$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: Mb7pGzwA6o4Joqi9j+OdWRLoFmWYY3SgvDl9F5etHWA= Subject key identifier: BE:15:92:21:14:50:FD:65:2F:45:73:C3:7E:58:BE:53:DE:FE:BB:88 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 044A Signing time: Mon 21 Sep 2026 00:01:49 +0000 Manifest this update: Mon 21 Sep 2026 00:01:48 +0000 Manifest next update: Mon 28 Sep 2026 00:01:48 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: AZymKnjrQnqKFQtEt///OSuKO20v1Y+gkk6KNePmEM4=) 2: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 3: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) 4: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Sep 21 00:01:48 2026 GMT Not After : Sep 28 00:01:48 2026 GMT Subject: CN=6ab073ed-7c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:96:48:fa:b2:6b:80:49:51:02:83:bc:23: 53:27:57:5d:48:6a:8e:e8:50:d8:18:7b:2d:33:c7: 2d:4a:14:ac:e4:99:00:d8:1f:6b:ce:2c:b3:82:60: 52:a5:82:ac:1e:d6:c4:c5:7d:10:f4:66:a7:7b:09: 13:7c:f8:3a:ea:7a:2d:09:2f:da:bd:47:48:bf:08: 4a:1b:b1:40:b6:50:46:5f:af:03:23:5e:5e:43:10: cb:5a:74:87:44:f8:fd:34:d6:45:f2:7f:69:84:94: bc:5b:81:1e:21:70:50:1f:07:a0:7b:50:5e:16:69: 98:18:3f:c7:58:11:9c:db:e7:58:fe:66:52:a1:2b: 4e:1a:9b:72:f3:db:54:af:17:f3:92:1c:80:c1:83: f2:48:1c:06:a7:69:39:c6:3b:c5:d7:39:ed:53:3a: 03:40:1e:15:f4:7c:f6:0c:b8:af:2b:a2:da:a8:e7: 50:df:ed:4f:47:7f:fb:26:6d:1d:de:6d:bf:dd:97: 04:05:20:55:1b:3c:b6:c0:e4:86:21:76:19:1a:af: 96:bc:55:80:01:43:fd:fe:5c:5f:2a:6b:3f:9c:38: 3d:4f:6b:0c:19:72:43:85:e2:97:aa:66:cb:3a:3c: ee:79:6c:ab:b3:3c:d5:10:44:6d:5d:09:47:79:1e: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:15:92:21:14:50:FD:65:2F:45:73:C3:7E:58:BE:53:DE:FE:BB:88 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b4:3e:bf:5f:d3:6e:15:e1:05:84:aa:77:49:bb:df:4b:16: 18:17:4c:30:de:da:8e:b3:d0:37:ae:94:e7:d7:0a:b3:e7:94: 1d:af:59:86:0b:a4:5d:e3:ed:84:df:44:17:7d:c1:39:76:14: 94:21:51:5d:94:e7:0b:b8:72:b1:95:ba:00:a2:3e:56:2f:2b: ef:cd:5a:de:72:09:dd:7e:c8:06:9e:35:e0:11:2c:c1:23:11: b4:42:7d:d1:b2:c7:b7:72:23:cf:d2:c7:17:75:61:2f:86:01: ab:a7:45:98:94:44:b1:f1:43:89:e0:39:70:4d:d6:0f:d8:d0: c0:01:18:48:3f:b1:01:01:7a:c0:6b:cf:46:1c:d4:57:71:4d: f9:d8:d2:17:70:ae:25:a6:da:2d:98:dd:8f:84:0e:16:6c:eb: 5f:02:82:10:df:76:68:03:26:ea:5d:77:1f:90:0a:ca:c1:65: d0:23:6a:d9:39:be:c6:41:a0:ad:07:1f:87:24:df:9a:95:08: c9:3c:03:89:69:25:e2:9c:52:ee:b5:6d:d5:8f:51:65:ee:d6: 02:0d:f7:05:ae:f5:df:3c:ca:6f:f3:1a:a6:32:36:64:32:e4: 8f:d8:ce:5f:87:29:7a:cc:2d:5c:2b:05:c5:d3:eb:3a:b0:8c: 50:09:4f:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwOTIxMDAwMTQ4WhcNMjYwOTI4MDAwMTQ4WjAYMRYwFAYD VQQDEw02YWIwNzNlZC03YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LmWSPqya4BJUQKDvCNTJ1ddSGqO6FDYGHstM8ctShSs5JkA2B9rziyzgmBS pYKsHtbExX0Q9GanewkTfPg66notCS/avUdIvwhKG7FAtlBGX68DI15eQxDLWnSH RPj9NNZF8n9phJS8W4EeIXBQHwege1BeFmmYGD/HWBGc2+dY/mZSoStOGpty89tU rxfzkhyAwYPySBwGp2k5xjvF1zntUzoDQB4V9Hz2DLivK6LaqOdQ3+1PR3/7Jm0d 3m2/3ZcEBSBVGzy2wOSGIXYZGq+WvFWAAUP9/lxfKms/nDg9T2sMGXJDheKXqmbL OjzueWyrszzVEERtXQlHeR5NtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4VkiEU UP1lL0Vzw35YvlPe/ruIMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7Q+v1/TbhXhBYSqd0m730sWGBdMMN7ajrPQN66U59cKs+eUHa9ZhgukXePt hN9EF33BOXYUlCFRXZTnC7hysZW6AKI+Vi8r781a3nIJ3X7IBp414BEswSMRtEJ9 0bLHt3Ijz9LHF3VhL4YBq6dFmJREsfFDieA5cE3WD9jQwAEYSD+xAQF6wGvPRhzU V3FN+djSF3CuJabaLZjdj4QOFmzrXwKCEN92aAMm6l13H5AKysFl0CNq2Tm+xkGg rQcfhyTfmpUIyTwDiWkl4pxS7rVt1Y9RZe7WAg33Ba713zzKb/MapjI2ZDLkj9jO X4cpeswtXCsFxdPrOrCMUAlPtg== -----END CERTIFICATE-----Generated at Tue Sep 22 02:21:27 2026 by rpki-client