$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json) Hash identifier: g+a7eAcykYa681gsGRNWrUzLQRzUuxh+Y8OHXBpBXDA= Subject key identifier: 38:8F:65:FD:4A:D1:E0:27:27:66:2B:D1:1E:44:D5:FF:50:7C:03:CA Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft Manifest number: A5 Signing time: Sun 20 Sep 2026 18:00:04 +0000 Manifest this update: Sun 20 Sep 2026 18:00:03 +0000 Manifest next update: Sun 27 Sep 2026 18:00:03 +0000 Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: g/G0dtyNd9W3EmBj0hfPbeETHUUjB10nFxndM8ys654=) 2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: 5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Validity Not Before: Sep 20 18:00:03 2026 GMT Not After : Sep 27 18:00:03 2026 GMT Subject: CN=6ab01f23-c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:c8:f8:6b:d8:24:78:c8:51:5e:62:3c:d5: 4b:8f:c6:3e:4e:f9:41:b1:73:04:ff:82:70:d1:74: a8:79:1a:24:1e:6a:9f:21:cb:d7:91:93:d0:e1:49: 6a:4f:ab:19:4b:82:68:17:9b:69:7c:f4:63:3f:8c: 98:13:c0:b3:b5:94:b9:ef:d9:46:92:9c:83:86:bb: 66:41:c9:ed:12:23:b7:89:a1:72:3b:32:65:2b:52: 76:0c:1f:96:6a:94:c5:9a:68:72:ff:80:e1:e5:a3: c7:9d:08:e1:6d:04:c4:d0:92:cd:2a:b1:5b:02:d1: a7:2f:d2:bd:04:77:67:0b:d5:2c:9f:5e:06:0a:0d: e9:56:93:1c:53:25:ff:90:52:e2:82:0d:73:83:25: 88:bc:14:7a:4b:05:7f:4a:1e:7e:d4:70:66:c7:e0: 6f:54:b0:3c:7c:44:14:63:56:de:8b:21:2d:c5:76: 93:43:3f:f3:e4:3e:28:0c:5e:f8:0b:8b:e3:db:16: 39:e7:ad:01:dc:1d:ca:93:18:b6:22:b6:26:39:a7: 2f:aa:32:20:7e:8b:de:16:e9:87:d4:4a:19:d6:34: de:fa:ae:68:27:dc:ea:10:d8:ef:9e:9e:ab:d1:17: fe:87:9c:e9:a5:fb:b2:fa:89:70:c3:17:ee:fc:de: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:65:FD:4A:D1:E0:27:27:66:2B:D1:1E:44:D5:FF:50:7C:03:CA X509v3 Authority Key Identifier: keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:54:73:98:93:8c:9b:f6:ad:a5:3a:71:e1:01:5f:4d:94: 6b:6c:3e:48:29:bc:74:f2:ae:5c:79:cc:27:95:3d:19:80:17: bd:69:95:ee:2f:7f:9f:33:36:43:da:02:f9:3a:ba:6f:2a:02: 1a:87:8a:f1:7e:98:5d:50:e8:92:dc:c8:24:17:67:1a:af:c4: 43:0f:9d:76:be:81:be:28:2a:93:2d:9e:3c:1f:67:52:d0:7e: 0b:53:20:93:c7:2f:b5:26:d6:34:9d:e5:be:fd:28:75:1f:f7: 83:20:4b:b0:43:28:14:a5:36:22:a0:34:82:d9:cc:3b:14:89: 62:aa:39:68:35:96:2f:f6:e7:e3:67:de:fd:94:a5:b0:2f:22: b7:25:d7:24:3e:62:bb:af:d7:22:19:00:be:b4:c6:46:30:49: e3:d5:9f:90:4d:8a:a2:ca:58:92:8a:fb:b2:41:8e:4e:ff:88: 98:aa:ea:6d:e6:f4:a5:b6:35:94:b4:e1:ea:0e:f5:8d:3c:b7: b5:19:30:c3:8b:e1:a9:74:9c:54:5a:fa:a1:03:f1:e3:ad:f0: 25:2e:db:09:eb:3d:17:ec:7b:e7:e5:bd:ff:78:ac:e0:01:e6: 77:c6:6b:3f:90:da:5a:ce:49:bd:a9:e7:39:10:f6:d3:c4:d6: ad:0f:0d:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEU3NkY3MEUxNkJENzk3RjE0NzBGRDFFMDk1NDY2RUQ5 RkZENzBCREUwHhcNMjYwOTIwMTgwMDAzWhcNMjYwOTI3MTgwMDAzWjAYMRYwFAYD VQQDEw02YWIwMWYyMy1jOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2/I+GvYJHjIUV5iPNVLj8Y+TvlBsXME/4Jw0XSoeRokHmqfIcvXkZPQ4Ulq T6sZS4JoF5tpfPRjP4yYE8CztZS579lGkpyDhrtmQcntEiO3iaFyOzJlK1J2DB+W apTFmmhy/4Dh5aPHnQjhbQTE0JLNKrFbAtGnL9K9BHdnC9Usn14GCg3pVpMcUyX/ kFLigg1zgyWIvBR6SwV/Sh5+1HBmx+BvVLA8fEQUY1beiyEtxXaTQz/z5D4oDF74 C4vj2xY5560B3B3Kkxi2IrYmOacvqjIgfoveFumH1EoZ1jTe+q5oJ9zqENjvnp6r 0Rf+h5zppfuy+olwwxfu/N7/FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiPZf1K 0eAnJ2Yr0R5E1f9QfAPKMB8GA1UdIwQYMBaAFOdvcOFr15fxRw/R4JVGbtn/1wve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC81Njk0OEIzMkJF QkExMUYwOTZBNjI3ODRDNEY5QUUwMi81Mjl3NFd2WGxfRkhEOUhnbFVadTJmX1hD OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzUyOXc0V3ZYbF9GSEQ5SGdsVVp1MmZfWEM5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC81Njk0OEIzMkJFQkExMUYwOTZBNjI3ODRDNEY5QUUwMi81Mjl3NFd2WGxf RkhEOUhnbFVadTJmX1hDOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ1JUc5iTjJv2raU6ceEBX02Ua2w+SCm8dPKuXHnMJ5U9GYAXvWmV7i9/nzM2 Q9oC+Tq6byoCGoeK8X6YXVDoktzIJBdnGq/EQw+ddr6Bvigqky2ePB9nUtB+C1Mg k8cvtSbWNJ3lvv0odR/3gyBLsEMoFKU2IqA0gtnMOxSJYqo5aDWWL/bn42fe/ZSl sC8ityXXJD5iu6/XIhkAvrTGRjBJ49WfkE2KospYkor7skGOTv+ImKrqbeb0pbY1 lLTh6g71jTy3tRkww4vhqXScVFr6oQPx463wJS7bCes9F+x75+W9/3is4AHmd8Zr P5DaWs5JvannORD208TWrQ8N1Q== -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:33 2026 by rpki-client