$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft File: 5igiDz_QD0F7mXLh1KD2QWlueZk.mft (raw, json) Hash identifier: Dpo2pWUh+ZFzTe9f5ALJKvof25mqKWd5UJoHJxrYLBY= Subject key identifier: CC:B7:FB:32:F7:F7:CC:41:64:33:BA:DF:07:22:39:C6:6B:02:E3:C4 Authority key identifier: E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99 Certificate issuer: /CN=A912E31D/serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft Manifest number: 0128 Signing time: Sat 19 Sep 2026 05:52:18 +0000 Manifest this update: Sat 19 Sep 2026 05:52:17 +0000 Manifest next update: Sat 26 Sep 2026 05:52:17 +0000 Files and hashes: 1: 5igiDz_QD0F7mXLh1KD2QWlueZk.crl (hash: fvTS1T16HjBZ8kwTDbHJ5idMrSv9PSJ4tOYXmJfbsro=) 2: n-JZBt8Ozbo9HKqn0cDNCS4o-Gg.asa (hash: C7SCxJ3LGZxnzdWb/VHNS9wmQrMU9lruni2YUaaewx0=) 3: 9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa (hash: E47slZkZUSxL3blqpxWmejtiKRk74l+RdUUIQ3bo/bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E31D, serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999 Validity Not Before: Sep 19 05:52:17 2026 GMT Not After : Sep 26 05:52:17 2026 GMT Subject: CN=6aae2312-754a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:c4:e7:c7:32:a5:3f:fe:2a:f0:fc:1b:ca: 7b:2f:c2:4d:28:ec:c8:d0:eb:3d:62:3f:c5:b3:d3: d8:0c:21:ff:17:22:1e:20:df:ac:83:0b:80:c4:bf: 09:a4:f5:71:8b:e6:ab:4b:41:3c:b3:d0:1f:c0:be: e8:6a:ec:63:6b:ac:2b:8a:cc:e7:6e:ac:b2:42:5b: bd:fe:8e:4d:85:a7:83:af:87:5d:56:49:24:56:7d: 92:30:0b:16:d4:ba:f9:fd:59:20:39:a4:45:60:06: 65:18:6c:26:2c:b4:e0:22:b9:81:79:d5:84:85:74: 1c:b8:a1:65:7b:d1:e5:81:31:ff:dd:c5:93:2a:a2: 24:47:2c:ce:c6:c2:7e:97:19:17:a4:47:a2:05:a2: 72:33:d7:d2:d4:03:de:ab:97:e2:9e:3f:bc:38:af: 99:f2:b2:19:41:96:68:15:55:49:af:a3:1e:af:7c: b1:ff:7e:ad:aa:28:2d:a3:f7:5d:7b:0e:b3:20:03: fe:bb:44:dd:67:cf:8a:84:f7:39:9e:5d:07:78:00: 80:b4:d4:2d:a2:a7:d1:b6:80:9a:5d:c0:5e:bd:3a: fe:8c:c8:d6:9b:6d:2e:03:4c:80:c7:f1:1a:2e:a1: 16:85:3a:69:2b:bd:dd:77:56:8f:5e:4c:df:fc:5c: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:FB:32:F7:F7:CC:41:64:33:BA:DF:07:22:39:C6:6B:02:E3:C4 X509v3 Authority Key Identifier: keyid:E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0f:da:d2:c3:96:6b:3e:ff:a2:92:13:af:88:96:42:5c:d2: 64:ea:04:5e:9b:e3:62:51:36:5f:1b:b0:f6:e9:40:8d:73:21: bc:ed:b0:68:33:d5:15:fe:e2:5b:0f:12:fb:67:b7:b0:a8:fe: 75:2c:78:7d:38:3a:42:1d:d0:78:ae:fb:b6:82:6e:e1:36:aa: b9:83:ec:b2:fc:89:78:7b:34:93:48:59:29:52:42:b0:87:45: 14:11:00:1a:b4:23:ce:a4:77:1b:24:2b:34:ab:f6:bd:b6:d2: ed:fa:ab:4a:25:c3:6d:62:48:ee:79:32:cf:92:7a:3f:9b:a0: d2:d7:9e:2a:7b:3c:68:fc:61:aa:99:f9:e9:9a:f7:ec:f5:dd: 50:24:19:36:30:89:d0:20:6d:37:46:6c:30:88:42:a0:64:68: e7:31:eb:bd:74:47:4c:8f:e7:64:bc:e2:d7:b3:01:fe:97:da: 3b:4c:80:4f:cd:34:04:a8:1f:7f:76:21:7c:ac:8d:e1:54:d7: ac:f9:09:d2:63:6d:14:d0:9d:cd:20:d2:e0:bd:8d:99:eb:6b: 21:ad:eb:f2:aa:52:d1:74:62:20:a8:c0:a3:7c:c0:56:a0:32: a0:75:ae:c9:4c:ce:34:94:d8:38:75:a4:e5:47:03:37:14:4e: d9:36:b1:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzMUQxMTAvBgNVBAUTKEU2MjgyMjBGM0ZEMDBGNDE3Qjk5NzJFMUQ0QTBGNjQx Njk2RTc5OTkwHhcNMjYwOTE5MDU1MjE3WhcNMjYwOTI2MDU1MjE3WjAYMRYwFAYD VQQDEw02YWFlMjMxMi03NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gjE58cypT/+KvD8G8p7L8JNKOzI0Os9Yj/Fs9PYDCH/FyIeIN+sgwuAxL8J pPVxi+arS0E8s9AfwL7oauxja6wrisznbqyyQlu9/o5NhaeDr4ddVkkkVn2SMAsW 1Lr5/VkgOaRFYAZlGGwmLLTgIrmBedWEhXQcuKFle9HlgTH/3cWTKqIkRyzOxsJ+ lxkXpEeiBaJyM9fS1APeq5finj+8OK+Z8rIZQZZoFVVJr6Mer3yx/36tqigto/dd ew6zIAP+u0TdZ8+KhPc5nl0HeACAtNQtoqfRtoCaXcBevTr+jMjWm20uA0yAx/Ea LqEWhTppK73dd1aPXkzf/FzxRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMy3+zL3 98xBZDO63wciOcZrAuPEMB8GA1UdIwQYMBaAFOYoIg8/0A9Be5ly4dSg9kFpbnmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTMxRC8yQ0Y2QjhCMEY5 QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQwRjdtWExoMUtEMlFXbHVl WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpZ2lEel9RRDBGN21YTGgxS0QyUVdsdWVaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTMxRC8yQ0Y2QjhCMEY5QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQw RjdtWExoMUtEMlFXbHVlWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAA/a0sOWaz7/opITr4iWQlzSZOoEXpvjYlE2Xxuw9ulAjXMhvO2waDPVFf7i Ww8S+2e3sKj+dSx4fTg6Qh3QeK77toJu4TaquYPssvyJeHs0k0hZKVJCsIdFFBEA GrQjzqR3GyQrNKv2vbbS7fqrSiXDbWJI7nkyz5J6P5ug0teeKns8aPxhqpn56Zr3 7PXdUCQZNjCJ0CBtN0ZsMIhCoGRo5zHrvXRHTI/nZLzi17MB/pfaO0yAT800BKgf f3YhfKyN4VTXrPkJ0mNtFNCdzSDS4L2NmetrIa3r8qpS0XRiIKjAo3zAVqAyoHWu yUzONJTYOHWk5UcDNxRO2TaxSA== -----END CERTIFICATE-----Generated at Sun Sep 20 12:58:57 2026 by rpki-client