$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft File: R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft (raw, json) Hash identifier: fGjCvb/c91x2UGDA8WlTxDitbRnIg2gSIhh6EZidHb8= Subject key identifier: 21:E6:A7:4B:10:18:AC:50:AA:92:5A:72:10:CB:3C:01:04:28:FA:72 Authority key identifier: 47:9B:49:04:66:72:5D:DC:B7:C4:3B:11:6D:D2:09:77:74:5D:A8:BB Certificate issuer: /CN=A9147780/serialNumber=479B490466725DDCB7C43B116DD20977745DA8BB Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft Manifest number: 11 Signing time: Mon 21 Sep 2026 09:06:44 +0000 Manifest this update: Mon 21 Sep 2026 09:06:44 +0000 Manifest next update: Mon 28 Sep 2026 09:06:44 +0000 Files and hashes: 1: R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl (hash: RyS0oIDCP96cXZ84BmOOukxmOqumHFwLeLW8lCxW8EA=) 2: sBa1ONdH0bEjwIUuBaz9n2TODYk.asa (hash: kzl9HXZnhXacwNSm2aywcZwtU8Xbi2xU5uGMNE16GgY=) 3: 118AE504A3AC11F182CE12EF4811F970.roa (hash: BaxmhAFlm4Y9DdAnSprwAkz3r7z9o55u1TBQZRNoo6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147780, serialNumber=479B490466725DDCB7C43B116DD20977745DA8BB Validity Not Before: Sep 21 09:06:44 2026 GMT Not After : Sep 28 09:06:44 2026 GMT Subject: CN=6ab0f3a4-562a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9c:98:91:18:c4:ab:5a:52:87:82:49:d7:47: 67:a4:9f:99:63:0c:86:94:45:06:cd:b7:5e:fc:1a: 7f:08:41:4e:54:fa:a2:3f:89:36:1f:7e:5e:bd:9b: cc:90:ac:f8:8a:e0:67:a6:a2:1f:ab:07:20:33:be: 92:e7:a3:ce:4c:c0:38:26:e2:83:36:d1:6e:03:5e: e1:ed:67:89:01:a0:9a:f3:09:5b:78:16:93:bf:42: 2d:7d:d3:25:14:86:53:b1:05:85:89:b3:75:d2:81: 70:97:86:95:87:ae:6a:e7:7c:81:77:2f:d4:55:5f: 2c:cd:b1:e8:43:a3:59:02:e9:48:19:91:b0:65:1c: 12:22:79:5b:8d:4c:b3:c3:d1:4c:30:81:f2:7d:a4: 73:9e:03:74:66:b8:ea:0c:69:b9:68:f9:ab:7e:d6: c3:67:48:93:f1:6c:00:c5:68:9c:b8:3d:bb:98:a7: 8c:79:1c:fa:6c:04:f7:ab:c3:8f:6f:da:8f:86:bd: d5:aa:44:32:58:32:45:eb:05:d7:17:64:17:19:c0: ee:37:38:dc:10:91:c4:dc:6a:2c:d1:3a:57:3e:10: b7:d7:ae:a5:9f:52:64:ba:59:62:51:0c:6e:1a:a6: b6:ce:9f:0f:82:be:d8:dc:be:43:01:bb:ee:02:96: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:A7:4B:10:18:AC:50:AA:92:5A:72:10:CB:3C:01:04:28:FA:72 X509v3 Authority Key Identifier: keyid:47:9B:49:04:66:72:5D:DC:B7:C4:3B:11:6D:D2:09:77:74:5D:A8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c5:27:ca:7b:5c:cb:46:d2:9b:6b:c8:4f:79:34:69:b4:6b: d3:2e:54:33:e6:db:31:24:76:87:04:ea:d7:cc:5f:42:9f:38: 9b:e7:87:a6:8c:b5:77:55:d3:d6:c6:d3:3e:8e:dc:f2:e3:d7: 4b:2f:9d:8b:9f:b7:13:f1:a0:c7:57:37:1e:d5:5a:31:89:89: 71:c7:90:e0:55:84:e0:1a:c4:b7:f6:15:f0:e2:3c:e2:d2:51: 6e:ee:cd:67:8e:ff:4f:02:31:28:9c:1c:de:68:2a:8b:10:0d: 39:bf:28:ca:92:02:f4:98:27:53:f8:41:a8:29:49:61:58:5d: cc:3d:ea:56:a5:24:72:5c:3d:3f:fb:0b:bf:a5:76:9a:d3:76: 28:b2:a6:f2:de:97:e4:f2:2e:51:24:bc:a1:43:76:86:92:80: 0e:05:1e:f1:e6:42:65:61:d7:5d:3a:15:c3:1a:51:c2:b3:81: 8e:2e:88:cc:9b:f1:a2:b6:1e:1c:4c:a4:8d:9b:e0:f3:fc:92: c3:18:57:fe:3d:9d:c5:a7:3e:2c:6e:9e:0b:43:ed:35:8e:2b: aa:73:3a:f9:bb:4c:b7:90:88:8a:1d:0d:f3:66:b5:74:8a:ff: 58:54:76:c0:ac:0b:7c:8a:1a:70:89:52:5b:33:c6:55:9e:0a: 31:2c:29:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc4MDExMC8GA1UEBRMoNDc5QjQ5MDQ2NjcyNUREQ0I3QzQzQjExNkREMjA5Nzc3 NDVEQThCQjAeFw0yNjA5MjEwOTA2NDRaFw0yNjA5MjgwOTA2NDRaMBgxFjAUBgNV BAMTDTZhYjBmM2E0LTU2MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJnJiRGMSrWlKHgknXR2ekn5ljDIaURQbNt178Gn8IQU5U+qI/iTYffl69m8yQ rPiK4Gemoh+rByAzvpLno85MwDgm4oM20W4DXuHtZ4kBoJrzCVt4FpO/Qi190yUU hlOxBYWJs3XSgXCXhpWHrmrnfIF3L9RVXyzNsehDo1kC6UgZkbBlHBIieVuNTLPD 0UwwgfJ9pHOeA3RmuOoMablo+at+1sNnSJPxbADFaJy4PbuYp4x5HPpsBPerw49v 2o+GvdWqRDJYMkXrBdcXZBcZwO43ONwQkcTcaizROlc+ELfXrqWfUmS6WWJRDG4a prbOnw+CvtjcvkMBu+4Clt49AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIeanSxAY rFCqklpyEMs8AQQo+nIwHwYDVR0jBBgwFoAUR5tJBGZyXdy3xDsRbdIJd3RdqLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzgwLzhDOTI0M0ZFQTI4 QjExRjE5M0FENTdDRDZEMTFGOTcwL1I1dEpCR1p5WGR5M3hEc1JiZElKZDNSZHFM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjV0SkJHWnlYZHkzeERzUmJkSUpkM1JkcUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzgwLzhDOTI0M0ZFQTI4QjExRjE5M0FENTdDRDZEMTFGOTcwL1I1dEpCR1p5WGR5 M3hEc1JiZElKZDNSZHFMcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMxSfKe1zLRtKba8hPeTRptGvTLlQz5tsxJHaHBOrXzF9Cnzib54emjLV3VdPW xtM+jtzy49dLL52Ln7cT8aDHVzce1VoxiYlxx5DgVYTgGsS39hXw4jzi0lFu7s1n jv9PAjEonBzeaCqLEA05vyjKkgL0mCdT+EGoKUlhWF3MPepWpSRyXD0/+wu/pXaa 03Yosqby3pfk8i5RJLyhQ3aGkoAOBR7x5kJlYdddOhXDGlHCs4GOLojMm/Gith4c TKSNm+Dz/JLDGFf+PZ3Fpz4sbp4LQ+01jiuqczr5u0y3kIiKHQ3zZrV0iv9YVHbA rAt8ihpwiVJbM8ZVngoxLCkW -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:25 2026 by rpki-client