$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json) Hash identifier: ibRFZgVtfrEP0tAbDKuZah8d6XPRk/axtLMRkzBKRzc= Subject key identifier: DE:C4:CB:2A:AD:D5:5E:7C:B6:F2:99:68:A7:F7:DA:33:C6:00:17:0B Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft Manifest number: 02B1 Signing time: Thu 05 Nov 2026 02:09:43 +0000 Manifest this update: Thu 05 Nov 2026 02:09:43 +0000 Manifest next update: Thu 12 Nov 2026 02:09:43 +0000 Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: uuLpFHP12R3f16/C6jcYXy9uuw+3NMd1zGO8oN7i8yE=) 2: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=) 3: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 02:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Validity Not Before: Nov 5 02:09:43 2026 GMT Not After : Nov 12 02:09:43 2026 GMT Subject: CN=6aebe567-f96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1d:0f:06:f8:7c:2b:d3:bd:42:bb:1b:00:84: 53:2f:c5:d7:bd:07:00:b6:3c:71:a2:c5:28:07:ab: ca:16:fd:c6:ca:27:c6:d1:b0:70:52:b2:6b:ec:b8: f0:84:f0:89:bd:08:b6:95:12:be:5f:60:6f:ac:b7: f5:cc:79:e8:09:22:d0:8e:9b:a6:7a:a5:e6:31:f9: ee:12:0b:df:8e:cc:94:03:7b:70:9a:2a:34:9d:50: dc:f8:59:b5:24:a4:8b:1c:e4:11:12:78:50:ae:8a: 38:d7:15:14:bc:de:20:d6:30:dc:a6:b6:4f:07:76: d6:0d:78:1d:7e:ad:75:bb:31:5a:ed:ca:66:d3:96: 8a:6d:c4:dc:90:95:0f:22:a3:38:22:98:07:4d:3d: 38:6a:4d:02:0f:1c:59:cc:2e:ee:81:ad:f5:87:84: 31:c1:71:66:8b:98:ad:3e:05:0e:bc:eb:07:ff:d3: a6:76:81:f3:9e:d2:d9:30:79:7f:de:fb:ae:36:f9: 24:90:02:e1:ae:c7:23:44:d5:65:a6:de:d3:4c:2b: ab:7c:6b:61:ca:17:51:a2:b4:23:57:7a:43:e9:5c: 6d:58:a1:9b:6b:ae:c1:1b:ba:09:b2:7e:dc:44:5a: 88:b0:01:7f:90:f6:70:c1:42:f6:d7:b1:e2:db:a8: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C4:CB:2A:AD:D5:5E:7C:B6:F2:99:68:A7:F7:DA:33:C6:00:17:0B X509v3 Authority Key Identifier: keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:30:08:dc:be:8a:5d:36:cb:cb:53:9e:a4:a3:3f:14:61:ff: e0:16:5d:05:26:3b:de:50:18:d0:33:df:5f:e7:4a:b7:f2:d0: 86:87:6e:62:cf:96:5e:a8:c7:d7:32:f8:62:13:86:7b:b3:db: 73:3e:0b:a3:09:1a:eb:e7:d2:8e:e0:af:b7:9b:35:88:86:26: 42:f9:f4:5f:84:cd:f3:4e:dd:6a:c2:8c:1e:6f:f3:77:07:a1: 27:33:49:54:8c:8b:e2:27:a4:d7:20:ba:da:7f:22:dd:38:dd: f0:0f:5f:23:35:18:9b:c0:4a:ce:63:da:d0:9d:10:cd:fa:ca: 25:cd:b6:27:9a:ef:4a:83:0f:db:cc:f1:8e:e7:bf:d5:f4:e1: dd:2b:93:60:48:dc:4f:67:69:73:5a:b3:77:f6:d6:a9:52:86: 75:09:55:34:9d:88:a5:01:d4:31:7e:92:1f:e8:bd:d3:ce:fc: 1e:13:36:20:4e:53:c5:0a:0b:3f:84:90:4e:c4:44:fc:b9:c0: f8:a7:0e:21:9d:49:b6:a4:7e:14:72:47:c4:36:0a:08:6e:3d: 72:f8:25:f7:a6:a4:76:a2:1e:28:10:51:9e:c1:26:6a:cb:53: a7:dd:5d:b5:4d:3b:d7:7b:12:77:ec:92:c6:7d:34:0d:48:3c: a0:b7:c6:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3 MDI2OTcxQ0MwHhcNMjYxMTA1MDIwOTQzWhcNMjYxMTEyMDIwOTQzWjAYMRYwFAYD VQQDEw02YWViZTU2Ny1mOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7x0PBvh8K9O9QrsbAIRTL8XXvQcAtjxxosUoB6vKFv3GyifG0bBwUrJr7Ljw hPCJvQi2lRK+X2BvrLf1zHnoCSLQjpumeqXmMfnuEgvfjsyUA3twmio0nVDc+Fm1 JKSLHOQREnhQroo41xUUvN4g1jDcprZPB3bWDXgdfq11uzFa7cpm05aKbcTckJUP IqM4IpgHTT04ak0CDxxZzC7uga31h4QxwXFmi5itPgUOvOsH/9OmdoHzntLZMHl/ 3vuuNvkkkALhrscjRNVlpt7TTCurfGthyhdRorQjV3pD6VxtWKGba67BG7oJsn7c RFqIsAF/kPZwwUL217Hi26gV7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7Eyyqt 1V58tvKZaKf32jPGABcLMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9DRkEzNDA5QUJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVf Q2hyR2kxNGF3Sjl3SnBjY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWDAI3L6KXTbLy1OepKM/FGH/4BZdBSY73lAY0DPfX+dKt/LQhoduYs+WXqjH 1zL4YhOGe7Pbcz4Lowka6+fSjuCvt5s1iIYmQvn0X4TN807dasKMHm/zdwehJzNJ VIyL4iek1yC62n8i3Tjd8A9fIzUYm8BKzmPa0J0QzfrKJc22J5rvSoMP28zxjue/ 1fTh3SuTYEjcT2dpc1qzd/bWqVKGdQlVNJ2IpQHUMX6SH+i90878HhM2IE5TxQoL P4SQTsRE/LnA+KcOIZ1JtqR+FHJHxDYKCG49cvgl96akdqIeKBBRnsEmastTp91d tU0713sSd+ySxn00DUg8oLfGpA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:32:26 2026 by rpki-client