$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: AWlo0DjTm8bMCxB1lCgKDmc5G8R2LPQ15031zpeVC+k= Subject key identifier: E6:49:0B:CA:DF:AF:83:22:87:86:AC:52:6D:81:67:E8:E1:16:D1:C3 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0BBD Signing time: Sun 20 Sep 2026 18:59:26 +0000 Manifest this update: Sun 20 Sep 2026 18:59:26 +0000 Manifest next update: Sun 27 Sep 2026 18:59:26 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: HHsihlQTuz8MqZGRcGNKPCuppF3REOYBXSBQMdsfcBc=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: KW6Vgg3PzapCzqZpqa4Hc7jhniagNU9VOgQ7KRnsJtw=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: WH/Wg/EO4nt6pgpoUx6Qd+KWgLY+/DrNoBzFsn4L0uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Sep 20 18:59:26 2026 GMT Not After : Sep 27 18:59:26 2026 GMT Subject: CN=6ab02d0e-d8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:69:e0:5c:94:df:85:e8:30:6c:06:22:14: 42:32:4b:3d:0a:24:73:44:29:ff:f0:f6:1b:d5:ae: 35:0f:f7:a4:ee:7e:a3:60:6e:ce:aa:6b:be:87:57: fb:33:11:e7:44:43:3b:50:c5:03:46:6f:c0:08:3d: 42:1d:ca:a7:7a:0b:68:1c:14:ce:5a:15:b6:44:b3: 41:47:df:50:68:a0:01:cd:25:fc:f3:b5:1f:2a:b2: 78:14:1a:99:94:5e:9f:67:3b:e4:23:15:76:6e:a4: b9:bc:e7:ed:53:7d:e1:9c:3a:43:26:12:e4:71:8c: 2c:09:2f:fd:a1:99:c6:42:20:22:4c:df:0d:5f:76: e4:d7:cd:e9:7b:98:e0:5c:96:a6:6b:e5:9a:37:b5: bf:d8:38:93:01:a0:0f:af:7e:65:6e:ab:8a:6c:6a: 69:18:25:fc:4f:9c:c4:f6:12:65:e9:43:a1:64:a0: 60:f7:c6:9c:ad:5b:a6:ce:4f:18:f1:ac:53:02:99: 05:71:14:82:f4:46:b8:9d:b2:74:7e:7a:a7:ed:2e: 19:72:74:3c:3e:79:6c:cb:84:ac:31:a5:04:b0:f7: 87:c9:b9:5b:32:26:91:c0:6e:c6:62:d1:68:8c:35: a9:26:51:0d:19:39:f8:3a:20:d9:43:4a:4b:6c:64: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:49:0B:CA:DF:AF:83:22:87:86:AC:52:6D:81:67:E8:E1:16:D1:C3 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ec:af:0d:70:f9:eb:e8:a0:25:70:92:3e:db:fa:03:ba:9c: b6:36:3d:47:28:8d:fa:e2:d3:31:92:90:da:aa:f1:66:3a:e8: 28:a5:4b:80:8f:1e:3b:c2:42:cc:f1:c4:13:e0:b6:49:5d:90: e7:c3:72:77:e5:e6:18:45:01:40:1d:3b:a2:ab:06:92:ea:0b: f5:ab:a8:f9:5a:83:bf:eb:dd:00:9a:b4:a8:85:94:13:3b:04: 3a:79:f6:23:c0:6d:85:26:ac:a4:7d:75:dd:4c:a6:83:34:11: e5:73:70:b0:b4:43:2f:e9:b4:47:3a:00:8a:f9:72:c6:99:54: 6a:f3:37:96:05:e2:1a:3b:4d:5a:01:41:c4:e0:a8:eb:92:80: 58:da:5f:8d:fa:94:de:0a:51:78:7f:7f:cf:0e:eb:a4:07:d8: 93:e6:70:d1:ce:95:d2:25:50:1d:d4:d4:da:ba:30:d7:d2:a2: 59:8c:2b:b0:00:44:4c:80:3d:92:b9:f9:28:20:06:00:58:36: 71:91:8f:ad:10:03:68:cf:49:b6:6a:5a:65:68:24:2c:0e:0b: 68:3c:a9:ed:9c:d4:75:a7:94:93:d6:b9:af:7a:56:fc:70:2a: 16:bb:79:da:49:11:13:26:b8:52:e5:60:74:4e:83:0d:ab:4e: 67:01:dd:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjYwOTIwMTg1OTI2WhcNMjYwOTI3MTg1OTI2WjAYMRYwFAYD VQQDEw02YWIwMmQwZS1kOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIJp4FyU34XoMGwGIhRCMks9CiRzRCn/8PYb1a41D/ek7n6jYG7Oqmu+h1f7 MxHnREM7UMUDRm/ACD1CHcqnegtoHBTOWhW2RLNBR99QaKABzSX887UfKrJ4FBqZ lF6fZzvkIxV2bqS5vOftU33hnDpDJhLkcYwsCS/9oZnGQiAiTN8NX3bk183pe5jg XJama+WaN7W/2DiTAaAPr35lbquKbGppGCX8T5zE9hJl6UOhZKBg98acrVumzk8Y 8axTApkFcRSC9Ea4nbJ0fnqn7S4ZcnQ8Pnlsy4SsMaUEsPeHyblbMiaRwG7GYtFo jDWpJlENGTn4OiDZQ0pLbGQHHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZJC8rf r4Mih4asUm2BZ+jhFtHDMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOyvDXD56+igJXCSPtv6A7qctjY9RyiN+uLTMZKQ2qrxZjroKKVLgI8eO8JC zPHEE+C2SV2Q58Nyd+XmGEUBQB07oqsGkuoL9auo+VqDv+vdAJq0qIWUEzsEOnn2 I8BthSaspH113UymgzQR5XNwsLRDL+m0RzoAivlyxplUavM3lgXiGjtNWgFBxOCo 65KAWNpfjfqU3gpReH9/zw7rpAfYk+Zw0c6V0iVQHdTU2row19KiWYwrsABETIA9 krn5KCAGAFg2cZGPrRADaM9JtmpaZWgkLA4LaDyp7ZzUdaeUk9a5r3pW/HAqFrt5 2kkREya4UuVgdE6DDatOZwHd3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 17:46:31 2026 by rpki-client