$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: 5qV199EzU1wZ0YjnemOu8RylpsDXvQ9kzPX3fqhztFM= Subject key identifier: EC:B3:B2:48:30:3C:BC:BB:DE:1E:99:C3:C7:93:24:ED:BB:BB:45:8B Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0C0C Signing time: Thu 24 Sep 2026 18:51:24 +0000 Manifest this update: Thu 24 Sep 2026 18:51:24 +0000 Manifest next update: Thu 01 Oct 2026 18:51:24 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: qGYlJrmvooIdDXrPgTASllrnkfw04yQFy1GtdbpbgyE=) 2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Sep 24 18:51:24 2026 GMT Not After : Oct 1 18:51:24 2026 GMT Subject: CN=6ab5712c-371b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:bc:25:1f:6a:9b:0e:fe:d3:ac:5f:57:bc: ed:f2:3f:68:18:f1:13:77:61:f4:bf:15:28:57:ce: d4:ca:b2:a0:61:df:2c:17:55:d7:9a:11:9a:b9:a8: d8:fc:ea:5b:92:28:db:07:c5:f4:29:f7:cb:97:c2: 14:89:3d:a7:c4:6c:b7:68:bf:52:7e:34:7f:c0:7a: 76:55:9f:b3:98:85:5e:ca:b0:e3:d2:36:3f:45:0d: 88:2e:6f:d0:8c:b2:fa:ec:93:5a:3c:94:c0:7f:29: 99:23:ec:4c:3e:11:4a:63:39:8a:90:87:d6:3d:5c: 63:c7:bf:be:3a:bf:ef:da:93:1b:5e:a9:ac:e6:69: 24:f8:fc:8c:4c:78:97:60:98:ec:5c:dc:e1:c9:6f: a8:81:2f:10:ed:15:77:df:8f:2c:c2:e4:eb:c1:de: 8d:89:18:2f:65:ae:5b:00:55:bb:80:9e:c3:ae:f6: af:c4:94:87:fd:b0:de:ec:bb:e1:75:24:ee:e0:c2: f5:bf:29:e3:61:2c:ec:f9:32:98:19:c4:e0:df:13: 25:b5:35:8a:7f:9c:af:57:0d:c9:63:a4:d8:2a:bd: 73:37:64:ee:fa:bc:e5:63:d1:ee:bc:c2:ea:a3:d9: 07:94:86:bd:fd:65:70:3b:4f:39:cf:b4:7a:d5:15: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B3:B2:48:30:3C:BC:BB:DE:1E:99:C3:C7:93:24:ED:BB:BB:45:8B X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:06:66:a6:f1:cb:6a:84:0a:d7:14:6c:ab:2d:77:d8:5b:4e: 6e:59:52:de:6b:70:6b:51:21:bd:91:55:09:85:61:34:f5:7f: 2f:43:75:00:8b:53:98:ea:02:a4:84:20:1c:65:0e:2a:de:a9: fd:e3:2e:50:82:9a:21:f8:49:68:ce:c2:da:a9:77:be:9b:38: 78:b9:03:81:f8:3f:66:fa:ae:c3:f8:5f:7f:c4:39:51:31:3d: 93:91:c4:36:bd:14:46:36:97:e0:83:3b:a1:ed:fd:f4:9b:58: 88:96:94:4e:14:d7:9b:56:2b:60:40:d5:6c:2a:0e:e1:ea:6d: e0:c6:88:b8:10:98:ea:46:cf:6a:d6:2d:83:64:2e:51:d0:66: 30:71:25:18:71:f4:7e:e7:73:7b:60:58:d0:9f:09:5e:d7:b8: e1:e8:f1:2e:03:a3:84:43:52:63:bb:5f:4f:c4:e0:4b:a4:e6: a7:6d:61:0c:c2:0e:b1:60:53:f3:74:54:05:64:24:49:75:9c: 86:8f:30:d5:ad:2f:42:e3:86:77:77:80:ae:34:5e:ab:73:37: 7b:50:4e:e4:f6:84:e3:16:77:50:da:85:8c:4b:02:df:07:0d: 10:ed:d1:c8:df:b9:69:74:e3:70:2a:d9:05:64:48:22:e3:5b: c1:cc:f2:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjYwOTI0MTg1MTI0WhcNMjYxMDAxMTg1MTI0WjAYMRYwFAYD VQQDEw02YWI1NzEyYy0zNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ci8JR9qmw7+06xfV7zt8j9oGPETd2H0vxUoV87UyrKgYd8sF1XXmhGauajY /OpbkijbB8X0KffLl8IUiT2nxGy3aL9SfjR/wHp2VZ+zmIVeyrDj0jY/RQ2ILm/Q jLL67JNaPJTAfymZI+xMPhFKYzmKkIfWPVxjx7++Or/v2pMbXqms5mkk+PyMTHiX YJjsXNzhyW+ogS8Q7RV3348swuTrwd6NiRgvZa5bAFW7gJ7DrvavxJSH/bDe7Lvh dSTu4ML1vynjYSzs+TKYGcTg3xMltTWKf5yvVw3JY6TYKr1zN2Tu+rzlY9HuvMLq o9kHlIa9/WVwO085z7R61RVH5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyzskgw PLy73h6Zw8eTJO27u0WLMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMgZmpvHLaoQK1xRsqy132FtObllS3mtwa1EhvZFVCYVhNPV/L0N1AItTmOoC pIQgHGUOKt6p/eMuUIKaIfhJaM7C2ql3vps4eLkDgfg/Zvquw/hff8Q5UTE9k5HE Nr0URjaX4IM7oe399JtYiJaUThTXm1YrYEDVbCoO4ept4MaIuBCY6kbPatYtg2Qu UdBmMHElGHH0fudze2BY0J8JXte44ejxLgOjhENSY7tfT8TgS6Tmp21hDMIOsWBT 83RUBWQkSXWcho8w1a0vQuOGd3eArjReq3M3e1BO5PaE4xZ3UNqFjEsC3wcNEO3R yN+5aXTjcCrZBWRIIuNbwczyPA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:21:50 2026 by rpki-client