b:59:63:1a:46:bc:4f:b9:20:be:02: e8:49:b1:4f:e4:ce:9e:e0:07:f3:84:85:89:ea:ab:d7:7d:9a: 2b:b3:05:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjYxMTA0MTkyNjQ4WhcNMjYxMTExMTkyNjQ4WjAYMRYwFAYD VQQDEw02YWViODZmOC1jZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jkxZ3E3IJpysFtMrJZMG/Lr0tsNNhh+vz8qk1ITVXSYlyvoYNlBhdzleEaZ I6Gci6qAdS2TXBfgSgY/BG2SkyQkRpbIWFrYWebeK0xAiTRLGrqhkF4iW9tjoAID 3DCVChEeT1UKjcQ9bLvApZ5Yvckmng9Rp7nxKjsALz5DRx3wLDN7AccvLSGQUmpm lzzH3Sv/6L+khaNCMmGxQ984nzTBe31LkgjM78so1lyxJXx5AGQ0qgCfEqkNbvtE l8aVYGKVXV8a26zDyO0i1L2iXQQ3Ei2oK6DgVsGhVKXdzcGkFh6boot6p3+ffnxd KD82nlYUQ76XTzKdiPoEq5CXLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfg6d0m OoMe3wcv/4prOnKi/hS6MB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdrpGulc+zeXgUU4Zf3sV4DjWTtAn/W50DwCEg5AgwIDS52Q7h19h+QUKpf+ QsUeNdsCGXt9dggn9o9Si9TdOkDwR3uZ6NN8bMxxC/mE7Bom0vkycPHErfGprmIi Ct1DkBCfLkgxlrBHa83LLc9zOLid9EEf8lpWt9wX9RJfjB8/0NX5YpSl7Do6lGhO Mk/BfKpz8aUBywyK/LzE1cj5H1NXmZxAvTIKL3N/PGlkDxxI2hpfAVJ5qOI8pyqQ vsLfJkTuPbHcnXqLGtn/kF4yA5meF2ll5ulPGsSoFVLCV2tZYxpGvE+5IL4C6Emx T+TOnuAH84SFieqr132aK7MFeQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:15:48 2026 by rpki-client