$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: Gw7awdM5M1C1DC/Q2WnHcflk42/cDIzJHnjsj7nJ52E= Subject key identifier: F5:44:81:08:3C:24:2F:E3:47:7C:4B:85:6B:E1:27:7A:E8:3C:27:CA Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0242 Signing time: Wed 23 Sep 2026 00:00:34 +0000 Manifest this update: Wed 23 Sep 2026 00:00:34 +0000 Manifest next update: Wed 30 Sep 2026 00:00:34 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: LYT6/HqMNzfL+Ti6c/9hWnUU70Nw4UvS7K6K5g/GFvQ=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: pBkyHWFkM6Bp1DuSXF/Q9xSoibHsw8odP6PRWn8/I0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Sep 23 00:00:34 2026 GMT Not After : Sep 30 00:00:34 2026 GMT Subject: CN=6ab316a2-9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:30:d8:77:d8:10:79:8f:fe:4c:23:13:9b: 08:90:1d:b7:97:71:a2:8e:3d:55:2d:5c:f7:32:16: 44:97:32:a5:fd:dc:34:a9:d2:01:72:fe:98:75:5d: de:86:f5:e8:d8:f8:f9:45:74:6b:66:87:f9:51:4e: fb:d5:9c:17:5f:08:78:ac:66:28:d7:d0:f2:ba:3b: e2:35:35:21:9f:56:00:3a:a8:35:5c:63:bb:d3:ed: 16:51:e3:9e:ac:8b:cd:b9:7d:e8:d2:d9:0c:7d:58: ab:47:dc:ca:5c:b1:ab:19:2e:24:dd:d3:67:72:41: 6f:fa:e5:aa:b4:9b:79:92:e7:47:61:ed:51:6e:a7: b1:22:93:5e:44:6c:91:80:ed:96:8b:de:ff:99:39: 3b:d8:ad:a6:ef:fe:2f:35:8c:72:58:e7:d3:d2:fa: 37:18:4f:13:2a:d8:1f:db:6c:ee:b6:47:9d:4f:11: 2f:3c:d0:d9:cb:30:07:09:ab:97:75:f9:70:db:55: 5a:5e:96:dd:5b:f3:e5:5b:43:18:92:66:fb:58:24: 6e:6b:da:40:8f:95:ad:5f:95:a7:f3:19:1e:e6:c2: 48:71:cd:fc:4c:b7:83:0b:31:bb:a0:c9:fd:a2:d4: 65:41:30:1c:af:f7:e1:55:a3:78:17:43:b5:17:da: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:44:81:08:3C:24:2F:E3:47:7C:4B:85:6B:E1:27:7A:E8:3C:27:CA X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:bd:c7:9e:f2:7f:74:79:5c:2d:44:26:89:31:24:8d:11:1b: 50:d4:33:fd:be:e7:0b:4f:1f:10:88:37:00:57:01:9d:07:8e: ef:31:7e:a9:42:8a:0e:e5:ee:aa:5c:4a:69:6f:ab:a9:e2:56: b1:d7:f5:e3:88:2a:45:57:6d:de:8f:e2:37:e6:4e:c2:57:45: a1:1c:dd:e4:29:89:9b:12:f4:f0:12:26:60:d1:56:b7:56:12: 62:3e:57:7c:cf:53:6a:ab:18:be:83:0a:dc:01:37:e5:2c:3f: 3f:0f:15:39:7a:c7:d2:af:44:b4:4c:4a:a6:8c:70:c6:0f:13: eb:9e:0f:f3:18:94:9e:b2:1e:ea:7e:e9:55:65:bc:d2:14:db: ab:60:b5:63:52:8f:82:bc:1b:59:76:2b:c1:4d:ef:88:fa:14: 47:9b:29:c4:35:a1:78:f9:70:f0:3c:e8:94:fd:14:e1:5c:22: c1:56:b4:c5:16:2c:ef:8a:43:fd:04:12:48:38:5f:9c:1b:b6: 41:ae:92:7d:5d:25:82:c9:1a:56:0b:b4:9c:21:95:76:0b:de: 83:f2:ce:b0:47:70:1f:8c:e8:8a:89:8a:68:c3:68:56:0a:8c: d9:99:d1:af:07:49:0c:e5:68:45:23:6b:f6:67:fa:1c:8d:4b: d7:56:0c:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjYwOTIzMDAwMDM0WhcNMjYwOTMwMDAwMDM0WjAYMRYwFAYD VQQDEw02YWIzMTZhMi05YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbgw2HfYEHmP/kwjE5sIkB23l3Gijj1VLVz3MhZElzKl/dw0qdIBcv6YdV3e hvXo2Pj5RXRrZof5UU771ZwXXwh4rGYo19DyujviNTUhn1YAOqg1XGO70+0WUeOe rIvNuX3o0tkMfVirR9zKXLGrGS4k3dNnckFv+uWqtJt5kudHYe1RbqexIpNeRGyR gO2Wi97/mTk72K2m7/4vNYxyWOfT0vo3GE8TKtgf22zutkedTxEvPNDZyzAHCauX dflw21VaXpbdW/PlW0MYkmb7WCRua9pAj5WtX5Wn8xke5sJIcc38TLeDCzG7oMn9 otRlQTAcr/fhVaN4F0O1F9rV3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVEgQg8 JC/jR3xLhWvhJ3roPCfKMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAor3HnvJ/dHlcLUQmiTEkjREbUNQz/b7nC08fEIg3AFcBnQeO7zF+qUKKDuXu qlxKaW+rqeJWsdf144gqRVdt3o/iN+ZOwldFoRzd5CmJmxL08BImYNFWt1YSYj5X fM9TaqsYvoMK3AE35Sw/Pw8VOXrH0q9EtExKpoxwxg8T654P8xiUnrIe6n7pVWW8 0hTbq2C1Y1KPgrwbWXYrwU3viPoUR5spxDWhePlw8DzolP0U4VwiwVa0xRYs74pD /QQSSDhfnBu2Qa6SfV0lgskaVgu0nCGVdgveg/LOsEdwH4zoiomKaMNoVgqM2ZnR rwdJDOVoRSNr9mf6HI1L11YMAg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:57:16 2026 by rpki-client