$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: 1J/HtnoQBvK1A3VGF6vStBtMEtL3aWmAeVRRfzO2GwM= Subject key identifier: D3:4E:35:55:0F:AC:AE:17:73:18:59:63:00:62:CE:F6:E6:EF:E5:9A Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 05AD Signing time: Sun 20 Sep 2026 23:01:01 +0000 Manifest this update: Sun 20 Sep 2026 23:01:01 +0000 Manifest next update: Sun 27 Sep 2026 23:01:01 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: YJsDivYWEZMaKyTfQbp6crWz6hFKxo221ifNGUhFMoA=) 2: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) 3: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) 4: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Sep 20 23:01:01 2026 GMT Not After : Sep 27 23:01:01 2026 GMT Subject: CN=6ab065ad-a01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:29:f3:58:80:65:74:5f:53:be:06:b8:92:f3: 82:35:e0:48:af:41:2d:fd:55:8d:51:43:3e:f0:f3: 40:97:1a:44:6d:14:60:74:3a:11:3d:b5:e9:57:2e: 51:62:70:90:c8:59:d7:5a:bb:ab:23:f2:bf:57:da: 34:3b:02:19:ec:02:11:8b:ca:98:0a:2c:e0:e2:f9: e4:87:ef:20:56:1e:a5:6e:e2:cf:7d:a4:72:67:9c: a0:75:39:03:98:0d:75:97:0f:e3:98:29:69:c3:65: e7:49:06:0c:8e:36:f7:82:ff:d9:d0:f6:9d:0c:6d: 47:c5:5b:41:16:9a:ae:34:4a:f2:af:4b:f1:1d:9f: 95:4f:29:64:3a:78:d5:fb:5f:ff:0c:a1:c2:74:5f: 3f:97:60:19:48:aa:45:cf:48:bb:09:51:cb:b2:53: a0:e5:5e:d6:27:1e:d1:3f:e0:39:3e:8c:9c:72:9b: ca:f8:9f:87:2f:e5:e1:0d:e4:bd:af:a4:12:d6:99: c7:59:14:30:28:85:03:d6:b8:7a:ce:c7:26:38:65: 98:bc:92:0c:5f:9c:5c:85:ae:44:11:04:97:1c:ee: 4b:2c:b5:a3:10:9c:23:10:86:bd:06:6f:45:49:c6: 2b:32:44:07:f3:55:b5:d3:6e:b9:77:c2:93:f5:23: 48:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:35:55:0F:AC:AE:17:73:18:59:63:00:62:CE:F6:E6:EF:E5:9A X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:66:cc:48:09:1a:07:a3:c0:cb:54:ad:2f:4a:ca:84:9f: 3c:a2:aa:d2:6b:aa:43:3a:a6:64:01:32:96:b0:9f:15:da:22: 0d:98:94:ed:22:72:4f:de:6d:0a:5f:f8:87:19:4f:2d:26:ad: 0f:7e:b9:58:59:61:5f:68:a3:b4:9f:13:4e:41:7c:d1:72:39: 08:b5:f3:ff:91:d1:89:1c:69:48:2c:23:e7:72:3f:9f:e0:62: 87:ee:5b:f1:79:a1:45:e4:55:2a:24:aa:2a:5a:69:28:66:6e: c3:d9:bb:2d:01:14:2f:bf:6a:f0:67:6f:ab:70:a5:ed:ed:2d: 14:a9:02:a4:fd:da:7e:51:e7:ff:12:c1:39:96:e4:06:e4:46: ae:71:e9:5b:79:f1:9f:4a:c5:86:c1:66:c9:79:a3:f2:7e:6e: c2:93:7e:51:ab:69:2c:17:20:e4:47:37:a8:9f:ad:fd:2b:af: b2:21:6a:68:40:95:b8:18:76:e2:c2:9d:fd:1c:f9:61:b0:a0: 07:03:7d:d7:e1:fe:a1:2a:a9:0e:f7:a2:d2:fe:58:06:b0:0c: 91:db:6c:b1:42:01:63:73:1c:f7:98:3b:0f:be:99:20:d6:61: 86:a0:18:f2:05:4e:79:ea:e9:e7:bc:f2:f9:a7:d4:8b:60:a0: 79:d8:d5:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwOTIwMjMwMTAxWhcNMjYwOTI3MjMwMTAxWjAYMRYwFAYD VQQDEw02YWIwNjVhZC1hMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SnzWIBldF9Tvga4kvOCNeBIr0Et/VWNUUM+8PNAlxpEbRRgdDoRPbXpVy5R YnCQyFnXWrurI/K/V9o0OwIZ7AIRi8qYCizg4vnkh+8gVh6lbuLPfaRyZ5ygdTkD mA11lw/jmClpw2XnSQYMjjb3gv/Z0PadDG1HxVtBFpquNEryr0vxHZ+VTylkOnjV +1//DKHCdF8/l2AZSKpFz0i7CVHLslOg5V7WJx7RP+A5PoyccpvK+J+HL+XhDeS9 r6QS1pnHWRQwKIUD1rh6zscmOGWYvJIMX5xcha5EEQSXHO5LLLWjEJwjEIa9Bm9F ScYrMkQH81W10265d8KT9SNIcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNONVUP rK4XcxhZYwBizvbm7+WaMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWVmzEgJGgejwMtUrS9KyoSfPKKq0muqQzqmZAEylrCfFdoiDZiU7SJyT95t Cl/4hxlPLSatD365WFlhX2ijtJ8TTkF80XI5CLXz/5HRiRxpSCwj53I/n+Bih+5b 8XmhReRVKiSqKlppKGZuw9m7LQEUL79q8Gdvq3Cl7e0tFKkCpP3aflHn/xLBOZbk BuRGrnHpW3nxn0rFhsFmyXmj8n5uwpN+UatpLBcg5Ec3qJ+t/SuvsiFqaECVuBh2 4sKd/Rz5YbCgBwN91+H+oSqpDvei0v5YBrAMkdtssUIBY3Mc95g7D76ZINZhhqAY 8gVOeerp57zy+afUi2CgedjVOA== -----END CERTIFICATE-----Generated at Mon Sep 21 02:53:23 2026 by rpki-client